skysight-inc/HackerNews huggingface dataset:
> _Anyone_ could get any piece of software, claim that they want to run it on their new-fangled "x85" instruction set, and, according to your rationale, you'd be able to just decompile it to a different programming language and distribute your translation as much as you want!

Yeah, why not? If you have to run through all of this complexity to run the software you have to run, I don't see what it would not fit as an exception.

You realize that those protections against copyright aren't granted for free right? Everybody pays absurdly high rate of copy rights on every medium they buy in the EU and that's why those exceptions are there. If there is no means to copy what you own to use it in a different configuration, those would be meaningless.
FWIW his blog post struck me as narcissistic in tone. A martyr gazing at the stars, assaulted by the world.

And the bit about grad students too terrified to pursue research because of some ostensibly bad criticism on the internet is comical. You cannot become a good academic if all it takes is a little criticism from somewhere to deflate you, if you need constant validation to function. If you do, you will become, like many academics and people in general, a conformist out of fear of losing approval. This is not to valorize contrarians (who still operate in terms of what others think), but to say that an academic must be honest and pursue the truth and be able to defend his arguments against or ignore bad criticism and concede valid criticism. If you cannot survive the meat grinder of criticism, if you lack the spine and the thick skin, you won’t flourish. It’s not for you, at least not until you mature.
"Shift left"–WTF does it mean?
> > ...utilize JSON Web tokens (JWTs) for session handling instead of cookies.

I read that as JWTs in a cookie as a replacement for session cookies with data stored on a server. There are nice things about that, but with a fail safe logout mechanism via server side revocation lists JWTs are not that stateless anymore.

EDIT: I do agree that the article misses the point a bit, but I also agree with the article that sessions cookies are wonderful and you almost always should use that instead. It all depends on your environment. One thing I can say: never use Active Directory as a token server the amount of glue you need is insane.
> I refuse to pay for subscriptionware

I believe this blog post is a great example of why subscriptionware keeps winning - it’s absolutely impossible to support indefinite development of such a large project with one-time payments.
Whilst I appreciate your point- what happens if the higher the IQ, the more likely to be a sociopath (for example)?

And secondly- just because someone has a lower IQ, doesn’t mean their vote and view is any less valid.

The issue here, imho, is more that the fraudulent claims by the leave were not shut down so lower intelligence people were less able to understand and realise what was happening. They put their trust into the liars who were in it for their own gain rather than the good of the nation. This is, for me, the real story.
Linear regression doesn't perform when you have outliers in data. Let's understand clearly why this is so and how Robust regression overcomes this problem mathematically.
Yes it’s different but conceptually similar in the sense of ambient execution context.

I prefer implicit variables like scala has but it gets the job done in C#.
>The tragedy is nobody's actually using it because everyone's too busy feeding their money into literal banks and speculating with it.

To borrow a phrase: Nice idea, wrong species.
> Stop using localstorage for user sessions
suggest an alternative approach
What did you think would happen when you set out to censor AI so it would say what you wanted?
Could have been done in one command. `grep 'alter\|dwelt' answers.txt`.
There are some really nasty bugs in MAUI, which are not even obviously reported by error messages. From my experience:

* You can build MAUI application fine, but you won't be able to deploy it for Windows and run it, unless your repository lives in C:\ drive. And I mean C:\ drive, not substed directory to D:\ not additional drive. C:\somePath\ only. The worst thing is that error which you get is completely ambiguous and does not tell where is a problem.

* You would think that you can bypass requirement above by forcing Visual Studio to deploy on C:\somePath\bin? Yeah that works for Windows, Android but does not work for iOS/MacOS emitters, where somebody automatically assumes that all path are relative. So instead of C:\somePath\bin MacOS/iOS emitters will try to build into D:\PathToMyRepo\C:\somePath\bin , obviously ending with an error.

I think that MAUI is great product and I like the universal outcome (deploy for all major platforms at once), but my god, myriad of stupid bugs is very annoying.
And have greater ability to leverage that in to oppression of others.

This entire idea if IQ or "smart" as somehow better has tried and failed repeatedly in history. There is no benevolent ruler, as they will get displaced in short order.
This article can't explain what it's trying to hit at!

JWTs are stateless.

JWTs reduce the distributed system complexity of having every microservice talk to an auth system in the flow of every request. But with that, there are tradeoffs.

You cryptographically sign JWTs, then you don't have to check them against a session/authc/authz system. JWTs come with an expiry, and your systems statelessly trust them until they expire.

A problem is that a user can't revoke a JWT by logging out or changing their password (unless you build extra infra to store the invalidations and fail closed), so if someone steals the JWT, they can continue to redeem it until expiry.

This is what the article is trying to warn against.
> Most people are more interested in accuracy, context, analysis, and trustworthiness.

Lol imagine thinking you get this from big monopoly news media almost all of which are owned by private equity media conglomerates.

https://youtu.be/ksb3KD6DfSI?si=gc0FfF9WpdrKDmGW
TIL: Phone networks already carried digital signals in the 60s. I absolutely did not expect that.
I’ll confess to two crimes a) I’ve come across offpunk at least 3 times already and haven’t tried it yet, it looks really neat! b) I often have ideas for interesting hacks that I write down but then drop the ball on. This is one of them but in case you’re interested and it by chance helps with the awesome work you are doing.

Here is my vision:

- mitmproxy is running in transparent mode with a plugin/custom code that does continuous archiving on all traffic, perhaps with help of your netcache tool instead of webcrystal I mentioned. it’s set as the gateway.

- terminal user can then retrieve quickly history list, fzf select, page/dump text for cut and paste, or perhaps some direct to LLM tools pipeline, for summarizing or extracting.

Perhaps I’m stating the obvious above and can be implied by my prior comment. I guess the one detail I’m adding is I think using mitmproxy transparent mode it could be completely transparent to the regular desktop user. No per website configs, no proxy settings.

I run my desktops in a VM using vfio-pci GPU passthrough on the physical workstations and then put all my traffic through another pfSense VM, so re-routing traffic for me is already a fundamental part of my setup.

Perhaps this all sounds a bit complicated and yes it is. But there are numerous reasons I feel it can have a huge payoff.

Thank you for your open source work and I hope I’ll have some time soon to play around with offpunk. It looks like a fantastic tool with many potential uses.
Lol Musk has values.

Good one.

You are joking right?
Then again, why bother with the tokens if you have XSS access as an attacker? I'd simply show the user a login prompt and take their password when they type it in.
Navigating the High Seas of Web Traffic: Threadpool Servers Decoded
Agreed.

I hate to word it this way, but the problem is that JWTs are misused.

The reason I hate to word it this way because the natural step after “X is misused” is “X is prone to misuse”. Which is usually right. But the reason why JWTs are prone to misuse is partly because the underlying problem is hard (security, authentication, the web) and partly because some of the libraries which work with JWTs provide application developers some footguns.

Go ahead and use JWTs if you want, but spend some time understanding the underlying problem space. Authenticate the token before parsing it. Choose one specific signing algorithm—don’t allow tokens to be signed with any algorithm your JWT library supports.

And yes—simple session IDs, rather than JWTs, are often a good choice. But JWTs are fine too. The obvious reason to use JWTs is to speed up authentication in your front-end somewhat—if your front-end can authenticate a request by validating the JWT, and maybe checking it against a list of revoked tokens, then that means you can start processing the rest of the request without waiting for a network request for authentication.
The wooledge bashguide:1: and bashfaq:2: are the best bash resources I’ve ever read.

:1: https://mywiki.wooledge.org/FullBashGuide

:2: https://mywiki.wooledge.org/BashFAQ
It is very easy to be a monopoly, especially one that was first in a certain market, or which can use various tactics to make you use their service. You dont remember how Apple would upload some album into your device without your consent?

I find it fascinating how many people allow monopolies for just laziness: "Steam is so great because I have all games in one place - I dont need 20 shortcuts on my desktop". Then Steam (for years - I think they fixed it now and it opens in few seconds, without asking you to login every day), takes 2 minutes to start because it was written by cheapest bidder + it can close your account so you lose all your games.

Multiple services are a way for actual market competition. Otherwise everything becomes Disney, who churns multiple crappy Marvel movies every year (current blockbuster cinema is mostly rubbish), or everything becomes Neflix where quality is trash, but hey actors were chosen by an algorithm (Ozark - or what was the show name, basically took popular actors and a popular theme and made a show with no interesting plot, no interesting dialogue).

So scary to see that people agree with that, because they are lazy. This is some Idiocracy level.

By the way, since we are on hacker news: nearly all, if not all shows are on the pirate websites.
Let's say for the sake of argument that people with high IQ are more likely to have white-collar jobs which rely on intellectual ability, and people with low IQ are more likely to have jobs consisting mostly of manual labor. I would expect jobs to be distributed this way even in a theoretical society where IQ was a perfect measure of true intelligence, and where manual labor was respected and not necessarily lower-paid.

It stands to reason that the white-collar, high IQ voters would be less concerned with policies which affect manual laborers. These could include workplace safety protections, certification requirements, etc.
Don't you think customers want the audio feedback that everything is working fine?
The chance that he will "win" in one guess in the future is 100%. Not so when you choose random words.
I'm using it wrong, but I love it. I've been working on ear training/interval training so I play the melody a couple times, then play it on my piano, then play the game. I don't want to tell "it's perfect, now change everything" but a practice mode would be helpful for that use case.
I know you're trying to imply that Twitter is more advanced than the NYT, but that's simply not true. They're different products for different audiences.

Revenue at the NYT has grown between 8% and 16% yearly each year over the past 3 years. That's simply not what happens to a business that is in decline or being replaced.

But go ahead, believe in your personal narrative all you want that somehow Twitter is replacing the NYT, despite all economic evidence and usage data to the contrary.
I think this is a very cynical take. Patients with gastric cancer are often in a dire situation: many of them have had their stomach removed and have generally significant difficulties with digestion, which makes consuming specific foods very difficult. The therapeutically effective doses of ATRA are also high compared to what you'd get from foods, meaning that injections are nearly the only solution for these patients. Finally, naturally derived compounds generally have the weakest patents, so if anything, we should thank these researchers for looking into the therapeutic potential of these drugs. I can assure you that few pharmaceutical companies would research this, as the commercial incentives are really weak to do so.
LocalStorage is enough. The point of using a JWT is to avoid using session cookies. If you store the JWT in a cookie, what's the point? You can just use plain old session cookies. Discord keeps their tokens in localStorage and no riots have happened yet
Do you have a link? I followed the work of Schmidhuber but didn’t know of that.

Edit: I didn't realize you were sarcastic (－‸ლ)
> However you think things are, good or bad, you are "wrong".

Does this principle apply to this sentence? ;)
Won't you damage your GPU faster by doing that?
Man, what a great webpage overall. Found some truly nostalgic pieces and pretty funny writing.
FWIW, here is the recent merged pull requests from darktable:

https://github.com/darktable-org/darktable/pulls?q=is%3Apr+i...

At the moment, this is about a week's work by eight authors. Others cycle/in out, of course -- this is a spot sample. They range from bugfixes to performance improvements to documentation to translation work. All what one would hope for in a software project headed to its bi-annual release next month.

There are many ways to develop, and it may be a bit cruel to compare a one-man show to a long-term international collaboration. But here are the recently merged pull requests from the software which is posted about in the blog post:

https://github.com/aurelienpierreeng/ansel/pulls?q=is%3Apr+i...

On the first page, I see about five authors offering PR's over the course of all of 2023 -- a much slower pace of community development.

It appears that Ansel is being developed more by direct commits from its main author. So let's compare the recent commits:

https://github.com/aurelienpierreeng/ansel/commits/master

Page 1 of Ansel commits is by its mono-author from the last week. Page 2 takes us back to August. Page 3 back to June. I totally understand that good developers need to work carefully and sit on things, then release them in due time.

Here goes for darktable commits:

https://github.com/darktable-org/darktable/commits/master

If we take a moment to page back to page 3, one can note that we're back to two weeks ago (rather than June). Steady work by a committed community matters. The log of work done is may be quite worth looking at, rather than incendiary blog posts.
Small PSA:

I’ve got stage 4 colon cancer- I see these sorts of articles passed to me from family members.

While encouraging that these discoveries are being made it’s not necessarily something that you can take to the doctor and get started with.
The following needs to happen:

1- it applies to your cancer/genetics/geneticdefects
2- it’s in a stage that you can be part of testing in human trials which means usually a specialist cancer hospital. (As a side note I recommend MD Anderson as a treatment hospital. They treat me very well and advocate well with insurance fights. And if you have cancer, live in the US you will fight with you insurer)
3- Is it even ready?? Usually no. It’s just the first paper written about it and others need to reproduce the results. Then about 10 other lucky miracles happen and human trials can start.
4- don’t be afraid to go back and forth with your doctor.

I’m currently doing maintenance chemotherapy but some areas flared up and they wanted to add another chemo drug. There were 2 options and we discussed and went with the option I tolerated better.

I do HIGHLY recommend that you establish a rapport with your doctor so that you can discuss treatment options freely. The way it works at MDACC and I’m sure very similar to other cancer hospitals. Is they do all the typing and dna sequences up front. It helps them diagnose the cancer and prognosis etc. and then that lives in your chart. Typical treatment is to use traditional known chemo treatments and if they are not effective they start adding the trials that match your dna/cancer type.

Very long winded way to say unless someone in your life asks you to send these sorts of things it’s kind of like getting a lottery ticket for 10 years from now.
It is interesting, but not something you’d really want to rely on. (see the issues, comments and commit history: https://github.com/willghatch/racket-rash)

This project could really benefit from picking up a couple of steady contributors. It looks like the author is a new dad, and his commit history looks about like what mine did at that stage.
Oh ! In fact, it's not the latest post and "Leon Cowle" already mentioned it. The last post about mastodon and Conlextions is, from my point of view, more interesting.
Uncovering diversity of rare CRISPR-Cas systems with deep terascale clustering
Show HN: Personalized Meal Plans to Suit Your Lifestyle
Hey HN,
I'm Patrick a developer working on side projects beside a 9-5.
I created a Site where you can create customised Meal Plans + Grocery Lists and get them automatically every Week into your Inbox.

Please Check it out, any feedback is welcome!

Pat
You do need a database if you want the ability to log users out server side. This is usually done through a second refresh token.
Spotify Open Sources Voayger, Fast, Simple, In-Memory Nearest Neighbor Search
16bit Sen also contains a subtle meta-nod to that era: the main character's reactions/goofs/gimmicks are based on classic patterns from the 80s and 90s that you don't see often in comedy anime today; that alone makes the anime so much more pleasant for me.
> Yeah, why not? If you have to run through all of this complexity to run the software you have to run, I don't see what it would not fit as an exception.

What complexity? Emulators are almost everywhere, and they don't require you to violate any copyright (or a significantly smaller amount), and therefore much likely to fit under one of these exceptions (they do). "But the illegal way is easier, your honor!" doesn't really get you anywhere...

This world where software copyright does not exist is not an utopia of free source code, it's a wild wild west of obfuscated and/or inaccessible software and the company with largest pockets has the monopoly since it can do whatever it wants.

> You realize that those protections against copyright aren't granted for free right?

"Protections against copyright?" You mean exceptions, right? Copyright is ironically free.

> Everybody pays absurdly high rate of copy rights on every medium they buy in the EU and that's why those exceptions are ther

Not everybody in the EU, even though in my country (France) we do. However, how is this related at all to the discussion at hand? They are not even related to software copyrights at all! (For which there is already an exception for personal copies, and for which official we pay nothing).
China does useful stuff; their energy consumption is going up because they have over a billion people who e.g. want AC units in a tropical heatwave. They're building literally more renewables than any other country in the world and still aren't keeping up with demand. If we permanently switched off all those power plants then tens/hundreds of millions would die.

In contrast, switching off all crypto farms would be a free reduction in emissions, and indirectly save lives.
A lot of people use crypto for utility, which is why it doesn’t go to zero in bear markets. Not everyone needs or wants crypto tokens, but those that do form the base of the ecosystem. You can call it dumb money if you want to be elitist, but it’s the same so called dumb as any consumer activity.
Do they calculate the possibility that the show will start a decades long franchise?
The interesting thing is that so much of color (and vision in general) is software, not hardware. Our eyes don't see color and light the way we we perceive them at all, it is a composite of multiple sensors each doing different things. Colors like magenta are almost entirely constructed by our brains in software because we don't physically register them but recognize their presence.

Then there is the element of how we define colors at all - some languages have no word for blue, for instance. People can see and distinguish the color but without context along the spectrum they way they understand the color is definitely influenced by lots of contextual factors. So from that perspective, we certainly do not all perceive colors the same.
My team can’t decide on a direction we’re too busy respecting everyone’s feeling and opinions. As such instead of one source of documentation we have 3-5 and none of them are good. We can’t enforce quality standards because we can’t decide what that means. We suffer from lack of decision making ability
I think the writer overstates the power of the global finance institution, whatever it is. If someone would decide to make all banking transactions publicly readable and persistent forever, other people would just create an alternative global finance institution. There is no omnipotence "allowing" shenanigans to happen.
Everyone is different. Eat what you want. There is no perfect diet.
And we are all going to die [if not tomorrow :-]
> What can I do with any of these models that won't result in 50% hallucinations

There are many times when I am searching for a solution to a problem, and I would be perfectly happy with a possible answer I could test that has a 50% chance of being correct.

Humans should test the output of all AIs.

Humans should test the validity of everything we hear, see, and read.
Fascinated by "lignum vitae" mentioned several times. A little googling and I'm even more intrigued by this special wood.

Example, one of the first results to come up:

https://www.core77.com/posts/25224/lignum-vitae-wood-so-bad-...
I am a bit confused, is the Option #1 and Option #2 in the text and diagram swapped by mistake?
Here I was expecting them to say "use PASETO". Suggesting that we use cookies instead is wild.
C was my first language as a teenager. It is my native (formal) language, if you prefer.

Considering OP's question:

After C, I'd suggest looking into the Lisp family of languages like Scheme or Racket. I discovered them not long ago and wish I had found them sooner.

The reason is simplicity, ubiquity (Clojure), maturity (way older than C, see Lindy effect).

Then after Lisp, Python. Done.

There is nothing really to be learned thereafter. Programming languages come and go, but they have certain elements in common:

- I/O
- repetition (recursion)
- conditional execution
- arithmetic

Then there is stuff on top of that: OOP (which means data and code belong together. You can do that in C too:

https://www.state-machine.com/doc/AN_Simple_OOP_in_C.pdf

After C, Lisp (e.g., Racket) and Python, I would focus on common data structures and algorithm topics:

Data Structures
- Linked Lists
- Trees, Tries & Graphs
- Stacks & Queues
- Heaps
- Dynamic Arrays
- Hash Tables
Algorithms
- Breadth-First Search
- Depth-First Search
- Binary Search
- Merge Sort
- Quick Sort

If you want to go to the extremes:

Lambda calculus and the formal language around Turing machines. Turing machines only need to read/write memory, move around memory, execute a finite program, have (near) unlimited memory.

Excel seems Turing complete, so maybe start programming with Excel. Don't!

Then there are what I call "industry languages", programming languages that you cannot keep in your head easily and probably need IDE assistance with:

C++, Java, Scala, Rust, etc., are production environment languages.
Learn them later in life.