skysight-inc/HackerNews huggingface dataset:
Monorepos have advantages and we considered that approach - easier mgmt, linear change timeline, consolidation of GitHub stars, etc. But on balance we felt our plugin and mod model benefited more from the separation - specific audience, clearer release history, simpler clone & install (mods), encourages contribution of plugins via repo ownership. Cross-repo tooling helps to offset the negatives of managing many repos, and as you say, the lessons we shared come also from managing our larger repos (e.g. the Steampipe CLI).
Same experience here, and I'm still baffled as to why they're doing this, do you have any guesses?
Not sure what you've tried, but Temporal (which I think is the most mature and well-designed open source workflow engine available right now) supports using the result of a "subprocess" to decide the next steps. The only requirement is that your logic is consistent across workflow runs.
I heard the same thing from Andrew Davie of BEAM Software (Melbourne House), who developed Super Glove Ball. Since Nintendo refused to provide the company with any meaningful documentation, they had to come up with various hacks for framerate calculation or something similar.

When they were trying to get approval for Nintendo for some game, it turned out that one specific version of the USA NES wouldn't work, or the game was making the system overheat (I don't remember exactly). Andrew told me that they had to fly all the way to the Nintendo's HQ to deal with this since they were on a tight window to release. It also turned out that there were fewer than a hundred of that specific version of the NES in circulation.

Ah, it was a bit different. I found the note in my (unpublished) book:

Tests for games were not exclusive to gameplay either. Games had to be tested in each possible NES console they would be played on. Beam Software’s Andrew Davie recalls flying to Nintendo’s offices in Washington, in response to the game “The Three Stooges” causing problems on a NES system that they were testing it on. He recalls there being “something like 23 variations of the machine, with different chip manufacturers, etc.” that the game had to be tested on to pass Nintendo’s tests. Once the problem was diagnosed (the way Davie had programmed the game, due to the lack of official documentation, made the NES run too hot, which caused flickering sprites throughout the game; instead of writing the sprite data into RAM as the official documentation called for, Davie wrote the data every two seconds), the game was fixed and accepted for release; after this, the problematic NES console was removed from Nintendo’s testing line-up, with Davie being told that only around 5 consoles with that combination of chips was in circulation in the entire USA.
How to Reduce Your PostgreSQL Database Size
I actually understood Git much better as soon as I switched from a graphical interface (which was Git Tower at the time) to just using the Git CLI. I feel like the graphical interface/overhead obscured what was really going on and made me not so much learn Git, but the tool on top of it.

Git Tower is actually a great tool, but I believe Gits core concepts cannot be understood well without lots of experiments with the bare Git CLI (what helped me most was making toy repos → testing my hypotheses on how things work → observing/inspecting results).
> In few lines they have positioned their product in a much more competitive way than Google reCAPTCHA, highlighting Google privacy pain point.

You do realise hCaptcha[1] is a thing, right ?

Most privacy conscious websites switched from reCAPTCHA to hCaptcha years ago.

[1]https://www.hcaptcha.com
Global Disaster Alert and Coordination System (Gdacs)
Keeping docs with the code is definitely helpful, we've found that works well for our plugins and mods. All pull requests are then reviewed for consistency and documentation at the same time [1] - e.g. does this new table have good column definitions and clear examples?

1 - https://steampipe.io/docs/develop/plugin-release-checklist
Getting Started in KiCad 7.0
> You can white list specific IPs though

This is what I mean, if this list can be dynamic or modified at runtime with an API.
IMHO the best book on design patterns is: https://gameprogrammingpatterns.com/
Examples are in C++ but easy enough to understand even if you're not familiar with C++.
He's serious. These people actually sell computing services powered by their network of cracked computers. They'll even manage their fleet by patchinf the vulnerabilities they exploited. Network proxies, redundant distributed storage... Compromised machines could be turned into storage for CSAM, proxies for scrapers or spammers, whatever people want.
Classical music audience members synchronize their heart rate and breathing
Location: India

Remote: Yes

Willing to relocate: Yes

Technologies: JavaScript, TypeScript, Python, C++, HTML, CSS, Java, Bash Scripting, Reactjs, Nextjs, Nodejs, Bootstrap,Material Ui , Chakra UI, Tailwind CSS, MongoDB, MySQL, Redis , Postgresql, Pinecone , AI , LLMs , aws , Webpack, Prisma , Apollo GraphQL

Résumé/CV: https://drive.google.com/file/d/1sFeUIBRA3HyIiZBrN5Udf6P-vZu...

Email: vedgupta0401@gmail.com

Github: https://github.com/innovatorved

Hi, I am looking for Full Stack roles. I recently completed my Bachelors, with 2 years of freelancing and internship experience in Development, with a particular focus on React , Nextjs , Nodejs , Python , Javascript , Typescript. As a web developer, I have worked on a variety of projects, including building responsive websites, e-commerce platforms, Real TIme Applications ,and web applications. I have gained expertise in developing front-end interfaces using React and Next, as well as back-end development using Node.js , Python, and MongoDB , Postgres ,Redis, Pinecone. I have also experience in developing and integrating APIs, in Python and Nodejs And also working on projects that integrate with AI ( LLM models )

I am a quick learner and thrive in fast-paced environments. I am excited to bring my skills and experience to a team where I can learn and grow as a developer.
The question is whether the fat pointer types will be useful and accesible enough for developers to migrate to them from the pointer+size combination. VMTs, which are considered the current best practice (recommended by CERT too), have a bad name associated with them, due to automatic VLAs and the whole unbounded stack allocation debate, are not compatible with C++, and most notably, Microsoft and some other vendors, like CompCert refuse to implement them. These things mean that programmers are less likely to use them. Also most teaching material for C is stuck on C89isms which doesn't help (just ask a student how to pass a 2D array in a function). I would love for fat pointers to enter the standard (either Walter Bright or Dennis Ritchie's syntax is fine, though a `lengthof` operator is absolutely necessary imo), but if Microsoft and other vendors are not going to implement them and compatibility with other languages (C++, SystemC, OpenCL, ISPC, etc.) is poor, I'm afraid that we will continue to see the confusing pointer+size method.
Haven't touched Blazor in 2 years. In the context of blazor server, what's the recommended pattern for state management?
Does it make sense to use MVVM (e.g. via MVVM Community Toolkit for source generated observable properties etc) or plain C# objects would suffice with manually calling StateHasChanged() whenever necessary? (I guess that since rerenders are driven by DOM events the situations where manually calling StateHasChanged() is quite low)
Logic clearly dictates that the needs of the many outweigh the needs of the few.
Appreciate the feedback. Have a lovely day.
The youtube comments already down on the official Shell trailer for this don't bode well for this being a PR success:

https://www.youtube.com/watch?v=1_UuXnHvsIQ
> The NMI fires at the start of each video frame, which is extremely consistent at 60.0988 Hz

Wouldn’t that be different on a PAL NES? The parent mentioned that they wanted "to keep track of real time [...] regardless of the frame rate, which varied".
I thought I was going to read about the Braid (masterpiece) video game.
Yes, no hardware timers are used in NES Elite, as there aren't any.

Instead there's an NMI counter (nmiTimer) that counts every VBlank and wraps around every 50 ticks, so it's effectively a seconds counter on the 50Hz PAL version. And in the NMI handler, they keep a running total of cycles spent so they know when VBlank has finished and can stop sending data to the PPU, picking up where they left off in the next VBlank (see the NMI routine in bank 7).

They also use sprite 0 collision detection to flag when the screen redraw has reached the icon bar, so it can force the PPU to nametable and pattern table 0 (as the icon bar's tiles are only in table 0, with table 1 being used for the vector graphics). This is not unlike the original BBC Micro version's split-screen mode, just without any hardware timers (instead, the whole source is littered with macros that check the collision flag - not very elegant, but it works).

Having hardware timers would have made things a lot easier!
With AlphaZero there are clear evaliation metrics -- you win, lose, or draw the game given specific rules. With chess, there is even a way of detecting end-game threats via check. The zero human data approach works here because of that, allowing the computer to find optimal strategies.

With natural language you don't have that unaided feedback evaluation metric. Especially when given idioms, domain specific terms, etc.

This is slow and hardwork because you need to process some text, evaluate and correct that data, retrain and repeat with the next text. You also need to check and correct the existing data, because inconsistencies will compound any errors.
That's a fun idea. Qemu parses a binary into something very like a compiler IR, optimises it a bit, then writes it out as a binary for the same or another target in JIT like fashion. So that sort of thing can be built. Apple's rosetta is functionally similar, I expect it does the same sort of thing under the hood. Valgrind is another from the same architecture.

It would be a painful reverse engineering process - the cuda file format is sort of like elf, but with undocumented bonus constraints, and you'd have to reverse the instruction encoding to get sass, which isn't documented, or try to take it directly to ptx which is somewhat documented, and then convert that onward.

It would be far more difficult than compiling cuda source directly. I'm not sure anyone would pay for a cuda->amdgpu conversion tool, and it's hard to imagine AMD making one as part of ROCm.
"customer-support employees" - nice dodge.
Be a lot cooler if they did.
it should be quite trivial to write a basic webserver in C.
If the projects were my own, I'd consider a monorepo. We use this approach for Steampipe samples - https://github.com/turbot/steampipe-samples

If it's a collection of changes, small improvements, etc to existing projects and repos then personally I'd go for separate forked repos. Then you can track your changes relative to the original project source code and (hopefully) contribute back PRs etc more easily.

As always - there are pros & cons to both - just a matter of choosing the approach that feels best 51% of the time :-). Of course, it's minor in general compared to the value of just keeping on moving on your projects and work!
In Europe: no. Training ML systems doesn't require a license.

In the US: we don't know yet. The law is not clear, and there are lots of suits in progress.
OTOH, the HPE is much noisier - you don't want it under your desk. And the Mac still looks cooler.

But yes - good luck selling a 1.5TB Mac to anyone not doing video production (and depending on the platform) for anything remotely close to retail prices.

Apple probably realized they only sold approximately three fully configured machines and decided 192GB should be enough for anyone.
Despite urban myths plenty of languages have implementation specific extensions, it isn't some feature exclusive to C dialects.

It is definitely a problem when said extensions don't have a counterpart in other compilers, specially a pervasive feature like bounds checking.
terracotta tiles is a different matter from marble
Meh, it was okay. Not nearly as good as the artiste (and COVID denialist and general arsehole) Jonathan Blow made it out to be.
Alas, the NTSC version doesn't actually work on NTSC consoles. The NMI timings have been changed to work with some (but not all) emulators in NTSC mode, but it isn't a full NTSC conversion, it's an NTSC emulation (at least, that's what the authors call it in that version's scroll text).

There's a full list of differences between the PAL and NTSC versions here:

https://github.com/markmoxon/nes-elite-beebasm/tree/main#dif...
It wasn't an era of open platforms, as the PC was the exception, not the rule.
I know how to lock machines down. That's not why I bugs me.
Very cool project! But I would dispute this:

> buying 24 Solenoids is quite expensive

They're about $1-2 apiece on Aliexpress; I doubt making your own can cost much less?

In my experience, making one solenoid is fun just to see how it works (and how simple it is, really); but making more than one is a little painful and not fun.
But you do have security, this measure saves actual people in actual reality

> You cannot claim that just because some users are 'saved' as evidence that this is an effective security measure

Why not? Saving people from insecurities is almost by definition a measure of effectiveness

> you can make an objective decision on whether it is worth implementing.

You can't since the value factors in your "provable guarantees" and costs involved are subjective and also depend on the users' characteristics
That's rather ironic, because I read your comment you linked to, and it is pure speculation.

The Goodreads dev said "the site was originally built as a giant pile of Rails spaghetti with views mixed with business logic and such and then a fuck ton of weird features built and left to sit there". I'm not sure why you think that is or ever was "the Rails way", but it seems more like the classic "move fast and break stuff" startup engineering than anything resembling rails to me.
It's worse. She obviously deserves a western moral prize, but peace Nobel in last decades is "Moral wank to make westerners feel good about themselves"
It’s good to see Cloudlfare finally admit that they have been blocking human users. I’m one of the people that gets the infinite reloading cycle that Cloudflare claimed can’t happen in previous hacker news threads. In this post they finally admit they have been blocking human users they didn’t know about before. Gaslighting over, hopefully?
Shellcheck made me a MUCH BETTER shell user.

I was doing tons of small mistakes, bashisms, linuxisms, and other common avoidable mistakes.
It's because DoD contracts require or greatly favor "agile" practices via CMMI and ISO certs. Government employees are too incompetent to understand how the big 5 simply pull the wool over their eyes, like they do for everything.
That's a tough issue to read through, thanks for the link. 'Your demo code on a system setup exactly as you describe dereferences null in the kernel and falls over'. Fuzz testing + a vaguely reasonable kernel debugging workflow should make things like that much harder to find.
Damning with a hint of praise.
Bill Braun's Paintings
I'm convinced any tool like this can only be fought by turning the tables, by using them against the people who abuse them, the owners/executives of the companies and legislators who allow the abuse.
Nothing fancy, Alerts are posted in a slack channel.
Indeed - "slaves" got changed to "robot slaves", while "narcotics" became "rare species" and "liquor/wines" became "beverages". You can still trade firearms, though, so its not entirely squeaky clean...
We are first and foremost a platform and as such the success of developers on it is our success. It doesn’t make sense for us to act in a way that’s against the interests of our third-party developers. I personally think the Unity fiasco and developer dissatisfaction towards Roblox strongly shows the problems a company out of touch with that can manifest.

That said we can only back up our good intentions with actions. Right now the strongest thing I can point to is our terms of service which explicitly make sure you retain ownership of anything you build on dot big bang.

We’re at an early stage with monetization and will have more concrete guarantees published in the near future. The aim there is to be fair and explicit. Particularly in comparison to other platforms.

In terms of vendor lock in we do intend to make it easy to bring your assets off the platform. This is currently quite easy with scripts but we will be allowing people to export models as well in the near term. We’ve also talked about providing the means to export games wholesale so you could build a game on dot big bang and sell it on Steam etc. How that would all work is very much a work in progress. More good intentions I know but we are a small team with a broad scope building as fast as we can! We’re all long tenured game developers and recognise these concerns as they have often been our own!

If you have specific projects, ideas and what not you’d like to chat about we’d love to hear from you directly.
"Won't someone think of the employees" is a common tactic companies use to avoid shutdowns, and that's against long standing laws and regulations. Seems to work often enough too.
There's a link to something like that in the instructions.
Making AI generated QR codes
There's a discussion here,

Tell HN: "Ad blockers are not allowed on YouTube” (https://news.ycombinator.com/item?id=37793375) (135 comments)
This is a remarkably advanced assault, as if career military men were involved, and likely a prelude for something bigger coming from Lebanon, or even Egypt or Syria after a long while.

The world is unravelling. American abrogation of its defence obligations in 2014 provoked a sequence of events which could lead to a number of countries vanishing off the map by the end of this decade.

I want to remind what complacency costed Ukraine when they snuffed at "what a few dozen Russians penetrating the border on pickups can do?" in 2014.

Of course, they themselves didn't do much, but their actions were only an opener to set up a much bigger gambit.

Underestimating genius is bad, but the underestimation of idiocy is truly lethal.
What are the serious alternatives though -- I'm not current in the website / blog space.
Could you quote from the article which these 'shady' orgs are? It all seems pretty legit to me.
I was hoping to read about the video game (man, I loved that game)
Well, my C. R. S. is kicking in, so I can't remember that well, but the gist was that it scanned ratings sites. I'm not sure if it was just app stores, or also included things like Amazon.

It looked for products with a lot of ratings and mediocre levels, which indicated a market that wasn't being satisfied.

The middle of the bell curve would be an app that had 10,000 3-star ratings.

This excluded products being "hate-bombed," and ones being "gamed."

It suggested using the list as a starting point for finding poorly-served markets.

It was fairly clever.
You’re right! Bad choice of word from me.
I did, months ago. This is human pattern-recognition gone haywire.
11 days ago : https://news.ycombinator.com/item?id=37654653, 82 comments
I fail to see the relation, what has less wealthy nations catching up reducing wealth inequality to do with the survival of humanity and arms trades?
Acorn MOS allowed an extra 16 banks of sidways RAM, so you could get up to 256KB extra RAM, but you would need to buy an extra board.

The B+ models (64/128KB) also had an extra 32KB of Shadow RAM, 20KB of which shadowed the address space used for video and the other 12KB was for the MOS.

So a theoretically maxed out Beeb would have 32+32+256=320KB of RAM.

The cool thing about Sideways RAM is that you could use it for data, code, or to load ROM images which would work as normal ROMs.
> this measure saves actual people in actual reality

no it doesn't. The claim is that by removing publicly leaked passwords, the user is prevented from having their logins stolen. But you didnt know if that password was going to be used for stealing - it's an assumption. You also dont know if private leaks are already being used, and is undetected.

It's the same type pf claim that the TSA (transport security authority) is saving people from terrorism.
Indeed. But the many what?

From what I've seen in this world, the needs of the many-monied individuals outweigh the needs of the few-monied masses.
how does this work for blind users using screen readers?
Which amounts too...
Yes, that's literally why it exists.
i'll take that as a yes
When I saw this app I immediately thought of it as a better way to record podcasts together.

It’s always a hassle to combine separate audio streams, and simply using the zoom recording isn’t usually good enough (the quality is quite low).

So having an app that records on-device but later merges those audio streams seamlessly is very useful.
And also "node:http" from node.
>C is a simple language used to model the low-level machine details in a more accessible way

If you have ever used C you should know that isn't true.
Maybe he's just an idiot who talks big.
The downside of hypersonic missiles is that they are travelling so fast, hitting a stationary object in the air will do significant damage - even raindrops can do damage. So if you detect the incoming hypersonic missile and just fill the sky in front of it with metallic particles, you're good. CSIS calls it "twenty-first century flak".
To elaborate, this is called "flexible array member" and was introduced with C99.
The captcha on this page takes a few seconds then says "Failure", with no message, then restarts itself, when using Tor Browser on the Safer mode.

edit: Was able to get a mix of a few successes and a few failures upon multiple browser restarts. Maybe I was lucky to avoid a discriminated exit node? I'm not sure if IP address is a factor here.
I've been using NestJS recently and it is a nice middle ground between the 2.

You get the power of Types with the flexibility of Express (as well as access to the entire node ecosystem), I like it.
Leave vercel alone, hehe. On a serious note, I've been trying to learn .Net & C# for a long time but didn't know where to start. I took a different route and learned other languages (py, js/ts, R, Dart, Swift) and now I don't know if it's worth learning it just for the sake of it.
Yes and people travel too. Even outside national borders sometimes, a prospect which my experience of having to use vpns to log into my payments apps demonstrates is somehow shocking to product managers driving cybersec policies in these companies.

tl;dr: logging in from an ip address of a strange faraway country should not be its own security flag. /endrant
The quote is:

My greatest published achievements technically would have to be fitting BBC Cassette "Elite" into 32K of RAM including the screen, and later the Nintendo Entertainment System conversion of "Elite" that used a character mapped display and a single NES controller. The NES is my favourite published conversion and was not thought technically feasible until we'd done it.

See http://www.elitehomepage.org/archive/b5081501.htm for the full interview

I interpret this as meaning his favourite version is the BBC Micro cassette version, while his favourite conversion is the NES one. But I'm a BBC fanboy, so that might just be me being hopeful. :-)
Actually Prime Minister can't declare war. It requires decision of security cabinet (at least ?)
Hey, not related to the post but since you're here: your domain name has an AAAA IPv6 record but the server doesn't respond to IPv6 requests. The problem most probably is that the web server is not binded to the IPv6 address of the system.