skysight-inc/HackerNews huggingface dataset:
From "Evolutionary Approaches to Stereotyping and Prejudice" [1]:

> "An evolutionary approach thus (a) seriously considers the possibility that prejudices, stereotyping, stereotypes, and discrimination are in some aspects evolved adaptations, like the inclination to avoid dangerous animals."

> "For instance, individuals inclined to avoid predatory beasts were more likely than those without this inclination to survive such encounters, thereby increasing the likelihood they would successfully reproduce. To the extent that this avoidance inclination had a genetic component, and that the benefits of avoiding such animals existed for a long enough period of time, modern humans would come to be characterized by this avoidance adaptation and the cognitive and emotional inclinations causally linked to it."

The "we are past that point" remark refers to the fact that in our modern society we are no longer subject to "dangerous animals" or "predatory beasts" in our daily lives, in the literal sense.

[1] https://bpb-us-e2.wpmucdn.com/faculty.sites.uci.edu/dist/1/8...
Look at the incentives. To get funding for research, it's easier if you have prior research that supports your proposal. Hence a lot of stuff gets written up in very optimistic terms, to help get more funding to continue the research. It doesn't seem to matter that none of it really works in the end. It's also the reason people don't publish failed projects, even though from a science perspective those might be helpful to identify dead ends.
Almost all of us in Europe have never known anything but this peace so it almost feels a given. (I doubt a lot of readers are above eighty years old.) Yet a lot of kvetching about regulations happen and so it's good to remind people they have their own use.
I just buy new small breadboards and jumper wires and make it so that it looks nice. Jumper wires of the proper length, not jumper cables.
We all know how enterprise software vendors oversell and underdeliver. I can only imagine ITsec products in particular being even worse.
Yup. It’s not wrong though.
I am an independent IT contractor that games on his off time.

Recently, I switched to Linux from Windows and it has been a good experience so far. I went with POPos because of how they integrated steam and the video drivers into the distro. It works great except shit breaks like booting and other things some times when they release major updates. I actually really like way Arch is designed. I was thinking of switching to Manjaro for stability reasons and I dont want to rip my hair out trying to get gaming to work in other distros. Im really looking for release stability with the ability to keep my gaming environment working. Any suggestions?
Show HN: You can try my unified Nix environment for macOS/NixOS
Yeah i can now see your reading of my comment. By "Non event" i meant the absence of an event. not that it's non-impactful. I guess the difference is objective measure of "did a thing occur?" vs the subjective "Did the thing I wanted/expected occur?" (my usage of non-event being the former) .
Hallelujah. Also, with many single-phase apps, WAFs don't make any sense - the HTML/CSS content is just served statically, so the potential vulnerabilities are in the API, which IMO is much easier to harden. Without going into too much of a tangent, this is one reason I'm a big fan of GraphQL. It's strong typing and support for custom scalar types means malformed content gets rejected before it even gets to your code. For example, most injection attacks require the use of some "special" characters like < or ;, but many field types have no need to support those characters, so instead of just typing "strings" everywhere, you can have things like Email or Date or SSN or Name scalar types that are more restrictive in the characters they allow.
Do people not just sell like "complete package" things?

The board in the article is $13.49 ( https://www.amazon.com/dp/B072HBW53G ). If you could get an enclosed, complete thing for $20, including the board and whatever you need for it to run, that'd be much less of a PITA than "brand new hobby" or "find someone to 3D print stuff for me locally and deal with that whole hassle".
Let's not forget economic minister of Greece, as disastrous as that was.

I do like his ideas, but he just really did not seem to play nice in politics.
It's a widespread assumption that defaults matter. But to what degree? I came across it first when I saw Dan Ariely's talk and his work on defaults (may not be the proponent)[1] but my takeaway is that it matters when you don't care about the as much.

For everyone with Windows, you start off with Edge/IE and then Bing as a default search engine. Yet, most switch to Chrome + Google almost instantly. People care about their browsing experience more than we give them credit for. Remember in 2009-10 when Chrome was new, it managed to win market share cos of superior product when it was not the default on Windows/Linux/MacOSX.
On mobile too, the behavior is likely going to be there to a certain degree. While Google pays Apple a massive fee, there was an admission earlier in the trial that both Mozilla and Apple would still go ahead w Google (even without the deals) because of superior UX. Not sure if both said it, but one of them certainly did.

[1] https://danariely.com/the-power-of-defaults-in-how-we-eat/
Good that you realized it. Far too many managers have the impulse control of a puppy that just had a double espresso. Every hour a new task that "has priority".
Neither NATs nor firewalls were invented with the Internet, and it doesn't matter. NATs are a thing now. And even if it wasn't their original purpose, NATs are used as firewalls. Functionally they're similar except NATs also rewrite addresses, which is actually a nice feature too. There's some reassurance in having such a clear default-deny behavior, with local IPs that aren't globally unique to begin with.

What's the big problem with NAT existing anyway, especially when you're free to ditch it on your own network? Maybe because the main point of getting rid of NAT in v6 is to allow any device to claim a public IP on default networks, for p2p applications. NAT's default behavior would get in the way of that. So it seems like ipv6 is about pushing default-allow behaviors onto network operators. Again this is pretty separate from the address space crisis.
So funny SQL query example, do you realize you could describe your exact query to the engine itself in the more precise and short terms? Writing "select X from Y where Z join XX" seems much more practical and rational than using this whole sentence "Write a SQL query that grabs records from X, joins with Y, filters by Z" to achieve the same.
From a June 24, 2021 ACLU press release:

BALTIMORE — The Fourth Circuit Court of Appeals, sitting en banc,ruled today that the Baltimore Police Department’s (BPD) aerial surveillance program, which put the daytime movements of virtually all Baltimore residents under surveillance for 12 hours a day over six months, is unconstitutional.

https://www.aclu.org/press-releases/federal-appeals-court-ru...

The decision is worth a read:

https://law.justia.com/cases/federal/appellate-courts/ca4/20...
I think the trick here is quite clear from the article: these programs simply do not aim for a "decent grasp of quantum". That is at least my take-away from a course that does not consider the hydrogen atom "a real-world example"...
I did it myself, it's about 10MW continuous assuming there are 40 ships each taking about 3000 seconds to traverse the locks. Each lock is ~30x330x10 cubic meters or 1Billion liters (conservatively).

A Watt is 1 meter(lift) x 1 Newton / second.
There are 30 meters of lift. Each liter is 1kg and gravity (9.8m/sec2) makes that about ~10 Newtons (9.8N due to gravity).

So you get 10^9kg x 10N/kg x 30m / 3000 sec = 100MW continuous. That's about 100, 000 horsepower. Each lock would need more than 16MW of pumping.

Solar/hydro power from the rain in lake Gatun is well over 100MW. Due to leakage it's probably 5-10x that or equivalent to a larger nuclear power plant.
tenderlove is legend, on both the Ruby and the Ruby on Rails sides
I look if if I can find some already assembled things and try to build an project around it. For example I used an pictureframe to build a nice neopixel thing, I also documented it on my website, https://mikub.me/post/(1)/

So what I do is I usually look around what everyday objects could become nice enclosures for microcontrollers and such things.
A fun thought experiment is to declare yourself "CEO for a day", or "PM for a day". You've been complaining about a societal problem, say the lack of affordable housing, and on this day you get the keys to the kingdom.

How would you solve it? I'll run by a few ideas from the perspective of the Netherlands, as I'm most familiar with it.

"Address land lords by more heavily taxing them or applying caps to rent".

Tried. Has the exact opposite effect. They'll just sell the property. There will be fewer rental homes with even more price pressure.

"Intervene in investing. Control what gets build, introduce price caps, who gets to buy it (for example teachers), etc"

Tried. Projects will simply be canceled. We have a 70% decline in new supply. In fairness, also due to the high interest rates.

"Land should be cheaper"

Can't be done over here. It's the main income for municipalities. Take this away and local taxes skyrocket.

"Building the home should be cheaper"

Can't be done. Materials are more expensive, so is labor, and building standards are much more complicated.

All of the above applies regardless of zoning. So you're in the situation where building a new home costs about 400K at least. Your idea of an affordable home is 200K.

Do share how you plan to solve that?

It's obvious that there's no easy fix, otherwise somebody in the many countries that have this problem would have fixed it already.
i worked on the gpu/infra side of this, so feel free to AMA
Ultimately the LCM is just a SD Unet trained with a new objective, so a lot of SD optimizations are transferable to LCMs
I would not call this "destructive." Solving problems is fun in its own right, and things would start making sense in their interconnection, regardless of whether they can be applied to sciences or not.
Especially when you only have the product in your pipeline in the first place because of some security compliance checkbox that needs to be checked ...
Tuta Is an Independent Company and Not Linked to Five Eyes Secret Services
I must be misunderstanding the question because anything that queries in rails uses AR and that's often done in both lib code and controller code rather than behind a dedicated module boundary.

What is it that's not making sense to you?
Sized to fit in a car?
Can somebody involved in the industry give a sense of whether there’s any reason to get excited about quantum computing?

A lot of the hype seems to come from physicists excited about physics (understandably), and spooks who want to crack public key encryption.

Can anyone convince me I should care?
Pretty much every SQL injection attack is going to need to be injecting single quotes with some uncompliant lack of parameterization someone put together.

Simply using parameterized queries solves this problem, no amount of semicolons can escape it.
Nicely written and the author clearly has more experience than myself. I did, however, get hit with a data breach via SQL injection, and everyone I spoke to (not vendors or sales folks) seemed to agree that a WAF would have blocked the attack outright.
And I sincerely hope for the better :-)
I call it magic security pixie dust.

You sprinkle it on top of code riddled with SQL injections nobody could be bothered to avoid or fix, and now magically the code has a become secure!

You’ll find it on the shelf next to auto-scaling cloud wizardry, which can similarly be used to fix the total absence of indexes in the database.
Most large companies have too many developers and too many teams to expect/assume that each team will do the right thing for security when putting something in production on the public Internet.

Why? Because most software developers are bad at security (I said most not all).

So yes do all the things at the bottom of this article! Teach security-by-design to all your teams. Make sure they know what OWASP is at least. Make sure you test all the things. Either own or rent red teams.

But if you're a big enough company, you probably also need something centralized like a WAF, because you want defense in depth.

WAFs are far from perfect, but in my experience they are better than not having one in 2023.
Up until about World War II and use in cryptography, number theory was pretty much an un-applicable field of mathematics.
I think it is also possible that it will correct towards scales and formats that are more economical.

Houses can be built that take minimal labor to construct and maintain. We lived in them for most of human history.
i also worked a bit on the infrastructure!

there's a very cool consistent hashing and probability stuff going on for the GPU routing logic but again, i'll write it after this fire ends similar to a post-mortem.
Could it output drones for existing sims?

X-Plane Plane Maker: https://developer.x-plane.com/manuals/planemaker/

Juno: New Origins (and also Hello Engineer)

MS Flight Simulator cockpits are built with MSFS Avionics Framework which is React-based:
https://docs.flightsimulator.com/html/Introduction/SDK_Overv...

https://news.ycombinator.com/item?id=37619564 :

> [Multi-objective gym + MuJoCo] for drone simulation

> Idea: Generate code like BlenderGPT to generate drone rover sim scenarios and environments like the Moon and Mars

https://news.ycombinator.com/item?id=36052833 :

> awesome finite element analysis https://www.google.com/search?q=awesome+finite+element+analy...

Also: awesome-cfd

https://news.ycombinator.com/item?id=31049608 :

> Numerical methods in fluid mechanics: https://en.wikipedia.org/wiki/Numerical_methods_in_fluid_mec...
Smartphone cases and drugs.
"Going to an empty office": why in the first place?

If there are so many people missing the office life, why don't they go to the office? Why do they need to be forced?

I really believe given the conversations I had with some colleagues (and others in general) that people who miss the office want an office full or at least 70-80% full because of the way it has always been before covid - it doesn't matter if there is 20% of people, it's just not enough.

This is what I personally don't understand, and this is why I say people are now forcing everyone else to go back to the office. Which is not as those who WFH.

Full remote (no offices etc) is a different beast - I am not talking about that.
I could very easily believe that if I saw proof, but it just feels a bit wrong to train a model on model outputs.

Even in the main article here, the model did better with fewer fine tuned examples. To us, the auto-generated examples might look different enough and might look good enough, but they were all generated algorithmically. Feeding more examples in might easily be leading it to focus on some artifact of the embeddings or generating model that we just don't perceive.
> Fedora is likely a better choice for most people because it offers more up-to-date software.

This was the case with older versions of Debian, but these days it is quite nice.
In your opinion how does Google, Microsoft, Apple able to accomplish anything?
Fiction writing exists, should it not be enjoyed? Sometimes mathematicians invent things before scientists discover how to apply it.
Yes, that is true. I'm meaning the senators' interactions at a state-to-federal level is further beyond the average citizen's purview, whereas state senators are more likely to know who's fit to represent the state as a whole. As it stands now, we basically just have two houses of representatives, which is so stupid.
I know the video covered that it has been tried before, but it seems like the long term solution would be to actually excavate and connect the seas. We have much better excavation technology, and would allow for much, much higher throughput than this elaborate contraption subject to climate change.
Astronauts dropped a toolbag on an ISS spacewalk; you can see it with binoculars
This. Very "don't startle the cattle."
I don't know about others, but I have learned at this point that relying on proprietary walled-garden software is a terrible idea.
As someone from Austin,TX I read "flip it" very differently. As in crashed it, much like so many truck owners do here in Texas (the state with the worst traffic safety record).

By "flip" they mean "Resell". (presumably for a profit)
This did not age well https://twitter.com/Shopify/status/1724079230663979066
mv src vs. mv src/
Show HN: HowTruthful – help yourself and others think clearly
Thanks to Google eliminating all the roles under my engineering director this year, what once was a side project is, at least for now, my full-time gig.

It's a tool for constructing persuasive, clear arguments while acknowleging opposing arguments. It's inspired by a combination of the conciseness of twitter, the simplicity of writing down pros and cons, and the flexibility of hypertext to let people dive as deep into a topic as they want to.

I really think this can be a world-changing tool, and greatly appreciate any feedback you can give as you try it out. The "Intro" link at the bottom of the page opens an introductory video.
Here's an example recreation.
https://chat.openai.com/share/b80aa985-0d88-4cf3-8c87-c2047f...

I admittedly give it a vague question "where the signals overlap"

In context of the original thing I was trying to do, I was filtering a receive signal and trying to remove the delay from the convolution
In the same way you an "do ML" without knowing linear algebra and probability theory. Such people can barely extend anything, let alone design new models from scratch.
I remember feeling the same. As a child there's a sense that EVERYBODY knows better than you, open to reproach / correction from all angles. Part of being an adult is staking a claim to self-identity.
It wasn’t meant to “work”. It was an honest question.
These things weigh up to 120,000 tonnes - that isn’t something that’s going to move on road or rail.
> if it is not Turkey it is Türkiye. The former is perfectly fine in English.

Not according to the Turkish government.

https://www.theguardian.com/world/2022/jun/03/turkey-changes...
I've fought against WAFs in the past, but in govt departments, they are often a check-box in your security checklist that must be checked. I've even had to fight a security guy telling me I needed two WAFs because he wasn't convinced the first WAF was good enough (because it was a managed service and the vendor didn't want to share the specific configuration.)

In saying that, there are definitely use-cases where a WAF is required - especially if you have a legacy app on an older code-base that needs to be exposed to the internet.
Parameterised SQL queries would have blocked it outright also.

Parameterised queries however don’t need an annual fee and a team of security engineers to babysit it.
A few counters to this:

First off, most large applications need something on the edge to help deal with volumetric attacks. If you've already got something there, adding a light WAF engine isn't exactly a huge ask. It's (almost) free.

Also, WAFs let you "fast patch" against vulnerabilities. The Log4j example the author gives as a negative is actually a positive. Your vendor can help prevent you from being attacked while you have time to respond. Those rules given in the example are bad, for sure, and probably have false positives - but, a few days of a slightly higher rate of false positives while you patch is probably worth it to most organizations.

Lastly, WAFs let you increase "risk scores" of requests and IPs, which lets you turn up captchas and other roadblocks against malicious IPs. This raises the bar from the floor to somewhere about knee height. Not a lot, but one more thing for an attacker to have to step over.

I do agree, though, that people treat WAFs as a magic solution or make them really heavy. Against application attacks, I view them as a tool of medium importance. Also, there are also better and worse vendors out there. Personally, in a WAF, I view "less as more".

The more rules and complexity, the more problems you're going to have. Adding rules should be temporary, and there's very few reasons to have blocking rulesets for long running issues.
>The energy stored in that capacitor isn't available for you to use.

Well, it's only available to use when the power fails or something like that.

When you first power up, it requires a finite amount of time for the storage/filter capacitor(s) to charge up to their full design voltage before your circuit really works as intended.

Later when you disconnect incoming power, the stored energy from the capacitors does continue to supply DC power to your circuit for a finite amount of time afterward, at declining voltage as the capacitors are drained.

>This is evidently something similar but for AC. It stabilizes the AC voltage / phase because its momentum pushes back against whatever tries to disturb it.

Yes, I think this is it.

Seems to me these massive AC stabilizers would help maintain frequency and voltage during unavoidable events where the grid dropped below nominal, by more gracefully dropping when necessary as the grid sucks momentum from the stabilizer down to its own level at the time.

And if power completely failed it should end up in a more graceful "wind-down" as all momentum for all stabilizers require a finite amount of time to come to a complete halt, letting whatever limited amount of stored energy they contain be delivered to the grid until there is no more.
Yes, me as well. It's been 3 months since I started testing negative. My overall state is certainly better than three months ago, but this stuff persists. Based on what I've heard from people IRL as well as here, I'm not going to actually start worrying for another 3 months.
Perhaps there would be more water in total on land, but it doesn't mean it would be distributed evenly. Weather pattern changes caused by the rising sea level could mean that some areas get drought, even while standing right next to the ocean.
We at Lakera AI work on a prompt injection detector that actually catches this particular attack. The models are trained on various data sources, including prompts from the Gandalf prompt injection game.
https://en.wikipedia.org/wiki/Shuhari
Just checked, yep, pdf and epub on libgen, 10th (current) edition. Though the epub’s probably auto-generated from the pdf and likely sucks (did not verify).

Guess that’s your only option if the product you want is an ebook.
I genuinely do wonder what the outcome would be if a highly demanded (but ultimately unlimited supply) product was instead delivered by sorted bids? Like what if Tesla simply said Your position in line is relative to all bids, and at price $X you will certainly get one eventually...
Well, that's one problem I will never have to worry about.
The thing I'm trying to say is that it wasn't a minimum wedding or not experienced as such. Everybody had a blast, was well taken care of, great food, unlimited drinks. Nothing felt minimum or cheap about it.
Often hot items in short supply can be resold immediately for significant profit.

So let's avoid that by suing our customers.
How does it compare to rust in your experience?
> People will stop deploying WAFs when the compliance standards are rewritten to not require them.

Honestly AWS WAF is perfect for this. It's not a great WAF but it is ideal if you need "pretend to have a WAF" as a service so you can tick the box.
The Outsized Role Trust Plays in Your Software Project's Success