skysight-inc/HackerNews huggingface dataset:
Why the actual fucking fuck did Fortnite get in bed with these petro boomers?! Shell must be one of the brands farthest removed from the target demographic. I can't believe they need the cash that badly, and like you say, this can only backfire. Millions of views on that vid, almost no likes.

I can't believe this exists, it's almost funny. Maybe they can do Depend Adult Undergarments branded content next.
Angular has really improved in this area, the addition of standalone components mean your initial payload can be very small indeed, and then just lazy load the rest as/if you need it.
It's been an explicit language feature (flexible array members) since C99.
Comfy: A fun 2D game engine built in Rust
> You can scrape email/sms for codes automatically

IF they arrive right away, which isn't guaranteed for either method
Also, do you seriously suggest every single user to set up some kind of x-platform scraping service (how would you scrape an SMS code to a computer's clipboard)???

"user hostile" means that you impose a cost on users without consent and in many cases without benefit

> I don't use password authentication alone unless it's literally my only option.

That's fine, but this isn't a conversation about you. I'm fine with a high-entropy auto-generated password for a huge bunch of services
Cos Timmy is losing money.
Show HN: A gallery of dev tool marketing examples
Hi I am Jakub. I run marketing at a dev tool startup https://neptune.ai/ and I share learnings on dev tool marketing on my blog https://www.developermarkepear.com/.

Whenever I'd start a new marketing project I found myself going over a list of 20+ companies I knew could have done something well to “copy-paste” their approach as a baseline (think Tailscale, DigitalOCean, Vercel, Algolia, CircleCi, Supabase, Posthog, Auth0).

So past year and a half, I’ve been screenshoting examples of how companies that are good at dev marketing do things like pricing, landing page design, ads, videos, blog conversion ideas. And for each example I added a note as to why I thought it was good.

Now, it is ~140 examples organized by tags so you can browse all or get stuff for a particular topic.

Hope it is helpful to some dev tool founders and marketers in here.

wdyt?

Also, I am always looking for new companies/marketing ideas to add to this, so if you’d like to share good examples I’d really appreciate it.
Uptime monitoring + cron job monitoring via OnlineOrNot (dogfooding my own product), with alerts going to PagerDuty (set up to email -> SMS -> call me if I don't acknowledge), and a "public" alert in a Slack channel.
That's probably why there are so many, and so many terrible options out there.

It's relatively simple to write a trivial web server in C. To make a fast and usable web server in C is most likely anything but trivial.

You'll need:

- a way to register URL patterns and assign handler functions to them.

- a way to set shared mutable process-wide things such as connections to external services and make sure one thread doesn't trample on - or needlessly block - other thread's changes.

- a transparent way to make handlers work inside a single thread using asynchronous IO functions wherever possible. Fair enough - we are no longer in the trivial web server anymore.
Great idea, let's tell Stripe, @pc, and all the financial companies to remove CAPTCHAs and hopefully automated fraud, card testing and disputes won't increase at all.
That video URL doesn’t work anymore unfortunately

Here’s an updated link: https://youtube.com/watch?v=uTMtGT1RjlY
Looks very interesting. I see Arduino is used here. Do you feel the latency?

You can have a look at Daisy and Bela as well :)
> Right, Windows NT was shipped on PowerPC, MIPS and Alpha up until 1999

Were there any compilers for those architectures from Microsoft ?
How could it be? The company name alone almost guarantees negative reactions. And rightly so, because they keep reneging on their promises. It also has a terrible "fellow youngsters" vibe, one that even I can feel. Both are an invitation to sarcasm.

I doubt that the sentiment is universally shared, though. There are still large groups in denial about climate change, even though heat record after heat record is broken.
EU is as democratic as your average EU country.

Or have you skipped voting in the EU elections?
You don't need jmp, a faulting mov works as well, like mov CS, eax.

https://github.com/xoreaxeaxeax/movfuscator#notes
Addresses are normally loaded with MOV on x86 too. LEA is intended to compute an address from base/index registers, using the same addressing modes that can be used to access that memory location.

For example, if you had an array of 32 bit integers on the stack, an instruction like "MOV EAX,[ESP+offset+ESI*4]" would load the value of the element indexed by ESI. Change that MOV to LEA, and it would instead give you a pointer to that element that can be passed around to another function. Without LEA, this operation would require two extra additions and one shift instruction.

Microsoft Assembler syntax confused this issue by being designed to make some operations more convenient, "type safe", and familiar to high-level programmers, while clumsier at getting to the raw memory addresses.

That led to people using "LEA reg,MyVar" when it wasn't necessary, simply because it was shorter to type than "MOV reg,OFFSET MyVar" :)
> The JavaScript ecosystem is almost implicitly supportive of open source

JS is basically a compilation target nowadays. Don’t tell me that a minified, tree-shaken JS file somehow helps open-source. Sure, .NET is definitely not the panacea of open-source, but that is not inherent in the technology, but the politics around.
Obviously Crystal is missing here. Another benchmark: https://github.com/costajob/app-servers
The C standard defines which array accesses are valid or not in the C abstract machine. This definition isn’t simple at all. A C implementation can in principle add runtime machinery to check all accesses during execution. C implementations generally don't, due to performance and ABI compatibility reasons. But C the language doesn’t prohibit it. Most existing programs making use of "buffer overflow within a struct" probaby aren't actually conforming C programs.
How are people using stolen cards?

Do your banks not have 2 factor enabled?

Using the card not present should require a second factor, Visa Secure type of thing and in person should require your pin for non-frivolous amounts.
Fossil fuels caused the greatest progress in history of mankind, and resulted in decimation of disease, famine and poverty.

Green movement has spent the last 50 years opposing nuclear power, otherwise we would have decarbonised at least 90% already (like France has).
> Ancestry tests are useful for people from North and South America, Southern Europe, India, Australia and New Zealand

Not really. And they're inaccurate. Did they even publish their baselines?

> Propensity to alcohol dependency, propensity for fat retention, propensity for diabetes and high blood pressure

These should be between you and your GP. And I can tell you that you have a propensity to many addictions, just by assuming you're human. Don't test them. Don't rely on 23andme to validate "No propensity for gambling addication? Casinos, here I come!"
Such a sad comment to see on a tech enthusiast hacker site
> But you didnt know if that password was going to be used for stealing - it's an assumption

But you do know for a fact that these leaked passwords are used for stealing, so forcing a password change would prevent that, ergo, save some users from having their data stolen. Private leaks have no impact on this
If we're going to whataboutism, at least include credit score as it is a form of social score.
We should all applaud entrepreneurs building productive businesses and contributing to the world's economy. Not sure how or why it is beneficial to frame everything through identity politics, national origin or even regional rivalry. This domain frequently has an axe to grind.
I’ll never get over the “invisible_watermark” Python package being entirely visible to the naked eye, obviously degrades the image in an way that’s unacceptable and even easily spottable on any image once you know what it looks like.
You probably want it in your sanitizer.
QCon San Francisco 2023: Streamlining Cloud Development with Deno by Ryan Dahl
What's the issue with TPM? Do you hate security?
Another defence is to check them, which is why the thumbs up, thumbs down, and regenerate buttons are there on the ChatGPT user interface.
Writing a z39-50 adapter for a content management system using an esoteric language (4D)
> so branches grow as tree branches do, not leaves

That’s exactly the mistake though - branches (the implementation detail) don’t grow. Branches - under the hood - are “one pointer to one commit”, and they are always the same size.

The suggestion to call the implementation “leaves” is because you get a pointer to one commit at the end of the branch, and you can then follow that branch backwards (via the linked-list of parent-commits) until you reach the trunk. But the “branch” is never actually stored anywhere, it is only implied by its ends.
> My whole point is not pro or against typed languages. It's that we need to move beyond that.

Ok, once you know where to move to we can consider that as a good solution. Until then, lets just use types, its the best tool we have.

Restated: car has seatbelts, seatbelts were not used, people got injured, hence "seatbelts were not a deciding factor, we need to move beyond that". OK, sure, I can say the same of whatever you intend to move to, and we will have wasted a lot of air to no benefit.
I serve it because my PDF library only supports XHTML and I'm not going to have twice as much HTML just to add a / to br tags.
Then please show us how it is done.
The difference is temporal: tip is for a "past" already rendered product or service. Sbf, Holmes, et al, it's about a promise for "future" services, which have a risk associated of no delivery or render. When you've already eaten your burger there was no risk of uncertain delivery. The causal relationship is reversed
ThePrimeagen did some benchmarks on stream recently - he found Bun to be slightly better in terms of average response time, but the biggest gain was P99 / P99.9 values under heavy load.

NodeJS seems to drop the ball on a handful of requests when it's getting slammed, i.e. upwards of 10s vs average of 100ms. Bun had a much smaller P50/P99 spread.
Building a 9N235/9N210 submunition detector
There's also Elite - The New Kind, a C version that is mostly faithful to the original:
https://github.com/fesh0r/newkind

It was done by Christian Pinder:
https://www.christianpinder.com/games/

People might also want to check out Ian Bell's Elite homepage, which has a number of the original versions:

http://www.ianbellelite.com/
Did the regulators say no to Braid specifically? Felt more like the regulators were putting pressure on the sponsor bank to get out of risky businesses in general.
Hey, is the loading screen implemented by the game itself or does dotbigbang measure and provide that? In the latter case, could you make it so it shows progress? Im no web designer but i think its crucial in rather resource-heavy settings and/or the potential of old devices.
Sorry for the unrelated question. What theme is used for the syntax highlighted on that snippet?
Okay? And now where do we go from here? Decisions about the future shouldn’t be based on some weird tribalistic pride about your fav energy source’s vibes or the historical ethics of it. It’s fucking oil, it isn’t going to get hurt feelings.
So find at least one EU citizen in their database and unleash the GDPR against them?
OpenAI to Join the Custom AI Chip Club?
Pretty sure it was referenced in Game of Thrones which introduced it to a whole new group of people, typically more online than the origins of the phrase, and popularized it's use on Reddit/Twitter for being a hilarious and original way to condescend people
Thanks for letting me know. I just double-checked and the AAAA IPv6 record does have the right IP, port 80 is open in the VPS firewall for both IPv4 and v6 and my nginx config does listen on both as well:

listen 80;
listen [::]:80;

I'm by no means a networking expert, so I'm a bit puzzled. I'll investigate more in a couple of days, not particularly excited to mess with the system while serving a post on the front page.
Disney Packed Big Emotion into a Little Robot
Measurements (by the same author) for Intel's x86-simd-sort and vqsort are here: https://github.com/Voultapher/sort-research-rs/blob/main/wri...
Diamond Dropper is actually a lot of fun. Great work.
Was it the green movement opposing nuclear power or fossil fuel companies?
Your analogy would work if every person having sex gets HIV. Buffer overflows are deeply rooted into C to the point that in the past some standard functions made buffer overflows mandatory.
How do EU parliament elections help you choose the EU commission members?

In your average EU country the elected parliament chooses the government. Not in EU.
Agreed!

Built a LilyPad kit. I found it too tall for my liking, so went back to my old Dell keyboard.

I have parts for a low-profile Bluetooth keyboard laying on my desk. I couldn't find an existing design I liked. Just waiting for inspiration/time to design the PCB... It'll come.
> I think my issue is more just with the mindset that it's okay to have one narrow slice of supported versions of everything that are "known to work together" and those are what's in the container and anything outside of those and you're immediately pooched.

I hear you. I think docker has been a plague on the quality of software. It's allowed "works for me" to become the norm, except it's now pronounced "works on the official docker image". It seems to be especially true in the ML sphere where compiling things is so temperamental that there's a lot of binaries being distributed.

Docker was meant to be a deployment platform, not a distribution medium.
It's the Epoch Times, man.

That's like asking someone to point out that problematic bits of hay in the giant pile of horseshit. It's all horseshit.
Actually, GDPR doesn't forbid using PII for legitimate interest like fraud detection
> Some of it might be inherent

Other equally-powerful tools (mercurial, sapling, etc) have considerably better UX though
Well 3rd party libraries that are sloppy may be fixed by a psychological method…if you had an autotest environment that fuzzed the inputs and checked for correctness, you could label each library as “robust” or “weak” and leave it at that.

Then people could decide which ones to use based on the label alone. This would be an incentive for people to fix their libraries.

Then the process of normal attrition would take care of all the sloppy libraries.

Evolution at its finest.
Without knowing the context and purpose of the function, which the author doesn’t state, it could actually be perfectly sensible. For example, -1 (or any negative int value) could be used to mark unused entries in the array, and entries beyond the current array size are simply unused by definition.
> I wonder why space simulators and games always end up being so problematic. Elite Dangerous just seems to be going nowhere. Star Citizen is apparently a perpetual beta. Even KSP2 turned out to be a disappointment. Sigh.

Feature creep.

Everyone wants a space simulator.... then it must have atmospheric behaviour, and cities.... and well, we should be able to walk around on the ground... and shoot things.... make it a first person shooter, oh, and lots of aliens, make it a diplomacy simulator too.

And on it goes.
You can definitely run a lot of 1.5 code on 1.8 and never notice
The way I learn git internals through experimenting is, executing a git command, watch the file changes happen in .git directory, it's pretty fun. I actually wrote a simple cli util to watch the changes: https://github.com/wong2/meowatch
Interesting. I bought a Mac this year and I don't think I'll be coming back to windows and if this is their endgame, PC makers will go a different route too.
Amazon launches test satellites to rival Musk's Starlink
The thing is, you can't know that unless you go out of your way to exploit your own code.
Yeah, I'm not a fan of big corporations using propaganda, especially towards children but, that topic aside, people are kidding themselves if they believe their way of life would exist without fossil fuels. Look up the Haber process; your ability to walk down to a Whole Foods in a city of millions and buy groceries to support your vegan diet wouldn't be a thing. The stepping stone to things like nuclear and solar wouldn't be there. Humanity would be so bass-ackwards by now without fossil fuels that people would still be routinely dying of diseases that today are well treated, as well as mere child birth. The only way someone can't connect the progress of the 20th and 21st centuries with fossil fuels is to view it only in isolation. The "fossil fuels bad" attitude is at best quixotic, and at worst enters the realm of insanity. Next to none of us would give up our lifestyle that benefits from fossil fuels (which includes the advance of nuclear) for the sake of decarbonization.

I can tell someone is going ask you for your "solution."

You know what the solution is, reader? Either support pro-nuclear policies until something better comes along, or shut up about climate change. In my experience, every single person who views climate change as an impending catastrophe responds with "but what if" when asked about nuclear. This is a widespread form of insanity. If we are headed for catastrophe, or extinction according to some, then the purely hypothetical world-ending events related to nuclear reactors shouldn't be any more of a problem. Personally, I'll take 100 Chernobyl-like events over extinction and a dying planet. Think that's crazy? Do the math.
It matters a lot. Like this, the article contributes zero actionable information. Knowing the brand can at least make device owners aware that they should consider switching.

Also, the article might just as well avoid mentioning that the brand is Chinese. Like this, this article can be dismissed as slander against Chinese brands in general.
> you do know for a fact that these leaked passwords are used for stealing

no, the passwords are revealed, but it might not be used for stealing. And passwords that are stolen but not revealed publicly will continue.

My point is that the site will force an update, but the user's quota of inconvenience is used up - therefore, a more effective measure such as 2FA will be seen as unnecessary by the user, and thus, lower the user's security.

This is why the solution is to not spend the effort/cost on trying to detect password leaks. It is to make 2FA.
> Kids today only care about online free-to-play shooter Fortnite

Quite a statement tbh. I thought it’s all Minecraft and Roblox?

And even then “only care about” are very strong words
This issue would still have drastically different framing if the given reason was true and users had the freedom to easily replace batteries in old devices, as well as OS-level warning pop-ups which let the user know that it's time to replace a battery and that their phone will be slower until they do.

Anything less is deceptive and anti-user.
What's the point of automatic on-boot decrypting LUKS volumes?
Hello. You know that a "disadvantage" of wanting to have a LUKS volume decrypted at system startup is that a passphrase must be provided interactively. Since this is somewhat cumbersome, there are many methods that allow this passphrase to be indicated non-interactively using some type of keystore (systemd-cryptenroll, Tang/Clevis, etc). My question is: what is the point of having an encrypted disk, then, if it will be automatically decrypted when the system boots? A thief who steals my laptop with this automatic configuration would not have any impediments to accessing it! I'm missing some point here. Thank you so much
> We have a branch that makes about 2x faster, but we need to prioritize our 1700+ open issues over performance optimizations right now.

Maybe “has incredibly high performance” should not be the first selling point in your marketing pitch then.
your title needs a comma ","
It’s free with Google Fi.
So may IPs from China. Would they not be stopped from Chinas firewall? I think you can't make an outging VPN or SSH connection. Is it possible somebody does a BGP hack and then reuse china IPs?
You could have post this for more recently benchmark, nearly all in one page.

https://web-frameworks-benchmark.netlify.app/result

Community support is much more important than speed.
Not clear if they did, don't know Fortnite the article mention just "map creators" so it might be just a mod without any involvement from Epic.
The thing with these minimalist benchmarks is that they aren't comparing a real workload, or a real server/client pair that can leverage persistent connections (the SYN/ACK rounds in setting up a TCP connection have a lot of impact on this kind of thing), internal async/threading mechanisms in the server (different language runtimes and different threading models make a lot of difference as well), and $DIVINITY knows what other kinds of request parsing variations.

It's a fun exercise (I do it myself on occasion), but requires understanding what is actually happening (I see that Jarred has already remarked that Bun.serve() would be the right thing to do here, for instance.)
Looks really good, however another proprietary app which would have all my data.

I just put together a Kanban board with Obsidian, which is Mardown in files, so I have full control over my data forever.
Are you trying to argue that RLHF is the same as the algorithm used to pretrain and finetune models, because they are both searches in model space that reward good answers and penalize bad answers?

If you only look at the very high level superficial details, they could be said to be similar. That is all. The details differ in nontrivial ways.

> They did not alter the algorithm that generated the model and they also did not directly alter the model itself. The neural net was modified indirectly through training.

It is beyond contesting that multiple, different, algorithms are used to train SOTA language models. RLHF exists because pretraining on a broad corpus for predictive loss minimization, then instruction tuning on specialized datasets, is insufficient in various ways (alignment, "racism", etc).

RLHF and pretraining/finetuning use different algorithms. They are similar in some ways - they can both incorporate backprop with a stateful optimizer like AdamW. This does not make them the same.

RLHF computes loss differently from how it is done in pretraining and finetuning. That, alone, constitutes a modification of the logic behind the weighting process.

Once again, the logic behind the weighting process refers to the training algorithm. Not the transformer architecture. Not the weights themselves. The process that decides what the weights are.

> The training process is a search in model space where bad answers are penalized and good answers are rewarded. The algorithm itself doesn't need altering to find a "less racist" model. There's nothing special about racism that requires a fundamental change in the transformer architecture.

Neither I nor the op claimed that anyone changed the transformer architecture to make it less racist. See my last reply w.r.t. reinterpretation of claims in service of strawman construction.

> They trained the shit out of it by RLHF (Reinforcement Learning from Human Feedback) until it was less racist.

As per above, RLHF is a nontrivially different process to what was used to train the too racist model in the first place.
Youtube is ad ridden anyway. I am using Premium, which gets rid of the third party ads. But sadly most Youtubers (content creators) get sponsored by Surfshark and the like. Some now do two in-content ads that you then have to skip over. It's annoying, repetitive and let's be honest - extremely irrelevant.