skysight-inc/HackerNews huggingface dataset:
I felt that same unease. It's very unlikely Yemeni rebels could get their hands on a nuclear device, and even more unlikely it would be small enough to launch on a rocket. But not impossible.
People are shallow and superficial. News at 11.
I may be in the minority here but I bought an LG TV in 2020 and the built in webOS interface and streaming apps have been great. I think there might be some ads but I'm honestly not 100% sure as they are very unintrusive. We had a Roku from our previous set up I had planned to use after hearing terrible things about the typical smart TV software, but have since gotten rid of it.
Wow! Amazing to see that not much has changed in 2500 years with regard to the support of wandering ascetics. Culture can be very deeply rooted, especially in a civilization as old as India's.
This article restated a lot of the downsides of being a "software engineer", but the real highlight was the cartoon. "How many duck size horses are you willing to fight" LOFLMAO
But can you use the TV as a dumb monitor and just supply HDMI input from some other device? I.e. the input stays selected across powerdowns, and no GUI/ads come up?

Other "Fire" devices are a great deal. I have 2021-ish Fire HD8 and HD10 tablets, that merely needed a de-amazonification script from xda-developers to turn into "almost completely normal" vanilla Android tablets, Play Store and all, and have been very satisfactory as such.
Ask HN: Resources about building secure websites and web services?
Hi all,

Can anyone recommend any resources (books, websites, papers, lectures, etc.) about building secure websites and software services generally? I know this is a very broad topic, and so I understand that there won't be a one size fits all resource.

Topics that are of interest include:
- considerations for building a secure login on a website
- interfaces for authentication & authorization in web apis
- considerations for storing customer / user information
- considerations for communication between backend services and 3rd party services
- probably lots of other things that I haven't even considered!
Apple TV advertises its own content when you are on the homepage (even as a non-Apple TV+ subscriber so it's a little more aggressive than like sitting on the Netflix homepage as a subscriber) but as far as I can tell nothing more than that.

Been a user for the last 7-8 years and I love the UX.
All the controversy with this company notwithstanding, in what world does it make sense for a yet to turn profit, ed-tech company to sponsor the national cricket team, the Fifa world cup and sign on Lionel Messi as the brand ambassador?

In the end it's good that the company has gone under, otherwise it would've become a template for startups to follow on how to build a "business".
Then call them that.

`replace(string, pattern)` is just as (if not more) readable as `replace(in, each)`.

I was specifically replying to the claim about readability.
While I agree on your points of the benefits, the one place who is not advocating for them is insurance. People switch insurance frequently, so there is no benefit to help this year what causes a significant disease to their customer in 10 years as that benefit will likely acrue to some other insurance company.

The insurance companies basically think 1 year at a time for drug coverage and only care about keeping you alive for that 1 year at the cheapest possible price. Long term care and planning is something medicare/medicaid may better be able to utilize in their economic model to justify coverage.
Automation in Quant Trading – Hudson River Trading [video]
I live in the middle of silicon valley and have no cell service at my house.
Is amount of traffic the best measure of success for a "library"? How about if we take out the books, put in a food court, and supply free video gaming. The place will be packed. Would that be a successful "library"?

I see proposals for changing the nature of libraries to increase public usage. I don't deny that some of the proposed services would be beneficial to the community, but they may not support the core library purpose of supplying information.
I'm not taking sides, but are we going to ignore the fact that crypto users are probably more valuable in the sense that they are paying users in a way?

A chatGPT user could just be someone who popped onto the website and submitted the chat form.
Crypto requires explanation, AI merely demonstration.

The only demonstration crypto has is 'look, more money today' and that only works sometimes.

AI's demonstration is followed by explanation of how it will kill us all, or why it won't work in context X, or take our job, etc, but you can kind of just ignore that and use it.
Thanks, Scott. This API should make it much, much easier for folks to build with Automerge and kind of just encapsulates everything we've been doing in-house over the last few years.
Chromecast with Google TV has half of the screenspace for streaming service ads. In some locations they have other ads too. This can't be removed even with the "Apps only" mode.

I was kind of forced to get a Chromecast, because they actively block independent receiver implementations, and the prevalent Cast button in Android apps is used by other inhabitants.

This should obviously be illegal, and probably is, but megacorps are above the law.

https://www.androidpolice.com/google-tv-ads/
i imagine that policy too would be subject to legal challenge, and if placed immediately after this judgement would probably not draw a lot of sympathy from a judge. The issue is that filming in the public foyer/area of a public building IS legitimate business, even protected activity, so the more they do to make that difficult the worse it becomes for them.
send and receive money globally without any intermediary?
Can you root or otherwise put an alternative ROM on these things? They are basically just running android, right?
It is ridiculous. That's the point. Same as suggesting people would stop reading books in favor of summaries written by AI

And indeed, 'review' was the wrong word to use, but I appreciate you understanding what I meant
> "The truth can be very elusive"
no shit, this must be the understatement of the day.
not sure if people care much about truth these days, maybe rather just for validation of their biases.
having said that, wikipedia is the site i turn to most often for information so i agree - it is the last good place...
We know what the positions of those stars were back into the ancient past and forwards into the distant future. We can engrave positions corresponding to any date we like onto such an object. It provides no proof of date.
The problem is that while the shape of single-family home suburbs are meticulously controlled (e.g. minimum width between each house, minimum width from the street to your home), the world of apartments are conversely very lightly regulated. California building codes added an optional appendix for noiseproofing standards for multi-family units that cities can opt-into and yet the cities with some of the strictest/most expansive SFH zoning in the Bay Area refuse to opt into this standard. I live in a multi-family unit where the HOA meticulously controls R-value of the units and puts up a huge process/review phase when changing any flooring material, but the end result is that unless kids are screaming at the top of their lungs we hear nothing. We've held karaoke parties past midnight and our neighbors have heard nothing (we've asked.)

In other words, the problem is politics. Cities need to want to make multi-family development appealing to encourage their residents to live there. There's a bit of deliberate neglect going on for multi-family housing specifically to encourage single-family living.
At some point they're gonna put a cheap cellular modem or something like Amazon Sidewalk in all new TVs.
I'm glad to hear you're finding aider useful!

The new large context size certainly opens up some possibilities. Most LLMs start to get distracted/confused if you just put everything and the kitchen sink into their context window. I expect that would be a concern if you just dump in 128k tokens worth of code, most of which isn't relevant to the task at hand.

I imagine we still want to focus GPT on the relevant code and use the larger context window to provide more "code context" along the lines of aider's repository map. Right now the repo-map is optimized to fit within 1k tokens by default. It seems likely that the new GPT-4 Turbo model should be given a much larger map than that.

I'll be experimenting and optimizing aider for this new model over the coming days and weeks.
Not sure why to expect TV-over-Internet be any different than TV-over-cable: 1 minute of ads for every 3 minutes of content. Sure, for some years the industry held back the ads in a capital fueled chase for market share. Yet at some point capital requires returns, and so the ads spigot will eventually be turned wide open.
Global Population Projection in 2100
It is interesting how Iran is the only country that is, through its proxies, getting kinetic against Israel. The Iranian proxies in Yemen and Lebanon have been firing missiles at Israel for a month while the Iranian proxies in Iraq and Syria are starting to assemble in Syria for what might be a land invasion of Israel.

This has given Iran an unprecedented level of popularity and credibility in the Islamic world.

How did Iran-Israel relations even get this bad to begin with?
I appreciate the explanation and your initial comment makes more sense with the context.
any home IoT solution without a cloud inbetween and which shall also be able to communicate with you while on the go requires a lot of technical expertise (and perpetual maintenance...). It is therefore not viable for the mass market.
"Degraded performance" means degraded performance, i.e. the system is not as performant as usual, probably manifesting as high API latencies and/or a significant failure rate in the case of some public-facing "cloud" service.

If certain functions of the service are completely unresponsive, i.e. close to 100% failure rate, that's not "degraded performance"---it's a service outage.
I don't think it's entirely devoid of security improvements---you need to know the webhook address in order to get access to talk to a HA instance which would be a lot more difficult than just port scanning for an open (perhaps unpatched) HA instance on the open internet. I would still prefer it though if things would expose a local API or speak MQTT however.
HN is made of real people. People with emotions - like FOMO/jealousy/threatened etc. I get the sense that a lot of people feel like they missed the boat be it crypto, or AI, etc.
The idea that immigrants are a good idea because they do labour your existing population won't do is quite socially destructive and the cause of technological stagnation. It separates people into a de facto caste system where unpleasant jobs are also underpaid, prevents automation from becoming cost effective, and can block a country from reaping the benefits of skilled migration.
Most developers are making are not C programmers responsible for half of US phone connectivity.
> But i can see ko being good alternative if you for some reason do not want to install docker on your computer but still be able to build docker containers.

Docker is a much bigger dependency than ko, involving a daemon and a socket you have to manage and secure. ko is a only a go program, and builds are straight-forward and lightning fast compared to Docker.

Importantly, ko also removes the need for a Dockerfile. Yes, as you point out a Dockerfile can be simple, but but the best part is no part. Dockerfile has plenty of foot guns and best practices to learn so if at the end of the day all you need is a go binary on a container ko will serve you much, much better.
Levels.fyi's Unique TLD became its Brand [pdf]
This is a milestone and a landmark achievement. And the reasons for this are not limited to the availability of a qualified and vendor supported toolchain for the use of Rust in Functional Safety concerned embedded designs. The goal has been reached while maintaining openness and shared results, which is an industry first.
I actually started using a mask for my face. My nose has never been more happier.
DX12/Vulkan Doom 3 port with Blender maps
Last time I looked into CRDT, automerge was not as fast/efficient as yjs, but the team was actively improving the algorithm. Is there any benchmark to show the progress.
> exercise to maintain the caloric deficit

Exercise is great for dozens of reasons, but weight loss is probably at the bottom of the list (if it's on the list at all). The asymmetry between the ease of consuming calories and the effort of exhaling calories during exercise is too great.
Biologists keep a close eye on a rare Mexican wolf wandering out of bounds
## Edit: thanks to the that replies spotted it is per unit of production ##

--- Feel free to ignore:

Per state is not a useful measure. At least say how much oil and meat is produced in each state for comparison.

Is it a r/peopleliveincities effect? Or is Texas worse at polluting with methane?

Also quite interested in the tech that can measure methane from satellites.
I think their gimmick was bogus. As a non-programmer I scored "exceptionally well", or some such similar wording, on the quiz I took on a whim. My thought was that everyone who took the entrance test was given the same result and that it was just a scam.
Probably I2C interface. If shorting it wouldn’t work this would be my second guess.
The gap seems to be shrinking, not growing. The OSS models have reach new capabilities faster than most thought
Fundamentally we are still not building more homes where more people would like to live, so my optimism is very limited
Frequently, no, because of pro-cop bias among cops, prosecutors, judges, and the public

So...everyone?
Eh. He's allowed to not like Die Hard - I don't think he was overly snooty about it. In fact, I read the parenthetical as an indictment of Hollywood, in sympathy with action movie writers (i.e. it sounds like he's describing the lamentable restrictions placed on the writers by studio and audience expectations).
"disinformation" is protected first amendment speech. Who decides what's "disinformation"?

You don't want it to be the government or anyone really to decide what you can or cannot read?

You battle bad speech with good speech.
Crypto's main value to a LOT of people is purely speculation that you could be rich by buying it cheap and then watching the value explode. No one expected DogeCoin to provide any utility at all, but tons of people bought it.
That is like saying insurance is not in not something average, every day people need. If the rare event doesn't happen to you then yes it is a waste of money, but if it does you will be thankful to have it.
R/programming: how a post went from 1k upvotes to a ban in 10 years
In 2013 I made this funny website - http://starlogs.net/ - posted it on r/programming, and it was an instant hit: https://www.reddit.com/r/programming/comments/1c72lb/starwars_git_logs_starlogs/ . Fast forward ten years, I decided to rewrite it completely to fix bugs, make it mobile-friendly, and make it easier for people to contribute, etc. Naturally, when I was done, I submitted a post to r/programming. To my bewilderment, it was banned after about half an hour. I couldn't really make sense of it, so I submitted it again a few days later. It fared better this time and got banned after about four hours. I messaged the mods but received no reply. I skimmed through the r/programming rules, but nothing stood out.

Now, this isn't the work of my life by any stretch, but I am really really curious about what might be the cause. I am posting this in the hopes that some smart and/or better-informed folks can demystify this for me. And if it gains traction, maybe an actual mod might chime in too. Thanks!
(i) - Our service remains rock-solid.
i agree, that is annoying. i think it can be zapped with things like ublock
Highly invasive backdoor snuck into open source packages targets developers
14 points and flagged + dead. What is the incentive to censor this on HN?

Edit: Flagged again with 33 upvotes in 27 mins.
There are lots of success stories on the Mounjaro subreddit.
AI is at step 4, transitioning to 5
> Remember Die Hard? I don’t. I saw it right around the time it came out, and all I remember is Bruce Willis, barefoot, running through broken glass. That, for me, was a metaphor for watching the movie.

I'm not sure one should advertise their poor taste in movies. As action flicks go, Die Hard is one of the best, if not the best.

> Fans of the film, however, will recall its dapper German villain, Hans Gruber, smacking his silly lips and gloating at some private victory. He puts his fingertips together and says in facetiously tragic tones (clearly quoting something from High Culture and referring with cozy irony to himself): “And Alexander wept, seeing as he had no more worlds to conquer.”

This is incorrect. Hans doesn't refer to one of his own victories; he contemplates with irony a model of a future project of the Nakatomi Corporation, and comments the extent of their conquests.

The point of this is to make us understand Nakatomi is a formidable company, and that Hans, who's attacking them, is even more formidable.

The exact quote from the movie is also not that; it is "When Alexander saw the breadth of his domain, he wept for there were no more worlds to conquer".

(I do find it interesting though, that the origin of the quote is in fact Alexander before conquering anything and wondering why, since there are so many worlds available to him, he has not yet mastered any.)
This happens with some devices. It would have been better if the standard had made that failure mode impossible, but it's not the data lines causing the problem. They failed to put a resistor in the device that connects one of the sense pins.
Previously: https://news.ycombinator.com/item?id=38169800
Now we know how Covid attacks your heart
> I'm sure that's true, but then where is the great modern Western classical music?

It's like literally everywhere! I almost exclusively listen to contemporary Western classical music (WCM) and it's never been more exciting and better. There has never been a time where there are so many different dominant styles at the same time. There are atonalists [1] like Unsuk Chin, Jennifer Koh, Charles Wuorinen, Fred Lerdahl. There are neo-Romanticists like Jennifer Higdon, Michael Torke, Thomas Ades. There are minimalists like Caroline Shaw, Max Richter, Bent Sorensen, Christine Southworth and their ur-father Philip Glass who still writes music at 86.

If you're interested in my full opinions about the cultural force of contemporary WCM please read this [2] HN comment of mine.

Seriously contemporary WCM is awesome. It's very cliche but "if you don't like it, move on".

> In my opinion, this is a racist response by mainly European composers to the popularity of Jazz music which is associated mainly with African Americans, from whom the source originated. They were jealous of what they perceived as the novel rhythms and harmonies, but instead of building off that or inventing something new that still had rhythmic and harmonic value.. they did this

Meh, I don't think this is true at all. They're just entirely different artistic traditions. Just because haiku exists doesn't mean American novels can't.

I don't dispute that tons of normie classical music listeners (like r/classicalmusic) are racists/elitists. These people almost exclusively listen to old German common practice stuff like Bach or Mozart. They pretend that 18th century German music is somehow superior to everything else. Almost none of them would consider Ligeti or Glass even classical music. This is not the contemporary Western classical music scene at all. It seems like you may not have a sophisticated enough understanding of this subculture, imho.

[1] mostly Ligeti/Messiaen inspired people as opposed to Serialists

[2] https://news.ycombinator.com/item?id=37424409
The country that gave the Houthis intermediate range ballistic missiles is also capable of developing pistol-type fission bombs if current estimates of the country's uranium enrichment capabilities are to be believed.
AI-powered robots start killing humans
Where it comes from is that AI cannot create beyond its training scope.

If you ask an AI to train itself from its own images, it’ll always actually become worse using its own evaluation.

If you ask a human to train themselves, the human will notable become better of their evaluation.

AIs are fundamentally limited to their training set. Humans are not.

The fact that you can tell an AI to draw a specific thing, and it’ll steal content from other people doesn’t result in the AI having uniquely created an image. It has searched and blended strings together. That’s it.
This is super powerful, been playing around with the previous releases for the past few days. It works really well, but still needs a few dx tweaks to make it performant for large applications. You have to watch the callbacks yourself to update slices of state and unless your app is small enough that the whole thing can re-render every update.

That being said, I love everything automerge is doing and hope this pace will keep up!
If you want to get into the reeds of it, I think "assertive" and "strong" are too positively loaded (which I guess is why you didn't use them). However I would say the same applies to robust, coupled with the fact that "robust" on its own is not really applicable to the kind of communication you're referring to. The positive undertones are probably also why you saw a bunch of unnecessary knee jerk virtue signaling in response.

I would personally have stuck with just "direct" (which is neutral), and perhaps added "blunt" (which is neutral-negative).
Speed benchmarks of GPT-4 Turbo and gpt-3.5-turbo-1106
OpenAI just released new versions of GPT-3.5 and GPT-4, and there’s a lot of interest about their capabilities and performance. With that in mind, I’ve been benchmarking the new models.

These benchmark results focus on measuring the speed of the new models, and how they compare to previous versions.

Some quick takeaways:

- GPT-3.5 got 6-11x faster.

- GPT-4 Turbo is 4-5x faster.

- The old March (0301) version of GPT-3.5 is actually faster than the June (0613) version. This was a surprising discovery.

More details and graphs in the linked page.
Interesting. Are refugees or illegal immigrants allowed to work? Do they get social services? Would they work if they could?
As long as it's all suborbital trajectories, the "space" designation, while technically correct, is pretty meaningless.
Same reason I've become an iPhone fanboy - the alternatives were simply unbearable at some point and the iPhone... was ok. Apparently, consistently ok is a high bar.

Can't say that about macOS, though - it's consistently below expectations for me.
If you count the top-app-row preview as an ad, maybe there are ads. If you move the tv+ app off the top row you don’t see anything by Apple.

There are no app suggestions or notifications on Apple TV (or at least I turned them off about 8 years ago).

I have been happily streaming media off my computer with Apple TV and have never had a single issue with it.
This is definitely in the EPA's purview to regulate and monitor better. I don't believe the framing at all that this is industry standard venting practices, the excess methane is from leaks. I would bet anything that as we get higher resolution satellite monitoring, most of the excess methane will come from a few "super-leakers" who haven't kept up on their maintenance.
Crypto’s demonstration is 1) number goes up, everyone can become wealthy 2) you can buy drugs anonymously 3) all sorts of ransomware and blackmail
What a great name! I’d have built an uptime monitoring service had I thought of that name.

I agree there are a lot of uptime monitoring services. If Splunk is worth gazillions there are decent scraps left for the rest of us. Marketing to $100/m types isn’t worth it for the big guns. So small companies can take that market.