skysight-inc/HackerNews huggingface dataset:
> Can anyone convince me I should care?

Doubtful.

Problem 1: Qubits don't scale.

By contrast, it took roughly 10 years from the invention of the transistor in 1947 to a 30,000 transistor computer (IBM 7070 in 1958) and a fully functional 100 transistor MOSFET chip in 1964.

Even vacuum tubes went from Triode invention in 1906 to Flip-Flop in 1918 to a computer in 1939 while discovering quantum mechanics at the same time.

Qubits are barely at 1000 in 2023 (invented at roughly 1988 but with a lot of groundwork beforehand) and they barely work. Progress on increasing that has been very slow.

Qubits are still a research problem and not an engineering problem.

Problem 2: Problems and algorithms don't map as easily as everybody claims

There's a lot of "Algorithm X is faster in Quantum than Classical."

A lot of those claims are of the form "If we can build quantum circuit P, D, and Z, we can map Algorithm X to a Quantum Computer." And a lot of those assumptions are, quite bluntly, bullshit. We can't build circuit P, D, or Z and make it work so it doesn't matter how well the theorists can map the algorithm.

This also all presupposes we don't have better classical algorithms. Whenever I talk to quantum computing folks they generally point out that the one thing we have a hope of mapping to quantum solidly, factoring, is an odd man out in the way it maps. A couple of them think that there's still some missing knowledge in classical algorithms around that.
Status of quantum computer development [PDF]
Which of DHH's technical decisions would you consider poor?
Figure 4 from https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blak... is a related benchmark. On that particular machine we saw good scaling up to 16 threads, but yeah somewhere in that neighborhood you start to run into memory bandwidth issues. Which is the problem you want I guess :)
Raft exploited for $3.3M, then hacker screws up
Yeah but GraphQL sucks to use as a developer.
> How does society function when nobody can know if anything they think they know is actually the truth?

It doesn't.
Making and maintaining a universal package manager then getting it deployed completely enough at any large org to make a difference strikes me as on the order of “let’s build a perpetual motion machine that’s also a fusion reactor” as far as feasibility level.

… now, that doesn’t mean one couldn’t make money while utterly failing to ultimately deliver the promised value.
" and in 91 (30.33%) cases, parasites were potentially pathogenic for humans"
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6613697/

Not for me...
You're legally required to stock up on popcorn as you watch the CyberTruck fiasco unfold over the next 12 months.
> Humans have no tradition of eating them

Bugs are very common food in Asian, African and South American cultures.

Edit: I also remember seeing some ant stuff in Mexico. And I’ve read about indigenous cultures in Australia and North America also having insects as part of their food. I’m sure if I look for it, I’ll find something on European cultures as well. Modern food is just a representation of food that got commercialized, but in reality human diet used to be much more varied than we are used to seeing now.
nest is also in the same "dead" group. no matter what the line workers think
> This feature of web components encourages a design of composability.

I am not a React, Vue (and friends dev) at all. Heck, I haven't done front-end or full stack for a long time now.

However, taking React as an example, where does it not encourage composability?

I like Web Components. I even spent the last couple of weeks playing only with the vanilla APIs (no Lit, etc.) just to see what is like:

https://lpedrosa.github.io/blog/web-components-part-3/

https://github.com/lpedrosa/webcomponents-blog-examples

Like many other people have pointed out in this post, it is great that you can leverage the platform. All the things you will learn e.g. DOM APIs, native elements and events, etc., are things you can carry over to React and Vue.

However, I believe articles like this fail to acknowledge the contribution React and friends brought to developer experience.

Building complex desktop like UIs was no longer impossible to maintain. You can easily make components and compose them, customise them, etc.

The general complaint is more around "you don't need Next.js" to build a news/marketing/blog website. The pendulum is swinging, especially with things like HTMX gaining traction.

IMO, people do it because:

- It's easier to hire developers that know the framework du jour

- Custom Elements are very flexible, so it's hard to enforce a particular style

- There aren't enough examples of people using vanilla Web Components (and I mean vanilla, not Lit and friends), so why use a web component framework when I can use a react based one?

Write more about how we can combine things like Custom Elements and "traditional" server side templating.

Write more about how a native element reacts to changes to its attributes or how it communicates user interaction and how that helps building a good custom element.

Or how building a good custom element is similar to building a good React component, and where it differs.

Antagonising existing knowledge or even the status quo is not constructive, and leads to poor discussions e.g. "Web Components is a failed technology" or articles like OP
I thought that this methane emission was easily counteracted by some food additive, was it seaweed?

EDIT: yes, it was:

https://www.qub.ac.uk/Research/case-studies/seaweed-suppleme...
Because it doesn't cost $4M?
As an enhancement, you could use OCR to automatically extract the text from the image and add it as alt text. You could even use an LLM to fix up text extracted from OCR - I think even a relatively small local LLM could probably be trained to fix it up.

(Yes, this is perhaps overcomplicated.)
Many animals seem resistance to cancer. Including big animals like whales where you'd think if was simply statistics on cell division they would be more likely to get cancer.
Heck, they have the ability to have helicopters flying overhead whenever they feel, so drones are just an extension of that power. Or at least, that is how they would spin it.
Several of the GQ counters have serial access, does anyone know if you can get the individual events from those?
That's very interesting! In Django this "Rails Engines" approach is the default. A Django project will be made out of multiple Django "apps", each having its own routers (called URL-dispatchers), controllers (called views - yes, I know its weird to call them that), models and templates.
What was your stack like for data collection and visualization?
https://archive.ph/k73O1

"Companies also tout their ability to push rent and fees higher and higher, even as they market themselves as providers of affordable housing. Founded by Blackstone Group, a private equity giant, Invitation Homes raised its average rent in the Atlanta market 37% from $1,336 in 2016 to $1,836 today, according to public filings. It raised rent 11% in 2022 alone."

.

"Large investor purchases have accelerated since then. During one 12-month stretch beginning in July 2021, investors bought one out of every three homes for sale in metro Atlanta."
> and forces us to actually establish roots of trust

How would that even be possible in a world where literally nothing can be trusted?
Is that even legal, to ask you to sign that after you paid for it? Or was it before?
The amounts allowed by the FDA are restricted to certain food types, and vastly lower amounts than would be present if it were an intentional additive.
maybe it just meant that the scheme isn't visible in the address bar in a browser like chrome.
They didn't say they regarded themselves as unrestricted by any ethics rules. They said people thought wrongly they regarded themselves as unrestricted by any ethics rules.
My local Meijer has 30 unused lines maybe only one or two being staffed.

The two self checkout stations each have 20+ stations but they use the single line system which seems to always have 10+ people waiting. The line does move quickly.

Then they have 3 super-quick self checkouts. These are labeled 5 items or less and don't include any shelf (direct into a single bag) and no weighing functionality (provided by a nearby machine that prints a barcode you scan).
There’s almost no standard way to do anything when it comes to html style.
> We don't need you (whatever "you" means) to sign a treaty with "us" in order for "our" law to apply when you deal with "our" citizens.

"We're" not responsible for abiding by "your" laws, whether "your" citizens are involved or not.

Do "you" abide by (one example among many) the US Second Amendment when "our" citizens are visiting "your" country?

No, you do not.

QED.
This isn't a security analysis, and PCG isn't a secure random number generator, but it is the case that you can fashion a crude secure random number generator out of a sufficiently large state and a cryptographic hash.
I’m not trying to get on a soapbox or advocate for veganism; I honestly am curious about this, and I do eat meat myself.

It’s amazing to me that as a society we’re so attached to animal protein that we’d rather farm bugs than just eat vegetables. If we stopped factory farming animals then we’d have more than enough food. We could grow a fraction of what we do now, on a fraction of the land, since such a huge proportion of grain grown now goes to feed animals. Everyone’s familiar with these arguments, of course.

So rather than reduce the animal protein in our diets, we’re determined to farm insects to supplement it. I know some people make this choice already, and others will do so in the future. Yet many people express immediate loathing at the idea, unapologetic about it.

Is meat addictive like sugar? We all know (for some definition of “we”) how bad regular, large doses of sugar are, yet continue to consume it. Are meat and sugar so overwhelmingly pleasurable to us that we’ll _as a society_ accept any cost for mass consumption of them?
I had a dual Pentium Pro 166Mhz w/512kb caches running on a Tyan mobo. That thing was fast under Linux.

EDIT: Present day, rocking a thread ripper with 48 logical cores. Still running Linux.
Will it though? Maybe you should test it.
China is building a lot of coal as well. But the interesting thing is that they're setting up a scheme in which the government pays the plants not to generate. Capacity is at 50% and falling quickly. This thread indicates that most plants will be getting the majority of their revenue from these payments by the second half of this decade. Related: latest estimates indicate a structural decline in Chinese CO2 emissions starting next year, almost entirely because of renewable buildouts.

[1] https://twitter.com/pretentiouswhat/status/17228860669427430...
[2] https://www.theguardian.com/business/2023/nov/13/chinas-carb...
I'm sure there's enough demand for someone to sell a service that attempts this, but for several of the reasons mentioned in the post I expect it would be ineffective.

When you run all your code and all its dependencies with full authority, it only takes one tiny piece of malicious code to blow the whole system wide open. I think scanning will always be a losing battle.
Local Postgres database hacked, how?
I'm running the TimescaleDB image on Docker on a Windows machine. Somehow that postgres database was accessed and all of the data deleted.

There is a readme_to_recover table now, and has a generic extortion mail: "Data is backed up bla bla, pay bitcoin to recover bla bla"

Data I can get back, but I'm concerned about how this could have happened?

For some reason the pg_hba.conf has the line: "host all all all scram-sha-256", which I think means that it can be accessed from anywhere right?

The docker image was running on 5432, and but I had binded that to 5434 on my local machine.

Logs have couple of "FATAL: password authentication failed for user "postgres"" lines, so the password was attempted couple of times. I had a very common password though since it was a local instance, so it was easy to crack. And then after that lines for dropping all the databases. And then "FATAL: terminating connection due to administrator command" and "FATAL: terminating background worker "TimescaleDB Background Worker Scheduler" due to administrator command"

Do I have some virus on my computer? Does the TimescaleDB Docker image have vulnerability that would cause this? Could some rogue website / ad / extension have accessed my Postgres db running locally like that?
Working on this right now.
It is not - your offer isn't good enough to convince someone to invest in it. Usually, communication skills are very important to find a good co-founder - which seems that you lack. So I will focus on communicating better what you have to offer and what you are looking for. And hope for the former to be really enticing. By the quality of the links you shared, your proposal seems to be quite uninteresting, why would I partner with you in place of just doing it all myself?
Even if you've consented to being recorded, that other person you're talking to hasn't consented. So if you're in a state with all-party consent laws, hasn't the listener violated the wiretapping law?
"Humans have no tradition of eating them"

Of course they do. Try some survival courses, our ancestors ate everything, they could stomach. Only (or mostly) the western culture stopped doing it for whatever reason.

"If you think eating insects is gross, you may be in the cultural minority. Throughout history, people have relished insects as food. Today, many cultures still do."

https://www.nationalgeographic.com/culture/article/eating-bu...
Sounds dystopian
> If we could agree on a good, standardized capabilities model for software and everyone starts using it, we will have reached security Nirvana.

That's about as likely as everyone agreeing on a good, standardized operating system architecture, API, and driver model that also happens to be Written In Rust™ for good measure.
For sure, and I agree with you that it's possible. But replacing actual houses with tracts of these would be a sad, regressive mistake that's just not necessary. Replacing these with better ones, and even slightly taller ones, would be reasonable and useful.
Bugs are very common additives to chicken feed in smaller farms. Not sure about commercial operations. As a backyard chicken owner, meal worms are a regular thing I feed to my chickens.
I wonder what the costs/issues would be with simply excavating a horizontal canal connecting the two oceans directly. It doesn't seem an impossible distance.
Strawman. To assume the similarities between space travel in the 60s and AI now only goes as far as "current popular tech" you're either not arguing in good faith or severely short sighted.
I don't understand what you mean by "leak" here. You can definitely make a secure random bit generator with a stream cipher. Once it's fully initialized/seeded, it's practically never going to run out of random bits.
The other team would be the one the OP is questioning.
> Right, but why should we care?

Exactly! You only care about your own preferences. Nothing wrong with that.

So you should not be surprised when people who want to work in an office with other employees in an office don’t care about the people who want to work remotely.

> You can't make everyone happy, but it also means you should not take away a huge benefit for many

It doesn’t mean that at all.

It means that removing what some see as a huge benefit may have negative business consequences — or it might not.
Below is a better link at TV Tropes that displays the spoiler tag right away (just scroll down just a little bit).

I started trying to find the spoiler tag being used in the link I previously provided and they were not easy to find. Quite frustrating...

https://tvtropes.org/pmwiki/pmwiki.php/AntiHero/MarvelCinema...
> Humans are wildly dangerous, vengeful, intelligent and resourceful.

We spend the beginning and end of our lives pathetic, weak and vulnerable. There is a limited window of time in which we are dangerous, vengeful, intelligent, and resourceful enough to be threatening.

We have no armor, no fur, no claws. We freeze to death in the cold and burn in the sun. We can't breathe underwater, nor can we fly. Being bipedal we can't hunt anything by chasing it and beating it to death; we leverage deception, surprise and traps and are quickly fucked when anything uses the same tactics on us.

We're good at leveraging technology. That's the only reason we're apex. If we can't exploit some other creature in time to adapt to the current situation, we're dead.
If you jail everyone, you'd have jailed all criminals, too. Therefore you could say "pretty obviously intended to stop criminals". But punishing everyone because of a malicious minority defeats the point of your entire action.

They could've just as easily prevented scalping by saying "you can sell your CyberTruck, but for not even a dollar more than the purchase price."

Curious how that's NOT what they said, isn't it?
> Azure Application Gateway

Such a shame that you're forced to use this. We run Azure Function apps directly to public traffic and the experience is really nice & simple. Not once have I had a "I wonder if a middleman ate my request" experience. OIDC works flawlessly for us.

I would quickly grow to hate my tech stack if I had to cram stuff like AAG into it. Right now, we can spin up a very robust stack with ~3 products. The moment I have to start playing with network policies, I feel like the security level of my solution goes down not up. Manual routing, firewall or certificate management is a canary to me in 2023. I don't want to touch any of that stuff anymore - I'll probably screw it up at some point.

Perhaps you could reframe the AAG as creating an emergent situation that is less secure than the alternative without. It certainly sounds like an honest possibility based upon the workarounds you seem to be entertaining.
Might have a been copy protection code requiring the coprocessor?
I wasn't aware of that. Are they similar and eaten as a significant source of protein?
Just open all the locks and let 'er rip.
Couple of relevant points:

- On the new locks they recycle ~60% of the water used already, it's a smart system.

- Another commenter pointed out that they have to allow fresh water through the lock system to prevent salt water contamination of the lakes.

I guess a reason they haven't retro-fitted (yet) the 60% water saving mechanism to the older locks is the scale of the engineering efford involved, plus they can charge people $4.5 million to jump the queue ;)
> Management hears about a WAF and makes that a requirement and moves on.

In this case, a WAF is giving the illusion of safety. So I feel like you're actually making an argument against WAFs.
> They are trying to get people to work with them who don't want to work with them. This is exactly the same thing as RTO does to WFH people.

This is not at all the same. There is a clear difference, again, between the RTO position which requires positive action from other people (travel in to work, come into a physical location) and the WFH position, which does not require anything of their RTO colleagues beyond what the job requires anyways. How can you not see the difference here?

"They are trying to get people to work with them who don't want to work with them." What is this supposed to mean, concretely? Are you saying that because Bob is not in the office you don't want to work with Bob, but Bob is forcing you to work with him? This is not the argument WFH people are making. It is management that has a vested interest in requiring people to work together. I've never heard a serious proponent of WFH arguing that you have to work with them.

Are you saying that having remote team members requires you to use tools and practices that you don't have to in an in-person setting? I would counter that Jira, Zoom, Slack/Teams, Email, etc., all of these "remote/async" tools are not unique to remote workers. And they pre-date the normalization of remote working. Even in a fully on-prem model the vast majority of companies are still using these tools because of the convenience and control they give management, because they have offices distributed geographically, and because they want to be able to communicate beyond the in-office hours of operation. Again, this is not something that the WFH people are pushing onto the RTO people, it is something management at large has decided for the company.

Really, it's hard to take you seriously and I'm sorry for my attitude, but I can't help but see this as an extremely entitled position that is requiring other people to go out of their way to accommodate your desires. If I'm misunderstanding, please correct me and name a single positive action that a WFH proponent is requiring an in-office proponent take that would not be part of their regular job responsibilities in an in-office setting. Not a "they are depriving me of my preference because they just won't do what I want," but something they are actually requiring you to do.
I mean this is true, but it's also true that every cipher can be trivially broken if its key leaks. Yes: you want to rekey regularly (and that's not complicated). But whatever circumstance allowed your state to leak in the first place is most probably repeatable by an attacker, so you likely have much bigger problems than PRNG design.

If you want to snipe at people for freelancing their own CSPRNGs, the better point to make is that people should be relying on the OS's secure random generator to the exclusion of everything else; there are systems security reasons to avoid userland CSPRNGs.

But I think for the most part these are just people enjoying working out how a CSPRNG works. Which, mazel tov!
Calling things ‘lazy’ is intellectually and morally problematic.
It's certainly debatable how good a job college is doing, or even what the right metrics are, but my point is that it's attempting something on a completely different scale than the Thiel Fellowship.
And when the pieces don’t fit together, no one faces a penalty.

https://insideevs.com/news/694929/tesla-cybertruck-matte-bla...
F** diamonds.

That's all the contribution I have for this thread.
All the things that "monoliths"[1] bring web components ate not bringing, and won't bring in any conceivable future.

[1] There are very few monoliths among the frameworks these days, and apart from React and Angular [2] most aim for rather small bundle sizes

[2] Out if the blue Angular just released version 17 with all the goodies you'd expect from a framework in 2023
It's not about fearing them - it's about them not having any choice but to do business with cloud providers, and that being the case in every industry. The whole thing gets set by whatever prices a handful of companies decide to charge. You are even starting to see cloud subsume the holdout big iron that is generally used to handle large transaction volume processing. IBM is pivoting towards cloud. AWS is rolling out mainframe emulation. Etc. We accept regulations on financial industries because of how influential they are, but why not regulation on cloud companies and services which offload much of their liabilities?

I also don't really think you can point to banks as especially profitable businesses in today's environment. They are getting hammered by high interest rates. I'm not committed to this new construction of the economy, but it is interesting that SVB failed despite being the sole bank for cloud focused start ups. It points to a system where normal finance rules we have taken for granted no longer apply.
11 funding rounds, the last one being a "crowdfunding" round. What's new in round "L" that wasn't there in 2007's round "A"? I always get a kick out of these "eternal startups" that don't have customers or a sales pipeline. At least they're getting some DARPA money.