skysight-inc/HackerNews huggingface dataset:
Here is an example canvas for local produce subscription service:

https://leancanvasai.com/l/view_canvas/7952ecd1-363c-400f-a6...
None of your examples are valid, IMO.

Procuring and operating the infrastructure to mitigate this kind of attack costs many many thousands of dollars or requires becoming part of the Cloudflare/AWS/Google hive.

Joe Schmo can set up a TOTP server, run keepass/bitwarden and use letsencrypt for free (or another SSL provider for cheap).

The lament from parent is that running a simple blog reliably shouldn't require being inside Cloudflare's castle walls or building your own castle.

---

My personal observation is that simple websites should continue operating HTTP1!
JavaScript/TypeScript. New code generally.

I find that ChatGPT/Github Copilot knows certain types of patterns, libraries better than others. If you get it to suggest the path forward, and then do that path, it will be better at maintaining that code. Basically ChatGPT sort of has happy paths which you want to follow.

Or you could say it in another way: AI designed code / architecture is easier for an AI to maintain.
Yep, just like "crypto" before that, and "big data" before that and "social media presence" before that and so on and so forth...
Is Android support solid for Dawn/webgpu? Seems like it's marked as work in progress compared to the confident support laid out here.
Thank you for being honest with the kid, as a lot of folks exploit peoples inexperience for financial reasons as policy.

In general, there are a few assertions people make:

A. The industry always changes

B. The industry always follows the same trend

Both are incorrect, but rather the truth floats somewhere between the two.

A better question is often "what skills will offer long-term fiscal utility?"

The answer to that utility question exposes the dirty side of the tech industry:

1. is the concept an orthogonal theme from purely Academic or Commercial Marketers? If Yes, than the probability it will still be around in 2 years is vanishingly small.

2. is the role occupied by Senior staff over 35 at more than 6 firms? No, than the probability of redundancy increases exponentially with time, as the skill demand is under artificial supply manipulation due to wage suppression, regulatory capture, and or tax incentives refactored into a subsidy.

3. what is the average ratio of staff with the skill still present at firms over 3 years? if less than 5%, than the roles still fall under churn-and-burn economics, and at some point the stock valuation bump will need ritualistic HR sacrifices. if over 90%, than a roles true value is marginal, and will be bid down in pay over time.

4. An "award for the worlds smartest sucker" is not a certificate that will hold value. Anyone that claims they know what will happen in 5 years is a fool selling something like nonsense vendor certifications, media packages, and or political rhetoric (STEM etc.)

5. Does the skill require physical presence? No, than the law of outsourcing bids down skill value over time due to irrational competitors.

6. Integrity in whatever you choose to do is important regardless of the role. For example, someone using an emotionally charged subject in an 72% LLM generated article will antagonize the wrong people eventually.

7. Copying what others do... often means one will land in second place... or worse.

Good luck out there, =)
This sounds like the classic "tweak the model until the results fit with our preexisting conclusion". Very common across all industries unfortunately.
I think the point is, graphql apis tend to be so flexible that it’s easy to accidentally ship an API that allows clients to craft excessively heavy nested queries in a single request.

Supporting nested queries isn’t really a common thing in REST, and it’s simpler to rate limit clients by resource than query complexity.
I thought slots don't really slow things down much and aren't the primary source of latency, isn't it more about cost and power? Adding slots back in would remove the cost and power advantages wouldn't they? And now using more SRAM to track occupancy of an extra layer of cache, or if not SRAM for that something adding more latency.
And even with Nau's Focused working for years, they don't uncover the backdoors in the localizers, between the sheer amount of code and whatever obfuscation Pham added.
Early on (15+ years ago) I spent a few weeks there on contract and I noticed they used Java EVERYWHERE, and not always well. They had a CS app named after a key Star Wars character that was in all likelihood a breach of the Geneva Convention. A code atrocity with the performance of a sloth on its 8th bong rip with a UX from hell.
I hate this reply. Wine is not an emulator, but it does emulate Windows('s behavior).
Translating the Paul Graham video to Croatian works surprisingly well.

(As a non-native speaker) several bits of the Japanese transcription were just Japanese-sounding noise, and the prosody was completely all over the place in the bits that were actually Japanese. The dub does get across most of the things being talked about, but I wouldn't consider it an acceptable dub (even for most of the bits where it is actually in Japanese).

I wonder if reason is that the dubbing works better between more similar languages and struggles when dealing with disparate languages. I don't speak Chinese or Korean, but it would be interesting to see how well their dubs are.

Can you do another video into Japanese, to see if it's just an issue with the Paul Graham video? Also, how about translating from another language to English?
How convenient those shadowy saboteurs left that pipeline intact.
People moving to a city, and having more disposable income to put into the economy, is not a bad thing.

Increased vehicle traffic is a bad thing. You want to induce demand for other types of transportation.

There is a finite amount of people willing to move to X city / a finite number of jobs for them to support themselves.
Pretty much no one uses Vulkan on switch, and gl only gets used by small indies that aren't using a major engine and couldn't/wouldn't partner with a porting studio. NVN is just significantly faster than either of those (and the switch needs all the help it can get performance wise)
Uh, no thanks from this user.

Also, sounds illegal.
The stack is tremendously productive, but history has taught me a few things when dealing with Spring:

1. It's always best to start people off with plain old spring, even with an XML context, such that they understand the concepts at play with higher level abstractions like Boot. Hell, I even start with a servlet and singletons to elucidate the shortcomings of rolling your own.
2. Don't fall prey to hype around new projects in the Spring ecosystem, such as their OAuth2 implementation, since they often become abandonware. It's always best to take a wait and see approach
3. Spring Security is/was terrible to read, understand, and extend ;)
Don't put this in a special channel just for vendor incidents. Hopefully you have a channel for each vendor tool where you have a vendor representative present. You put that bot in there. It's much more likely to be noticed and much less likely to be a channel that everyone ignores because it's SNR is to low.
A relevant slideshow (with captions): https://boringtechnology.club/

You can tell it's getting old because it used Phony Stark as a symbol for innovation, but the underlying message is timeless.
> Where I live, permits are "required" but very nearly unenforced

Depending on where you live and who’s doing the building, I’d wager you could see more enforcement. Things like skin color and socioeconomic standing definitely play into which rules are applied and to whom.
DISCLAIMER: My knowledge of graphics doesn't extend past "hobbyist".

There's an alternate universe where Apple opened up Metal to work across platforms and languages, and that would be the successor to OpenGL. As it is right now, we're in this complete mess like we were in the 90s, where there's this hodgepodge of stuff being written using OpenGL and DirectX and Vulkan.

Maybe if I learned it better I would learn to love Vulkan, but with the little I've played with it, it is absolutely dreadful. Doing even a minimal amount of stuff with it requires hundreds of lines of arcane, hard-to-read code. I spent two days figuring out how to make a cube rotate, and then I was done. OpenGL wasn't exactly "ergonomic", but it was substantially simpler to get something built with it than Vulkan.

Metal, on the other hand, is a genuinely pleasant graphics API. I find it reasonably straightforward to do a lot of stuff, it's reasonably easy to intuit what the code is trying to do, and at least in the things I've played with, it performs just fine as well.

If Apple had pushed for Metal to be the successor to OpenGL, I think the world would be a better place now.
This was the first thing that stood out to me looking at the samples. How is it abstracted if you have to constantly do #if windows or #if opengl etc.
In case anyone else is curious, the font family is Cartograph CF ($75).
Well in this case it seems like they blew their "0-day" and Google worked with other providers to patch this type of attack.
It’s wild and raucous and usually takes place outside pubs and local workers’ clubs, lawn bowl clubs etc. The spinner puts the coins on a flat stick made for the game, but basically a popsicle stick but wider like a tongue depressor. They toss the coins up and flick the stick to tumble the coins. If you called the two matching coins correctly, you double your bet in winnings. Each game takes like 30s-1m and they go on from mid-morning til early afternoon ish.

The losers indirectly pay the winners based on your call of two heads or two tails and if there’s a split, the house wins that game.

Most of the time is spent drinking your beverage of choice, yelling and cursing your own luck and talking smack to the coins, the spinner being booed or cheered for a well run game or a bad string of luck, but the bets are typically fairly low in my experience, although it’s up to each individual player what they bet, but the spinner or venue sets the bet amount per section or per spinner. Each spinner usually takes a set amount, like $5/$10/$20/$50, even $100 in some cases. It’s all cash and pretty much the honor system in that they aren’t handing out receipts or tickets with your bet, so that sets an upper limit on how many bets each spinner can keep straight. No one wants to see someone lose their shirt, so most folks play against their friends/mates for fun, and ultimately you’re all playing your own game because you decide your bet and it’s actually fairly unpredictable due to the crowds milling around the spinners, of which there will be many, all taking bets and running games independently and simultaneously, and players can place bets in any or all of the games around them if they want.

It’s a wild affair. Highly recommended.
> I'm atheist, pretty sure reincarnation is bullshit...

It is fairly easy to conclude that existence is bullshit. The evidence is that the whole world is a soup of atoms and any particular group of atoms that believes it is distinct from the rest is just confused.

If that makes sense to you, then either you don't exist now and you won't exist again ... or you do exist now and you will exist again. Or, to repeat that with different words, if you exist now you will reincarnate later. This perspective meshes extremely neatly with Buddhist philosophy. Although the idea that people can remember past lives is highly suspect.
So far, AI hasn't been profitable for Big Tech
SQLite 3.43.2 Released
Kind of, but it's more complicated than that. Details there (and in the link at then bottom of the page): https://support.apple.com/en-us/102195
I don't know how Google solved this, but it's an old solution. Shamir secret sharing. You break apart your keys into M pieces, where you need N pieces to reconstruct the key, so let's say 3/8. Then you need 3 pieces out of the 8 pieces it's broken into to recover your key. You take each of those 8 pieces and give to trusted sources. When you need to reconstruct your key, you have at least 3 of those give you the key and you recover.

How does this look in implementation. When I Implemented this in multipasskey (YC demo). It would ask you to select contacts you trusted. Then it would send the sharded parts of the key in the background to them. If you need to recover, you make a request to them. It would reconstruct your device key when you got enough pieces. Once you have your device key, it would download your encrypted backup of keys from the remove server and you are back as new.

I called my project multipasskey in 2017/2018 and applied to YC with a working demo and they said nope. I'm going to assume that I sucked at selling it. ;-)
If there was enough money on the table waiting to be picked up, Valve would know that. They have incredibly fine-grained detail of their user base on Steam, and they have multiple economists on staff to guide their decisions. It isn't worth it to them, and it isn't on them to bust out of that chicken and egg problem. They fixed the problem they already had (fear of Microsoft screwing them) by putting their eggs into the Linux basket.

https://www.valvesoftware.com/en/jobs?job_id=4
developers pay that same 30% fee to Steam on PC. But it's a moot point because you do not have to sell Mac apps on the App Store.
If you haven't already, you might be interested in reaching out to PG contributor Andrey Borodin.

He does a lot of content focused around how to get started contributing to Postgres and is very friendly + interested in speaking with other PG enthusiasts.

He might be open to collaboration or offering some helpful advice =)

For example: https://www.youtube.com/watch?v=rihfAnd_leM

You can reach him either via email (x4mmm@<repeat-the-previous>.ru) or Twitter (@x4mmmmmm)
When innovative hardware/firmware introduces a new feature that wasn't captured in a previous hardware abstraction layer (if any such HAL exists for that class of hardware), the manufacturer will somehow need to make that feature available to their customers.

Depending on the scope of the feature and the investment the manufacturer wants to make, that's going to be through their driver, through some opaque handle-passing API in the HAL, or through a whole SDK. This not only lets them show off their new functionality in a way that they wouldn't be able to do otherwise, but gives them an opportunity to "lock in" customers (as NVidia did quite effectively with CUDA).

Between crypto, ML, and the already-immense gaming industry, a huge amount of money has gone into "graphics" hardware over the last 10+ years and it's led to lots of novel innovations. And since those innovations weren't anticipated by existing HAL's like DirectX and OpenGL, there's a lot of these new manufacturer-specific tools as well as numerous attempts to fight "lock in" by wrangling them into new repurposable abstractions.

It's just a cyclical process. It'll gradually pass as innovations in this sector plateau again, but that still looks to be some ways out.
How do you control for bias coming from the same coin flipper? Do they usually flip their coin from the same starting height (whatever comfortable arm positioning they have, which I assume would also introduce bias by how they catch it as well) and to the same arc peak height? Or were they encouraged to try a different body position, strength and angle of launch for each flip?
LLMs understand context pretty well, that's their magic, and one thing i've noticed is that they are much more thorough than a person: they won't forget the context in the next moment or the next month. A human doctor can do better but they have to really care a lot to do better. Also, they'll only be able to do some things without attending to all necessary tasks (for example one usually overlooked is communicating with caring words).
That’s very true but it doesn’t seem to scale up well from that. :)
You're right. I hadn't had my coffee yet and the asymmetric cost reminded me of amplification attacks. I'm still surprised this attack wasn't foreseen though. It just doesn't seem all that clever or original.
Can you? If so, this is great news.

What apps support this?
Congrats, this looks really nice! I recently finished a side project using Fastify and the Fastify Swagger plugin (which extends the built-in request and response validation and can dynamically generate an Open API definition) which was a good experience overall but the addition of request mocking and the solid documentation site shown here could tempt me to revisit it.
> If Apple had pushed for Metal to be the successor to OpenGL, I think the world would be a better place now.

Yeah Apple are just fantastic stewards of open standards, as can be seen from the amazing job they did with OpenCL...

Still so angry at Apple and Nvidia for that.
https://archive.ph/8lqJT
I don't work in marketing. My exposure to ads/commercials is generally only during live sports.

The Superbowl used to be not only the ultimate NFL event but also the "super bowl" of commercials. They used to make you laugh. We used to actually want to watch them. The last 5-ish years of Superbowls have completely flipped that. Now we mute during commercials because they are all so sterile and unfunny or faking sincerity about this year's major social topic.

Now, watching NFL, the commercials are actively grating, annoying, and the complete opposite of entertaining.

I mute these shitty commercials now. I used to love them.

Marketing departments have ruined yet another thing that used to be enjoyable.
>HTTP/2 protocol — a fundamental protocol that is critical to how the Internet and all websites work

No, it isn't. This whole article seems more like a marketing sales pitch than a disclosure.
The blog immediately put that statement into context, stating that the binary file actually ended up replacing most of their stack. At the end of the day, they ended up with about the same size binary size. Also, they were not even really trying to optimize for size.
The Bhagavad Gita is for you.
Reducing stress is related to cultivating detachment(vairagya) while still doing your duty in the project.

I've seen this objection so many times that I'll say it first: detachment is not apathy, it's not "not caring about the project anymore".
At a glance, IGL (this submission) seems more similar to wgpu than WebGPU.

But then the question just becomes "Why not use wgpu?" instead.
Does anyone know if setting the printer admin password will disallow querying of the ink level by other network devices?

>Protect your Brother machine against unauthorised access over the network

https://support.brother.com/g/b/faqend.aspx?c=us_ot&lang=en&...
> It would not force them to end their irredentist rhetoric; they could and would continue to talk about a Palestine “from the river to the sea”, and declare their intent to destroy Israel…someday. But someday is not today.

Exactly, nothing would change. There's too many people that are willing to use violence against the Israeli population and because of that they have to protect themselves.

As an aside I think people need to get out of the academic world and deal with reality. No group of anyone is entitled to anything they can't defend by virtue of existing. Your borders are the borders you and your allies can defend and nothing more. You can claim that the land within some arbitrary border is "yours" but unless you can prevent or dissuade another group from taking it, you have nothing.

And this isn't an argument for "might makes right" as diplomacy is a huge part of it. Create value for your neighbors (trade, safe passage, mutual defense, etc.) in the international community and they'll support your claim to your borders and aid in its defense.

But crying on the international stage that some arbitrary land is your right because your granddaddy lived there is pathetic and not worthy of consideration.
I've found their system tries to guess the language of the text, but there are many languages that use the same words, and so it will speak in the wrong language (or accent, even). I hope they make a solution for this, otherwise I don't think it will be suitable for production use cases.
I was playing CSGO on my m1 until a month ago
Some of my hobby projects can be considered research, or R&D.

You do not need to publish to journals/conferences if you are independent, and this is the most brilliant part!
You can just post your results in your blog, or on a relevant forum, and people will cite you if those results are good.
If it's in CS/ML/AI then posting a blog post on HN might reach more people and be recognized more than a preprint on arxiv.

For example, my post: https://k10v.github.io/2018/02/25/Solving-Bongard-problems-w...
It's published only on a web page, and is cited by several papers and research groups, like https://arxiv.org/pdf/2206.07196.pdf

Recent quite impactful work in LLM interoperability by nostalgebraist is posted only on lesswrong, and now cited by many papers:
https://www.lesswrong.com/posts/AcKRB8wDpdaN6v6ru/interpreti...

You can also publish any paper or witepaper to arXiv or openreview, you don't need any endorsements for that, but this is quite useless if you are not pursuing academic career.
> Many organizations choose REST over GraphQL due to more established conventions, simplicity, and the ability to leverage standard HTTP features directly.

I strongly disagree with this. REST APIs are usually a complete mess and follow no conventions at all. Even if OpenAPI is being used, the majority of OAS documents have errors or are entirely broken. I'm Working on tooling to automatically parse OAS and transform it to GraphQL schemas. There's not a single day where we don't find another broken OAS. Compare that to GraphQL where we now have powerful linters for schemas etc... But even without, the average GraphQL API is definitely in better shape than the average REST API, and that's simply because the tooling enforces better boundaries. You might have a correct OAS vs every GraphQL server actually follows the GraphQL spec.
Hmm... You know, just like the Sea of Azov and the Black Sea, the Baltic has some natural pinch-points, with bridges across them, where access to the Atlantic Ocean could easily be restricted...

EDIT: Yes, I'm aware of the legal details. For purposes of symbolism, intrusive surveillance (of maritime activity), and saber-rattling, those details hardly matter. I'll even speculate that no respected international judges nor squeaky-clean lawyers signed off on the "external activity" that damaged the undersea pipeline and cables near Finland.
HN crowd would love Daniel Ingram and his teachings.

https://www.integrateddaniel.info/

https://www.ecstaticintegration.org/p/daniel-ingram-on-emerg...
Source?

>Note: To use passkeys, iOS 16, iPadOS 16, macOS 13, or tvOS 16 (or later) is required. iCloud Keychain and two-factor authentication must also be turned on.

https://support.apple.com/guide/iphone/use-passkeys-to-sign-...
"For example, HyperAttention makes the inference time of ChatGLM2 50% faster on 32k context length while perplexity increases from 5.6 to 6.3."

"when half of all attention layers are patched (i.e., 14 layers), we verify that most of the tasks do not degrade more than 13%."

According to the paper, for most tasks it reduces benchmark scores substantially. Perhaps to the point where a smaller model would yield better inference time and higher benchmarks.

However, summarization benchmarks see almost no degredation, great!
Nor am I. And I don't appreciate the implied equating of "justice" with punishment.

More broadly, I don't think "evil" is a useful word; it refers to (a) the embodiment of everything that is irremediably bad, and (b) to people or actions that are irremediably bad. I don't think such people and actions exist, and I don't think pure badness is embodied anywhere.

So I think the word has no referent.