skysight-inc/HackerNews huggingface dataset:
Great! I wanted to make the same for Istanbul for years but never got a chance spend time on it. It is a perfect example of visualizing time series data. Makes me want to move to Tokyo.

My question: Do you fetch the routes somewhere or you simulate the trip start-end times?
https://atadistance.net/2023/08/01/how-long-will-the-suica-c...
Interesting, I was not aware of this. Good to know as I have some relatives coming over this week. And yes, like most digital cash in japan it's usually heavily walled garden. You can only charge your Suica or buy ticket with JR East's View credit card :) To their credit though, IC cards work very well but seems like you were unfortunate with the chip shortage.
Most of them are dynamic IPs. Some of them are infected mobile devices.

What happens when you log an attack from a device that is attacking you from a school or business WiFi network? Block the whole IP forever?

What if the user is on a CGNAT. Are you going to block the edge proxy for that entire ISP?

What if you're getting hit from a residential connection that gets a new rotated IP every couple of weeks? Block whoever gets that IP from now on?

Your solution doesn't stop attacks. It just stops regular users.
There are 5 billion people on the internet. This is 0.0004%. Even 2 million is only 0.04%.

(this assumes that 1 person = 1 device; some people share devices, most people have more than one, e.g. I have a laptop and a router, many people also have a phone, a work laptop, and whatnot – the average is probably >1, maybe even >2)
Thing is, don’t care.

The problem is that ISPs whose customers are originating the attacks from don’t give a shit.

If we have to give up 1% of legitimate traffic to thwart 90% of attacks, it is a good deal.

If you and other customers complain to your ISP (or switch), eventually they’ll do something about it.

We can’t seriously keep on accepting that « thousands of compromised devices » is a fine reality for a « small botnet ».

These devices should be quarantined.
Yeah 特定种族基因攻击 “specific ethnic genetic attacks.” There are some interesting documents floating around from a few years back if you’re into China-US military stuff.
Thus, the price of Github Copilot is going to go up, 2x to 5x.

For all of the criticism of Github Copilot, for a lot of developers (but not all), the value Github Copilot is incredibly high, much more than $20/month.

The current rock bottom pricing is low compared to the value provided for those users.

As such there is a big opportunity to multiply the price here being charged. Probably an increase between 3x to 5x.

The excuse is because they are losing money, but the underlying reason is that the value it is providing is so high in terms of developer productivity.
There is no global semiconductor market. Saying it exists is the same thing as saying that global vehicle market exists and Boeing competes with Ford in making the best selling vehicle.

There is, however, "consumer chips foundry market", which is dominated by TSMC with 55%+ market share. And TSMC's market share is limited only because of their production capacity.
HN is degrading quickly thanks to comments like this. I've used vim for a long time, have worked in high-level engineering positions (lead, principal, similar roles) for decades with huge companies you've no doubt heard of as well as the US government. I've published articles and software going back to the 90s. Based on the content of your comment I think it's likely I was programming in vi(m) before you were born.

I have never read the manual for vim, nor for most software that I use. I'm a "learn by doing" type - optimal methods of learning vary and is subjective. There are plenty of people who because of ADHD or another reason simply don't learn best from manuals.

The vitriol belongs on reddit.
That would be giving away some of the secret sauce on the part of the cloud providers. They are selling security as (part of their) service. There are some community shared lists of botnets ofcourse, but they may not be vry real time or very up to date.
San Francisco: Man who crashed car into Chinese consulate shot dead
Postgres: The next generation
Here's to hoping that with gaming on Linux gaining prominence (thanks in no small part to Wine/Proton and Steam Deck), Linux overcomes Windows as the go-to OS for gaming.
I've never used any other webstack (and I've used several, in several languages) where it was so hard to figure out why different tests pollute each other, causing subtle failures depending on the order of test execution. Sure, you could say that it's all a matter of learning the right way, but there are just a terrible amount of footguns.

Debugging why something doesn't work in Spring can also be a nightmare.

And the reference point for "compile-time safe framework" is of course not Django, which is written in a dynamically typed language...
Wow, I didn't know there, I must have missed the news. I swear I have seen everywhere that it was using this "Codex" model
You're flipping pairs of coins until you get either "HT" or "TT". So the only two possibilities are:

1. keep flipping until you get HT (and so you choose 'heads')
2. keep flipping until you get TH (and so you choose 'tails')

Since HT and TH are equally likely, results 1 and 2 are equally likely, i.e. there's a 50% chance of choosing heads, 50% change of choosing tails.
I think Meta (facebook) is already working with android phone manufacturers to include chips with specific instruction sets to support the llama architecture.

probably intel is working on the same. I assume the next generation of mobile chips (laptop or phone) will all include special LLM processors.
To add to this this, many of the aspects that make MRI's uncomfortable for kids and even adults is all the physical sensations. Even the claustrophobia can get to many adults if they have never been in one of these machines. Also aspects such as the having the transmit/recoveree coil harness on the patient are physicals sensations you have to experience (for example sensing coils for the head) and really cant be emulated. The sound itself is also very physical as it is somthing not just heard but also felt by the patients. The sound is caused by electromechanical (fast high current switching of the electromagnet coils of the gradient coils) interactions in the operation of the machine itself so you might also feel the sound via the machine or coming from many directions in the bore.

I remembers from my class that there are some published works that design MRI sequences ("pattern" in which you operate the MRI machine to switch/modulate the electromagnets of the gradient coils, send RF pulses, and record the received RF pulses) in such a way that they reduce or don't cause the majority of the noise from the switching of the gradient coil in a typical MRI sequence.
Ask HN: How does this auction rigging technique work? [pdf]
I hope my understanding of the complaint is correct. Im trying to understand how the technique works. It seems Google bidding tools submit two bids on behalf of a customer. First bid is the original customer bid, the second artificial google bid is to make the customer win the auction and to make the original customer bid the second bid to set the price. In absence of the artificial bid the customer would pay the real second price. Did I get it right?

Details on the page 57 of the complaint at the URL
No, they don’t make mock MRI scanners at any significant volume, and an MRI scanner at a hospital is like an aircraft on the tarmac for an airline - every minute it’s not in use is a minute that the owner is losing money.
It's not very hard to send packets with a fake source IP, especially if you don't care about the reply.
Fair! And I have to say that the docs are pretty good considering the huge surface they cover! Same underlying API, but so many languages.
20 years ago I was configuring VPNs on work laptops that then had all the exit traffic routed to a Bluecoat system to MITM the traffic. The difference is that zScaler is "Zero Trust" so you are actually not on a VPN anymore. It's intercepting the traffic locally and then determining what to do with it. At my current workplace we are using it to access internal services only; allowing all external traffic to exit directly.
> you can't do anything nice for workers, otherwise you transform into an exact clone of China

wow never thought of it like that
TikTok is owned by the "wrong" race of people. Cambridge Analytica, FaceBook and Twitter are owned by the "correct" race of people. That's where the legislator's goals are headed - control of social media by politically acceptable people.
Now they can maybe fix bug where favicons randomly show negative image on linux...
So is nginx with http2 enabled vulnerable too? Caddy? I should I not worry about this, because a small (by Cloudflare scale) botnet may DDoS a single server completely anyway?
Yes but semi-plausible debate still exists.

Genetic evidence could eliminate this.
Switch also has a proprietary API called NVN, Vulkan is more like a 2nd level API.

Any game dev that wants the full hardware capabilities reaches out to NVN.
For some developers for sure, but not all. I am a senior developer with +20 years of experience and I find Github Copilot amazing. It significantly boosts my productivity. I do not expect the world from it, and I do run into limitations, but it helps me tremendously to be productive in languages and tools which I have low/no familiarity.

I think Github Copilot paired with ChatGPT fails the most in idiosyncratic code bases where you are doing maintenance or complex refactors. I think Github Copilot with ChatGPT shines in writing green field code in areas where you are will to use the best practices and the open sources libraries that Chat GPT recommends. Basically, if you align with where Chat GPT recommends to go, then it will help you a lot more than if you try to fight it all the way.
You’re completely wrong.

All large sites regularly get attacked.

The average skiddie’s motivations are that they’re bored. So they DoS a site they use regularly just to see.

Heck they generally don’t even mean to cause damage per-se, and just think it’s a funny use of their evening.

You have to stop thinking DoS attacks are always particularly personal. They really often just aren’t, and it’s a monumental pain in the ass to be on the receiving end.
What does this have to do with engines? AFAIK, Valve developed their own engine "Source 2". At the end the article contains

> Regardless of numbers, one of the reasons Valve is reluctant to develop CS2 for Mac is that Apple devices do not provide native support for the Vulkan API that the game is based on. Vulkan was designed to succeed OpenGL and address some of the latter's shortcomings, and while there is an open-source library called MoltenVK that provides a Vulkan implementation on top of Apple's Metal graphics API, it still lacks some of Vulkan's advanced features.
had a feeling Finder did magic too; however, on changing focus into the Shortcuts App, revealed Quick Actions that baffles
Baltic states are trying to decouple from Russia's electrical grid [1]. Latvia wants to move fast, Estonia is asking for more time. Concerningly, Estonia signed an agreement recently with Finland for a new submarine cable ("Estlink 3") to import more power (as Finland has an excess due to their new nuclear generator recently coming online, current interconnector runs maxed out most of the time at ~1GW). This infra may be at go forward risk from Russia, making the investment questionable at this time (unless the route and burial depth can sufficiently defend against a nation state threat actor).

[1] https://www.dw.com/en/baltic-states-seek-to-decouple-grid-fr...
>... or was the enshittification of search inevitable?

My bet is on the latter. Enshitification is a direct product of greed. No crafts person or creator I know of goes into something they enjoy creating with the intent to make it this monstrosity of money extraction. Most creators have a drive for their creation to be shared and experienced by many.

Yes, you may want to get a reward in the process and for some creators, their motives may change over time if they see an opportunity to turn their creation into a wealth machine for themselves so they can do whatever after.

Enshitification I believe is a secondary effect of something that becomes successful for the owners of something and either they or others change motives towards value. Optimization is no longer about the creation, sharing, experience, humanitarian, whatever motive and shifts to money. The second that becomes the goal, enshitication is just part of the optimization journey. In my line of thinking, it's the same reason monopolies or near monopolies tend to form, these are merely further states along optimization strategies in the monetary/wealth extraction goal.

Part of that process is that when something starts to succeed, it attracts people with these goals so the goal of something shifts pretty rapidly.
My understanding is that there is now a special IC card for visitors only, "Pasmo Passport", but it's only available for sale in a few locations: https://www.pasmo.co.jp/visitors/en/buy/
Correlation ergo causation
But there is really nothing that "normal" AI requires that is bound to CUDA. pyTorch and Tensorflow are backend agnostic (ideally...). Sure some hardcore people write some of their own cuda extensions but the vast majority don't. If there was a competing pytorch/tensorflow-supported backend at half the price, AI companies would quickly fix the quirks and run on that instead. It will be a race to the bottom eventually. Even more so on the cloud where you have a higher tendency to run value added services on top, that in turn are price sensitive.
What compatibility?

Some consoles did ship an emulator for the previous generation, and they don't support all titles.
1. Just like it's frustrating when a paper is published making claims that are hard to verify, it's frustrating when somebody says "x can't do y" in a way that is hard to verify^^

2. LLMs, in spite of the complaints about the research leaders, are fairly democratic. I have access to several of the best LLMs currently in existence and the ones I can't access haven't been polished for general usage anyway. If you make a claim with a prompt, it's easy for me to verify it

3. I've been linked legitimate ChatGPT prompts where someone gets incorrect data from ChatGPT - my instinct is to help them refine their prompt to get correct data

4. If you make a claim about these cool new tools (not making a claim about what they're good for!) all of these kick in. I want to verify, refine, etc.

Of course some people are on the bandwagon and it is akin to insulting their religion (it is with religious fervor they hold their beliefs!) but at least most folks on hn are just excited and trying to engage

^^ I actually think making this claim is in bad form generally. It's like looking for the existence of aliens on a planet. Absence of evidence is not evidence of absence
A lot higher than the beefy laptop... Even a 4090 can't run it well.
20 years ago if a blog or website ended up on slashdot/digg/whatever there was a good chance it was going down. Scalable websites are a commodity today
AWS launches 12-month program to go from no tech background to cloud developer
That's an easy way to be dismissive to someone without actually contributing to the discussion.
If Google Authenticator goes away, people will still be able to use 2FA (I for one use Aegis, it's available on F-droid and does everything I need, including encrypted backups)

If Lastpass goes away, people will still be able to use keepass or any of the large number of open source password managers, some of them even with browser integrations.

If I have a website that is frequently attacked by botnets and Cloudflare goes away, what can I use to replace it?
Kaiser Permanente's Single-Payer Portent
On the flip side it works really well for me for both autocomplete and the chat interface. I mostly work in Python so perhaps the support is better, have not used it with C. It definitely does not feel complete but I do get tons of value out of it for the price.

The one major complaint I have is the filtering it does to prevent copy protected code. Sometimes it will just get stuck and there is no way to get it out of sending the same matched public code so I end up stuck with starting the conversation over.
This is both a little off-topic and a little out of my expertise, but shouldn't the file descriptors in the query function be closed?
Once a Wolf, Always a Wolf
I understand. I did stay in one place where a bulldozer dug a trench and broke the line to the place. It was repaired in a day, and I just rolled with as something that happens in life.

Rather than an ironclad guarantee that the internet will 100% stay functional, more precisely what I want is a guarantee that the host will be approximately as responsive to outages as I myself would be were it my own internet at my own home, which is the best that anyone can realistically do.

I suppose if someone’s internet went down for weeks I might have to opt out of the reservation, which isn’t totally fair to the host if it’s not their fault and it’s beyond their control.

But also that has never happened, and it similarly wouldn’t be totally fair to me if the internet were to go down at my own home and I had to rent a coworking space for an extended period.
My partner and I run a small video game studio and we wanted a bytecode format we could run on every device we owned, so we made a 100ish lines VM spec, and implemented these thin emulation layers for the different platforms. My wiki, our games, the compilers, linters and type checkers are all written in that same language, assembling to rom files that will run equally well on a GBA, Playdate, RPi, Thinkpad, PSP and so forth.

It's worth looking into. I hope you find something that works :)

https://100r.co/site/weathering_software_winter.html
Aka causality limitations through propagationspeed -aka lightspeed.
If you bothered to read what you posted, they don't want to support Metal natively like the other engines.
You know you're old when...your reaction to the headline is:

https://en.wikipedia.org/wiki/Eternal_September
> Cloudflare a protection tax

$NET gives away DDOS protection for free for non-businesses
Well, they also still bought CD's they liked back then. Usually their favourite bands, or whatever. Even in the Napster/LimeWire days when everyone was doing it they always still seemed to buy their favourite artist's new CD's when they came out.
But you have other options which is my point.

(swap in any corpo-service provider you personally like the most)

Blanket banning subnet ranges from services because of the actions of someone else is 3rd world shit.
At the time of the explosion, the pipeline was not delivering any gas; Russia never turned the pipeline back on after they shutdown for summer maintenance.
> Music industry long ago came to terms with not making money from album/song sales, but use them as promotion platforms for Live Events, Merch and whatnot.

Piracy killed the profits in record sales and created a bimodal distribution for musicians wherein you're either Taylor Swift or the equivalent, or a struggling indie.
I see, that's fair. Thanks a lot for Ardour, happy to be a sponsor! <3
Depends if the hype is invalid - Let's remember that "There will be a computer in every home!" was once considered hype.

There is a possible world where AI will be a truly transformative technology in ways we can't possibly understand.

There is a possible world where this tech fizzles out.

So one of the reasons that there is a broad 'hype' dynamic here is because the range of possibilities is broad.

I sit firmly in the first camp though - I believe it's truly a transformative technology, and struggle to see the perspective of the 'anti-hype' crowd.
I really prefer that '.' and '->' remain separate, because it makes it immediately clear when a potentially expensive pointer derefence is happening:

x = a->b->c->d->e;

...is a pointer-hunting-nightmare / potential cache-miss-galore.

x = a.b.c.d.e;

...no problem, the whole chain is resolved at compile time into a single offset and results in at most one memory access.

x = a.b.c->d.e;

...makes it immediately clear that c->d is a pointer access and everything else isn't.

PS: ...and of course C++ messed this simple rule up with the introduction of references.
One is about machines on the internet serving images and forum posts. This comment is low quality and is a form of name calling.
The underlying model might be as good, but how you interface with it seems to deliver wildly different results. I can easily get chat-gpt to give me entire blocks of code. Copilot just trickles out small bits. Copilot is also very distracting because I find myself constantly waiting to see if what it's going to do next is helpful or not, whereas just typing into chat gpt I know I'm going to get something in the direction of what I want.
> Anecdotally, on a desktop machine with something like 64GB RAM, when I switched from non-ECC to ECC (and 128GB RAM), the number of unexplained crashes seemed to drop from one every couple of weeks to one every 6 months or so. Could have been from a software upgrade though, probably Ubuntu 18 to Ubuntu 20.

Thanks. This is a great anecdote/example that is much more what I'm interested in. I don't see the same level of system instability on my machine, but it's a good example. Appreciate it.

> Behavior also seems to degrade after a month or two of uptime.

Ah, here's another thing. I do tend to reboot daily/weekly which may help
This was how I built an intuition into the Monty Hall problem as well! Wrote a little app that simulated it a decade or so ago when I was discussing with friends!
They list some plastics as "Ideal" for the X1C and "Superior" for the X1E, seeming to imply that superior is better than ideal. Such are the wages of marketing hyperbole, it can leave you with no way to express an improvement.
> hardcoded values, instead of properties or even constants.

What's the difference in the object code between a hardcoded value and a constant? Surely they should be the same?
"digital" is not really helping the title
SAC305 solder won't reflow until >230C vapor phase. Will a hair dryer get a chip to these temps, ever?
One more vote for pandoc.

I’m writing a set of exercise books with photography challenges[1]. I have similar requirements: writing markdown and adding images and diagrams. My output is PDF, EPUB and MOBI.

I started with honkit, I liked that it is a popular and flexible tool. But it didn’t work well for my needs, I was especially unhappy with its default .pdf output.

I switched to pandoc and I am happy with that. I use pandoc-plot [2] for diagrams, it supports plantUML[3]. Also, I write markdown, but the .pdf files are generated through LaTeX and I like the end result much better.

[1]: https://merelysounds.gumroad.com/l/seven-photo-challenges

[2]: https://laurentrdc.github.io/pandoc-plot/MANUAL.html

[3]: https://plantuml.com/
Movies have gotten worse, without question. Big budget movies now are consistently cliché ridden rehashes of proven IP because studio execs don't want to take any chances. This behavior really took over in the early aughts, and you can look at the top 10 movies for each year to see the slide from ~2004-2010.
Unity CEO Scuttles Away into Retirement After Becoming Most Hated Man in Gaming
2FA, I’m not sure.

But Lastpass doesn’t represent the whole of password managers. Storing your passwords in an online service is a really silly thing to do (for passwords that matter at least). Use something local like keepass.
When you try to remove a bug from code, sometimes you make the bug to be more nuanced and hidden from plain sight.

I am not sure if you can remove crimes with surveillance. Maybe people will just hide deeper. The government will receive 'new powers', but crimes will not be solved.

But maybe after all that is the end goal. To win the "Crypto wars". Not to solve crimes.

How many cases where solved because of Patriot Act?