skysight-inc/HackerNews huggingface dataset:
> … if only the site formerly known as Twitter wasn't so hostile to being checked these days.

You can easily check it manually. Search for "EBS" and see a bunch of people talking about EBS timeouts or whatever. That was what I was getting at.

But yeah scraping is harder now.
Everything is built on top of other stuff. Surely a micro processor is just a product made using chip fabrication technology? Which itself is just a commoditised production method based on other... err... technologies.

You could pick another word at some arbitrary level, but I'm not sure it's a particularly useful distinction to draw.
It's Time for Product Success
People are stealing our 1m measuring sticks, but nobody takes these 63cm sticks for the same price? Hmm..

I know what to do! Put ads via stickers all over them right before we sell them! Surely this will decrease theft!
Sorry, does this mean perfect 50/50, or 100% controllable?
Ask HN: Are Glassdoor Salaries Accurate?
I've been checking out the salaries in Glassdoor for the company I work at, and they seem quite low. I don't know if I'm actually overpaid, or if the salaries on Glassdoor are inaccurate, or possibly fake. I wonder what everyone's experience has been with Glassdoor. Do you find the salaries there too low, too high, or accurate for the most part?
> Why would framework be correct if the premise of heavy runtime reflection based approach itself is bad?

Because the framework allows zero reflection approach.
> more victims joined in because they were lazy...

They were lazy because they relied on the reputation of who was pushing for FTX, now their reputations won't be so rock solid. That's some justice.
That’s pretty fascinating. This is a naive solution, but couldn’t the protocol have supported limits of requests per packet? I get that it is antithetical, but for most sites, this type of request pattern seems highly unusual.
Thank you for your answer
Interestingly, C already does this for function calls: "fptr()" is considered equivalent to "(*fptr)()".
In some future, of course, but that future is decades away. C is a living language with no shortage of active users and a learning curve that's not very steep for systems programmers working in other language.

It can feel daunting to today's web and application developers who are used to an opaque curtain between themselves and the underlying system architecture, but systems programmers using C++, Rust, etc already work behind that curtain (but with thicker gloves). They've often worked with C in the past, at least in education or experiment, and can ramp up on the footgun quirks with some intentional study when taking it up professionally.

There are arguments against picking C for some new systems projects, but -- outside a lack of systems programmers more broadly -- there's no pressing concern around finding maintainers for what already exists.
Bitfinex 2016 hack victims' shares buyback
The Monty Hall problem is small enough to enumerate all the out comes on paper. If you then test all the different scenarios (not many) and compare switching to not switching - switching produces a slight edge. So it can be done without a computer and not a great deal of effort. I am not a mathematician so it was the only way I could prove it to myself at the time.
I work in marketing. Every brand I know complains that there is no humor anymore. And that they can’t be funny, and have to walk on eggshells with watered down messaging, because there are so many different groups that are easily offended.
It will not be free; payment will simply shift to the hardware and data used to train the model, etc.
This is right up there with "ng stands for angular".

No it doesn't.
So, like wgpu, but in C++ and by Meta?
Most of the postings for backend positions at Netflix I've seen call out nodejs. Can I assume they do both? Is one legacy and the other newer stuff, or are they more complimentary?

Anyone on in the inside know?
Typescript, Python all are exception
Maybe Google is responsible for the attack, to be able to publish this blog post!
<\tinfoil-hat>
I've been locked permanently out of a (thankfully tertiary) Gmail account because their ML didn't like that I logged in from my new house. The option was to accept a push notification to a long dead and wiped phone.
M1 is also 64-bit only.
I don't know about a "practical solution", but there are research efforts to think about new ways to build internets that mitigate some of these problems.

Here is one that I'm aware of: https://named-data.net
Sounds like a symbiotic relationship to me. The attackers get to advertise their capability for pulling off attacks, and Google gets to advertise their ability to stop them.
I’m mostly talking about after, but it would be even more interesting if there are examples of high value mobile exploits being used as 0-days by more common cybercriminals as opposed to government backed spyware firms.
Just start with an infinite number of doors and move backwards from that.
The first two points easily apply to WebGPU. Maybe not the last one yet.
Castle needs plot armor more than it needs spiral staircases.
Disruption is part of it for sure, but often big, aggressive DDoS come hand-in-hand with other attacks.

Seen it happen with big DDoS on clients. Furaffinity, one of the larger furry webistes, and a constant drama magnet, was a client at a former job. They got DDoS'd hard, and in between scripted DDoS hits they slammed the hell out of their web applications to get vulns and do credential stuffing.

As in blast em, lighten it up just enough to get a ssh or nmap through a few times, blast em again, and repeat until they got in.

Is also why you want out-of-band solution that doesn't touch your infra much.
For those interested in more on the same topic, there is a decent list of blogs at the end of this:

https://www.cve.org/CVERecord?id=CVE-2023-44487

(and yes, that includes this article here as well).
In my country my phone number is linked to my government issued ID so I don't need any physical properties to recover it (this might take some time though but for me it's still the best option).
> Also, never lose your phone number. I can't get back into my Google account even though I have the username, password and recovery email because I can never get the SMS code.

This is an excellent point. Google seems to be uninterested in addressing this transparently, but despite their push for phishing-resistant MFA and first factor sign-in options, they still consider a phone number to be golden evidence.

My father changed his phone number last year and never updated his Google account. Despite having a recovery email address he could access, TOTP, and printed backup codes, it was not enough. Google wanted to “verify it really was him” after a move (and IP address change) and it doesn’t even allow a password reset to be authenticated with any other recovery option. Phone number or bust.
Famed analog designers Jim Williams (Linear Technology) and Bob Pease (National Semiconductor) had messy benches/offices:

https://youtu.be/1wwZ8eI3jvw?t=227

https://www.youtube.com/watch?v=t513IZ5V9Nk
The fact that keyboard and mouse connectors in ps/2 were not interchangeable was really annoying. No matter how much USB-A is annoying, this alone made having USB keyboards and mice a win in my book.
Sorry, but I don't think metta amounts to feeling "a bit happier" or "being in a good mood".

Metta is one of the four Brahma Viharas (foundations of Brahma). Another is karuna, or compassion; wishing others not to suffer. The standard practice in Tibet for generating compassion is called tong len ("sending and receiving", sorry, I don't know any Sanskrit word for it). You imagine someone else's suffering as a black cloud, breathe it in, and breathe out all your goodness and happiness as a white cloud, which you imagine going into them. It's a simple bolt-on for ordinary meditation on the breath. [Edit] If you have a real, suffering person to practise on, I was told that helps a lot.

Practising tong len is liable to cause depression in the practitioner, or so I was told. It's not tantric, you don't need permission to do it; but it's probably not a good idea to try it unless you have an experienced meditation instructor.

"Feeling good" is not a sign of progress in meditation.
Our new pastime of watching people die
I saw that Spotify recently released a similar feature for selected podcasts, could anyone recommend some recent research papers related to voice translation? Would be really interested in reading!
Go is patching it soon: https://github.com/caddyserver/caddy/issues/5877#issuecommen...

(Caddy just uses Go's HTTP/2 implementation.)
Probably, but I'm afraid it will break when it gets too distant from the system libraries. It's not that I need new features, I could probably use Thunderbird from 20 years ago and notice only because of the look of the UI.
> Would you consider a different pattern, woven on a old loom a new technology? A app is not a "new technology". A microprocessor is a technology and the code you run on it is just another pattern on the loom.

It's not useful to get pedantic about the definition of a "new technology." What is your point? Take the example cited in the article about deciding whether to store your data in SQL databases, vector databases, or blockchains. Are you saying that this is a purely aesthetic choice and not a choice that bakes in a lot of other patterns and decisions?
I'm so relieved that stale-bot didn't become as common as I feared it would. I hardly ever see it these days, and good riddance!
Updated my paper:

https://news.ycombinator.com/item?id=37833390

Scenarios dealing with the loss of Passkeys:

The scenarios for dealing with the loss of Passkeys are effectively the same as dealing with the loss of your Password Manager (if you use one) or otherwise stored passwords.

Dealing with the loss of all your devices that use Passkeys
If you manage to lose access to all your devices that are used to authenticate via Passkeys (e.g., a house fire), then there are two main outcomes: either you have your Passkeys synchronized to a cloud provider or other external entity that still has a copy of all your Passkeys, or you do not. If you do not have a backup of all your Passkeys, they are gone, and you will need to fall back to account recovery for each affected account. If you have a backup of your Passkeys, you would need to regain access to it on a new device and then synchronize the Passkeys to it and use them as normal.

Dealing with the loss of your accounts that synchronize and store Passkeys
If you use a synchronization service attached to an account, it is possible that the account can be deleted or access to it otherwise lost. In this event, you would most likely still have a working copy of your Passkeys on your devices, and depending on whether or not you can export them or reconfigure synchronization with a new account, you would be able to add them to a new account, effectively creating a new account to store and synchronize your Passkeys.

Dealing with the loss of all your Passkeys

If your Passkey account is not only deleted but also tells all your devices to delete the Passkeys, or you lose all your devices and the accounts are deleted due to inactivity then you are basically in the same situation as having lost all your devices and not having a backup. You will need to fall back to account recovery for each affected account.
I mean, A2 is a problem. I'd wager that more people are selecting how to manage their personal accounts than selecting how to manage accounts for an enterprise.
If you clicked onto the Wikipedia page I linked you should have been provided with enough information to infer my reasoning.

Shame on me to expect someone to click a source
It's gotta look like that even from the inside. How else do you explain Hangouts, Wave, Plus, Chat, Talk, Meet, Allo, Duo, Messages, Voice, Buzz?
I've read a story before, telling how Paulo Coehlo (probably from Coehlo himself) was friendly with the scene translating his books to russian, which in turn opened a market for his books in Russia and Eastern Europe later on.
Having researched WebGPU a little, I'm not seeing anything there that explains why this over WebGPU. As far as I understand, those reasons are identical to those for WebGPU.

Can anyone explain?
>because it complicates the frequent use cases in order to simplify seldom encountered use cases.

Putting complex logic in the three places of a for loop is something we all frown on now because of readability and bugs, but back then it was almost more common than just iterating from 1 to N. Same for dropping through case statements - frowned on now (rightly) because gotcha bugs, but used heavily.

>Making "*" a prefix operator in B and C was a mistake

C dominates for the same reason it is terrible: it gets shit done for some value of "shit". In this light, there are no mistakes. There are other languages that don't make these "mistakes" and, behold, nobody wrote the majority of the world's operating systems and software in them. I've used C when the viable options were hand-crafted assembly or C. There are no mistakes here, only practicalities.
their GH releases page has a PDF, if that helps you, or browsing around the .md files may help what I presume is your noscript browser, assuming that GH works with noscript anymore: https://github.com/ryan4yin/nixos-and-flakes-book/releases/d...
Why not attack a target that can actually be harmed? Are they afraid?

It's not obvious what's the value of having the largest ineffective attack.
Minimum frame size is about 100 bytes. At 100Gbps, that's a top bandwidth of one frame every 8 nanoseconds.
Article: https://newsroom.spotify.com/2023-09-25/ai-voice-translation...
What? The only monetization is skins. You also need to pay for the premier matchmaking. CSGO and CS2 is top of the Steam charts with about 1mil active players, not because its free, but because it is a great game.

Valorant is there, but CS is practically its own genre.

In CoD, Destiny, and CS you all shoot guns, but the difference is stark between them.

For competitive gameplay, and gameplay feel, CS wins.

You saying Macu users are too rich for the game? Have you SEEN skin prices in CS2?

Do you even play?
Perhaps qualia is an abstractive interpretation of the internal state that generates emotional expression
Awkward Just-in-Time (JIT) Compilation: A Developer's Experience
CUDA, OpenCL, Vulkan, and Metal are all different graphics APIs provided by GPU vendors. GPU vendors can implement all four of them if they like, but in practice, CUDA is an NVidia exclusive, Metal is a Apple exclusive and vice versa, and OpenCL is kind of old and unused (and also used to be an Apple technology as well). There's also other APIs provided by non-GPU hardware vendors.

PyTorch and TensorFlow are training and inference libraries. In theory, PyTorch at least (probably also TF) is properly abstracted and can work with all APIs. In practice CUDA gets the most testing and has all the operator fusion kernels you need for good performance, so everyone trains on CUDA. Inference is less resource-intensive than training, and there's a lot of vendors that provide inference-only hardware (e.g. "Edge TPUs") that's better supported, so on the inference end there's more variety in API usage.

You can of course train and inference on CPU but that means terrible performance.
Seems like that would invite armchair engineering like you seen in HN comments. “Couldn’t you just do the easy and obvious thing?” The answer is probably a long no and the creator had your thought already before realizing the true scope of the work.
Unless damaged by frequent earthquakes or water seeping into the structure and corroding the steel, or freeze-thaw cycles, reinforced concrete does not degrade significantly with age. The range you quote is more typical to things like concrete infrastructure directly exposed to the elements. Modern HPC concrete structures can be guaranteed for 100 years with proper maintenance and will probably have a natural life of multiple centuries.
They just did! https://twitter.com/AnishKattukaran/status/17117828387883297...
Corporate journalists are the enemy of the people and cannot feign ignorance.
The most common view of free will in philosophy is "compatibilism", i.e. that free will and determinism are compatible.
To clarify, I have been paying the 10$ since it was released last year. I used it in neovim, vscode and found it helpful.

Cut to few months later with OpenAI API release, so many code completers released in many useful form factors willing to go wherever I code even if its Android Studio or Xcode. The product has stagnated completely.

I do expect it to change significantly in the future though, might go back then.
the most efficient way would be to write a script that gains root on those open proxies and then fixes the issue.
While Apple does indeed make things difficult, they're not actually the problem in this case.

The reason mac users are complaining is because Valve released this as an update to CS:GO rather than a separate game.

I don't think mac players would really care that much about CS2 not being mac compatible if Valve hadn't done that. They would've shrugged and said "ok, I'll keep playing CS:GO then". But they can't do that, and that is 100% on Valve.
To be fair, 30% is what Valve as a distributor charges (glass houses and all that). Valve the game developer is a hobby project subsidised by Valve the distributor.
This is probably ignorance speaking?

Industry wise recalls are very much a thing, and nearly bankrupt companies in the regular. On car engines. Those are the ‘programming’ (aka design) bugs from the manufacturer.

The difference here is rather different than you’re presenting - individual cars/trucks are so expensive that one off fixes (replacing the equivalent of RAM, or a CPU, or rigging some weird combination of drives/accessories) even on really old individual machines is economic. That’s what those repair shops are doing.

also changing anything physical on a car (or even having a human of known level of knowledge verifiably look at it) is expensive and difficult to scale. And unlike computers, cars/trucks are 90% or more physical.

And while a single truck or car breaking down is localized, so is a typical PC, tablet or phone.

Computers are typically so cheap and the technology is progressing so rapidly, it’s rarely economically worthwhile to do that kind of thing. Occasionally, yes. But Certainly not at the scale cars/trucks are.

Having someone do custom work to fix the design (aka ‘fix the programming’) is relatively rare, and more of a hobbyist thing. But does happen (project cars, open source hobby projects). Though exceptions abound for simple fixes. (Which can also typically be done for individual computers through normal configuration/customization settings, or some software).

Cars and trucks are very complicated, just in ways that a techie may not recognize. Bolt patterns. Offsets. Metric vs SAE. Vacuum line levels. Metallurgy. Heat treatments. Tolerances. Hell even DC voltage levels can come into play sometimes (12v vs 24v). Vehicle communication bus type (CAN vs something else).

And working in physical parts is extremely expensive, error prone, and slow.
Well, you're basically correct that the ML GPU libraries basically all build on CUDA with non-Nvidia being a second class citizen, but then stuff like OpenGL, Vulkan, DirectX and Metal are more general "os-level" or low level GPU graphics and compute abstractions. This, and the popular rust project `wgpu` which is the base for Firefox's WebGPU implementation abstract over these lower-level abstractions that may or may not be available such that the same, often a bit simpler code is usable accross multiple types of devices. Basically the opposite of needing CUDA.
Retries – An interactive study of common retry methods
Rotary Woofer (2006)
Just coming to say hi Paul! I recall you being very excited and getting the email after you submitted your first patch and loved it.

I think a ton of the current set of "next generation" came to Postgres a good bit later. Even Tom himself will tell you he did some stuff with images for a few years which undersells himself (tiff, jpg, png - in some form involved in creation of each of those), then found this Postgres thing and started working on it.
>No, if you break into a site using passkeys, it gives you literally zero information that can be used to authenticate as any of the users. Think about the prevalence of data breaches in the past decade, and the sharp rise in the effectiveness of password stuffing, and think about why this change might be a good idea.

An implication of that is passkeys let you use the same authenticators across multiple services safely. Instead of keeping track of unique passwords across all those services (or worse, reusing passwords), you can just have a passkey-registered phone and one or two Yubikeys for backups/convenience. You'd be a very hard target for account compromise. That setup is highly phishing-resistant and immune to credential-stuffing, without the cognitive load of passwords.
Google is going to use this to vendor lock everyone.

What they aren't telling you is the passkey is stored on Google servers.

This isn't Google saving the world from passwords. This is Google forcing you to authenticate everything through them.

Imagine the following. You have a phone and a laptop on your desk. You own both of them. But you have no internet, and no cellular service. So you can't access them.

Not that it will stop anyone. I mean I just read an article on here this morning from a "professional" who was completely unable to work on any device because his AppleID stopped working. So he just didn't work. Didn't use any devices. Just sat there in confused silence, completely oblivious to the reality he had chosen for himself.
Citations very much needed for REST. JsonSchema is not human readable. Some RPC yes but their support on web tech is meh (grpc-web for example is a mess).

Having written large code bases in graphql I really disagree with this statement. It is just a different mindset and I like it. It does make you think way more in terms of data and their relations instead of endpoints. Sure you might get N+1 problems but its easy to mitigate and I prefer doing that on the backend instead of the frontend doing those calls.
Apple: Deployable Key Mouse
Yep, Apple Silicon + macOS Sonoma.
My napkin math using typical delta-v.

Standard LEO to earth-Lunar L4/5 is a delta V of ~4km/s at high thrust or ~8km/s at low thrust. [1]

You can use the Tsiolkovsky rocket equation to calculate how much fuel you need to move the space station. [2]

(Station +fuel mass)/(Station mass) = e^(deltaV/engineISP*gravity)

ISP for an efficient rocket engine like raptor in vacuum is 360 s, you get a ratio of 9.7. If (Station +fuel mass)/(Station mass) = 9.7 so fuel required = 8.7x the station mass.

The space station is 420,000 kg, so we need 3,650,000 kg of fuel. Falcon 9 payload to LEO is 22,000 kg, so this is 167 Falcon 9 cargo launches.

Starships hypothetical cargo is 120,000kg to LEO, so 30 starship launches would be required just for fuel to move the space station.

Some starships would have to act as engines and fuel tanks for the space station, further increasing the mass and number of launches. Starship fuel capacity is 1,200,000 kg and the empty mass is 100,000kg, so you would need at least 3 starships as tanks, which adds another 300,000kg of mass to move.

https://en.wikipedia.org/wiki/Delta-v_budget#Earth%E2%80%93M...

https://en.wikipedia.org/wiki/Tsiolkovsky_rocket_equation

https://www.spacex.com/vehicles/falcon-9/
It's forward-looking! The 90% consumer will be able to afford the "Apple Vision Pro" by 2039 adjusted for inflation!
The special treatment star athletes get in many US universities with well-funded prominent sports programs, especially American football and basketball, is well-documented. Even not-so-star athletes get the benefit of the doubt. What reasons do we have to believe Ivy League universities are different? They may emphasize different sports – crew or field hockey instead of football – but the results are the same.