skysight-inc/HackerNews huggingface dataset:
It's a "push" system rather than "pull" that you're thinking of -- the government (in theory) has no idea what someone earned, although they do know how much tax they've already paid during the year, they pretend that they don't.

So the employee's task is to present a record to the government (known as "Filing Taxes") that says: I earned this much, and I already paid this much tax, so you owe me this much back (while it's possible to have paid too little tax, most people pay too much for fear of ending up in trouble -- you're required to pay some high proportion of taxes owed for the year, during the year -- like pay-as-you-earn).

Employers send each employee a piece of paper at the end of the year showing how much they earned and how much tax was already sent to the government.
For the simpler case, generating the tax filing (form 1099EZ) is pretty much a case of copying numbers from the W-2 onto the 1099. Most people would also need to add some numbers that come from other places (e.g. mortgage interest paid, tax credit for buying an EV) but those are also available as pieces of paper sent to you by lenders etc. Since math has to be done to
determine the owed tax and subtract the already paid tax, a paper form is not the right way to do it. A spreadsheet is ok for the math, then copy the numbers onto the paper form. But that's some work. Hence "Tax prep software" which is basically a combination of the spreadsheet and a fillable PDF.

Since the government is slow, they never developed that spreadsheet+pdf web site early on, allowing commercial entities (Intuit, mostly) to jump in as an intermediary.

Although the US tax system can be complex, as you suspect for most people it really isn't. The issue here is more about the government pretending they don't have the information necessary to generate a person's tax filing for them. This puts the burden on the user, and so in turn they get help with that from companies like Intuit. Eventually it becomes obvious this situation is ridiculous, but putting the genie back in the bottle is not so easy.
It’s not just weird, it’s an intentionally dishonest evaluation to build hype around their language.

If you ask your average Python programmer what “pure Python” means they’d think numpy is included.

Their Mojo code just does the same optimizations numpy certainly has.
No RDP, no VPNs, verified working locations.

Typically freelancers work from wherever they want, on any random starbucks wifi.
It absolutely was related to government requirements. FIPS 151-2 required that certain government purchases be POSIX compliant.
Can you explain how Kobo supports authors? I was not aware.
"Alexa, add wolf urine to shopping cart" is a fun thing to say at somebody else's house.
Trust and fear aren't remotely the same.
For me, it was the Blink-182 album Take Off Your Pants and Jacket.
French style would be to hire most of your employees as contractors to avoid stricter labor laws lol.
Intercom - Monolith-ifying perfectly good microservices – Rails World[video]
> “Over the years, we’ve done lots of nice “extended functionality” stuff. Nobody ever uses them. The only thing that gets used is the standard stuff that everybody else does too.” — Linus Torvalds

Linus’s quote in the article isn’t really true. It’s true in that small, incremental changes are often ignored in the interest of portability (I’d rather my app worked on both macos and linux so will use generic facilities when at all possible; the system-specific ones may be easier and better but I’ll just have to write something different for the other system.

But when the change is a big one, the calculus is different. Consider io_uring: it’s a big win so worth writing special code to use. But the trend in these cases is to write a higher level library , or modify an existing library to work with io_uring. Not a lot of people use system calls directly, except perhaps `stat` and a few other filesystem calls like that.

Another case is the procfs, because you can use it directly from the shell.
It's their responsibility to know what is happening and to care what is happening on their store - just because they have completely vacated their responsibilities doesn't mean we should give them a break.
Thats what a credit card before trial discourages. Enterprise users aren't going to put their personal credit card in for a trial. And with we do have a corporate card, its only for T&E and not for software and services Those are billed to finance controlled card which recently being managed through virtual cards service like Ramp or Brex.
This is why we need to both good private (insurance) and public (social benefit) safety net programs in place.

In the case of a small startup, long term disability insurance should cover the living costs of that disability. Yes, that person should be let go, even a founder, if they are unable to perform their duties. But they shouldn't be kicked the street, and the company also shouldn't be on the hook for their care. Either through premiums or taxes, this situation should be accounted for ahead of time. Employment shouldn't be a lifetime obligation of a company.
I want "security" software authors to stop doing harm. Just as physicians take up the Hippocratic Oath, I think we need to set higher standards for programs, applications and processes which avow to improve security, because too often they seem to have the opposite effect. Traditional anti-virus tools are a classic example of this.

I do see their website now, but I'm still confused:

> We are a team of visioneers, engineers, designers, and security experts backed by top-tier VCs who believe in making security work for everyone.

Great. What makes you security experts? In other words, why should we trust you?

You say the code is open source and that makes it trustworthy, but source availability is not a panacea. It must really be vigorously stressed, tested and abused by competent hackers (as a consensual contracted service) - again, if we are to call it "security" software.

Plainly, this is a beta test for a company that wants to make some money and has generously externalized bugs, issues and other nuances of development unto the open source community, which through some sort of Stockholm Syndrome has actually convinced itself more code - even if it's not good code - is still a good thing.
Single Digit tokenization improves LLM math abilities by up to 70x
Dev snapshot: Godot 4.2 beta 2
They've just posted the recording

https://www.youtube.com/watch?v=wV1Yva-Dp4Y
"50 C" refers to 50°C as in average kinetic energy of particles. They did the measurements at elevated temperatures.
I think this is a good question. I’m guessing it might just be a circumstance of being located in California (as opposed to e.g. the UK) where unionization of tech workers is very rare. And that there simply wasn’t a push to start unionization efforts until after the Epic takeover. I also suspect that the unionization wave which is taking over the USA just didn’t start soon enough to start union efforts before the takeover.
Can we take the 'forever' out of forever chemicals?
And I'm guessing you taxes would be fairly complicated in many/most countries in the world and wouldn't be handled by clicking a "Yep, looks about right" button.

I'm in the same boat and I don't even think my situation is especially complex. I can also ask my accountant questions in advance for tax planning purposes.

On the other hand, a lot of people do just have a W2, maybe a 1099, and take the standard deduction.
Show HN: Convert any docx to pptx using GPT with this open source Python tool [video]
An updated comprehensive demo on how to effortlessly draft customizable PowerPoint slides using the Generative Pre-trained Transformer (GPT) with this opensource Python tool that empowers you to effortlessly turn the lengthiest Word documents into well organized presentations.

This is an open-source labour of love, a weekend project embracing the power of community.
there could be life in the sun, but we haven't observed it

i was saying that we don't understand the plasma dynamics that drives the solar phenomena we do observe, not that they are driven by life, so plausibly such plasma dynamics could also drive life in the same way that chemistry drives life here on earth
FWIW I am happy that magnolia1234 forked iamadamdev's repo. I wanted to report that barrons.com is not working with the original repo (https://github.com/iamadamdev/bypass-paywalls-chrome). But I could not. https://github.com/iamadamdev/bypass-paywalls-chrome/issues/... was giving the following notice.

An owner of this repository has limited the ability to open an issue to users that have contributed to this repository in the past.

barrons.com worked out of the box with the new repo (https://gitlab.com/magnolia1234/bypass-paywalls-chrome-clean).
Not parent, but it is forbidden in France: https://www.legifrance.gouv.fr/codes/id/LEGIARTI000028154450...
Those interested in the intersection between Python, HPC, and data science may want to take a look at Arkouda, which is a Python package for data science at massive scales (TB of memory) at interactive rates (seconds), powered by Chapel:

* https://github.com/Bears-R-Us/arkouda
* https://twitter.com/ChapelLanguage/status/168858897773200179...
I really have trouble understanding the push to provide higher-level features as intrinsic types and instructions. AIUI, the main alternative to stringref (linked in the article: https://github.com/WebAssembly/js-string-builtins/blob/main/...) is to provide string types via WebAssembly's normal "import" mechanism. This alternative makes more sense to me.

When you write extension modules for languages like Python, Ruby, PHP, or even JavaScript (via V8 or JavaScriptCore), you are always importing APIs like strings (eg. #include <ruby.h>). It seems natural to me that WebAssembly would be the same way.

Now ideally a WebAssembly module wouldn't be specific to one particular embedding environment. You would want to standardize this string API, so that a single API can be used efficiently with multiple host languages. So you'd want something more like #include <wasm/wtf16string.h>. But if it's an import, it also leaves open the possibility that such an API can evolve over time, or that a competing API could supplant it as the landscape of language engines changes. By putting it directly into the instruction set, you'd be baking in assumptions about how JS engines in 2023 function, even though those assumptions can (and hopefully will) change over time.

It's true that wasm/wtf16string.h probably won't be available in environments that don't have JS-style strings. But that seems for the best. I'd rather have a leaner WebAssembly than make every WebAssembly engine provide JS-style strings. In the case that the host environment doesn't already have a JS-style string that you are trying to interoperate with, why not just have Java implement its string type directly in WebAssembly? Or once shared libraries are available, wasm/wtf16string.h could be provided via some third-party library, shared across multiple modules, leaving open the possibility of passing strings around between modules.

I guess, to the article's point, why shouldn't memcpy() be an import also? What is gained by making it part of the instruction set? I assume that a WebAssembly implementation could recognize special imports, and optimize them the same as if it were a built-in instruction.
Hi, similar to nvm0n2 who already commented below, object storage systems often directly write to block storage rather than through a VFS. While minio, for example, can run on top of a VFS, even they say you shouldn't be - you should instead run it directly on block storage across multiple drives / nodes.
Amazon, Expedia and Trustpilot unite to fight fake reviews
Yes, taxation is a core part of being a libertarian. Generally, libertarians believe in taxation only for essential government services, but policing is definitely considered essential to libertarians. It is central to the ideology.

Colloquially, anarcho-capitalism is sometimes also referred to as libertarianism. Those who subscribe to anarcho-capitalism believe in stateless societies, of which taxation would be incompatible. However, Thiel purports to be a libertarian in the stricter sense. This usage is not applicable here.
From a US small business perspective: start the company first. It's significantly easier logistically and creates a clear demarcation between the people and the company, as well as gains access to the banking industry you'll need for transactions.
This lacks context. Avx-512 is disabled (fused off) in the big cores of Intel big.little. In the server and workstation chips that only have big cores, it is functional.

It's right here in black and white. https://www.intel.com/content/www/us/en/products/sku/233483/...
Fire destroys Iowa wind turbine after emergency workers fail to reach top [video]
Going further-- if the company depends on it, then the man already understands it.
The TurboTax CEO called this direct file test, "a solution and search of a problem."

That is pretty ironic because TurboTax is working to prolong the problem in order to profit from their own solution.
My son was asking me how I hacked into things back in the day. I told him 95% of it is literally just talking to people and asking for the thing you want. You don't even have to lie because most people never even thought to ask "why." Well, the older generation didn't. I've noticed most younger people will ask "why", even when it is obvious.
What's hilarious is that their build process is just `cargo build --release`, which is exactly like every other Rust project. I do not see how they expect people to prefer using an installation script when `cargo install` exists and people generally prefer to build Rust utilities from source anyway because of how painless the build system is.

My best guess is that they use the container as a deterministic build environment and don't want to deal with a billion different LLVM point-releases being used in the wild.
I'm pretty sure your tax forms in France would also be 50 pages, and you would have to submit a detailed correction of the government forms if you wanted to actually minimize your tax burden. That has more to do with the complexity of your income and assets than anything else. My tax forms in 2021 were about 300 pages if you combine everything (including 1099s, W-2s, and other reporting forms), but that has to do entirely with stock trades, real estate, and small business profits, all of which would be a pain in any tax system. The simplest taxes in the US are 2 pages of forms (the 1040) plus a few W-2s.

The average American can easily fill out their tax papers by hand. TurboTax just sells the dream of finding "hidden" deductions and credits, which basically don't apply to 99% of people.
I mean, ultimately they might be required to drink it
From ChatGPT plugins, OCR gives the best results so far.
> It's so easy to sign up my 67 year old mother can do it

this narrative that a 65 years old person is so stupid that unless things are really easy and dumbed down, it's impossible for them to do anything, must die!

Old people have done a lot of things a lot more complex than signing up for Netflix. Which is a process unreasonably complicated, not complex.

Anyway, Stremio just works.
Whenever I run into a situation where ioctl is necessary it makes me think the authors either hadn’t thought their design through enough, or couldn’t convince enough people that a sys call was justified. What an abhorant interface.
> I suspect Protonmail is as easy to use as GMail.

End-to-end encryption without a trusted server makes multi-device usage rather complicated within a number of contexts. Full-text search for example then requires all your e-mails to be indexed on each individual device you're using for accessing Protonmail, and you need to keep that index permanently unless you want to re-download all messages and re-index them again the next time you need to search something.

I don't very frequently use full-text search from my phone for example, but when I need it, I do need it, so neither proposition (permanently occupying valuable space on my mobile phone with a search index I only occasionally need, or else wasting a noticeable amount of time and data volume to re-index all mails every time I want to search something) sounds really enticing.
The curl | bash thing gets talked about so much here, but I wonder who’s stupid enough to not perform their malicious tasks in the binary itself as opposed to the shell script which can be inspected at runtime with `bash -x`.
It seems to suffer from choice bias, favoring choices that come earlier. If I add “car components” to the end of the list, the last example reliably returns “car”. If I move “car” to the end of the list, the model reliably returns “car components”
unless you want to work for the gov.
My apologies if this has already been submitted.
I kept the title used by u/yahma on r/LocalLLaMa as it's a good straight to the point title.

The paper is here https://arxiv.org/abs/2310.02989
Exactly. Data is not covered by American copyright and artifacts generated by LLM and diffusion tools are not covered by copyright protection unless there was human involvement and humans are transparent about how they participated in the creation of the artifacts.
There's also netspectre which remotely attacks a kernel with malformed network packets.

https://arxiv.org/abs/1807.10535
CEPH would be one of those, which is more like a database using raw devices, and no linux filesystem (nor VFS calls) in between. It used to run on top of xfs, but now storage nodes (OSDs) talks directly to a raw device (or an lvm on top of it).
But you can most certainly not run "ls" on such a host and get a listing of what some user wrote over S3 into it.
Thanks for the link to Mystery of the Yeti, I hadn't heard that- and it sounds almost exactly like Shpongle (I think even some of the samples are the same).
randomly curious re: "there are compliance and regulatory thresholds that make it hard for us to give out sandbox keys freely"

what kinds of thresholds? (mainly curious since sandbox keys naively seem harmless to hand out)
Postgres Disaster Recovery with Kubernetes Volume Snapshots Using CloudNativePG
'I can tell from some of the pixels and from seeing quite a few shops in my time.'
That's not true in my experience, I only subscribe to the type of content I want to watch, but my homepage is still filled with tons of garbage.

God forbid I watch a one-off video on a topic I'm not typically interested in, like woodworking. Current iteration of Youtube algorithm seems to boil down to "oh I see that you watched ONE woodworking video? Well half of your homepage is about woodworking for the next week!". I've started watching videos in incognito mode which I definitely didn't need to do a couple of years ago.

Current Youtube UX is beyond terrible, half the time I can't even find what I'm looking for through search because they arbitrarily cut off real search results to push clickbaity dopamine-sucking content.

If they want me to pay for Premium, they need to do more than just removing ads, the entire experience needs to feel, well, Premium. They could add customization options for the homepage and search results so we can remove shorts and all the "For you" crap, add knobs to tweak recommendations, return dislike counters which were the best way of quickly filtering out terrible/clickbaity/dangerous content. They could even add some power user features like being able to find videos by searching through their indexed transcripts rather than by the title alone.
Free at point of use, but cannot possibly be free overall.

If it would be free overall, it would take no time to develop or support and would already be rolled out.
Lots of comments in here that obviously didn't RTFA.

The point of the article and documentary is that Amazon listed and fulfilled delivery of products described as urine. They even sold said products in their food section.

The article further goes on to describe how the guy had his toddlers order knives and rat poison with the dot and got said items delivered without the mandatory (in the uk) age verification.

It's an article about an upcoming documentary of Amazon's public negligence.
FireDucks: Compiler Accelerated DataFrame Library for Python with Pandas API
Always check URL, and never use browser that hide URL or show unicode in an URL string I suppose.
Vulnerabilities and Attacks
Drawing dicks has been around since cave paintings so it's as old as humans. Can't loose such a tradition.
Don't accidentally leak secrets from your terminal
This article explains how developers can obscure secrets like API keys and PII when working in the terminal, which could be useful for developers who screen share or give code demos. Redaction happens using regex as the terminal output is printed. Developers can also set their own custom rules.
> another owner who doesn't understand what they bought.

I couldn't imagine who you might be referring to!
/snark
DRM is a bad idea with worse implementations. It's presented as a way to enable legitimate customers to enjoy works while preventing pirates from getting them, right? In practice, the opposite is true - rule-following buyers have restricted access to the things they buy, and rule-breakers still get to do what they want.

The silly thing about DRM for media is that, fundamentally, anyone can break it with manual effort, just by transcribing the words, or recording the video/music.

Besides, anyone who doesn't break DRM runs the risk that the vendor will take away access to the books they already paid for. It's happened before.
> but that there was at least some proof of concept over JavaScript remotely

Yeah, but that's exactly the rube goldberg kinda thing the quote in the OP is parodying. The threat is IF I come across a hostile page, AND I'm running a specific web browser with the right JS properties, AND I am also running the right security-critical software, AND the attacker can correctly guess the memory layout, AND the JS runs for long enough to pull enough bytes to actually be meaningful, AND the attacker can connect the meaningful secret with whatever purpose it's intended for, AND the attacker can pull my legit data out with all the false positives they're getting from running an un-targeted website, THEN they can maybe like log into my old AOL account or something.

It just isn't going to happen. There are usecases where SPECTRE is a meaningful attack (shared hosting being the obvious one), but a normal end-user machine? Nah. Certainly not likely enough to nuke 10% CPU perf on every machine by default.
The FTX trial, day eleven: Off the record
Animals construct disguises using local materials
Hard agree with this. Filling out your taxes by hand is actually very easy if all you have is the basics (which is most people). When I was doing my taxes for the first couple of years as an adult, I did it by hand and was pleasantly surprised how easy it was. The instructions are very clear and to the point.
sh is Unix compliant.
Not really a good comparison. Seat belts save lives, guns take it. The fact that a gun is a real threat to the mugger, makes it a threat to you. Because the mugger knows that you might be carrying a gun. I'm pretty sure that muggers and burglars in the US use a lot more deadly force than elsewhere, exactly because of the chance their victim may be armed.

Of course given that muggers expect you might be armed, you might as well be. But I'm still not convinced they actually make you safer; lots of Americans get killed by their own gun.
This one was really good, I like it and I am following the repo, thank you tho
You just have to configure hotspot on your phone and there you have it. Still easier than asking someone else to install an app, especially if that person doesn't have access to mobile data.

And if it is short textual data it is more easily shared with a qrcode.
An alternative for the bandwidth-impaired and hippophiles: http://endless.horse