skysight-inc/HackerNews huggingface dataset:
Because you are not running all of them at the same time, you are only running one of them. The one you choose to run can be better than the current one you are forced to use and thus your attack surface has decreased because you are not using the worse ones.

Having options does not reduce your security except in-so-far as exposing the underlying mechanism allowing choice increases your attack surface, and even then that does not inherently reduce your security. A mechanism allowing multiple implementations requiring more available attack surface, but which is used by a high quality application to provide a highly secure implementation is still better than a reduced mechanism designed to only allow a single application when that application provides a low quality implementation.

Also, the argument you just proposed could just as easily be used to argue that we should disallow any other operating system other than Windows 3.1 since having more operating systems just increases the attack surface. That is patently absurd for the reasons I just stated above and is why your argument is fatally flawed.
> But, a question if I may: How good of a software engineering training was the CS degree? Would a real software engineering degree have done a better job?

In my opinion, it was pretty bad. We didn't get to write much code after CS 101, and we only had one group project in a class that I cannot remember - so there wasn't much opportunity to learn how to develop in a collaborative environment.

What this meant for me is that I learned on the job, and my first job was at a very small PHP/JS shop where I learned some very bad habits that I didn't know were bad habits at the time.

I think a software engineering degree would have been significantly more useful, and I don't think the CS portion of it would have had to suffer much. I think the college even offered that degree at the time; I'm not sure why I didn't switch.
Yup! I lean towards a tenant ID approach. I ALWAYS use a library that enforces these tenant checks on queries. Ruby (https://github.com/citusdata/activerecord-multi-tenant) and Elixir (I wrote https://github.com/sb8244/ecto_tenancy_enforcer) are the ones I have experience with.
Ask HN: Blackberry Movie
Have you guys watched? What are your thoughts about it?

How can we founders can protect ourselves of "SHARKS" and do not mislead the path.
DHH: Buying the Seller
A simple graphical DB client is often a perfectly fine UI. Everything depends on the details, of course.

If this saves a month of defining and building a bunch of admin preference screens, letting you focus your one developer on things that matter, that can mean everything for a small startup.
Great article. Really made me think. But don’t webcomponents lack properties and functions that can be embedded in tooling ?
Yeah copying large amounts of data from one process to another (especially across nodes) is slow and expensive. We have to take care to not do that where possible. We've had issues from accidentally passing too much data to worker processes, but those are thankfully pretty rare because that is a pattern we try to avoid (having a single process per actor in the system is nicer for a variety of reasons).

Regarding cluster size: We haven't noticed too many problems with it, but that's because our communication is usually not a full mesh, but rather more like bipartite graphs (guilds talk to sessions, but not to other guilds, for instance).

Definitely other languages like C++, Rust, Go, or Java could solve similar problems, but we haven't had a reason to rewrite it all. Migrating only some types of actors in the systems to another language would mean not being able to use message passing / monitors and result in a lot of complexity because of it.
> You are implying that these reasonable and good willing people dont exist.

More subtly I am not arguing that many people get into public service twirling their mustache and going "MuuuuAHAHAHA!". I am arguing that many people go in with their adolescent ideals and are convinced that they are doing good by doing the evil that they do. That is "banal corruption". They are not corrupt because going after money. They are not corrupt because going after fame and power. They are corrupt by letting their own ideals / philosophy / religion get in front of more provable, cold realities of what the polis actually needs done now.

Let's take a very banal example: Traffic engineers in one of the cities I live in (there might be only one traffic engineer). Their duty is to make traffic work ever better - that's required for the city to work well for its inhabitants. Other people have other missions. For that office, that's cars and bikes mostly - I don't know if public transit is this particular office's duty - and to keep pedestrians safe from that traffic and vice et versa. However in practice they work much more specifically to make it ever harder to drive cars. Based on the evidence of living in that city, they are actively working against car traffic. They are now NOT working to "honorably discharge" their duty. They are instead working on "what THEY think is good". That is NOT the same thing. It has a name. That name is "corruption".

Fine, another example at a different scale: You might remember the quote [The piece of paper is not a suicide pact] - as justification for one high office politician to ignore his sworn duty and do whatever he wanted. To which much of the country then cheered. Now that one is Corruption with a capital C.

Does the EU commissioner think they are doing the right thing? Probably yes. Would they acknowledge privately that they are stretching the limits to breaking point? Quite likely - they didn't get there by being stupid. Would they (privately) argue that it was worth doing "for the cause"? Yep. Corruption.

> the accumulated failure of voters, that enables the sociopathes their careers

Well, sure. I believe that in democracies, the buck does not stop with the president but with the voters. But I think this is at a deep level. That is, our current institutions are very vulnerable to this kind of takeover. And many voters cheer on that corruption (because it furthers THEIR ideals, and fuck the constitution.) Which is why I feel that "How we run institutions" is one of the current Big Challenges on humanity. How we do that currently really doesn't cut it. We have to find ways to do better.

> [libertarians vs democracy]

Facts not in evidence! Democracy as we run it currently is a fantastic breeding ground for this kind of corruption.

Authoritarian regimes are a different thing: They are completely dependent on whether the leading person or group is enlightened. It's a "luck of the draw" kind of thing. But yeah, they are "by design" there to pursue the obsessions of the leaders - whether good or bad.
I was woken from my sleep and didn’t have my usual guard up. I also have a newborn and have not been sleeping well
It’s often ‘I killed myself making everything perfect, and that asshole didn’t even say thanks!’.

Some bosses encourage it, some bosses try to discourage it (and fail), some bosses don’t even notice.

Been on both sides. In the end, the ‘hero’ is usually the one that is the actual problem, unfortunately, and can’t stop.
An essay is a written piece of work that presents a writer's perspective or argument on a particular topic. It typically consists of an introduction, body paragraphs, and a conclusion. Essays can take various https://us.rankmywriter.com/educibly-review forms, such as persuasive, descriptive, expository, or narrative, depending on the writer's purpose and audience. They serve as a means for individuals to express their ideas, provide evidence, and engage in critical thinking. Essays are commonly assigned in academic settings to assess students' writing, research, and analytical skills, making them a crucial tool for communication and learning.
I’m not making a judgment, just explaining the world as it is.
I bet you it's to make spamming the button a useful action if one of the instances is overloaded or rate limited, you can click a few more times until a page loads
Sure, I don’t need a peer reviewed paper to believe that, but now any researcher who wants to make the claim can just cite the paper, not worry about nitpicking or anything like that, and move on.

The cost is probably like a couple megabytes on spread across a bunch of servers and, I suspect, a semester or so of work. Plus maybe somebody learned how to run this kind of experiment.

It just seems like a non-problem.
Yes, it comes with several different kinds of "microworlds" that are games in themselves, but with "levels" you can build, i.e. with tiles or objects, so many different (even user defined) scenarios are possible. Then it has lessons with gradually increasing complexity that you have to solve.

It's really a lot like Robot Odyssey (yet not as hard and limited), but you're learning a real programming language, byte by byte. Starting with drag-and-drops icons and boxes to represent sequences, then conditionals and branching and looping and functions.

The Hardest Video Game You've Never Played | Robot Odyssey

https://www.youtube.com/watch?v=iycj199McEg

Before "What is a Function?" you have to learn "What is Sequence?" and "What are Conditions?":

What is Sequence? | Coding for Kids | Kodable:

https://www.youtube.com/watch?v=v_Pc3UnePZY

What are Conditions? | Coding for Kids | Kodable

https://www.youtube.com/watch?v=dJYIRcsdHWg

Each of these lessons has corresponding levels that have different simplified visual approaches to programming.

The object oriented stuff comes later, and has some corresponding object oriented simulation game microworlds, like tower defense, virtual pets, and programmable drones, etc.

I wish there was a video showing the virtual pets and Factorio/Robot-Odyssey-esque robot drones you can program to take care of them -- that was really neat, and taught event based programming.
Even on a very beefy pc, whatever is going on in the firefox runtime can't keep up. My machine was built last year, high performing i7, 32gb ram, 3080ti, etc. Can run any new game at max settings without shuddering but maps and other google properties fall apart.
JSON documents can easily live in the DB ;)
Unfortunately, no. This is a simple pet project aimed at easing sharing/versioning of bookmarklets. The site is entirely static. Listing bookmarklets is, however, something I'd love to add.

A simple and sensible way to list bookmarklets may be scraping GitHub's own search [1]. Using a flag in gists such as `// bookmarklink-index` or similar may be a good way to go.

[1] https://gist.github.com/search?q=extension%3Ajs+bookmarklet_...
Bookmarklets can work in mobile browsers.

For mobile Chrome:

- Create a new bookmark

- Replace the bookmarked link with the bookmarklet javaScript code, e.g., javascript:alert('hello world')

- To use the bookmarklet, start typing the bookmark name in the address bar until the auto-complete displays the bookmark, and then click on it.

For mobile Safari,

- Create a new bookmark and replace the URL with your javaScript code

- To use the bookmarklet, tap on the bookmarklet name from the bookmarks menu

(The edit was to better format my comment)
PEP 703 Accepted: Making the Global Interpreter Lock Optional in CPython
Transgenders
If an alien race had our technology and attention to SETI, how far away could they be and know that we exist?

Every time I ask this question, I hear astounding lack of knowledge about how little we have done to look for aliens, or I hear amazing lack of knowledge about the distances involved.
> One thing though, you focus a lot on syscalls, but I think the challenge in recent years has been to find new ways to have kernel <-> userspace interactions _outside_ of syscall, which are cumbersome to use, rigid in structure, and practically speaking, there are only so many entries you can store in an IDT.

Today there is another option for doing the kernel-userspace communication: using an io_uring like interface. Yes, it's a syscall, but it's one with enough extensibility and performance characteristics. It's extensible because it's close to an IPC with the kernel (and it could be changed to be a new IPC mechanism for process-to-process communication if it isn't already). And it's performant because it's based in shared memory and is assyncronous by default.
They did learn. They learned they could do it and it would take a long time before any action was taken and whatever fine came at the end would be an acceptable cost.
> Finally, as someone working in AI, I’m actually very optimistic about their next approach of just learning an end to end model to drive the car. I think this is the only scaleable way to reach human level driving. Any set of rules based + optimization based planner will have those edge cases that ruin the cars capability, in fact it turns out the long tail is really long.

Tesla doesn’t have an end-to-end model. They call it “end-to-end AI”, which just means they’re applying AI to all subsystems, exactly like everyone else. All the big players already use heavy ML-based planning systems that are not “rules or optimization based” and which are way more sophisticated than anything Tesla has put out or is planning to.
>It also requires specific hardware, not standard off-the-shelf SFP modules like normal FTTH deployments.

Sorry this sentence doesn't make any sense unless it is US specific. There no such thing as "standard off-the-shelf SFP modules like normal FTTH deployments". And normal FTTH deployment around the is PON. Or specifically GPON.

Every single residential internet connection is sharing bandwidth one way or another. You are not owning a piece of the internet backbone.
All good questions!

> Is nix like a npm lockfile then, carefully controlling specific versions of packages and dependencies on a per... what, per-machine?... basis?

Installation and management of software with Nix is generally handled via tools I'll call 'profile managers', e.g., nix-env, `nix profile`, home-manager, nixos-rebuild, darwin-rebuild (Nix-Darwin), Disnix, NixOps, etc.

These tools all support version pinning (typically via 'flakes', but alternatives can and do integrate this functionality with various Nix profile managers as well).

These profile managers collectively operate at the cluster, machine, and user levels, but on a given machine you can also manage arbitrary named profiles, and you can additionally use Nix without persisting any environment into which things are 'installed'. In the latter case, one can still use source control to pin those environments, allowing for general-purpose, polyglot, per-project package management.

> Or is it kinda like a Docker container that can contain isolated programs?

Yes, but the kind and level of isolation that Nix provides is thinner than Docker. It's most comparable to something like Python's virtualenv or Ruby's Bundler, where packages are installed natively on the local filesystem, but managed via environment variables and symlinks.

The only real difference there is that Nix packages are configured at build time so that they're very hard to find by the dynamic linker and so they're very bad at dynamically looking for each other, providing some additional 'isolation' in a weak sense.

> Or something like pyenv or nvm that can let you switch between version sets?

I wouldn't say so, but you could manage Nix profiles that way if you wanted to. The CLI would be clunky for this at best.
Nicely done! Looks lightweight and powerful - especially the schema auto-generation and flattening will make many raw data tables look much cleaner.
If it's mandated then they never had the control there to begin with.
Most of their plans (1, 5, 8) have symmetrical speeds. The "2 Gig" plan is asymmetrical with 2 Gbps down and 1 Gbps up.
all forms of stress (hormone levels) reduction help incredibly well.

keeping joints, muscles, tendons and nerves free of trauma like pinching, swelling and so on is a must, of course.

As a shortcut, check how tense your facial muscles are in order to notice how much (situational) stress you are currently experiencing.
That is a rather odd self-socratic method of commenting.
> since you can't pass complex objects as attributes like you can in jsx

But you can!

Here's an example of passing complex objects as attributes (look for zx-listeditor):
https://github.com/wisercoder/uibuilder/blob/master/WebCompo...

And here's the web component itself:
https://github.com/wisercoder/uibuilder/blob/master/WebCompo...

And here's the tiny (500-line) lib that enables it:
https://github.com/wisercoder/uibuilder/#jsx-for-web-compone...
Sure. It’s also really common.
I too could get behind a one time payment. That would hopefully prevent landowners deliberately destroying the environment just to prevent it becoming protected.

It might even start a new class of landowner who buy uninteresting land, then cultivate lots of nature and wildlife, then make a profit when the government designates it a nature reserve.
FTX: 'King of Crypto' to testify in fraud case
Neat. Geopositioning in general is a "hard problem" especially with additional variables/complexities that are introduced for specific use cases (military or not). There's tons of room for cutting edge research here still, and it's exciting to see companies invest in that.
I mean, it was a better gimmick than the Wii, but it turns out the Wii was good enough.

People didn't want to pay a premium price for a motion gimmick. The Wii hit the sweet spot for casual gamers and they didn't care that the fidelity was lousy.
Anyway the cartels have probably already built better rockets in a garage somewhere.
The crushed rocks in this case mineralize into stable silicates which can be beneficial as they flow down rivers into the sea. As they are alkaline they can combat ocean acidity and the minerals help crustaceans harden their shells.
2022 books? Sure.

"The Mountain in the Sea" by Ray Nayler.

"Beyond the Burn Line" by Paul MacAuley.

"Eversion" by Alastair Reynolds.

"The Thousand Earths" by Stephen Baxter. (Who, surprisingly, has never won a Hugo. This fact alone reflects very poorly on the Hugos.)

"How High We Go in the Dark" by Sequoia Nagamatsu.

I feel that all of these books were better than any of the nominated ones.

I like Ken MacLeod's Lightspeed Trilogy (thus far) too, but only one of them was published in 2022 and the series is still incomplete...
I think you missed the rhetorical point of the comment. The OP said that batteries weren't used in cheap cars because there were incentives to direct the scarce resource towards luxury cars where margins are higher. Then went on to say that battery-powered bikes sell like hot-cakes. The reply was questioning this logic - why would the scarce resource be directed towards even lower-end devices if the resource is that scarce. Then explicitly questions the assumption about whether the resource is really limited.

Of course, one answer could be that e-bikes don't use the same types of batteries that cars do, or that one could make 50 e-bikes for less than the battery array required for a low-end car. Another answer could be that the margins on luxury doo-dads are extraordinarily high, and it's the quickest way to recoup the R&D expenses invested in first version EV's - it's nothing to do with batteries being a limited resource.

Also, there's the idea that if a customer invests in a futuristic vehicle (EV), it should reflect that in all aspects of the vehicle (touchscreen, cameras, all the electronic things). This may or may not be valid, as personally I find myself inclined in the opposite direction, but I'm also not someone who rushes to buy latest tech anymore (so I may be an entirely invalid datapoint insofar as car buying market is concerned).
When I first read this I thought "wow Samsung is getting into devops?".
I can't at all agree with the added differences of opinion with Uncle Bob's Clean Code. The author argues a reducing the size of a function of "a few dozen lines" likely won't improve the readability of the code. That's not even defensible! I would fail any (professional) code review for having that many lines of code in a function. It's a complete failure of abstraction. He later goes on to say "more functions means more interfaces to document and learn." This is also smelly. Clean code is self documenting. It should be simple to read because it should read like prose. If levels of abstraction are kept to one per function, it's easy to understand what is happening. One would only drill down into functions if it were necessary to grok implementation details of an abstract function.

The comment on comments I also disagree with, although that's more contentions. In general I agree with Uncle Bob that comments are usually apologies. Most of the time the code should be refactored to not need comments. Ousterhout does bring up a point that names can sometimes be verbose as a result, but I can't be convinced that's a universal evil in the same way I can't be convinced that comments are a universal evil.

>And, with this approach, developers end up effectively retyping the documentation for a method every time they invoke it!

In what way is that a negative? This is a feature of self documenting code! This is what makes good code so great! This seems like some degree of misunderstanding of Clean Code.

I'm compelled to pick up this book, however.
If you don't have to work, you aren't middle class.

I think the 6million is aspirational.
> A better resource today would have to start with some radical choice such as whitelisting, if only to reduce the head-end costs of ingesting material.

> It's tempting to imagine some rules like: no ads, no popups of any kind, government mandated or not, especially no cookie banners, no paywall, but even sites like Wikipedia fail at those criteria today.

This sounds like the approach that the Marginalia (https://search.marginalia.nu/) search engine is taking. My understanding is that its algorithm favors text-heavy sites. And additions to its index are done via GitHub Pull Request so it's effectively using an approve-list (whitelist).
Why not launch from Puerto Rico or USVI? Island logistics too challenging?
Thats not really equivalent, as image diffusion models are training on "real world" styles and topics, not a constrained game. Additionally, AlphaGo outputs are quantifiably "flawless," whereas GenAI models have all sorts of artifacts and distortion in their output that can't possibly be reliably filtered, even with an army of humans to do it.

My experience with ESRGAN is that it really does not like to train on its own output. It amplifies all sorts of wierd artifacts you can barely see I'd you go back and squint at the finetuning dataset. And there was a paper suggesting newer generative models are similar.
That's because they slapped a 11B transformer on top of it for better prompt understanding; you can run it quantized to 8 bit and it will take about 14GB total, which has been tested by some people. This can be further reduced, or replaced for another encoder, the initial code is typically poorly optimized in these models (SD 1.4 required 12GB at first, then it was reduced to 4 and even 2GB). The meaningful part of the model that actually generates the picture is even smaller than the SD 1.x.
This is why most CEOs and politicians never talk publicly except what the PR team and lawyers have carefully reviewed. When they give speeches they are written well in advance and carefully practiced. Once in a while a CEO or politician does and people at first like the candidness, but eventually (see Musk, Trump) they say something that someone doesn't like. Everyone has and thinks such thoughts that make us look really bad, but most of us get away with it because nobody is listening.