skysight-inc/HackerNews huggingface dataset:
I didn’t choose it, but my guess is that they didn’t know what they were doing.

Even so, git only exacerbated the problem of secrets being in state files.
So the email spam solution? Doesn't that come with its own list of problems?

Also, stupid question from someone not that familiar with DDoS, can't you flood the target with requests even if the source address will be rejected? Or even if the IP packet has a falsified source address?
Found this worthwhile piece from the Wired's article:

https://blogs.icrc.org/law-and-policy/2023/10/04/8-rules-civ...
> Couldn't get worse.

This is a very unwise thing to say about Musk-Twitter; if the past year has taught us anything, it is that it can always get worse.
> this was one of the things that got me bitten by the "working with computers" bug.

Do you ever regret being bitten by this bug? I was bitten by it as well, at an early age.

It worked out OK for me in that I've made lots of money, but I feel that it's come at the expense of possible greater impact and glory should this neurodivergent mind have latched onto something more "real" instead.

I wonder how this experience has been for others.
Flip till I get the side I wanted
This is completely irrelevant. Your post is not immune to criticism.
>Semiconductor in general is going bust, too much supply.

TSMC literally can't make chips fast enough. Companies are competing for wafers.

>you also have too many players in the market

How? There are a handful of companies on the planet that can do 7nm process chips and below. Western Digital had an issue with its fab in 2022 and that alone was apparently enough to increase NAND flash prices by 10%.
It’s not just a matter of catching up with Nvidia hardware - and who is going to do it? One of the major cloud providers? AMD? Apple?

Say they do catch up with the hardware, are they also going to convince the entire industry to switch from CUDA.
Again, that just puts a bandaid over the problem. You can’t individual audit access to or rotate secrets stored state files.
> that would have been "x*.y", and "->", would not have been needed.

Arguably that syntax would have been prone to a lot of unintended pointer multiplication due to syntax error.
True, but git also has pretty simple means to fake committer identity, rewrite commit history etc. Storing it to GitHub was definetely a major faux pas.

However, it seems that the FTX people were not really bothered to cover their tracks.
Yes, that's true, so the true impact of these vacancies on other aspects of society won't be visible until (and if!) they start actually lowering the rent despite having various reasons not to want that.
theme-ui (https://theme-ui.com/getting-started), mui's `Theme` (https://mui.com/material-ui/customization/default-theme/), bootstrap's variables

Basically, when you think in purpose instead of colors.
What about if they were flipped by computer random functions
> It depends on your workload.
> Some industries require to be able to reproduce exact bit by bit data.
> Anything that requires absolute bit certainty, for example digital signatures, encryption, or financial information, will require ECC.

Totally, and I get that. We've got people in this thread who are saying that non-ECC ram shouldn't be trusted [0], or that it should be standard [1]. I get the use cases, but why do I want that on my workstation.

> your code won't compile because variable names got flipped.

I have _never_ seen or even heard of this or anything vaguely resembling this happening. Are there any writeups of this anywhere at all?

[0] https://news.ycombinator.com/item?id=37829796

[1] https://news.ycombinator.com/item?id=37828865
Agree. GraphQL is well mature by this point.
A spamhaus-like blacklist for botnet IPs is an interesting idea.

What if Google and Cloudflare collectively reverse-DoSed all the infected IPs, not by sending them any traffic, but simply by refusing to accept any connections from them to any part of their infrastructure?

Whoever is on those IPs will suddenly find that half the internet doesn't work anymore. Which is probably a good enough incentive for them to replace their router, format their PC, or whatever else is necessary to disinfect themselves.

In many parts of the world, landline IP allocations tend to be stable enough for this to have a real effect. Phones are a different story, but phones are also much less likely to be useful in a DDoS botnet. (The owner would immediately notice the sudden heat and data usage.)

If we're going to live in a world where a small number of companies own half the internet, at least they could use their power to do some good.
The only answer is publicly-resourced protection and it's not that weird when you think about it. My apartment has a basic lock that any locksmith can undo and I'm safe because of my community and government protection (police, mental healthcare, justice system, etc...). Seems like the same logic should apply to my website or other digital property.
How you will send request to FE and back if you have java in BE?
> Or do people actually want their keybindings to change when they change their layouts?

It depends. As a counterpoint to the folks replying "yes", I have for years had Meta-[1..9] bound to "switch to desktop X". I also regularly use US English and Czech/Slovak keyboards.

In the X11 days, I never had to think about this, since for whatever reason (I believe technically a bug and/or X11-specific WM behaviour, but I've lost the reference...) Openbox would use the US English layout for its keybindings exclusively.

Since I switched to KDE Plasma on Wayland, I constantly get annoyed, every day, as I may have my keyboard set to SK, press what muscle memory says is Meta-[1] and instead I get a funky zoom, since that keystroke translates to Meta-[+] in the SK layout :-(
Four Lessons I Learned (About Leadership) While Teaching Myself to Code
20000 being modest really says a lot about the state of security on the Internet.
Arroba:

https://en.wikipedia.org/wiki/Arroba
> If dereferencing would have been made implicit

You're misunderstanding the comment. They aren't asking for implicit derefs. They're asking for explicit derefs, using * or . instead of * or ->
Not always. I’ve used Ansible to stand up all the inventory that I managed with it.
Did you see the code? Do you know how deep it goes? I don't have the definitive answer, so if you have some insight, I'll love to hear it.

UI is top of the proverbial iceberg. It's relatively easy to modify it.
RFC 20 shows "@" defined as "commercial at" in 1969. https://www.rfc-editor.org/rfc/rfc20.html . That was two years before Tomlinson used it for email addressing.

EDIT: "Creation of Computer Input in an Expanded Character Set" at https://ejournals.bc.edu/index.php/ital/article/download/292... from 1968, p112, describes it simply as "at".

EDIT #2: "TRANSLATION FROM MONOTYPE TAPE TO GRADE 2 BRAILLE" at p83 of https://archive.org/details/researchbulletin05lesl/page/82/m... from 1964 describes that symbol as the '"at" sign'.

I think that is early enough to say that email did not influence the "at" meaning but rather the other way around.
What you need to understand is the concept of metapatterns. GPT-4 has generalized so much, that it is able to learn the "patterns of patterns" in many domains. I don't require anything more fancy to drastically improve my workflow right now.

Usually, drawing from existing knowledge is the whole appeal of using GPT. Over time, you actually begin to get a sense of what the model is good at and bad at, and it's good at an incredible amount of things. I get it to write novel code constantly and I think that playing with it and confirming that for yourself is better than me showing you.
I think about it this way

p(th) = p(t) p(h)

p(ht) = p(h) p(t)

Hence p(th) = p(ht) regardless of coin imbalance as long as both events actually will happen. QED.
Ukraine's Drone Factories [audio]
While I agree we should leave the correct answer to simulation, analytical approximations are often surprisingly close and have the benefit of being intuition-building.
People's brains just work differently. I don't remember "closing Awesome is Mod4 + Shift + the second key from the left on the bottom row", I remember "Mod4 + Shift + Q (for 'quit')" and my fingers know how to find 'Q'. If I change to Qwerty I'd have plenty of applications where the locations of keyboard shortcuts would change (like "Ctrl + C (for 'Copy')") and not having the keyboard shortcut for "close Awesome" change would be disorienting.

That said, maybe I'd have an easier time if it were possible to find a physical Dvorak keyboard, but alas: "worse is better".

OT: Wayfire is a really cool project and I admire how well it runs, it's real quality software.
Plenty of even quite-large websites just don't get attacked by DDoS attacks, because nobody has any particular reason to attack them.
I guess that’s one way to prevent p-hacking: you can’t exclude/include someone’s flips without them getting mad!
Do people have normally keyboards with a ∈ key?
What made me wrong was probably the fact that, although almost identical, for the end-user the two systems couldn't be more different. With all my critics, in Switzerland it quite works, while from the US is hear plenty of horror stories. So either private here is not private there, or I'm biased by what I read here and elsewhere about the US healthcare.
I assume China, Iran, North-Korea or Russia (in alphabetical order).
Two-up sounds pretty fun. Your comment in turn made me think of Chō-han, which is somewhat similar but involves rolling dice instead of flipping coins.
https://en.m.wikipedia.org/wiki/Ch%C5%8D-han
I worked with designing a local oscillator for NMR spectroscopy, seeing this in LEGO makes me remember all the nice things from that period :)

Would love to buy a LEGO set to have my own NMR machine at home. I couldn't find online, maybe they will release someday?

It would be nice to extend the room with the actual racks of electronics and power amplifiers, they only added the operator computers.
Some people really just want to make Star Trek real.

Or those artificial food pills from more dystopic scifi.
Google-Extended does not stop Generative Search from using your site's content
I didn't think they could, because of the loans on the properties.

I'll have to dig up the explanation, but basically they take a loan for a $100 property, and if they dropped the rent then basically the loan becomes invalid and they have to repay 100%. So they will never lower rent, even if it's only kicking the can down the road because otherwise it's immediately an issue.

I could be wrong, so I'm going to try and find the source.
So basically HTTP/2 authors missed the existence of TCP SYN-flood attacks(Not the same, but more or less the same mechanism)? Was this bought up during standardization meetings or was it just hubris?

https://en.wikipedia.org/wiki/SYN_flood
I agree, big missed opportunity in C’s development.
From 1965 - 1979 there were only 7 scientific papers predicting a cooling climate. Compared to 42 predicting human caused global warming (Peterson 2008). Since then the global average temperature has climbed to 1.8F above preindustrial levels. It's warmer now than it has been in over 100,000 years and those scientists who predicted warming 50 years ago accurately forecasted Earth would be this warm by now with the co2 levels we have.

The hypocrisy to claim Paleo-climate reconstruction is cherry picked, but to also claim there's evidence that it was warmer in the past. Which seems to always rely on cherry picked local data which isn't indicative of global average temperatures. I'm sorry, but I'll continue to rely on the peer reviewed climate reconstructions over the blog posts of climate deniers. Multiple different teams of scientists have come to the same conclusion independently that current temps are above anything seen in the holocene and rates of warming are unprecedented.

If you want to gamble the future of humanity on the longshot bet that an entire field of science is wrong, but that the fossil fuel industry funded bloggers who oppose them are right then you're bad at risk analysis.
No, the board itself is fiber board
Fair coin, unfair flip.
One more thing to think about: some layouts don't have Latin letters. So if you switch from English to Ukrainian, you'd lose all your keybindings with the approach requested in the ticket..
Looks good, thanks.
I'm somewhat constrained for space and room size, but might look for that or similar to replace the current one: https://www.agaliving.com/products/catalog/stoves/little-wen...
Stoves are useful in my area as there's a lot of wood around, often for free, though it does of course have to be dried.
Google already does this. "Something on your network is causing unusual traffic, please fill in this captcha to continue".

And then you have to fill in a new captcha every 5 minutes or so just to keep using google maps/gmail/search.

It's kinda annoying, and usually the culprit is someone else who shares my IP, not me (ie. a school, university, workplace, open wifi).
I don't know how, but the USB somehow managed to be worse than non-reversible.

The number of times I've flipped it around more than once to get it right is absurd.

It must look hilarious if you zoomed out to population scale. Thousands of people flipping around USBs at any given second.
> In many parts of the world, landline IP allocations tend to be stable enough for this to have a real effect.

And what about CGNAT?
Google Docs will let you sync Fedora and a Mac and PDF's will provide basic distribution.

That's the simplest thing that might work...or maybe a typewriter + xerox are.

But I digress. Good luck.
As a developer when I work with ChatGPT I can see ChatGPT eventually taking over my JIRA stories. Then ChatGPT will take over management creating product roadmaps, prioritizing and assigning tasks to itself. All dictated by customer feedback. The clock is ticking. But reasoning like a human? No.
I remember at one point in my childhood learning a trick where it looks like you're flipping the coin, but you're really only causing it to rotate and wobble, meaning it's guaranteed to land on whatever side faced up as you tossed it. I don't remember how I did it though, and a few minutes of trying to recreate the effect has failed.
20-30 bucks doesn't even begin to replace an actual competent developer's salary either, even in a super low wage country. Especially factoring in overhead.

In fact I imagine that in most places this would pay for 1 hour of their time. Which you pay per month for copilot.

So the question is not how many developers you save. But if you save more than one hour per month per developer.

I'd imagine that will be fairly easy to achieve.
I'd always thought this was just from my Win 10 install being "crufty" (a few years old, with some hardware swapped along the way).

Never ran into it on my Linux box so I thought it was just Windows weirdness.
Do not confuse this "Cantenna" with the Heathkit "HN-31 Cantenna", which (despite having a RF connector) serves a somewhat different purpose...

https://www.orcadxcc.org/content/cantenna_va7jw.pdf
US enemy one, two, three and four (whoever is trendy to blame right now)
I think that if you really care about privacy and security then the simplest way to ensure that a game can't harm you is to avoid handling anything important on your gaming PC. If you think they might do something malicious, not having admin rights won't prevent that game from reading all your authentication credentials from your browser, for example.
Microsoft reins in Bing AI's Image Creator,and the results don't make much sense
I wished people would have learned to be a bit more careful, after the false allegations against Russia in the NordStream bombings.
For a side-hobby of mine (writing), I imagine what would happen if current trends would continue. Thus, big caveat, it's all just thought experiments, not realistic predictions of any kind.

For this particular scenario, the public Internet would get so bad ("enshitified") that people would tend to leave it alone. For essential public services, governments would set up their own networks disconnected from the Internet, where all devices and their connections must be authenticated to a person or corporation[^1]. Maybe something equivalent would exist for corporations and to enable e-commerce.

[^1] China works like this already, to a high degree.
But that's easy. All software does something like CTRL-Z accordingly to the chosen layout. So the physical position of the switch to press on the keyboard changes accordingly to the layout, it changes when switching from qwerty to qwertz and again when it switches to dvorak.

I saw a few games where it wasn't that way, it was always treated as a bug.

Think of it from the user side: People are used to their shortcuts. They are used to press CTRL+Z where it is on their layout, as their keyboard keys will also be printed accordingly. Someone with a non-qwerty-layout may have never seen CTRL+Z leading to the physical key on the bottom left, for them it was always somewhere else. How would they know what to press, when the config says CTRL+Z, and they press CTRL+Z on their keyboard and nothing happens? How would someone who grew up with azerty know qwerty?

If you want to support "what people actually use", the keypresses have to be evaluated according to the actual keyboard layout used. I say this with absolute certainty, and as a multilingual developer who switched from qwertz to qwerty and had azerty in use as well for a time.
that's not the only way.

The way we used to do it is have "filter boxes" with a real anycast IP address's which reverse connect to your origin.

This helps a lot because it keeps a lot of traffic localised instead of allowing it to collect in one place. Anycast should also mean you have a failover mechanism; but if it fails then you're only down in one section of the world where the most bots are anyway, which is usually not as bad as being down globally.
So far I haven't seen anything indicating Russian involvement, both seismologists and the navy have confirmed that they haven't detected anything that indicates sabotage. Has there been any additional information after those?
tl;dr

What really illustrates this is that Bing AI is even censoring itself, as highlighted by someone on Reddit. Bing Image Creator has a ‘surprise me’ button that generates a random image (the equivalent of Google’s ‘I’m feeling lucky’ button, if you will, that produces a random search). But here’s the kicker – the AI is going ahead, creating an image, and then censoring it immediately.
When tylenol was invented, did the inventors have to precisely specify the molecular interactions between the compound and the human body in the same way a programmer has to precisely specify a program?

No? Maybe the analogy you are suggesting isn’t the most accurate.
> pay Google, Amazon or Cloudflare a protection tax.

Just FYI: hetzner has free DDoS https://www.hetzner.com/unternehmen/ddos-schutz

I'm sure other hosting companies also offers it.
I agree: the pain of rebuilding characteristic to large software is not inherent to software in general. Software can be highly modular, allowing for fast and flexible changes of many important parts. You don't have to rebuild a Linux or Windows kernel to update a driver; usually you don't even need to reboot it.

But Firefox specifically, and a few other old, large, and highly multiplatform projects had more important things to do than to make building them easy, and in doing so made contributing to them harder.

It's like a Honda Civic vs some Jaguar.
A number of people have expressed concerns about making the relatively simple protocol more and more complicated in the name of performance. This looks like it's going to be their "Ha, told you so!" moment.
Would be amazing feat of physics to build powerful magnets from plastics
> If you type a valid command, the computer does it _now_. If you prefix it with a number, the computer remembers it and does it later.

You can come at that from a different perspective in an improved editor, like Emacs, with the interpreter running as a subprocess: Write whatever you want, then send a portion of it to the interpreter and see the results in another window or pane.

> In BASIC, if output is in quotes, the language prints it. Other stuff is outside the quotes. Dead easy, simple, memorable.

I wonder if this is simpler to you just because you imprinted on specific BASIC dialects as a child.
A lot of the progress in the last 3-4 years was predictable from GPT-2 and especially GPT-3 onwards - combining instruction following and reinforcement learning with scaling GPT. With research being more closed, this isn't so true anymore. The mp3 case was predictable in 2020 - some early twitter GIFs showed vaguely similar stuff. Can you predict what will happen in 2026/7 though, with multimodal tech?

I simply don't see it a being the same today. The obvious element of scaling or techniques that imply a useful overlap isn't there. Whereas before researchers brought together excellent and groundbreaking performance on different benchmarks and areas together as they worked on GPT-3, since 2020, except instruction following, less has been predictable.

Multi modal could change everything (things like the ScienceQA paper suggest so), but also, it might not shift benchmarks. It's just not so clear that the future is as predictable or will be faster than the last few years. I do have my own beliefs similar to Yann Lecun about what architecture or rather infrastructure makes most sense intuitively going forward, and there's not really the openness we used to have from top labs to know if they are going these ways, or not. So you are absolutely right that it's hard to imagine where we will be in 20 years, but in a strange way, because it is much less clear than in 2020 where we will be in 3 years time onwards, I would say it is much less guaranteed progress than it is felt by many...
Cash is also preferred in food service, because it's easier to cheat on taxes. When you're paid a tip in cash, with no paper trail of what that amount was, the reported earnings on the tax form is merely a suggestion to tell the truth.
We don't need to share a block-list, but yes, blocking all traffic from open proxies (which nearly all the large attacks of the 2020s have used) is definitely part of the long-term plan. Any legitimate users of those proxies will experience some short-term pain, but they'll patch and life will go on.
> the generalized "for" of C was a mistake, because it complicates the frequent use cases in order to simplify seldom encountered use cases

The worst offender is the quasi-obligatory "break" statement in "case" blocks. Fall-through cases are useful for things like lexers but probably not needed in 99.999% of other programs. I wonder how many millions of (wo)man hours have been wasted on debugging missing breaks. (yes, I know that linters exist)
Yes this is true. The banks will insist on repayment of the difference since you're proving that the value of what you borrowed against is suddenly much lower.
My dude, people have been making art for at least tens of thousands of years. I don't think people are about to stop now.
Nice, makes sense. No external feature flag solutions here then? Just leveraging your languages build tooling and changing behaviour based on an environment key?
What they need is AR glasses and a physical sliding bench to replace all that