skysight-inc/HackerNews huggingface dataset:
Overall I'm not super happy with web components to solve the issues of reusability, conciseness, and self-containment.

The most direct problem is styling issues. Cross-component CSS in either direction has some serious limitations. I've written a little bit about it[1] in my blog but the short version is that there are some things that simply become absolutely impossible when using web components.

My main other gripe with them is the need for a build phase. The nature of WC almost begs for them to eventually become zero-build-time, but right now this just isn't practical. It requires too much boilerplate in every .html file (utf8 is broken on my site), the syntax isn't natively there even with tagged template literals, and there's no concept of data-list-fetching or data-based file generation.

There's a branch on my personal website[2] where I tried to start using web components, and it was so problematic that I long abandoned it.

Overall, I abandoned web components entirely in favor of making my own customized JSX-based SSG from scratch[3] which solves the same problems Lit, Next.js, et al. are intended to solve, but in a completely different way: using components for convenience, conciseness, and reusability, but only at the build-phase time. So far it's a well kept secret, which is probably good since it's been evolving so quickly that I wouldn't have been happy with any iteration being widely adopted so far. (Though I think this morning I finished off most of what I was unhappy with.)

[1]: https://sdegutis.github.io/articles/2023-08-07-modern-90s-we...

[2]: https://github.com/sdegutis/immaculatalibrary.com/tree/reset...

[3]: https://github.com/sdegutis/immaculatalibrary.com
It's a useful tool on the path to the realisation that such tools are unnecessary.
Anyone that can afford a professional mac setup already has a gaming setup if they want to play games.
> My understanding is that such parts are not by themselves illegal. The crime is actually using them on the road. My understanding was that they were legal for track purposes.

ok, it's just a single datapoint, but motocross racetracks in New England, already built in the woods away from civilization, started requiring mufflers about 50 years ago, early 1970's
On the other hand Walt Disney was a creative maniac with a large fortune and desire to invent theme parks. Imagineering is the one valve in the heart of Disney.
> Attackers can successfully exploit the flaw in question (CVE-2023-43641) to execute malicious code by taking advantage of Tracker Miners automatically indexing all downloaded files to update the search index on GNOME Linux devices.

But the article blames the libcue.

Libcue is not doing the indexing.

Why does the search index must contain metadata ?
Show HN: I got Bad Apple to play inside of macOS Finder
Inspired by a recent post: https://news.ycombinator.com/item?id=37810144

I thought it would be easy to adapt this to render a video inside of Finder and... it wasn't too difficult, by using the power of FFMPEG and node.js (Unfortunately, I have a certain distaste for Python) I was able to get it working in under 2 hours.

Currently the script only renders black and white videos... which makes "Bad Apple" the perfect candidate.

Link with audio: https://www.youtube.com/watch?v=G28cSliYTOU

Source code is linked in the submission.
If only Google were as committed to its products as they are to the insanely over engineered proposals that fail to solve any legitimately useful use cases. Half of why these projects exist is for internal gate keepers at Google to make excuses for why they're not allowing productive engineers to adopt React/Vue, etc.

These weird quasi-frameworks exist in large part due to production use of NodeJS being banned at Google. What you get with Google OSS is a weird backwash, digesting external technical direction in a way that caters to internal consumers. They then flop it onto the ground on Hacker News.

Why would I use this? There's a million reasons not to, and then there's having a safe cushy jobs and priorities that have nothing to do with the core business.

Bleh.
LinkedIn.

It’s not social as in “cool” and “trendy” social. For professional networking, it really is the best general networking tool.

If you have more focused communities for your areas of interest or expertise, those may be even better.

Love it or hate it, LinkedIn gets the job done.
The M1's TBDR GPU is very different from an Nvidia-style GPU. The different API doesn't actually matter much, but for best performance you'd want to rewrite the renderer whether or not you used a different API.
I find the fact that Dublin has no underground rail system and mere two tramlines positively horrendous.

A city of that size, importance and relative wealth should have a network of public transport comparable at least to Copenhagen.
I will never willingly go back to using 1Password.
Hi dang, is this account shadow banned? Comments and posts from this account are not showing at all.
Yes, indeed. And Russia violated the Treaty and now there's war in Ukraine. But it upheld the treaty regarding the Dardanelles strait, probably because Turkey is a NATO member and war with the NATO is really not something anyone wants, inlcuding Russia and the NATO.

So in the Baltic sea, there's essentially two options: Either respect the treaties and keep the shipping lanes open or violate it and risk war with Russia. Until now, no critical infrastructure was attacked (the nord stream pipelines were out of use when they were blown up), so a less aggressive posturer seemed reasonable. Maybe that'll change now.

Apart from that, the Dardanelles are 1.2km wide at the narrow point, the Gulf of Finland is 70km wide - blocking that is essentially impossible unless you go for a naval blockade and attack civilian ships.
When I was in college (so like... almost as long ago as this bug was filed, yikes!) I spent a lot of time volunteering for Mozilla. I started out doing bug triage for their QA team, which involved things like making sure it was in the proper Bugzilla component and had sane steps to reproduce and so on. Even this was very enlightening, as someone with absolutely zero real world experience. Seeing how a large scale project was run, watching how the "real" devs worked through fixes and features. Introducing concepts like diffs and patches and CI/CD (it was nightly builds in those days so not actually Continuous, but moving in the right direction).

Later on I figured out how to build the apps, which was a bear, especially on Windows. Firefox, Thunderbird, and the whole Mozilla Suite which was still a thing back then, with integrated browser, mail, HTML editor etc. And finally contributed some bug fixes of my own. Nothing significant, we're talking like fixing typos and misaligned icons, but it still felt incredible to be shipping code that literal millions of people would use.

All of this was immediately useful in my first job out of school. I started out doing IT support and QA at a startup but quickly found they had no build and deploy automation. Someone would push to SVN and you might not find out for days that it broke the build. I got them set up with a build server using what I had learned from Mozilla (Buildbot? Cruisecontrol? Hudson? Been too long) that would do a build on push and email the team if it couldn't compile or failed tests. Was pretty fun having a bunch of seasoned developers ask me "how the hell does our IT guy know about all this shit?" I was able to carve out a DevOps role for myself before that term existed, thanks to everything I learned playing with Mozilla in my free time.

This is a roundabout way of saying I totally agree, hacking on Mozilla projects is a great way to get real world experience :)
Another challenge is how we as a society view non-physical violence like emotional abuse, verbal abuse, gaslighting, and infidelity. Punch a person in the face and it leaves obvious physical markings. Yet cheat on your spouse with their best friend, and coordinate with your spouse's family and friends to gaslight your spouse into believing they're crazy and you're much less likely to be caught. I genuinely believe the psychopaths that live among us have a vested interest in ensuring that psychological abuse is very difficult, if not impossible to prosecute. And I would much rather be punched.
I was once dropped into a Spring codebase. I consider myself a decent programmer, but I couldn't navigate it at all. Other than that time I've been able to avoid magical frameworks in my career.

But I do want to learn Spring. What material would you recommend?
Kind of like how the narrative that Iraq does NOT have WMDs was also thoroughly debunked? [1] [2] As I'm sure you're aware, we remain in a state of information warfare. As a result of this, what you read in the media is borderline worthless. In this story it's impossible to know the truth, let alone debunk it, as next to nothing is truly falsifiable by you.

All you can really do is rely on your own logic, and try to remove as much bias as possible. In this case Russia spent billions of dollars constructing that pipeline, over more than a decade, overcoming countless hurdles to do so. And the whole time this was going on the US was constantly trying to interfere with its development, at times arbitrarily threatening Germany and Swiss companies with possible sanctions over it. Then Biden publicly and literally said, "If Russia invades, that means tanks or troops crossing the border of Ukraine again, then there will be no longer a Nord Stream 2. We will bring an end to it."

The idea that Russia blew it up for basically any reason, let alone some hand-wavey notion that 'it might cause infighting' is really just not logical. Since Germany has tried to ween themselves off Russian gas, their economy has somewhat predictably began to suffer. Once the backbone of the EU, Germany has since collapsed into recession, inflation has been skyrocketing (20% on foodstuffs), and so on. Russia could have predicted most of these outcomes if Germany refused to take the gas, and expected to have tremendous leverage. At the minimum driving infighting as Germany pragmatists fight with US interests.

[1] - https://www.nytimes.com/2003/02/06/opinion/irrefutable-and-u...

[2] - https://www.washingtonpost.com/archive/opinions/2003/02/06/i...
Curious to what extent the startup can/should/will be charged.

Driving more people to talk with asterisks as side channel emotional responses might be considered treason in and of itself.
There are thousands of Lit elements in google's internal repo, and new products are launching with Lit regularly. One of the recent ones I really like is Google Maps' API built on Lit and web components. Makes it super easy to drop a map into a page: https://developers.google.com/maps/documentation/javascript/...
I've used Git for years, but never really dove into rebase or when/how to use it. I've always been fine with merge. But, I've been wanting to expand my skills, so this is an overview of git rebase and how it works.
If anyone is curios, Nginx is vulnerable to this

https://www.nginx.com/blog/http-2-rapid-reset-attack-impacti...
If you're judging how much sympathy people "deserve" by what they spend their own money on, you deserve even less.

Here's the most basic thing about purchases: People spend money on what they think is worth it. So the millions of Mac users decided the drawbacks of Windows/PC weren't worth the money.
Don't tie your google account recovery to SMS. I left that option blank.
Good point. I actually did that a few days ago with an extracted lib that became out of date within a day or two, so I made that repo private. This is evolving so fast that I think the same might happen with the readme. That said, the source is incredibly small (400 loc) and straightforward TypeScript.
To tap into this thread - this is quite real. One can just remove a catalytic converter (or have it stolen) and they'd then be "defeating emissions" so this lawsuit seems a bit zealous to me.

Recently saw a post on a diesel truck forum about a CA resident who had legal/registration issues because of an engine swap (post emissions engine into a pre-emissions vehicle) [1]

Am under the impression this particular vehicle would be fine in WA state by comparison.

It's frustrating to see consumer vehicles being so strongly targeted by regulatory shenanigans compared to "private jets" and the like

[1] https://www.oilburners.net/threads/california-diesel-convers...
Proprietary rendering APIs are extremely common (like… Direct3D) and completely not an issue. The ones on game consoles are /way/ more proprietary and unportable than Metal.
Oil sector is lobbying for inefficient hydrogen cars to delay electrification
Some things turn out to be hard to do.
It's also not the first time they've ditched macOS and kept linux support: SteamVR dropped support for macOS back in 2020 https://store.steampowered.com/news/app/250820/view/22162780...
I think you have it backwards. The zoning change would be to dump "expensive" commercial real estate into cheap residential or mixed. In this case they are privately owned but basically under the receivership of the city council. This is a small town in the boonies, so there isn't anybody with the time or the capital to force through zoning variances.

There being a "market price" kind of assumes that real estate is a simple commodity, but cities themselves usually excerpt some control of their own destiny. Once you move out of a desirable coastal location you generally won't take for granted the amount of effort cities take to attract jobs.

So some of it is zoning, some of it is infrastructure, and some of it is raw concessions that a city demands or gives its businesses.
The transformer model was invented to attend to context over the entire sequence length. Look at how the original authors used the Transformer for NMT in the original Vaswani et al publication. https://github.com/jadore801120/attention-is-all-you-need-py...
See how the source sentence is run through the encoded, and then the decoder is run in an auto-regressive mode. It's been a while, so I can't recall if the encoded embeddings are masked to the same index to the decoder input sequence, and I don't see why you would even need to do particular task auto-regressively in theory. Found this survey, https://ar5iv.labs.arxiv.org/html/2204.09269 which outlines the pros and cons. A cool feature of transformers is their ability to pull in a great deal of surrounding context, look at how BERT was trained. Yeah, things are bit more boring with decoder only GPT types, but they are winning the day with the easy scaling.
You would need to stop the sale of exhaust tubing to prevent this. I don't think that is realistic
Well. Microsoft is also dropping 32 bit support for Windows 10 in 2025. I guess that makes Proton some weird hackish abstraction layer over the continuously updated underlying linux libs.
Would be funny if Proton gets pulled into Windows releases to maintain support for legacy games as Microsoft shortens the length of their support.
Their point was that at some step along the way, you do need to use a password.

Case in point, creating a new google account as a 13yo. If you don’t have a password and you lose your one device, you lose everything. This isn’t hypothetical; it just happened to a family friend.

Not sure why the discussion got booted to the bottom of the thread. Looks like it’s a lesson not to label your comment a rant.
The fact that they grow back in place makes the whole thing 1000x easier, no?
The Psychology of Games [video]
> there is really nothing that "normal" AI requires that is bound to CUDA. pyTorch and Tensorflow are backend agnostic (ideally...).

There are a lot of optimizations that CUDA has that are nowhere near supported in other software or even hardware. Custom cuda kernels also aren't as rare as one might think, they will often just be hidden unless you're looking at libraries. Our more well known example is going to be StyleGAN[0] but it isn't uncommon to see elsewhere, even in research code. Swin even has a cuda kernel[1]. Or find torch here[1] (which github reports that 4% of the code is cuda (and 42% C++ and 2% C)). These things are everywhere. I don't think pytorch and tensorflow could ever be agnostic, there will always be a difference just because you have to spend resources differently (developing kernels is time resource). We can draw evidence by looking at Intel MKL, which is still better than open source libraries and has been so for a long time.

I really do want AMD to compete in this space. I'd even love a third player like Intel. We really do need competition here, but it would be naive to think that there's going to be a quick catchup here. AMD has a lot of work to do and posting a few bounties and starting a company (idk, called "micro grad"?) isn't going to solve the problem anytime soon.

And fwiw, I'm willing to bet that most AI companies would rather run in house servers than from cloud service providers. The truth is that right now just publishing is extremely correlated to compute infrastructure (doesn't need to be but with all the noise we've just said "fuck the poor" because rejecting is easy) and anyone building products has costly infrastructure.

[0] https://github.com/NVlabs/stylegan2-ada-pytorch/blob/d72cc7d...

[1] https://github.com/microsoft/Swin-Transformer/blob/2cb103f2d...

[2] https://github.com/pytorch/pytorch/tree/main/aten/src
When are we going to have cheaper e-ink screens available? Anyone know if the situation has changed in the last couple of years? See: https://news.ycombinator.com/item?id=26143779
I think i know what my next side project is.
Excellent contribution. A truly well thought out, concise brief answer. Bravo.
Feels like Wall-E is coming to life
This is incorrect. Federal law prohibits the removal of emissions devices on a vehicle, even if not used on public roads.
Speaking as a front end developer with 4 years experience using Lit -

It’s like using jQuery in the mid 2000s - it’s not like it allows you to do anything you couldn’t normally with vanilla JavaScript, it just provides some shortcuts for common scenarios. The process of defining the class that controls a custom html element is a bit of a slog in vanilla JS - in Lit, especially with Typescript decorators in play, it’s a breeze. It saves time and helps keep things fairly DRY.

I should think the dream is that Lit, like jQuery, will slowly get absorbed into the web components spec itself, until all the things you used to need to reach for a library to do efficiently - will simply be a part of the vanilla language itself. Like jQuery’s css selector functionality has now been superseded by JS’s querySelector.
You just haven't been paying close enough attention. Our health care system in the US sucks.

Are you going to try to defend the completely fictional numbers that end up on US hospital bills? And how those numbers drive the insurance protection racket? And how they'll say "but nobody pays that", when 1) ABSOLUTELY some people do end up paying full chargemaster rates, and 2) even a small fraction of chargemaster is usually a multiple of the actual cost of providing health care services
If I'm understanding coding123's comment correctly, I think AsyncAPI would need to be extended to allow specifying a GraphQL schema and not just a JSON schema as the message payload and (I guess implied?) response types
I mean you kind of have to be told these things child to ever believe that stuff, our brains work too well after that

Just like yours is trying to, but with competing information

The simple, adult, quantifiable reality is that there is always cross drift between populations by mere nature of humans being compatible species to produce viable offspring with one another
Humor, irreverence, formality, political correctness, or whatever quality doesn't seem to be the issue so much as it is authenticity of any kind.

But advertising never was authentic. The goal is to drive sales using whatever tools the audience can tolerate, however shameless, and advertising has always pushed boundaries, followed by the inevitable wave of copycats that turn the innovative into the mundane.

The tool in this case is constructing a parasocial sockpuppet personality as if McDonald's or whatever deserves a seat at your digital table in between your actual friends. When everyone is just an avatar grinding for likes and followers anyway, they might as well be.
I'd rather the knowledge be out there, it helps you not go down dead end paths that you would otherwise have explored.
Call the police on them. It's illegal almost everywhere.
Oh I'm seething. Screw google, so god damn much.

They've been accidentally enabling it for nearly a month if not more. And the UX has been infinitely confusing. I've been using 2fa for a decade (not an exaggeration, an understatement). I've been using u2f since the first month it was available and FUCK Google for this blog post.

A month ago I logged in and tried to check on my security tokens. Their UI was silently upconverting them. Without telling me. And the flow made it look like it was just deleting them. Hours later I realize it had re-enrolled them AND IT LOST THE DESCRIPTION I GAVE TO THEM. To be clear, it trashedt the decription I gave them during (what I didn't know at the time) was re-enrolling them as passkeys, because i sure as hell wansnt in the passkeys area. So not only did I inadvertently change them, they're now indistinguishable and unidentifiable to me. So if I want to ensure my primary and backup tokens are enrolled properly , I have to do it all over again, with all of them in my possession

Seriously, I have defended google against all sort of claims with respect to their 2FA and they can absolutely get up their own after what they pulled, and now this blog post.

Do some god damn basic (user) testing FFS. I would literally pay $1000usd right this second to scream at the people who green-lit and implemented this. And another $1000usd to ensure to people here that I know DAMN WELL what I'm talking about here. It's not like I don't have video evidence of exactly what I'm stating here on an unlisted YT video tweeted at Google Security.

Edit2: to be VERY clear, I have a video I reviewed, just now, that shows me trying to enroll an existing Security Token with a description, it disappearing, it then appearing as a Passkey with no description.
https://nitter.net/ID_AA_Carmack/status/1711737838889242880
Ask HN: How does your organisation manage employee SSH keys?
I've seen a variety of approaches, ranging from

* manually deployed by an infra team in response to JIRA tickets

* checked into a repo and deployed with saltstack, along with a cronjob to sync with G-Suite so that keys would be automatically removed when people left

* SSO integration through AWS systems manager

What have you seen tried? What worked well, what didn't?
I spend more time each day now talking with LLMs than humans.

What hath we wrought?
Apple started telling people that 32-bit was deprecated something like fifteen years before it was actually removed. Everyone except video game programmers got the message, which says something about video game programmers.