skysight-inc/HackerNews huggingface dataset:
> These days, I don't even think about it

When I read this, I assumed you meant "I don't even think about heavily structuring and documenting my code". And my intuition (after 14 yoe or so) is that this is correct. Heavy structure for a greenfield area is a premature optimization. And comments are only for expressing what can't be expressed using code or other tools. I'd say if you need _heavy_ comments you've chosen the wrong tool for the job.

Then again, maybe I'm just not smart enough to anticipate the right levels of abstraction on the first go.
I haven't used Ubuntu desktop in a very long time. Not since they first introduced Ubuntu One or whatever it was called years ago. I also haven't ever used Debian desktop. But as a CLI-only environment like a server, I find Debian to be completely indistinguishable from Ubuntu.

Personally I've been using Arch for a long time. I prefer it in basically every way, except the pacman interface is hot garbage compared to apt. I wouldn't recommend Arch for everyone, and I don't recommend the base Arch distro for anyone. Get one of the nicer arch variants like Garuda or Cinnamon.
What about my comment, in which I said that I have successfully used and advocate for keto, makes you think I was talking about "traditional dieting?"

Keto is challenging for most people, too. I agree it's much easier than how most people attempt to do caloric restriction, but it still is nowhere close to taking a shot.

Eating out at restaurants can be challenging, mixing keto with e.g. vegetarianism can be challenging, certain social gatherings (like holidays) can be challenging, the brain fog (temporary as it is) can be challenging, etc. etc.

Again, none of this to suggest semaglutide et al. are without side effects or difficulties, but things that require willpower are definitionally hard, and keto is definitely one of those things.
a lot of devices, especially phones, will randomize the hardware MAC address when on an unknown network or doing open pings, but if a known SSID is found it will use a consistent, and often correct, MAC
Also chiming in on the insects bit: most mass produced food can contain insect remnants (among other things).

Source: https://www.cnn.com/2019/10/04/health/insect-rodent-filth-in...
> Paywall

Try to switch off Javascript.
You might enjoy [0]

This is one part of a series going through all leverage points and
analysing them with respect to software/digital issues.

[0] https://cybershow.uk/episodes.php?id=19
Ask HN: Do you homeschool?
Our middle-schooler is currently at a private school that we loved when we enrolled him. However in recent years it's gotten steadily worse, primarily due to high leadership turnover and faculty/leadership conflict.

We're thinking about homeschooling him for the remainder of grade school and then re-enrolling him into the traditional school system once he reaches high school. We're concerned however that we may not have the patience or pedagogical experience to effectively teach him.

Does anyone else have experience trying to homeschool? Success / failure stories, or best practices?
That wasn't an API breakage. The maintainer reworked how HID events were handled.
It's because the algorithm is easy to implement and efficient in terms of compute usage to match a gesture. It's a "cheap and easy" recognizer, a $1 recognizer. The name has spawned a whole host of similarly named papers which you can see on their "impact" page https://depts.washington.edu/acelab/proj/dollar/impact.html.
This is just another version of hippie degrowth. Objectively you'll be worse off but you'll love it. I think if people could just will themselves to be happy ascetics they would have done it already.
OP didn't describe any particular legal precedent though, so we don't know why OP thinks the AOL deal was legal. There's a big difference between "nobody cared enough to sue or prosecute X behavior" and "X behavior has been tested in court and was ruled legal".
I combined a bunch of awful "tech tips" websites into a working approach:

1. Reset my TV to factory settings.

2. Go into the "apps" item while it desperately tries to update itself

3. Go into "Developer Mode" by pressing 12345 on the remote.

4. Restart the TV by holding down power button for 2 seconds.

5. Open "Apps" again

6. Open the cog.

7. Under the app you want to remove, press "Deep Link Testing" and then hit cancel.

8. If the "Apps" app hasn't been updated yet, your delete button should magically reactivate.

I was able to delete the product manual which is like 90mb, all others were reloaded after another restart though but it gave me enough wiggle room to update and install other apps.
The prisoners are not our friends. The officers are stuck together without phones for 8-16 hours/day. We spend hours crammed into the same small area with no distractions but each other. We have to entertain each other or lose our minds. I've met the best and worst people at work.
It doesn't. A loss is a loss.
Application load balancers do the same thing.

I mean, you know TLS will have to be terminated at some point anyways. Might as well rage against NGINX terminating the TLS instead of whatever back end you're using (Node, Django, whatever).
"Absurd" is quite an editorialized part of this headline. Maybe Gizmodo should report on the facts and let us decide if we think it's "absurd?"

I personally think it's reasonable enough. For one, buyers signed on the dotted line. It's a luxury product that nobody needs. They don't have to buy one

For two, nobody likes scalpers.

I don't think any court would award the damages that Tesla would be seeking here but they're well within their rights to try and enforce their contract, and they're well within their rights to ban customers (Ferrari is also known to do this to owners who "tarnish their brand")
Can you paste a transcript for any of those examples here? I’m genuinely curious. I’ve never seen a single actual transcript from anyone talking about how they use ChatGPT all the time for programming work and it’s great.
Great to see OBS also being used on this one - although I imagine setting up and configuring that many instances of OBS must have been a bit of a pain.
"It's because it ensures everyone can use the same web"

But they cannot. A blind person just cannot make good use of a visual map feature, so there is no reason to make it in pure html for accesibility. You'll have to find other ways to serve them. (I assume mostly with text descriptions of the area)
Offtopic tip. Buy a pc screen instead and attach a nvidia shield or your own box. I never return to normal tv screens again. I also like the more natural color feel of pc screens. Tv s are bloated with color filters, frame interpolators and more.
>We've gone from an overall 50% five year survival rate to over 70% in just a couple of decades.

Has there been a change in actual life expectancy, or does early detection mean that 5 year survival is equivalent to 5-(average years earlier detection) year survival decades ago?
> that the user is not supposed to have access to

The question is, are you ever going to run an LLM on data that only the user should have access to? People are missing the point, this is not about your confidential internal company information (although it does affect how you use LLMs in those situations) it's about releasing a product that allows attackers to go after your users.

The problem isn't that Bard is going to leak Google's secrets (although again, people are underestimating the ways in which malicious input can be used to control LLMs), the bigger problem is that Bard allows for data exfiltration of the user's secrets.
I was scammed out of a few grand in a moving scam a few years ago over Zelle, via my bank

Does this mean I can get that money back? Who do I talk to/where do I go to do so? My bank? Zelle itself?
It's a huge benefit for agency/consultant work. You can jump into a project you've never seen before and just know where everything is and how it's wired together. You can be immediately productive.

The downside is if you want to do something that cuts "across the grain" so to speak, things can get messy. Combine that with Ruby's high dynamism and someone trying to be too clever can make a mess fast (alias_method_chain anyone?).

Yeah, node has been incredibly successful but I think it's a fair criticism to say it's also a victim of that success in that it just feels like so much arbitrary complexity. And the flavor of the month changes so fast that projects end up this weird mishmash.
Not OP but the screenshot looks identical to Grafana.
I'm not saying this justifies the ethical problems and environmental impact, but I think we cannot dismiss the emotional significance that meat-eating has to many cultures.

Cooking is a major way in which families bond and connect with their ancestors. Traditional cuisine in Italy, France, the American South, etc. all prominently feature meat.

I remember talking to my mother about the ethical issues of animal farmimg once (we're both meat-eaters). She looked like she was going to cry as I explained to her that all the recipes she'd learned from my grandmother and then lovingly cooked for us for years were rooted in dystopian animal misery and environmental destruction.

I have huge respect for vegans and vegetarians. From a moral point of view, you folks are doing the right thing. That said, I'm more interested in reducing my meat intake and sourcing meat from hunters and small-scale local ranchers than I am interested in eliminating my own meat intake.
say what

Texas has made a conscious decision since 1935 when FDR signed the Federal Power Act to stay away because they didn't want the feds to mess with their grid. The feds have no power here because the Texas grid does not cross state lines. When West Texas Utilities did connect through state lines in 1976 (called the Midnight Connection) both HL&P and Texas Electric Service Company immediately disconnected from them to avoid falling under federal regulation. It was not the feds. https://www.bakerinstitute.org/research/connecting-past-and-...
Cumbersome build and deployment, and high level of ceremony alone prevent it from being a sufficiently competitive choice.
If you used docker run -p 5434:5432, this port is accessible from your network, not just your local machine. Couple that with an IPv6 uplink to your ISP (i.e. typically a gobally reachable IP address for your machine) and a disabled firewall in your home router, and that's one possible way how this could have happened. Of course, home router firewalls are not usually disabled. But it's a possibility.
The argument in this post seems to be not against WAFs, but against poorly written and slow WAFs.
Infinite Context LLMs: Going Beyond RAG with Extended Minds
That sounds great(-ish) when the company in question is one like SolarWinds that does hundreds of millions in revenue, but people and companies are equally reliant on open source software or software from tiny businesses. Trying to fine random Github users or the Linux foundation or whoever seems like a losing strategy.

It also ignores the point from the article that the solution can't be trying to make all software secure. Whatever the incentive mechanism and whatever the source of the insecurity, it's unrealistic to think we're ever going to be able to make that a reality. But designing the environments software is used in such that broken software isn't the end of the world seems doable, if also incredibly difficult.
Is it possible it's not the current that causes this but the leeching of ions into the soil from the electrodes?
Isn’t any AI system susceptible to “buffer overflows” in the prompt?
> So rather than reduce the animal protein in our diets, we’re determined to farm insects to supplement it.

Protein is really important for our diets. Many adults even in the first world are not getting enough of it. It's not some "luxury" macromolecule the we should just consume less of (like sugar). Most peoples diets (at least in the US) have too many carbs and sugars (plants) and not enough protein (meat). You can get the protein you need from plant based sources, but you have to be really intentional about it and work hard at it. Meat contains every nutrient your body needs besides vitamin C.
You can be asked all kinds of things. It's a little trick law enforcement tends to use: ask for things that the person being asked doesn't have any obligation to do.
On paper, <datalist> is great but as implemented (or not) in all browsers, it has issues. This post walks through an example of using the element but also summarizes issues (as of June 2023): Under-Engineered Comboboxen?

https://adrianroselli.com/2023/06/under-engineered-comboboxe...
Knowing your supply chain is still going to be an important aspect of fixing this. The author is absolutely right that our build systems can be compromised, but securing them is another part of securing the supply chain. Managing updates carefully is still yet another aspect of securing the supply chain. Auditing (or 'deploy another agent') - is still going to be an important aspect of verifying that various parties are still operating as we would expect. Making these better are all pretty important toward hardening our systems.

The proposed solution - 'run software in a way where we don't really care if it has a vulnerability, because it will happen' - is close to reality, but not quite there. The reality is that no matter how good our technical solutions are, trust ends up being a people problem, which means that compromises of that trust are going to happen. No matter how fine grained your capability based system is - if a system has the capability to do anything, then you're going to suffer loss when it is compromised. If a system gets compromised or corrupted and you don't care, then it's not a system you were using for anything useful in the first place.

While capability based systems are another important part of the solution, I would counter-propose that what we're actually looking for is compartmentalization. Acknowledging the reality that parts of our system are going to be compromised, and we are going to suffer some loss when that happens, carefully controlled capabilities can help scope that blast radius of compromises.
I like self checkout when I want it - for a few small items with no bagging; WA state is nice because you can take alcohol through self checkout.

I don't like self checkout if it's the only option and I do not want it...
I hate Zelle; in South Florida, that's all the rage. No one wants to use Venmo or other more user-friendly apps.
I partially disagree to this post.

What the author wants is unrealistic and their understanding of detections isn't ideal. I assume they know that a SIEM doesn't need agents. But an EDR does. EDR can be a well configured auditd/sysmon and a response agent. Or you pay up and get a "nobody gets fired for buying crowdstrike".

One reality is that APT hacks are out of scope for most orgs.

Another reality is that for at least a decade and a half the security industry has accepted that prevention is not a good strategy against APTs. This is why you need that other EDR agent and SIEM. You focus your detection on what the threar actors do after compromise and around your important data. For most APTs this is effective but it is far from perfect. The biggest problem is people like the author who are not seeing actual compromises happen all the time.

Security costs money and it can only cost as much as the risk tolerance of the company. It can't cost so much that the company's profit margins take a beating for example. That's why NIST recommendations are important, so execs can say we are spending enough.

Another side of prevention is that it needs to be as invisible as possible. If users notice it or it gets in their way, by default it is bad, you have to do things to compensate for the deteriorated user experience. You can add MFA for example but better make up for it by making it a yubikey and doing SSO.

Keep in mind that corporate networks are a hodge-podge patchwork of random things pieced together over time. Threat actors need one mistake to abuse. And the P in APTs mean they'll try until they find the mistake, it's their day job quite literally lol.
Oh, maybe that's what I saw. I'll have to look again. Thanks for keeping me honest.
Show HN: Amazon Mock Interviewer, a Custom GPT to Prepare for Amazon Interviews
Indeed a sync'd grid is what is typically being called a single grid. HVDC only got the required fast breaker a decade ago so it is nowhere near as widely deployed as the AC system (it's hard to make a HVDC breaker because even if an AC breaker arcs it'll self extinguish in an extremely short period of time as the voltage crosses zero, HVDC never does this so you need something to force the current to zero). Maybe the definition will change over time, it is, after all, completely arbitrary.
CLRS is terse. The mistake many make is not reading it precisely. By that, I mean - read each passage once, build a mental model, then read it twice more to confirm or refute that model. Each word is there for a reason.

For a different treatment, get Tim Roughgarden’s book. Brilliant presentation.
At the end of the day, what really matters for most people is

1) Certifications (FIPS...)

2) Speed.

SHA-256 is fast enough for maybe 99,9% of use cases as you will saturate your I/O way before SHA-256 becomes your bottleneck[0][1]. Also, from my experience with the different available implementations, SHA-256 is up to 1.8 times faster than Blake3 on arm64.

[0] https://github.com/skerkour/go-benchmarks/blob/main/results/...

[1] https://kerkour.com/fast-hashing-algorithms
I'm considering elevate-ing my workstation from Alma8 to Alma9 sometime soon. Maybe this is a good reason as any to do it...
If you're handy with wood, you use wood.

If you've got a 3d printer, you make a 3d print.

If you're more of a acrylic guy, then you take your laser-cutter, cut out some shapes, drill a few holes and bam you've got a box.

If you got none of these and just want a bare-necessities box, you use an Altoids Tin that costs about $25 for 12 tins... and they have these kinda useless mints in them though. So you buy those boxes, then you throw away the mints and shove your project in there.

If you want slightly better than the Altoids tin, you buy a Hammon Enclosure. (https://www.hammfg.com/electronics/small-case).

If you're like me, you wrap it in electrical tape, and then wrap that in duct tape or something. Maybe color on it with permanent marker.
Spring and ASP.NET.
PC monitors are dramatically more expensive though. A regular 55 inch TV is like $300-$500, a monitor that size is gonna be thousands of dollars. (Edit: And you can usually tinker with the color profiles or just turn on Game Mode if you hate the enhancements. It'll never get as close as a properly calibrated PC monitor with ultra color range or whatever, but it's fine for entertainment.)

Same with the Shield, it's like $150-$200 while a Chromecast with Google TV is $50 and does pretty much the same thing. Either would be a huge upgrade over integrated smart TV UIs.
Yeah this was a bad purchase overall, but I figured if worse comes to worse, I can just hook up a media box of some sort and entirely ignore the rest of it. Definitely getting close to that call.
Could you give an example of how ChatGPT helped you specifically with Rails?
According to the labor market experts too often heard from here on HN, there is no such thing as a labor shortage. It’s simply a pay shortage. The reductio ad absurdum response to this is all we need to do to maximize human happiness is reduce the population to a single person and increase their salary to $25T/yr.

Labor shortages are real, especially in fields like elderly health care. There’s a demographic, spatial, and training component to the problem as well. Even if there are sufficient people, they may not be in the correct location, have the right skill sets, or at the right phase in their career. Immigration is one way we can address this problem, by increasing immigration of people from younger, lower wage countries to older, higher wage countries like the United States. This will increase average living standards, an admirable humanistic goal we should all be supporting.
Luckily there are still some companies building dumb TVs, and with reasonably good quality.

I personally have been buying Swedx for 5 years or so.
Yeah, what isn't dystopian these days.

Cameras are recording you every second of every day. All governments are monitoring your internet habits and you almost certainly are not doing enough to counteract them.

All governments even admit to it, there's a major "scandal" where everyone acts surprised like it isn't the 10th time its happened in the last century, maybe even the last decade alone.

All your personal data has been leaked by both bad actors and genuine mistakes. There is no restitution for this. Privacy is dead, and it's been dead for longer than you think it is.

If anything, drones are a step backwards because we can actually see them.
My first science fiction experience was watching Fireball XL5 on NBC in the early 1960s. Somehow I missed all the others...though the Andersons' live action film "Doppelganger/Journey To The Far Side Of The Sun" was decent.
I see we have reached the bargaining stage of global warming.
You're fighting the good fight.
According to wiki, H.264 was released on 17 August 2004. In US software patents last 20 years, so in 10 months the original version of it should become unencumbered.
I read it and it's a design decision documented here:

https://docs.aws.amazon.com/waf/latest/developerguide/waf-ov...

For oversize requests WAF can be configured to reject it.
I found my calling when I watched Person of Interest.

I still think that the series was ahead of its time, and predicted a lot of scenarios that happened afterwards in reality before anybody thought of that being even remotely possible.

I also have the theory that every child that owned a C64 or Amiga went on to automatically be drawn to IT security, pentesting or similar areas.
Like “drop” can mean “release” or “cancel”.
I hate PayPal (Venmo). I see no reason to give an unnecessary middleman control of my funds, or see my transactions.
The model itself might be, but the tooling should prevent this. The non-system input should be truncated, or maybe summarized or something.
I reviewed this, it was “okay” but some part disagreed with me.

A better treatment is Tim Roughgarden. Not free, but not expensive either. Worth every penny and then some. (I learned of it from a HN commenter.)
I'm not sure that's actually true, since basically every company and every project of significant size has been the subject of DEFCON presentations. Sure, it's temporarily embarrassing and unfortunate, but it's not like customers are going to move to the non-existent alternatives that have never had a security vulnerability.

There's certainly degrees of CVE counts and the like, but as long as it's not egregiously worse than everyone else, being the subject of a DEFCON presentation puts you in pretty good company with literally everyone else.
Note that, in practice, quantum logic does not have quantum hardware that can run it at the moment. So that might limit the usability of such knowledge for the near future.
> My team is starting to rewrite some of the services we own in Golang because Rails is no longer a good fit for the problems and scale we use it for.

What sort of web app do you have that is CPU bound?
I think the main reason is that the (big!) ships just don't have room to pass each other anywhere other than on Gatun lake. They can't pass in the Gaillard cut, and not really in the approach harbors either. So it's one way traffic basically.

Also, anything taking the old locks out of operation for a few weeks/months is basically a no-go. That's just too costly.

As a side note, do keep in mind that water is already "saved" a little by going up in a convoy. With the three lock chambers, you get to reuse the same water three times. Not exactly true of course because convoys start and end, but you get the idea.