skysight-inc/HackerNews huggingface dataset:
IMO it is insane to implement Auth on your own in almost all real life use cases.
You wouldn't roll your own crypto either.
Good for learning but for real users use something that is tried and tested.
Mandatory gratuity and the "operating cost" charges can be declined unless it is clearly listed and displayed before ordering (and even then it can arguably be declined). This is why you see "mandatory X% gratuity for Y reasons" on menus (e.g. for large groups). If you knew this terrible gratuity beforehand, then you're basically stuck (or can walk away before ordering). However, if they sprung this on you without clear notice, you don't have to pay it.

This comes down to the same reason why when you click "buy" on some website, they can't say "oh look we added a secret X% f** you fee!". Similarly, this is the reason why when you negotiate a rate with a lawyer, accountant, gardener, or other professional, they can't add random fees that weren't discussed. My climbing gym has had big signs up and has sent myriad emails over the past few months leading up to a new credit card processing fee for this very reason.

If you had great service, I would still recommend fighting this and then tipping the server directly with cash. These "mandatory tips" don't go to the server, but are usually pooled and mostly taken by management. If the restaurant is one of the few ones that is equitable between the staff members (e.g. if the tip gets automatically split between front and back of house), then that might be the one exception where paying a surprise mandatory fee would be okay.
Then if I were you, I would absolutely not take any volunteer opportunities that don’t meet this criterion. Otherwise, in some cases these seem like amazing opportunities that pay in experiences much more valuable than money. Working at Crater Lake would be a dream come true for me.
I think the point is that these are people well aware that a new release of any software is going to have issues, yet they still buy the games at launch.
Hang on to your tinfoil hats, the AI "safety" police are coming after your glasssnax.
These full-time positions are fairly common at National Park Service (or other agency-managed) public lands, and are attractive to retirees. I was a paid (and housed) intern at one site, but I lived alongside three or four couples in their RVs. Some used it as a way to vacation, while for others it was more of a lifestyle, volunteering for four months at one location, then traveling for a couple months before volunteering at another location.
It also depends on what your task queue is. I’d expect an IC to have a few tasks to work on with complete focus for hours at a time. Senior management however, having delegated properly, I’d expect to have a large set of tasks that require a limited amount of time to address.

Eg you’d expect a CEO to enter a meeting, receive a variety of reports from their staff and make a final call or two — and then moving onto another meeting in an entirely different domain — and do so fluidly without interruption.

Which would make it a lot easier to be readily available for ad-how things like emails. Though 5-minutes feels a little much.
I thought I saw somewhere that OpenAI was looking at their own chip project? [1]

If Altman had been working in parallel to form a startup, that would have raised conflict of interest problems.

[1] https://www.reuters.com/technology/chatgpt-owner-openai-is-e...
> slow hashes work great here

Also... don't rely on slow hashes themselves for rate limiting. They're slow because they eat up CPU. Rate limit the requests themselves or you're setting yourself up for denial of service fun. (And also, slow for your server does not necessarily mean prohibitively slow for an attacker's cluster if they do manage to dump your DB. Salting is useful and hopefully uniquely done per account for you by your hashing function, but it's also useful to just forbid very weak passwords entirely, and maybe go so far as to forbid even strong-looking ones that have shown up in data leaks.)
Advice for time traveling to medieval Europe
Ahh I’m with you, i mistook your comment to mean that they were positively correlated with installation prices as opposed to negatively correlated.
I like this. I'd like it even more if it'd have some sort of a credit system. When I'm rendering for others I'd accumulate credits. When I need rendering I could use those credits for priority.

I seems fair but might be tricky to implement to prevent fraud/abuse?
I always felt like work from home is an extension of slacking in an open office plan. Work means a lot more than sending keystrokes to the computer. There are labor laws, information safety guidelines, tons of things you can't do at home alone by yourself. How can you be sure that your neighbor is not creating something competitive to the product you work on?
No matter how much I baby USB-C connectors on phones, I eventually end up in a place where I'm wiggling the cable to get it to pick up that it's plugged in to charge - usually around the time i start looking for a new phone.

I'd like a Framework style swappable USB charging port already.
Yeah - last job I had was a nightmare of 5-6 hours per day meetings. Not a good fit at all. Current one is much better, better team, maybe 1 meeting 4 days a week at most (who does standup on Friday anyway? Nobody)
One of the (many) parts of the article that annoys me is that they basically push a grand conspiracy theory where apparently nobody running any company anywhere is/was able to actually measure employee productivity in any way, but him, a random person, somehow knows better about worker productivity and what's better for these companies, than all these companies with years of experience managing their workers do.
They have both but it's mostly billed per click/app install/follow/video watch. The "brand awareness" advertisers already left except for like, Saudi Arabia.
If the federal government set the tax, the states and cities wouldn’t get any of it.
Frank Herbert on the origins of Dune (1965) [video]
Can't seem to edit above ^^^, I meant "compared to CookieCutter".
For my company, the worst thing is that we have hot desks, which wouldn't be a problem if there were enough seats if, say, 90%-95% of all staff came in on the same day and had their own seat. However, one of the floors that my company leases out is undergoing renovations and they shifted all those employees to other floors while keeping the same in-office weekly requirements. Way too many times, I've went into the office just to not be able to find a seat. We have a hoteling reservation system, but even if you reserve a seat, if you don't come in by 8:50 or so, someone will have taken it. I've complained to our corporate services team and have never received a response.
Indeed, state and local sales tax in the US is complex.

There are around 15-20 different tax rates in my metro area, between state, regional (multiple county metropolitan council), county, and city specific taxes.

From the central city area, you can reach all of the 15-20 different sales tax rate areas within 30-45 minutes.
And then what? The train just stops in the middle of nowhere for however many days until the one chamber is fixed?
Thanks for that tip, and it seems to have a Posix version buildable from source, so I hope I can soon test it on Linux.

I rely on gaupol for subtitle editing.

https://github.com/otsaloma/gaupol
Humans and other creatures only know their sensory data input. Therefore they also don't know the real world.

Your eyes and ears perceive a tiny minuscule fraction of what is out there in the real world.

A blind and deaf person must know even less of the real world than an LLM, which can read more than a human can ever read in their lifetime.
Google gave better results. Few people cared about faster servers at the time, not when most of the world was still on dialup or ADSL.
Defence against scientific fraud: a proposal for a new MSc course
It's not as black and white as all that. People also just have different home situations and different commuting situations. I'd routinely come into our downtown office if I could walk or hop on the subway for a few stops. But it's a two hour drive or train trip. I'm not coming in just to keep you company.
> mostly aren’t aligned with corporate goals.

Sounds like what happened to social media. Making them pleasant, healthy spaces does not align with immediate profit maximizing.
Right.

I know what you mean, but some behaviors have a chance of destroying an industry (think US auto industry or China’s melanin scandal).

Yet businesses are forced to adopt because others in the vicinity do this.

Some additional ground rules seems like it would beneficial.
Ask HN: Would people like to read a blog about resilient telecom services?
Would people like to read a blog showcasing the benefits of resilient telecom services?
And cars have been pretty useful to terrorists: https://en.wikipedia.org/wiki/Vehicle-ramming_attack#Terrori...

If LLMs are set to revolutionize industry after industry, why not the terrorism industry? Someone should be thinking about this beyond just "I don't see how LLMs would help a terrorist after 60 seconds of thought". Perhaps the overall cost/benefit is such that LLMs should still be open-source, similar to how we don't restrict cars -- my point is that it should be an informed decision.

And we should also recognize that it's really hard to have this discussion in public. The best way to argue that LLMs could be used by terrorists is for me to give details of particular schemes for doing terrorism with LLMs, and I don't care to publish such schemes.

[BTW, my basic mental model here is that terrorists are often not all that educated and we are terrifically lucky for that. I'm in favor of breakthrough tutoring technology in general, just not for bioweapons-adjacent knowledge. And I think bioweapons have much stronger potential for an outlier terrorist attack compared with cars.]
That bullet point was a little confusing because it basically connects to the next bullet, but it's 2.5-5 hours of moderate physical activity per week, not per day.
Other than compiling a bit faster, what ergonomics does Go give you that Rust doesn't?
See also: ANSI/IEEE 1008-1987
> Because receiving countries differ in amount of VAT, vendors outside those countries cannot include it in their prices.

They can and they do; smaller shops who don't sell as much abroad use their country VAT while larger ones include buyer country VAT. Works fine.
Leadership without talented employees can break a company. That's why they are paid so...
Who says they haven't found a sensible way to be profitable? Alphabet makes billions in profit every year. I've been a happy subscriber to Youtube for 8 years. It seems completely sensible to me.
Removing utcnow() doesn't force you to use tz-aware dates though. That's just a leap that the author of this article has made.

If you're working in a system where all dates are utc, then datetime.now() gets you a date in utc and you don't need datetime.utcnow(). The only reason to call utcnow is if you're working on a system where the local timezone isn't utc, so you inherently have to deal with timezones at some level. Which means that using naive timestamps is a bad idea.
Most people seem not to tip baristas at all. I make my own coffee 99% of the time, so on the few days per year when I buy it, I tip around 20% because it's a luxury, and if everyone who could easily afford the extra few dollars did so, baristas might actually have fair income. Same for eating at restaurants, etc.

I acknowledge that it's a workaround for a larger problem, but I have low confidence that the US will actually address that problem within my lifetime.
That's quite the take. I suck at drawing but write words goodly, and can imagine using AI to make pictures to pair with the words I've hand-written.
I'd wager the volunteers are less annoying to be around.
Gang crisis shaking Sweden
I use uBO w/ Firefox and got the nag once, around two weeks ago (dismissable warning). Presumably an uBO update got rid of it.

Interestingly I just tried Chrome (Canary build) with uBO and I'm getting ads... :o
In fact, your choice is determined by your business scenario. I believe that overall, among these databases, StarRocks offers the highest flexibility. Particularly, if your business scenario relies on performing data analysis through joins across multiple tables, then StarRocks is almost your only option. Additionally, if you want to work with ANSI SQL, then you might have to use StarRocks.
> On Sunday, a person familiar with the board stood by the board’s explanation on Friday that cited candor. This person said there was no one precipitating incident but rather a mounting loss of trust over communications with Altman. The person declined to offer examples.

https://www.wsj.com/tech/openai-trying-to-get-sam-altman-bac...

> According to one person with knowledge of the situation, Altman had been attempting to raise as much as $100bn from investors in the Middle East and SoftBank founder Masayoshi Son to establish a new microchip development company which could compete with Nvidia and TSMC. Those efforts, in the weeks before his sacking, had caused concerns on the board, this person said.

https://www.ft.com/content/466bf00a-1e76-4255-be2b-3c1d37508...

> Two days after OpenAI’s board of directors fired him, Sam Altman is expected to join executives at the company’s San Francisco headquarters Sunday as they push the board to reinstate him, Interim CEO Mira Murati told staff on Sunday morning, according to people with knowledge of the situation.

https://www.theinformation.com/articles/openai-execs-invite-...
Always max out your vacation every year so unlimited PTO is no different.
> I've always had similar questions about folks like Musk and Dorsey. Is it simply lack of proper governance? Is it something written into their contacts? Is this just a Silicon Valley thing? I can only imagine that a lot of people would like to work on many side projects, but their employment agreements forbid it.

Folks like Musk and Dorsey have a lot more leverage when they're negotiating their contracts but when it comes to public companies, they get sued all the time over their decisions. The lawsuits are just very drawn out, boring affairs that normally get settled during discovery, before any details actually become public so we don't often hear much about them from the media.

Musk was sued by tons of people over self dealing when Tesla bought SolarCity, for example.
Intelligent agents that don't share your worldview can be dangerous. We've seen this a hundred times (e.g. Cortez), I don't think it's controversial or "not part of our model".

"The LLM research project might lead to intelligent agents that don't share our worldview" should not be too controversial either?

You could argue about the odds, but it's very explicitly the stated goal, and they came orders of magnitude than any before them, and most of the founders of the field are doing things like quitting their prestigious jobs or throwing billions of dollars of investor money in their investors' faces, that they have nothing to personally gain from, for the stated reason of trying to prevent this outcome. So we should probably defer to the experts and assume, say, at least 1% that it's a real risk? 10%? It's not fish in the LHC, it's part of one not unreasonable model of what might happen as a result of people spending billions of dollars trying to make it happen.

Edit: I see you've made an important edit. Are we still arguing whether it's possible that OpenAI will succeed in creating intelligent autonomous agents, or only about whether we should fear that eventuality?
... while pulling down $500K/yr.
Feedback accepted. We’re still sharpening our language, and the FSL is the best articulation of what we want to do today.
I remember playing around in Flash 4 and the site skips versions 2-4. I wonder why they're skipped.
I don't think I wrote this to convince anyone of anything. I think its internal kickback I have that flares up when I hear about companies trying to force employees back to the office. I think the end point that I probably need to add to the post is that I believe that the way forward is for companies to actually listen to employees and allow them flexibility if they desire it, assuming the work gets done.
This is a stupid straw man. At its most generous face value, you’ve said nothing. At worst you insulted a large swath of people.
Hi, are you still looking for a dev?

I'm UK based, London.

5+ years of experience. Typescript, Node (Express.js), AWS.
This is silly; I can just silence slack whenever I need to or simply ignore it. I can’t ignore a colleague standing next to me tapping my shoulder.
.gov is a US domain.
You can design a human if you want, that's what artificial intelligence is supposedly all about.

Anyway, read the paper I linked.
been using terraform with atlantis for years and years at this point. highly recommend it.
Democracy could have prevented this shitshow. The board could have asked the employees if they are ok with the direction of the company and then simply act according to the outcome of the vote. But companies are always run like dictatorships, leading to mostly terrible decisions disregarding the wisdom of the crowd.
I can give an insight! We tried buying into Vault Enterprise and let me tell you, it was incredibly expensive. We're talking Splunk levels of prohibitive cost here, maybe even worse.

Their pricing models are actually insane. For Vault Enterprise, you buy into a fixed limited number of clients with a pricing ladder that would make Apple blush. You start at 100 “service tokens” with the next level being 1000, 2500, and 50000 tokens. Any “service” that needs to connect to vault is a client, and the definition of a service is pretty loose. For Kubernetes / compose stacks, any one pod / running container is a service.

It gets worse: Once a token has been claimed, it can no longer be used by a different client for the entire billing period (meaning: a year). This means that you can run out of valid client tokens, even if you're only actively using half if you spent the other half for testing purposes or no longer run the architecture that used up those tokens. Oh, and users are clients, too.

All in all, the ballpark moved somewhere in the low six figures for their 100-token agreement, if I remember correctly. We had to decline because Vault alone would've cost a large part of our infrastructure budget.
Everybody I know is either burnt out from working or full of ambition with very few, very small opportunities.
You could set the same price, and then your actual revenue would vary state-to-state.

European companies sometimes have a "No VAT" promotion, which of course doesn't actually mean "No VAT", merely that prices are reduced by what VAT usually is.
we've hardly seen anything yet, ZIRP has second and third order effects which will take years, a decade, to shake out. Early stage startups are only just beginning to run out of cash (after layoffs and tightening last year), the Great Flushing hasn't even started! And that's just early stage, anyone who raised from a superfund 2 years ago still has 4-5 years runway in the bank after the 50% layoffs this year. These entrepreneurs, and their backers, may not even have realized yet that they themselves, their having been selected, their very existence are in fact ZIRP artifacts. They still think their valuation is real, and that they earned it!
> I'm not surprised the board had to act.

A watchdog sounded an alert.
I think the most important place to start is appreciating the distinction between authentication ("is the person trying to use my application really the person they say they are?", abbreviated "authn") and authorization ("is this person allowed to perform the action they're trying to perform?", abbreviated "authz").

Most of the comments on this page are referring to authentication. It's important to know, but also the piece you're likely to spend far less time on. It's where most of the heavy lifting will be done by some vendor or tool you set up instead of by your own code.

Authorization is far less likely to be something you get off the shelf and far more likely to be where you spend significant time. It can be very intimately connected to your business logic. Active Directory roles and groups are one authorization solution for a particular class of problems but I have only seen them used for controlling business internal assets (mostly file servers); not public-facing applications.

I really like Oso Academy as a resource for authorization topics. It's structured like a progressive course, though I don't know if they have the kind of exercises you mentioned.

https://www.osohq.com/academy
> what they do want is customers

Exactly. So they should stop pretending they're open source when this is really just source available as a sales decision. It's also bad for customers like you since you might be mislead into thinking they actually are open source, when in reality they do a lot to prevent any competing services which makes users much more locked-in than it might seem. If you want to switch, you'll either have to self-host if the issue is with their prices, or do 2 full years of development to implement your own version if they make a decision you don't like. It would probably be easier to switch to a competing service at that point, so you are just as locked into them as you are to anyone else.

It would be much better for you if they actually were open source because then you wouldn't be locked-in, and it would be at least a little better if they stopped lying about it.
If you have a VR headset, you could try the excellent VR mods for them, which makes them much more impressive to play nowadays in my opinion!
The era of startups charging below fair price (to deliver the service) in pursuit of "growth" comes to an end. This was the end game for lot of these companies working in the ZIRP environment from 2009-21. Underprice your service, lock in customers to your service, hope it will be too difficult to migrate away, when dust settles jack up prices to reach fair value, of course if everything fails, sell to a large company who will not have a problem enforcing. We will begin to see waves of these re-pricings as VC funded subsidies comes to a close.
Found the lobbyist
USB-C cables are less flexble than USB-A cables. Which makes connected devices harder to manipulate with and connectors are more stressed.

It just feels more fragile.
Ask HN: How does Nextjs justify using React canary branches?
I’m not a Nextjs user but was looking into whether I want to use it. I noticed that Nextjs 14.0.3 includes a canary build of React.

https://github.com/vercel/next.js/releases/tag/v14.0.3

How in the world is this acceptable? Does the React team maintain an extra branch labeled “canary” just for fun even though it’s actually stable?

Were people who are using this React framework in production right now using React canary before Nextjs?

Assuming the concept of a canary branch still has any meaning, how would a React framework that uses canary React actually be stable?
That’s true, and I guess what I wasn’t accounting for is that some people on the margin will choose not to purchase, and have a staycation instead of shelling out for airline tickets and hotel stay, if the fees are all displayed upfront. Right now, those people see artificially lower prices and end up being the proverbial boiled frog, as price increases are revealed through the checkout process.
What is "utc as numbers"?
How do you know the benefits are accruing to only altman? I thought he claims to have no stake in OpenAI.
Worked FH for a year. Hated it. Between TV and refrigerator, not much work could be accomplished.
I may have been a bit over the top there. :p

TIMESTAMP WITH TIME ZONE just sets off my lingering issues from an old project.

All the other posts in this thread misunderstanding it really demonstrate the point about it being a source of recurring confusion though!