skysight-inc/HackerNews huggingface dataset:
In Spain is legal to download and share but people often pay for it anyway.

As Gabe Newell said the best way to combat video game piracy is by offering consumers better service than what they might receive from pirates. Piracy is not a pricing issue, but rather a service problem.
You said “does not noticeably increase”; you need a reference point for “increase”. If you’re not comparing open source to other types of governance, then what are you comparing it to?
If you already have a GPU, adding tensor cores to it is more optimal (less area=cheaper) than adding a separate NPU.
Farming is a _lot_ more work than hunting and gathering (if food is plenty) and people mostly resorted to it out of desperation, and farmers had to be _forced_ through slavery to do the work throughout most of history.
Do you know what the first D in DDoS attack stands for?
Managed switch with VLAN, WLAN AP with VLAN. My Ubiquiti networking stuff does this but if you want decent priced 10 gbit managed switch you're SOL. You'll end up with China stuff.
You're right. The primary use of mirroring on raid 1 is for redundancy. Raid 0 is striping and more associated with performance.
DDoS attacks were growing in size and frequency before these companies started creating products to address them. They took down sites, demanded ransom, and cost a lot of money in lost business and hosting bills.

If you want to complain about an actual working solution, that's your right, but realize that without an alternate solution you're advocating for giving small gangs the ability to disrupt everyone else's lives on a whim.
It's also amazing to write documentation or unit tests. Or repetitive editing tasks that are hard to automate (e.g. "invert this if condition").
This shows the astronomical complexity of k8 systems even gods of k8 fail.
The robot aircraft with a nightmarish nuclear mission
Not really, because not only it uses PGO, which most people using AOT languages never bother to learn, it only AOT compiles the code paths that JIT validated as being used, instead of the whole application.

JIT + AOT with PGO data shared across all Android devices on the planet, gets the best of both worlds.
AWS blog: https://aws.amazon.com/blogs/security/how-aws-protects-custo...
- Panic in the gas market causing rising prices

- Causes accusations between NATO members

- An attempt to claim force majeure to get out of their gas contract with Germany so that Germany can't seize their frozen Russian funds for non delivery.

Also, one shouldn't assume that an apparatus which blundered its way into this costly Ukraine quagmire for no benefit is acting 100% rationally.
Beyond Revenue Operations – AI, automation, and insights for business growth
Thanks for the details, sounds like a great setup. Any GitHub repos you can recommend?

Except for writing your own stdlib. How long did that take? Was that to enhance bounds checking?
Oberon and the Plan 9 environment (which is inspired by Oberon) do it the other way around: you write something in a text editor and use a subsequent input (usually via the mouse) to execute it as a command.
tell.it? I thought the CEO told him to take down "Riju: fast online playground for every programming language"

https://intuitiveexplanations.com/tech/replit/#what-was-my-o...
I'd probably pay ~2-3x, idk about 5x. I'd consider it though. Hopefully they can cut the costs and meet in the middle.
I googled it for United States.
Will Pulumi AI also have ECS as part of it? Imagine the learning curve will be much less steep with Pulumi AI :).
> there's a whole industry of embarked software that will likely be much bigger.

What in embarked? Genuinely curious if this is a misspelling of embedded or if it's something else entirely.
NATO does not seem at all aligned here. I wonder if we've entered an era where different NATO nations are going to hack chunks off of our own noses to spite our face so to speak?

You're right though in the end. These actions have lifted a taboo. Globally. Nothing will be safe any longer. Actors will cut pipelines. Internet cables. You name it. It's already happening more often than people think. There are no longer any sacred cows. We'll just need to learn to operate in a world with a higher level of "infrastructural fragility". But it will be sad for regular people in the world, because in the end, that's who will be hurt, and it sucks.
Seems like they sell those only at the airports. Good to know, thanks.
DNS is from 1983, give it some slack
USB C was created due to Apple donating the reversible connector technology they created for lightning.

If micro usb was enforced, USB C in its current form wouldn’t exist.
If you actually look at the article the very first code sample shows how certain customers (Alameda) are directly exempt from auto liquidation & can carry negative balances at FTX.
See also

https://news.ycombinator.com/item?id=37830998

https://news.ycombinator.com/item?id=37830987
At some point, the open source models you can run locally are going to start to get competitive. I suspect the cost problem came from upgrading to ChatGPT 4 over ChatGPT 3 - right there their costs more than 5x.
If you're talking about Windows here, then you could write some code that intercepts the system calls used by common keyloggers (GetAsyncKeyState, SetWindowsHookEx with WH_KEYBOARD / WH_KEYBOARD_LL, etc) using hooking, an instrumentartion callback, or ideally a kernel-mode driver, then warns you if the game is trying to use them. Normal software should only really need to use the keyboard messages passed to its WndProc, which only receives them if it's in the foreground. So while there can be legitimate reasons for a game to call them, it's a good sign that something is fishy. This is not fool-proof though, as there are other methods to get system-wide keyboard input, but this would catch the simple ones.
imo it's the form factor that works. ChatGPT is good for doing standalone things like generating a script. CoPilot is good for making incremental changes to an existing code base. Honestly, its REALLY good at it. One of my favorite parts is that it mimics the style of the surrounding code.
>
Len Sassaman is still the top candidate in my book.

I agree with this judgement.

Another hot candidate is in my opinion Nick Szabo (https://en.wikipedia.org/wiki/Nick_Szabo).
> I wonder if you could do the development all on ram drives on the development machine, that way if you shut down all the code is gone. Just make damn sure to stow/check in your code before doing so.

or if you have any downtime you lose all of your shit
> assuming that this is "complexity bloat" and not just "a feature that people use"

¿Por qué no los dos?

:)
> In a typical HTTP/2 server implementation, the server will still have to do significant amounts of work for canceled requests, such as allocating new stream data structures, parsing the query and doing header decompression, and mapping the URL to a resource. For reverse proxy implementations, the request may be proxied to the backend server before the RST_STREAM frame is processed. The client on the other hand paid almost no costs for sending the requests. This creates an exploitable cost asymmetry between the server and the client.

I'm surprised this wasn't foreseen when HTTP/2 was designed. Amplification attacks were already well known from other protocols.

I'm similarly similarly surprised it took this long for this attack to surface, but maybe HTTP/2 wasn't widely enough deployed to be a worthwhile target till recently?
> And assume this set costs $1,000 for LEGO to produce (low economics of scale)

This makes no sense unless you think they are making pieces that are only for this set which is almost certainly not the case considering others have posted rebrickable links for essentially the exact set[1]

[1] https://rebrickable.com/mocs/MOC-120823/mampepin/mri
> or unit tests

Seriously! I write a documentation comment like:

/// Given: blah
/// When: blah
/// Then: blah

and Copilot writes the test for me. I can generate a dozen tests like this and it's awesome. I write a lot more tests because of Copilot.
I guess power cords and power plugs landed on perfect designs. It's weird how there are so many different "perfect" power plugs though.

A periodic review process won't matter. Somebody has to actually research, design and create an alternative. Why would they spend resources on that if their competitors can just decide that they're not allowed to use it?
Any that matters, I guess ("we" as in the collective of people).
I suspect the cost problem arose specifically upgrading to ChatGPT 4 over ChatGPT 3 - right there their costs increased more than 5x. So before it was likely under $5/month on average, but once you changed to ChatGPT 4, it jumped to like $20/month on average.
>”Unity is common in small indie studios because, for so many use-cases, it's the only game in town”

I wholeheartedly disagree. There’s more choice than ever. A search on GitHub would show you.

Unity has had one thing going for it. It was easy to get started and it had a ton of learning material. It is NOT the only choice. Off the top of my head there’s:

- Ogre3D

- O3DE

- MonoGame

- GameMaker

- Godot

- Cocos2d

- GDevelop

- Pandas3D

- Reactor

- Stride3D (formerly Xenko)

- Three.js

- Babylon.js

Unity’s editor first approach and their C# “everything’s a behavior” is why so many think it’s the only game in town. It’s not. It never was.
When describing someone who does vulgarization videos about the semi-conductor industry, "he wasn't completely accurate" seems like praising with faint damnation!
Building a collaborative pixel art editor with CRDTs
> I'm just saying that in 2023 even if your printer is open-source, ain't nobody got time to dive into hundreds of thousands of line of code to change it.

I disagree. I disagree wholeheartedly, based on both practical projects and the retrocomputing world.

For example:

https://github.com/PDP-10/its/

This is a repo for the Incompatible Timesharing System operating system, ITS to its friends. ITS ran on 36-bit mainframe hardware from Digital Equipment Corporation (DEC) which went out of production in the 1980s. DEC was acquired by Compaq in 1998, and Compaq ceased to exist as a company in 2002. Commercially, ITS is dead. It is dead-dead. It is old-university-project-with-no-grants dead. Doornails evince more metabolic activity than ITS, at least in the commercial world. Developing on ITS means reading and writing assembly language, TECO, and a Lisp dialect that only runs on ITS and a few other OSes of similar vintage and commercial utility. However, it is still under active development because people are interested in it.

Besides: Digging into a codebase to fix a dumbass printer? People will do that out of spite. People will do that for the blog post and Hacker News thread.
> just with everything production-grade, the average enterprise just isn't ready to deal with all the upfront cost to run your entire computing solution

That’s not a fair point.

We’re not even trying to make the internet safe. There is zero (0) actions being taken to stop this madness.
If you run a large website, you still regularly see attacks from routers compromised 3, 4, 5 years ago. Or how a mere few days of poking around smartly is still enough to this day to find enough open DNS resolvers to launch >500Gbps attacks with one or two computers.

Why are these threats allowed to still exist?

The only ones attempting something are governments shutting down booters (DDoS-as-a-service platforms). But that’s treating symptoms, not causes.

We will eventually need to do something, or it will be impossible to run a website that can’t be kicked down for free by the next bored skid.

Just like paying protection fees to the mafia was a status quo, this also is just that. A status quo, not an inevitability.

The solution is to finally hold accountable attack origins (ISPs, mostly), so that monitoring their egress becomes something they have an incentive to do.
But wasn't the bias in the paper something like 50.5% vs 49.5%?
You forgot "have thousands of independent nodes deliver the content to me at a bandwidth rate so high it'd constitute a DDOS attack if the protocol didn't have a way to manage data requests"
How the attacks in Israel are changing Threads
Not really. The story of Abraham begins in “Ur of the Chaldees.” The modern consensus is that it should be in southern Iran, but historical sources had it in northern Iran or closer to Turkey. Which is also the source of the Phoenicians / Canaanites.

Between that, the sojourn to Egypt, and the constant complaints about intermarriage in the OT, you’d already expect these to be roughly the same gene pool.

More interesting may be the connection (or lack thereof) between OT-era Jews to modern Jews, which plays into political and racial arguments.
A similar analogy can be made with the likes of westward expansion in the continental US.

Back then, you got a piece of land, and really could do what you wanted with it. Build a business, farm, etc. some government taxes but nothing crazy. But you had to deal with criminals, lack of access to medical care, and lack of education.

Now to do the same, you have a slew of building codes, regulations, zoning laws, and are basically forced to have municipal services. Higher Taxes to pay the roads, police force, fire fighters, education services etc.

However, home owners can still just have an egg or vegetable stand at the end of their driveway. It won’t be the same as having a storefront in town, but it’s still doable without the overhead.

Similarly, as the internet matures, we’re going to see more and more overhead to sustain a “basic” business.

But you can still have a personal blog ran in your closet, for lower-level traffic.

The analogy isn’t perfect, but unfortunately as threat-actor’s budgets increase, so too do their quality/sophistication of their attacks. If it was cheap to defend against some of the more costly attacks, they would find a different vector.

The answer, to me, is some tangential technology that is some mix of federated or decentralization. Not in a crypto bro sense, but just some tech whose fundamental design solves the inherit problem with how our web is built today.

Then threat actors will find another way, rinse and repeat…
I'd say enshittification is inevitable. It isn't a technology issue, it's human issue. Imagination and desire are what brought us this far and also what holds us back. See also: the tragedy of the commons, the prisoner's dilemma, the trolley problem, etc.
Block the whole country, then I guess you’ll see laws passed that IOT providers need to start updating at a better clip.
Forgeting about JScript?

Powershell can be configured to prevent those attack vectors.

Also hardly any different from people doing "curl | sudo sh" to install random stuff.
I wrote a book back in 2011 in Scrivener, and loved the software for this. I didn’t use about 90% of it but still, it was hugely helpful for structuring a long and complex document of 60k+ words. You need to be able to shuffle chapters around, see an overview of progress and so on - Scrivener does all of this and much more.

I’m dabbling now with writing using Obsidian. I think (but not 100% fully researched / sure yet) that it’ll do all I need: portable, open, easy workflows for shuffling stuff around, exports using pandoc and so on. There are also a fair few plugins and tutorials - Googling “long form writing with Obsidian” will find you lots of useful stuff.
I don't think most dev laptops have 8GB+ of GPU memory, which (based on ollama requirements) seems like it's on the low-mid end of the requirements. I've tried experimenting with some local models and:

a) They're much slower on my 6GB laptop GPU

b) The seem to not be as good, functionally

b) I can't make use of larger models

I haven't done more than just some experimentation but I can see how this would make sense to put on a server.
ALPack – A robust all-in-one toolkit for building web apps
All-in-one solution for building efficient web applications using some of the hottest technologies right now - React, Next.js, GraphQL, Apollo, Node.js and more.
By flipping thousands of coins for this paper, I am sure their participation exceeds that of many 5-author-papers.
The incident impact (nodepool upgrade issue) seems to be matching the speed of mitigation rollout. One does not want the cure to be worse than the disease; roll forwards should be slow unless the impact is high (and even then, it should be a rollback/freeze rather than fast roll forward).
To add, password managers provide great coverage of almost every problem 2FA is. supposed to solve and it improves the workflow your grandma already know (writing passwords on a sheet). The only difference is Google doesn't get any money when you run a script on your own computer.
Well aware of all of that, but it decreases the chances if corruption (ie no corruption during download).
Yeah, I was very disappointed. I cancelled my free trial three days in, it was clearly inferior to the alternative (copy+paste into Claude).
LotusDB: Go's most advanced KV store, extremely fast, LSM and B+ tree advantages
Beyond ChatGPT: New Princeton Language and Intelligence (PLI) Initiative
ElevenLabs Launches Voice Translation Tool to Break Down Language Barriers
I have been pulling my hair to fix this all week.
AI is such a huge expectations dichotomy. For those of us used to the continual disappointment that pre-LLM AI was, the current crop of LLM's are amazing, mind blowing things. We start raving about them, so other people take a look expecting that modern LLM's are the greatest thing since sliced bread. They're not quite that, so we get HN comments complaining that AI sucks.
That was true for me the years I wore an eye patch. Now I have the money but turn to piracy occasionally for convenience. Make it easy for people to pay and consume content and piracy goes down.
Yet. But we're getting there.
Vela's exploded star is the highest-energy pulsar ever seen
It doesn't really matter what the BOM is. The product was sold with that functionality built into it and it's now being removed. Sure, we can debate whether that's a lifeline or rent seeking. But, consumers are rightfully upset that functionality they already paid a premium for is being removed and will only be accessible through a subscription service they never had the opportunity to evaluate at purchase time because all of this happened well after the sale was completed.

> But this is supposed to be a website for people building companies!

I've built a hardware company before so I have a decent handle on what's involved. Pricing hardware is generally easier than SaaS because you know what your materials cost and you know what your distribution channel is going to cost. Macroeconomic events can be a problem, sure. In our case, a copper mine explosion really screwed up profit margin and ability to source material. But, I can't go back to people that already purchased my hardware, take away functionality they already paid for, and tell them they're going to have to pay me to get it back. The least scummy way would be to add a new value-added service and charge for access to that.

It's through the lens of that background that I think we should critically look at what's going on here. Companies engaging in tactics like this make it harder for others to succeed. I don't think this should be viewed as some fantastic growth hack.

> Hardware costs money and has ongoing support costs!

I can't imagine what the support costs on a baby monitor would be. But, that's supposed to be baked into the cost of the product. There are established formulae for that process. It's a big part of why we don't have to pay support contracts on every piece of consumer hardware we purchase. I'll grant you that the web service aspect of this colors the picture slightly differently, but then the new $120/year fee seems excessive.

> It's not "more ethical" to use a model that hides the costs of ongoing support for a product by packing extra margin into each sale.

Ethics enters the picture because none of this was disclosed at the time of purchase. Instead, that functionality was sold as being included. Sure, their EULA almost certainly allows them to do whatever they want after the sale. But, that EULA is about the only form of actual disclosure involved.

It's also fair to consider the wider context here. The company that made the monitor was acquired by another and the new company is now removing previously included functionality and charging for it. The acquiring company knew the numbers before they purchased the company. They didn't have to bear any of the R&D costs. It's really hard to evaluate this and not see it as rent seeking behavior.

I think that's a big problem for any startups looking to get into hardware because people are going to stop taking risks on newcomers if they're likely to get screwed after an acquisition. As a start-up community, we should be critical of the actions taken here. Especially when no mea culpa has been issued that explains why the change was necessary for the company's survival.
>IPC socket

This IPC is a custom built IPC that has no security. This means that any program can do stuff like steal focus or drive other window manager policy if the plugin is there. There is also a plugin that exposes the ability to send key or mouse events.

Applications should just use DBus instead of creating their own custom IPC protocols just because they feel like it.
I published a couple of books with the following tools, which I found satisfying:

- Emacs org mode for writing

- Adobe Illustrator for the figures

- Adobe Indesign (text exported from org to IDML via pandoc) for the layout

- Amazon KDP + Ingram spark (aka lightning source) for publishing and distribution.

Be honest about what you are or aren't able to do by yourself. Publishing a book requires a wide gamut of competences: writing, editing, typesetting, graphic design, etc.
ChatGPT and other AI tools could disrupt scientific publishing
I am sorry, but if your password manager goes away and you have no disaster recovery scenario planned you might not be able to just move to a competitor:

https://news.ycombinator.com/item?id=31652650

My response was to illustrate how insidious big companies are.

Of course nothing compares to the backbone of the web going down. If AWS North Virginia suffers widespread downtime to all its availability zones, much of the web will just go dark, no question about it.
The missing part "better spreadsheet" for me is some standard, simplified reactive evaluation declaration syntax. I'm probably wrong, of course.

Oracle has a pretty crazy feature where it handles a query like a temporary spreadsheet where you can enact reactive queries upon [1], that I haven't found in other SQL DBs.

I know you can do that using window functions + recursive CTEs but under this "reactive evaluation of a sub-query" use case they tend to get ugly and incomprehensible real fast.

[1] https://www.oracle.com/webfolder/technetwork/tutorials/obe/d...
Yes, it's eight multiplication with the naive algorithm. You can get to seven with a clever trick (Strassen's algorithm). As far as I'm aware, with these precise numbers (8x8 matrix decomposed into four 4x4) it's unknown if we can do better.
I got tired of dealing with it and just told my system that URLs should be opened by a script I wrote that just puts the URL in the clipboard and shows a notification that it did so. So I open/click a link, then go find the window I want it to open in and paste and go.
So the service costs MSFT an average of $30/user/month. So if they want to make a business with decent margins out of this, they're going to need to charge $60/user/month or more.

That's not too much if it's adding a lot of value but it's also definitely a lot of money. It would be the most expensive SaaS my team pays for (and we have a lot of subscriptions).