skysight-inc/HackerNews huggingface dataset:
I'd say with semver becoming far better known, this is not a problem for "any" software development. The developer gets the choice to pick libraries that are stable, often also influencing language choice. Mistakes happen, Guava broke the Java ecosystem for about two years, but it's never something that is accepted as just a fact of software development, it is a mistake.

Wanting to hold Python+C ecosystem more accountable is fair I think, at least from my own experience around half a year ago, Anaconda doesn't work and you need a Dockerfile for any sort of reproducibility, which can have issues since GPU with docker isn't that easy. And this means developers from the vendors working with Anaconda, for example, on solving the issue rather than just hoping for contributors to do it. If AMD were to make easy, reproducible builds without root or VM a reality, that would be reason enough to try their hardware. If not, hopefully Nvidia does and then there really would be no way across the moat for me at least.
If there's an index on the ORDER BY fields, it can even be first.
typescript does such inference.

I disagree with you about huge cost for the compiler and benefits are the same as in normal code block: reducing boilerplate.
> Yes, they armed them directly.

Of course I want a source for that.

> Yes they supported terrorist groups. As did the US. No one is innocent.

How are "we" supposed to be better then?

> But the US has always supported democracy and civil rights. That includes civil rights activism deemed "terrorist" by China and Russia.

Al Qaida, Al Nusra, Taliban etc are civil rights activits for the US (sold as "moderate rebels" in Syria by German media at least). Of course they are deemed terrorists in other countries. I find the civil right activism of the US questionable to say the least.

> Ask yourself, are people enjoying civil rights in China or Russia living with a quality of life far below Western nations?

I ask myself if I do enjoy civil rights if I hold dissident opinions in western countries. Am I supposed to feel better that it is supposedly worse in other countries, while it's obvious that we target 3rd world country standards for human rights?
My shell throws an error if I try to pipe to a command that doesn't accept piped input. It's just better design.

This is also why python sucks - if you feed it garbage, the error may surface a long way away and it may do a lot of damage while it's underwater
Well you lumped the UK in with France, Germany and Italy. I'm not sure about Italy but the UK is way behind France and Germany.

>Corollary: much of the world needs a car in a way that you don't.

I live without a car in the UK and can tell you it isn't easy. I manage because I'm prepared to ride a bike on reasonably busy roads and I'm time rich. The public transport is irregular, indirect and unreliable. The only exception is London.
Research kernels mostly turn to ash upon publication anyway. The wheel turns and the next post-doc gives ROCm a try and we move on
I hope whoever came up with the name was in on the joke.
Yeah, I've got a bookshelf full of books to re-read, from 'A Theory of Justice' to '1Q84' and much besides.
> Commits are unique and immutable, and are anchored to a specific point in the graph of history and causality. This means that a commit’s identity is made up of both its content and its context.

> This in turn means that you need to be comfortable and fluent in a branching many-worlds cosmology, so you can distinguish between changes and snapshots that have the same intent and content but which are completely non-interchangeable and imply entirely different flows of historical events.

"Graph of history and causality", context, content, "many-worlds cosmology", changes, snapshots, "flows of historical events"... This makes Git even harder.
> [branches are] like little bookmark go-karts

Well that clears it up! /s

I think trying to avoid talking about SHA1s of content makes everything blurrier, not clearer. Because them people say things like this, which really don't make sense and instead seem like speculative SF:

> A commit is its entire worldline

Honestly, most Git problems I see stem from long-lived branches. Git flow is a common culprit.
The modern insistence on (absolute) memory safety feels like another symptom of regression. It is like going back to insisting you can and should be absolutely safe from HIV by making certain lifestyle choices. In the '80s we knew that the answer was being safer, not being safe.

I am all for making C and C++ safer by adding mitigations for the most common security relevant bugs. Either on language level, or on tooling level or on OS level or on CPU level. Or a combination of them. But since making a language absolutely memory safe doesn't make it automatically impossible to have bugs at all (even security relevant bugs), we should consider everything a trade-off.
> If your models are influencing the generation of data that they are later retrained on, it gets harder and harder to even maintain model performance.

Why don't humans suffer from this problem, then? Humans have been creating art (and content) that imitates nature and society for thousands of years now, and yet we have little problem (the exception are possibly things like crop circles) to recognize what is a natural phenomenon and what is generated culturally.

I think it's wrong to assume that this is a problem with intelligence in general, rather than just a feature (stupidity) of the current models.
Because local objects names could be mapped freely to anything, it's only a convention to use <remote>/ as a prefix.
> If I was a job seeker, specially if I was out of a job, I would never ever spend a single cent on a job application service

Find this very hard to believe. You really wouldn't spend $1 to submit a job application to a position that is your bread and butter while unemployed? Even if it meant there wasn't hundreds of others spamming the same endpoint? Taking such an ideological high ground over a few cents rarely works out well.

I've seen/been on both ends long before covid/wfh stuff and the worldwide remote market is a complete fucking mess today due to automation, it's bots all the way down and not a single bit closer to good client/contractor relationships, you really have to wade through the weeds to find anyone half decent.

Again, I ask you to post a job online and see the results for yourself then reconsider my comment.
Haven’t dug in their code, but my best guess is to get the user to trigger a “trusted” event which is needed for access to certain browser APIs such as clipboard or audio.

Probably some fingerprinting trick.

The same is done by shady news websites which load a single sentence and ask you nonsensically to “Click to expand Article”.
I’ve always enjoyed just wandering around towns and cities with no particular aim, just pick a direction and go, see where it takes you.

Even in my neighbourhood, not so long ago i walked to a party, it was close by, 30 min walk, but took me through an area i somehow had never walked through before, little parks, woods, shops, a mansion. My city is well served for pedestrian access and there’s little shortcuts everywhere you don’t even know existed.
To be perfectly honest, I don't have a great answer here yet. While the US has the Consumer Review Fairness Act, Glassdoor lost an important court case that saw a US court force them to furnish reviewer info to a non-US entity (https://www.shrm.org/resourcesandtools/hr-topics/talent-acqu...). Terrible precedent, IMO.

Some of the early thinking I've done is around the system being able to verify that a user did in fact apply to a company (assuming company is a customer of Rolepad). That provides some initial guarantees about the author of the data. With some ATS integration, there could be fairly concrete numbers on "how quickly did X happen" that don't even need to be sourced from the candidate. That said, there is always a bit of a "he said, she said" with reviews, and I haven't fully figured out an obvious way forward here. I think the general sentiment I've seen is that Glassdoor and Yelp reviews should be treated with a grain of salt, but they're still better than nothing.
Huawei's New Smartphone and the Future of Semiconductor Export Controls
I don't understand what you're saying.

Don't you find it weird that doing the bad thing but agreeing that it is bad is... okay, while deciding the thing is okay is... heresy?
90nm to 28nm in one jump. I'm guessing future refinement will be a nasty pareto curve of cost to shrinkage, it gets harder.

But still: good on them for showing progress.
I think most sites doing this use SMS codes, and they works really well on mobile.
If they are sending an email it’s more likely to be a magic likely with no password at all.
Most stores around here have self-checkouts that are actually pleasant to use. No scale, no bullshit, it's very rare for an employee to be required and in those cases, one is usually available. That only works because people are generally honest, wages are high and crime is low, and might change as people get more pressed for money.

One store/chain had a user-hostile system (nasty self checkout software, had to wait for an employee to unlock something, then an exit gate check with barcode scanning, then an employee doing a random sample check to make sure I didn't scan a cheaper product instead) and to "encourage" people to use it they reduced actual checkouts so there were massive queues. I don't know if they improved it because I haven't been back in years now.

I used the US style checkouts (in and outside of the US) a few times and holy hell how are people putting up with it.

Meanwhile, airline self-check-ins are horrible because they know you don't have any other option at that point and will put up with both the line and the horrendous system, and probably won't think about it the next time you buy a ticket (and even if you do, it'll be from the same airport and most airlines will be using the same horrible system).
This looks interesting. I am trying to generate comics for my daughter to explain graphically some upcoming events so she hopefully can understand them better or is prepared.
Yes they are wrong, and you are wrong too. This isn't "Bezos' rocket vanity project" at all. This is Amazon's Kuiper satellites, planned to provide globally available fast internet access and some welcome competition for Musk's Starlink. This isn't space tourism for rich people, Bezos has less than a 10% stake in it (through his remaining, dwindling ownership of Amazon), and this launch is not even a Blue Origin rocket. Kuiper is a real business that should provide a lot of value to real people on Earth. Plus it will likely reduce Musk's chances of ever making a profit on Starlink which these people should cheer since they undoubtedly hate Musk too.

Besides that, the non-sequitur overwhelmingly hateful knee-jerk sentiment is way over the top. I want no part of a platform that is seemingly populated almost exclusively by people like that.
I use twitch quite extensively and I almost never see ads. Only maybe 2-3 per year when the cat temporarily catch the mouse, and then the mouse free itself again. No fancy setup either: just a ublock origin on firefox.
Thanks for reporting, we'll look into it!
> We don’t rely on tracking user data, like what other websites someone has visited, to determine if a user is a human or robot.

Doesn't this wording imply that they actually do collect this data, but just don't use it for the bot decision?
Wouldn’t be surprised if corporate browser vendors start clamping down on this over time.

I wonder which competing/opposing interests could provide counter-pressure to this trend, because let’s face it: caring for user interests is a legacy goal for big tech browser vendors.
It doesn't lock mouse cursor on Safari, making it impossible to play.
> If you don’t already know about something that people want that you can explain in 2 sentences, then you shouldn’t be starting a business.

Is this just gatekeeping?
where problem do you think take the most time ?
I don't think annotated video datasets tend to be as large relative to human experience, but they'd still be decades or perhaps centuries of video.
Great post. Git becomes much less mysterious once knowing how it works internally.
Honestly, why should I care if the government has access to my transaction history? The government hasn't eliminated cash as an alternative, it still exists and has to be mandatorily accepted as payment (unlike in some parts of Europe and USA). What UPI has done is allowing the most disadvantaged people to take part in the value exchange process too.

I recently used UPI to pay a street vendor, but without it, I would have been stuck with high denomination notes (because foreign currency converts exponentially against INR), hunting for a place to exchange it for lower denominations. Instead the street vendor got my business.

For the stuff that I would really like to hide from the government (not that it matters as an non-resident), I wouldn't be using UPI - that's just stupid and the equivalent of leaking classified documents on War Thunder or something. Most people engaging in that would simply call their banker in Dubai or Singapore, who'll readily arrange whatever shady transaction they would like, through perfectly legal and convoluted routes.
It's incompatible with getting other stuff done, like hiking to the gym for a shower then going to work then going to the food bank. Just because someone is homeless doesn't mean they don't have anything better to do than sit around for hours watching a number go up.
The Rise and Fall of Slot Car Racing: From Hobby to Fading Fad
I think Git can be a pretty pleasant experience for most folks, as long as you use the basic features and maybe even consider a GUI, anything from Git Cola (free: https://git-cola.github.io/), to something like GitKraken (paid for all features: https://www.gitkraken.com/).

Curiously, the latter also let me setup different accounts that I can switch between with a simple dropdown, which was otherwise annoying when you have Gitea, GitHub, GitLab and others to manage, way easier than https://docs.github.com/en/account-and-profile/setting-up-an...

Either way, suddenly you see the graph of your repo and most of the common actions are a click away, you can just let your brain idle and think about other things you're doing instead, in addition to that working really well with staging chunks of your code, or individual files, cherrypicking and so on. Even Git LFS or ignoring stuff is a context menu away.

Then again, personally I prefer squashing in merge/pull requests instead of rebasing, or even just doing regular merge commits and leaving the history as is (which doesn't really scale, but I haven't gotten to the point where that matters that much), so how I use Git won't work for everyone.
That's before the performance bugfix we talked about, right? (We re-initialized the RNG on every sort.)

Vqsort performance on M1 is indeed about half that of AVX-512. The NEON instruction set is missing some important operations for Quicksort, including Compress and popcount of vector masks.
Germans piece together millions of lives spied on by Stasi (2011)
Great, so you employ extreme levels of user fingerprinting, and privacy-focused users are left out and considered bots. Thank you very much :)
You can get code formatting by indenting it all with 2 spaces.
Found in the feed from the “Nicolas Cage Faces Problems Bringing A Colossal Tuna On A Plane” story, I thought this was far too good to languish.
Yes personally I also can't co relate with git being hard, I mean yes during the initial days of learning you get stuck, but it is the same with everything right ?
Oh yeah, all these "age verification" questions that are impossible to answer for anyone who didn't grow up in the US.
Humans have that to, but the reason civilization doesn't go full crazy is our use of language and concepts are tied to doing objective things, which keeps things (mostly) grounded.

Where it isn’t grounded, as in endless online conversations with like minded people (closed loop feedback) about informally abstracted (poorly specified constraints) and emotion invoking (high reinforcement) topics, people go batshit too.

So the more AI models actually practice what they know in objective environments, the more likely that output->input feedback will inform introspection toward self-improvement, and less like an iterative calculation of the architecture’s resonant frequencies or eigenvalues.
I am curious to see how this works in practice. When I went to their Turnstile sign-up page [0], that is itself protected, I had no problems passing the test despite a slew of privacy-focused features enabled in my browser.

[0] https://dash.cloudflare.com/sign-up?to=/:account/turnstile
What is wrong with Flutter it seems to satisfy your my needs of "Write once run every where" for frontends.
Original source:
https://www.sadanduseless.com/nicolas-cage-tuna/
Linear format equations using UnicodeMath and LaTeX in Word
> Every dollar a startup can raise is a gift. For a time I lost sight of this, and I won’t make that mistake again.

This seems like too general of advice. If you are profitable without raising, that in itself is a gift. Why take on debt if you don't need to? This might apply to fast-growth ventures that need to outpace competition to have a chance at existing, but not every company is structured like this or is in a market that requires this.

> A regulatory rug pull can and will outstrip any early traction or compliance gold stars that you think might save you.

Interestingly, this reminds me of all the apps built off Facebook's APIs in the early days. They would regularly remove one feature that was catastrophic. It's difficult to base your existence on some whale's whims, but in some ways often inevtiable too.

> A critical third-party informed us that they’d changed their mind on a key technical decision.

I'm so curious who. I got sick of dealing with Plaid's ceaseless API changes and ended up writing my own scraper for Wells Fargo transactions. I doubt they were using Plaid though XD.

Overall a really interesting writeup and I'm thankful to the author for sharing.
>Getting these kinds of applications out of Silverlight or desktop apps was one of the greatest steps forward I've seen in at least a couple large enterprise shops - and Blazor definitely feels like a step back in that regard.

The thing my enterprise customers wanted to avoid was deploying software on their desktops. They didn't even like rolling out Office. Presumably Blazor eliminates that problem because the whole thing is delivered over http.
Not yet in an automated fashion. Interesting to see this request pop up a few times now today. I would attempt to provide this manually to comply with the spirit of GDPR data portability clause for now. Note that I don't claim GDPR compliance for Rolepad at this stage, but would do my best to ensure data privacy and security.
CAPTCHA is pain in the ass. In a project I am working on, I have two forms I needed to protect - sign up and sign in. Sign up form does not do anything beside storing credentials in cache and waits for confirmation email link to be used. Sign in form uses various authentication methods but resource-wise, it will load user object and compare data at most. I decided to not use any captcha and let rate limiting do the heavy lifting if I get caught in some bot's eye. There really is no need for captcha because you can rate limit any page or form and once bot passes the threshold, nothing can happen since it is not a real user. All this captcha usage are remnants from a decade ago when all was new on the internet. But today, it's entirely archaic concept and serves only to mine personal data, just like all those "free" CDNs and fonts and whatnot that bigtech uses to literally map the entire internet.
> In other words, theoretically spoofing could occur, but there are compensating controls in place to minimize any damage. Given a very low likelihood of an attack in this direction, that felt like a reasonable compromise. Would love to get feedback on that though!

I don't have good recommendations right now[1], but I think not having a way to opt-out for those who are security conscious is a turn-off for some people. After all, having opt-out[2] doesn't impact the existing users who don't care (they won't even notice), while those who care can turn it off.

I mean, as a user I disagree with your assessment of the probability of an attack using this vector, but I don't want to argue with you about it, I just want to turn it off for my account.

After all, if I said something similar about an exploit in my product, I can expect to get roasted by the users. For example, if there is a well-known buffer-overflow in my product, and I said something like this:

"In other words, theoretically users could send a value for the 'email' field larger than 255 bytes and smash the stack, but there are compensating controls in place to minimize the damage from overwriting the return address. Given a very low likelihood of a user sending more than 255 bytes for an email address, it felt like a reasonable compromise."

With security you can't really tell in advance how an exploit might be escalated. The only damage you see from allowing spoofed emails is "attacker causes candidates to reject a position they don't want to reject". Could there be others?

Could a coworker who knows I am on the prowl send an email to no@ with my address set in the 'from:' field and his set in the "forwarded" email? At the very least this sounds like a leak of account email addresses.

Still, see my point [2] below - maybe the return on implementing controls for attack prevention won't help your product at this stage. It might make more business sense to rely on mitigating the damage than preventing it.

[1] Simple: Don't send anything, place it in an outbox that the user can review before hitting 'send all'. Complex: Require user to upload their public key and process messages signed with the private key. Neither of these are 'good' in the sense of frictionless management via email.

[2] It depends on how much time you have. If this is a thing that would take 4 hours to implement, test and document, maybe you product has more pressing issues that those 4 hours would be better spent on. You'll have to triage the feedback you get and determine which feedback would result in the most takeup. IME, people often don't care about security, so you might find that spending even 5m on this has less positive influence on the business than spending those 5m cold-calling customers.
I’d love to know more about the honeypot and the whole process.
Naval, Nir Eyal, Rachel Thomas and co talk about homeschooling [video]
Panel on homeschooling and decentralized education with Naval Ravikant, Nir Eyal, Rachel Thomas, Ph.D., Kerry McDonald, Lisa Betts-Lacroix, Shiren Rattigan and Alycia Wright.
I assume you're implying some kind of cryptocurrency, but it's impractical to use those without middlemen and you forgot to say "without huge fees".

Also instant 100% certainty is a bit too much in the face of fraud.