skysight-inc/HackerNews huggingface dataset:
> So a better question might be which version is more flexible or reusable?

In fact, inheritance has nothing to do with reusability (or flexibility): it's point is to provide typing hierarchy, so the code can follow the Liskov substitution principle.

In "traditional" Python, which is dynamically typed and never statically analysed, there were no built-in controls over what is being passed at runtime, so the only real purpose for inheritance was to reuse code. This changeds with the introduction of typing annotations -- while the runtime is still fully dynamic, you can use mypy and other static analysis tools to minimise type-related errors before deploying.

In fact, Python has a great way to both support composition and support interfaces without requiring inheritance: a combination of typing.Protocol and mixins.
If the end-goal is to convince the reader of the veracity of your claim that the BeLaU spherules are of alien manufacture, this piece does not help, and harms a little. It does not help because you spend no time refuting the refutation. You imply that a refutation that doesn't take as long as the original claim isn't worth as much. But that is false. Coming up with one counter-example need not take as long as articulating the theorem.

The harm, as I see it, comes from engaging with the mob. I believe that an honest scientist convinced of evidence of alien tech will know in their bones what an uphill battle it will be to convince anyone of this, and the fact that making such a claim will inevitably come with certain (unfair) labels and attacks. To make such claims and then get angry about those labels being applied doesn't make sense, to the extent that the anger itself reads as evidence of some kind of fraud. Is it possible for a scientist to be naive enough to not realize what this claim would mean for his reputation and career? Maybe. But the more likely scenario is simple fraud and attention seeking, and the anger another layer of performance.
The compressor is the only component that generates a substantial amount of heat. That's really it's purpose: trading a pressure increase in the refigerant for a rise in temp.

The compressor is usually in the outdoor unit, because of noise, size, and proximity to the controls. It also is the item that consumes most of the power, so for minisplits, the outdoor unit is the part wired for high currents. It usually is wrapped in a nice insulating blanket (for sound as well), and vapor injection techniques used in cold climate pumps means the heat wasted is minimal.
Disclaimer I work for IPinfo.

If you can download the free IPinfo IP to ASN database CSV file. You can run the following command to get the IP ranges of an ASN.

```

grep AS19551 asn.csv | ipinfo range2cidr | cut -f1 -d ','

```

You will need to install the IPinfo CLI to convert the IP range to their CIDR equivalent. I believe the range2cidr command is also available as a standalone binary as well.

After that, you might want to aggregate the IP ranges to bigger ranges. I have used this in the past for this:

https://github.com/job/aggregate6
That just increases the cost of the ship. It has become part of the ship’s navigation system. Not really a failure, just a justifiably expensive enhancement.
Well Qt on macOS is a shit show. I pretty much had to move half my stuff off Mac because two Qt based programs I work on regularly keep breaking every time they update macOS.
Important context: this is Avi Loeb, the guy who insisted that Oumuamua might be aliens. Here's a nice exposé on him and his shoddy work https://www.youtube.com/watch?v=aY985qzn7oI
> This comment was marked [dead] when I read it. I vouched it back into visibility. I wish people would respond with a comment if they disagree, rather than reporting it.

Comments from brand new accounts (as in this case) are marked dead by default as a spam prevention measure, I believe.
> Modern web applications (so called single page applications) often utilize JSON Web tokens (JWTs) for session handling instead of cookies

I had thought the main way JWTs are stored and transmitted in a web context is via Cookie/Set-Cookie?

> This attack would not be possible with a cookie based session mechanism where attributes like HttpOnly would prevents injected JavaScript Code from accessing the JWTs.

You can put the JWT inside the HttpOnly cookie, right? What am I missing?
For the backend, it's written in Rust using a few key crates: axum for the api, bgpkit-parser for parsing the MRT data, and reqwest for fetching data at boot.

The site is hosted on Neptune Networks, another side project of mine for people to learn and experiment with BGP.
I'm not sure that author in that times was able to afford craft school..
The guide to time travel in the movies
You could use the access token for each request. The advantage is that it is a simpler approach, and does away with the 5-minutes restriction you refer to, as the logout/invalidation would be immediate and not in 0-X minutes where X is the access token life in minutes. The disadvantage is that serving each request will involve making a round-trip with the auth service. This means at the minimum a DB read for every request, but could also mean a call to a separate, (possibly a third-party) auth microservice, and with possible fraud-detection measures each request. Depending on your use-case, you can drastically reduce the number of calls made to the auth server/database by using JWTs (or any other "algorithmically verifiable" token). This improves performance and enables architectures where for example you have a single auth server globally but multiple "functional" edge servers close to your users to serve out requests as soon as possible.
It's not available from the API, but there is a "last updated" date when you view it in a browser. It's at most 8 hours old.
Amdahl's Law applies cleanly to human processes.
Perhaps the most revealing example is the origin of "computer" as a human occupation and how scaling the compute process happened at Los Alamos https://ahf.nuclearmuseum.org/ahf/history/human-computers-lo...

The more general aspect of Amdahl's law is captured by certain scaling laws and limits generally related to communication (see full bisection bandwidth) and certain architectures (e.g. Cray) meant to optimize for this
Welsh Government Digital Ethics Report (2022) [pdf]
What's the deal with this font? [video]
You can turn the number around and it becomes not as suspect: 5% of the employees support the "rogue board of directors".

Say the next US election, you have Biden against Hitler. I would expect no less than 95% for Biden. Not everyone likes Biden, but most everyone hates Hitler.
Sounds like a money thing. Being a kernel engineer is being handcuffed to one or a small number of companies and a particular community. Meanwhile going up the stack is easy, will pay the same or offer higher risk/reward financial choices and let's you work anywhere.
Scala 3 has enums, which can also serve as ADts: https://docs.scala-lang.org/scala3/reference/enums/enums.htm...
Exactly. So anyone reading can suggest what's the alternative while still using JWT?

I mean how to do it properly?
Are people eligible to learn and practice this if they are not a US citizen and/or based outside.
Right. There was honesty some part of my brain that said if it’s good enough for Prince Charles (at the time), it is good enough for me.
journalism is information.

whoever gets you that information faster wins

even the old news outlets try to out-compete each other for speed to press.

I personally think smart people are able to filter through a lot of information and synthesize the relevant.

it's also arguable that you get closer to the truth with the diversity of opinions about a subject on modern media and once again this is better for smart people to make up thier minds about something.
* https://en.wikipedia.org/wiki/Buy_Nothing_Day
I don’t understand the downvotes here.

The application should be as resistant to xss as possible but things do sneak through and we should try to limit the damage in other layers.

An example is that you could think you have no xss issues because you use react to do your rendering. Meanwhile you have a window.location = something_from_url which is just as capable of running js code if you’re not careful.

Having the auth (whatever it is) in a http only cookie is one protection. Having it time limited is another. For some applications locking it to an ip address might make sense.

It’s not an either / or thing.
Can you check IPinfo.io, please? If we are showing any inaccuracy in your IP geolocation data for you, please reach out to us. We will fix that ASAP.
> Not only is this a technical marvel, but it has potential construction physics implications.

I don't think this is true. Gabion walls are already widely used, particularly in geotechnical structures, and masonry structures have been around for literally thousands of years.

The reason modern building technologies such as concrete/steel/composite structures replaced these techniques is that they are far safer, easier to maintain, far more space-efficient and and impose far fewer architectural constraints.

Automating this process helps drive down the cost, but cost is one of many factors and not a critical one.

> Suddenly, an alternative just got a lot cheaper.

Not really. This article just showcases a way to automate the construction of a particular wall type. This by no means implies these walls are now competitive.

Other than aesthetics, I don't see how it's possible to even conceive standard techniques such as gabion walls being replaced by dry-stone walls. The cost of building a gabion wall is literally the cost of a metal mesh and filling it with rocks. Gabion walls are even used by armed forces as rapid-deployment defensive walls in the form of Hesco bastions.

https://en.wikipedia.org/wiki/Hesco_bastion
Falak, congratulations on your launch! Cool product!
There are permissionless and trustless exchanges like uniswap
>Torrenting and maintaining the software to play movie files on my TV takes time

I've never thought either of those things took much time or effort. Though admittedly I've never timed myself doing it.
The vector art header image is pretty bad and not instilling a lot of confidence.
That's superficial and bordering on ad-hominem.
> If you can inject javascript, it's game over anyway.

Yeah, but as you pointed out the one thing you can't do is get the cookie. Having the auth token yourself as the attacker is a way different story then just having XSS vulnerabilities. You can still "do" a lot, but you still have to get another user with the token you want to interact with the page with your XSS to "do" what you want.
If only there was a way to run the old Aperture on Windows and/or Linux
As I read the article I thought there was reason to be legitimately concerned about him.
I uploaded a picture and it listed some sounds that might accompany the picture like "Water flowing in a stream nearby." It took a couple of minutes to generate 6 seconds of poor sounding audio. Seems like using canned sounds would be better.

That'd be kinda cool. Use AI to identify what sounds might be applicable to a scene, let the user select all the sounds which are applicable and add more, and then play the selected sounds with mixer board controls for volume and frequency. Save the result as an mp4.
I like Objective-C a lot. I'm pretty open to Smalltalk. What do you use it for?

I've skimmed through a summary of Pharo but I don't want a whole GUI system, I want to write scripts or maybe web apps. Do I actually want the whole GUI and all but just don't know it yet?
Show HN: We made an interactive coloring experience for kids
Hi HN community!

Proud to have recently become a founder myself and now to submit a "Show HN".

We are Dibulo, a young startup which is on a mission to redefine coloring sessions for kids! We have built our first worlds, sold our first coloring books and now we want to let the world know about us :) So far we have been praised by parents, and also got pretty good feedback from institutions like daycares and elementary school teachers.

What sets our coloring experience apart? Not only do we bring vibrant templates on paper to life on screens, but we also introduce a captivating group activity. Picture this: kids enthusiastically coloring away, their creations showcased prominently on a big screen for all to admire.

For us it is crucial that the user experience is smooth and easy. Our platform works in pretty much all modern browsers and on all major devices (PC, laptop, tablet, AndroidTV / FireTV). Setting up a coloring session on Dibulo takes less time than a kid can color our templates and uploading is as easy as snapping a picture. You can even share the coloring session with your family and friends and if they like they can participate and upload their drawings too (remotely).

Feel free to download and print our free templates and try them with your kids / nephews / at your daycare.

Thank you for checking us out! Looking forward to receiving feedback!
I have a similar interest in NDEs. 30 years ago I "knew" what they were. Now I'm not so sure.

Do you have any links to articles about the blind people knowing what color clothes people were wearing?

Thanks.
From the the project page it says:

> The offline content is stored in ~/.cache/offpunk/ as plain .gmi/.html files. The structure of the Gemini-space is tentatively recreated. One key element of the design is to avoid any database. The cache can thus be modified by hand, content can be removed, used or added by software other than offpunk.

One ambition I have it to setup

https://github.com/davidfstr/webcrystal

> An archiving HTTP proxy and on-disk archival format for websites.

so that all my regular web browsing is auto archived at some level.

It would sure be neat if the archive formats could be compatible. It would allow for a setup where everything I’ve seen with my eyes is then immediately accessible programmatically or in a terminal. I feel that could open some significant productive advantages, especially in the age of LLMs also in the terminal.
Upcoming improvements to your AWS sign-in experience
It actually really helps with maintenance.

If you have a wrapper for an API (say, that does some logging or whatever), you can use `…` to forward arguments, maintenance free.

Perhaps the wrapped function started out with no arg, but then added one. You never took/forwarded a `*vargs` array, so now you have to manually update that.

Then perhaps some other function started taking a block. Now you need to add `&block` and forward it.

So `…` is a maintenance-free way to forward arguments to functions that are free to change.
> That is half true. There absolutely is a cost to initiating any change, but that is a one time cost. Some changes can yield dramatic increases in productivity or reductions to costs further down stream. If there exists proper discourse that takes this into consideration then in all fairness any veto presented is certainly not toxic.

I'm sorry, I didn't understood a word of what you tried to say. I'm even suspecting this is machine-generated word salad.
Not everyone can look back at a 10 year long career in the industry to draw inspiration from. Especially for junior engineers, pointing out alternatives (that feel obvious to you) would be important.
Why lowercase letters save data
> people reinvented the entire financial system on top of it

That's the goal, to remove intermediaries and trust.

There are permissionless and trustless application, but HN likes to use centralized scams like FTX to dunk on crypto and feel smug.

It'd be like me pointing to bernie madoff and saying "see, I told you all of the stock market was a scam!"
This also reads like an advert...

I still don't see a usecase for a unique PSK per guest, and even that can be achieved with most guest portal implementations.

What SPR seems to lack is backing and therefore trust. Pushing a product aggressively on HN is not the way to build that trust.
Maverick Mars chopper has survived way past its warranty
Nutty Putty Cave
Not sure if I could bring myself to call JWT for website authentication the "gold standard". I'd give the title to HTTP Basic Auth first.
Seconded! It is a wonderful book. Also an easy read and not very long.
It depends on the use case. For example, if your app uses WebSockets for all its data, authentication and access control and only uses HTTP for static files, you may not want the JWT to be sent to the server as a cookie with each HTTP request as it would be wasteful so localStorage may be more appropriate.

However, with cookies, you have to be careful with the SameSite flag and also be mindful that some older browsers may not support it and so it can be tricky to fully restrict where the cookie will be sent in all scenarios.
Language Model Evaluation Harness
Last time I tried I couldn't get it to compile

These days https://babashka.org/ is a much better option. It's powerful, fast, modern, works everywhere and has effortless multitasking.
Of course. That’s an expected outcome if everyone just works within the system according to their incentives.

When it comes to the US, the country literally would not exist if the British had anything close to the modern governments’ abilities to control the money flows.

As in, the revolutionary period Patriot movement would’ve just been AML-ed to death.
PodPodium: An open source podcast client designed with user privacy in mind
There’s no “branching a new commit” (except as syntactic sugar). Creating a branch creates a new head pointing to an arbitrary commit (even one that already has one or more heads). Committing creates a new commit and moves exactly one head forward to it.
Great to see this on here. My kids (4 and 6) spent some good amount of hours on your colouring templates already.

Thanks for not making this a subscription, or force me to use an app.
Oh! I expected to see the bear that was a captain in the Polish army (?) at least.
Show HN: Summarize Text, PDFs, YouTube Videos, Blogs, Webpages and Audio Files
Well then PHP has opcache compiling.
Just as more context, his body of work overall is exceptional. He's been a Harvard professor for 30 years, he didn't get that position by accident. He's taken the Linus Pauling career path the last few years though, which is unfortunate. But the bulk of the mans career he's published good research and good books, people shouldn't reflexively junk those parts of his work just because he's gone loopy now.
Nothing. I've avoided all black friday shopping for years, even routine grocery shopping.
It's not really lying. everyone views a subject differently.

so in order to get closer to the actual truth what you want is a massive variety of perspectives and opinions so one can actually synthesize this to get closer to the truth or at least a well-educated perspective on the subject.

which is what modern media gives to you.

versus the old guard who present things in a very specific way.
Its model is government agents knocking on your door to verify you’re not watching without a license.
> If you’re trying to do impossible things, this effect should chill you to your bones.

> It means you could be intellectually stuck right at this very moment, with the evidence right in front of your face and you just can’t see it.

This speaks to me. It's terrifying knowing deep in your soul that something is possible but getting stuck trying to make it happen. When you try to talk to people, you seem a bit unhinged. Like some crazy person who's creating his own problems by avoiding the easy established solutions. People will straight up tell you it can't be done, they will ask you why you can't do it in the normal way. It's tempting to take their word for it and just give up. However, if you persevere a little and ask the right questions, they might just see that it is possible to do things differently. If you persevere a lot, you might figure out all the details and end up proving that it was possible after all.

I achieved a small victory just like this a few days ago and I'm really proud of it, I'm actually preparing to Show HN.
Presumably that people aren't comparing him the heroes of Contact (1997 American film) but instead are getting increasingly annoyed that he's making crap claims.
The SEC is largely self-funded via fees charged to financial institutions. Funding increased enforcement of crypto entities doesn’t have to require more tax revenue.
> As far as I can tell, Tracestrack’s style is currently a closed-source style, which makes it an unlikely candidate for a default layer.

See https://community.openstreetmap.org/t/osm-carto-maintainers-... for a bit of discussion on this on the OSM community Forum.
Lots of projects have product "teams" that will say yay or nay to features. Most commercial open core products will expect justification for feature development.

The problem (that I foresee at least) is that if a traditional product role stepped in and said "no" to a feature (e.g. a midi device) and that another feature should be prioritised (tablet support), the developers will just... leave (or fork).
> Every single one of these could be engineered away.

You clearly didn't read half of the article. 50% of these are purposeful chimes.

Also, why? What is the value of making a compressor or fan more quiet on the 3? It would be much better to lower the cost. Worry about the sound on the higher end vehicles but let the 3 be low cost.
Externals is a footgun that can cause nasty injuries. I like Svn, but I won't be using Externals again.
It’s not like Nuget hasn’t had its share of supplychain attacks. I don’t disagree with you, but we don’t use external packages unless we have too (as in React) and we vet every update. So in that sense there is really no security issues compared to any other language we use.

As far as performance goes, all our heavy computation happens in C++ and for everything else the performance difference between the .Net vm and Node is negligible at our scale.

You may think it’s odd, but we’re hardly the only organisation doing it. Lego did it a few years back to great success.
When your work is as a scientist, and you want to be judged as a scientist, your work being pseudoscience is not superficial. That's like saying pointing out your accountant is facing tax fraud charges isn't germane to his work as your accountant.
>>Suppose you've paid for content (apps, movies, music, games, or services). If your seller can terminate access at any time and for any reason, are you okay with that?

Sure. If those are terms of the sale then those are the terms of the sale. The seller offers terms. The buyer either accepts them or doesn't.

>> Think of banking apps, for example. Banks usually do not favor a tampered OS.

Ok, something of a different case, but sure. Banks offer a service, and decide which platforms to offer it on. Banks have denied customers access to banking to specific clients all the time. Lots of Web sites have died for lack of banking services.

If the seller is not willing then there's no transaction to be made.

>>Suppose you buy a device; further suppose the state is not involved (no warranty). Your device breaks down the moment you bought it, and there is no refund. How do you deal with that, especially if you are low income?

This has happened throughout history forever. It's so common there's a -latin- term for it (buyer beware) Caveat Emptor.

Which is why govt -does- get involved. And why, well, do your research before buying.

Obviously all sorts of industries have all sorts of regulations. Companies take liberties. Govt adds regulations to limit egregious behaviour. But fundamentally the seller offers something, negotiate if you like, or walk away.

Fundamentally you're not -entitled- to anything. If you don't like it, don't buy it.
Thank you! Yes, we try to make it as easy as possible. I am sure at one point we will have an app for the sake of making the mobile experience better (fullscreen etc), but we ourselves love to have no friction. And after all kids should be able to use it too.