skysight-inc/HackerNews huggingface dataset:
As someone who's learning was significantly accelerated by the "written tutorial" phase of the internet this would be a really great little tool. I find video tutorials to be far more cumbersome than text+ images.
seems like it would be less work to sanitize your database inputs than to try and push a whole bill through parliament.

especially since input sanitization is cheaper than free these days. any libraries/orms/whatever made in the last 15 years that is worth actually using will do this by default, and usually make it a pain in the ass to turn off.
> sys admin accessing password hashes placed under his care

Parent commenter never mentioned anything about comparing stored password hashes. What you do is block bad passwords at password set time by hashing the prospective password and comparing with HIBP. A prospective password you haven't accepted or stored or transmitted off the application server - common sense says that's not a privacy violation - and many giant companies including my employer do this routinely.

[Edit] Oh yea I remember HIBP has an online API. Don't use this. Take the HIBP dumps that they make freely available and compare locally. If not for reasons of privacy, for reasons of simplicity and removing an unnecessary external business/legal/software dependency.
Then please write one.

Note that the important part is a good way to mark all those false positives that is simple and doesn't go to far. Just because I want a bad spelling in one place doesn't mean I want it everywhere. As a result I'm going to predict that your tool either results in too much boilerplate needed to suppress all the false positives, or your tool lets pass a lot of things that shouldn't. But that might be just that I don't have good ideas: if you create a good tool for this I'm willing to be proven wrong.
This is sorely needed. It causes service disruption for weeks because of weird upgrade schemes in GKE (or any other vendor) which works on top of Kubernetes. There are too many options with non-intuitive defaults related to how the control plane and the node pools will be repaired or upgraded. Clusters get upgraded without our knowledge and breaks service arbitrarily. Plus, if you are doing some infrastructure level changes, you have to put in extreme effort to keep upgrading.

IMHO , infrastructure is too low level for frequent updates. Older versions need LTS.
That is not true.

https://finance.yahoo.com/quote/SPOT/holders/

Any ownership by the record labels must be less than 1%.
https://www.today.com/food/restaurants/tip-baiting-delivery-...

> Tip baiting is when customers enter a certain tip amount when they order their food or groceries on a food delivery app like Uber Eats, DoorDash, Grubhub or Instacart and then lower the amount or remove the tip entirely after they have gotten their delivery.

Maybe they changed policy at some point?
What market share? What data do you have to back these claims up?
Almost all of it was in English from what I saw on stream.
I'm doing something similar, but using SpreadAPI (https://spreadapi.roombelt.com/) which is free and uses Google Apps Script for myself.

I use GPTs with it to save ideas / thoughts / notes, but also to parse URLs with lists like "best burgers" and GPTs will just add details to the sheets.

Sheets is GREAT for personal / small group use, but if you're a massive company you'll probably run into limitations quickly (5 API calls/s; 200k cells; monthly limits) etc. but I've never even gotten close.
I don't know, but presumably OP is referring to a $20min wage as covering active time, not "dashing" time. The latter means you have the app open and are scheduled to work. Active means you are actively driving to a restaurant, picking up food or dropping it off.

So if you schedule two hours and the app give you no hits, or you decline hits that time wouldn't count.

Now that said, I know nothing about the $20 min wage and can't say if that's accurate or not.
Maybe, probably not. Directly after WW2 the policy in the US was to keep the bomb and related technology secret at all costs. Only after UK, France and the Soviet Union showed that the cat was out of the bag the US changed their position to supporting other countries with things like the nuclear umbrella or the "Atoms for Peace" program in an effort to stop proliferation.
> This is just another way the urban poor are unfairly advantaged over the rural poor.

I think the point here is that the urban poor cannot afford it already.

This is not a zero sum game. Providing for some doesn't take it from others.
Recent Progress in True 3D Display Technologies Based on Liquid Crystal Devices
I read this (from HN?) awhile ago, and it boggled my mind about how much subjective reality is actually invisibly self-fabricated.

https://www.portsmouthctc.org.uk/a-fighter-pilots-guide-to-s...

I expect refresh rate is similar, given that... if a substantial portion of your subjective perception is mentally fabricated, then your brain physiology contributes, and that's set during childhood.

For reference, I grew up on NTSC screens (29.97 interlaced frames per second).
Wouldn't this result in CEO's never doing a layoff or admitting the business needs one?
Reminds me of this: https://en.wikipedia.org/wiki/Lattice-based_cryptography
That thing isn't even close to legal in Europe, and never will be. It's a travesty it's legal on public roads anywhere.
The problem isn't that they group orders, it's that you weren't aware of it and weren't given the choice. You were made to believe that you were paying for a direct order and it's only after the fact you realize but by then it's too late and getting your money back is a hassle. There would be no problems if you were given the choice upfront to pay less for a grouped order or more for a direct order.

The problem is that these companies need to somehow pay for all that "growth & engagement" and so have insane overheads, so being upfront about the costs will mean they'd get no business, so instead they obfuscate it as much as possible like in the above scenario or outright steal drivers' tips.
> It is not overstating the case, I don't think. Large security teams have done population-level studies on this.

If it were that easy, then wouldn't everyone have been phished by now? I've certainly received plenty of scam emails myself, and I think it's safe to assume almost everyone else has too.

> private companies are going to make different choices on the freedom/security spectrum than you'd prefer.

It's not that simple, because we don't have a free market. Three big companies — Apple, Google, Microsoft — have nearly the entire consumer market share for both operating systems and web browsers, and they're colluding to eliminate passwords. If they succeed, then I as a private individual and a private company (self-employed) will not be able to make a different choice than those three big private companies. None of us will be able to make a different choice.
Sellafield’s toxicity comes from reprocessing spent nuclear fuel into plutonium for nuclear weapons. Using that as evidence that commercial nuclear energy waste is expensive or complex to handle seems disingenuous.

Also the costs given are total over the span of 100 years. That’s quite a pittance from the perspective of annual government cash flow.

You don’t need to sequester things long term for nuclear. First, waste has lots of uses and isn’t just discarded (eg medical applications). Secondly, we will build breeder reactors which can reuse spent fuel decreasing radioactivity further. Also, the most radioactive waste decays very quickly and the remainder isn’t as toxic. Most of the complexity of water management is that people hear “radioactive waste” and instantly enter NIMBY fear mode instead of figuring out how to manage the risks.

But sure, if we strangle nuclear then we’ll never improve our ability to solve and mitigate problems associated with energy production.
For DD In Canada, you cant reduce the initial tip in the app/site.

You can add an additional Tip post order/delivery.

I have been tipping only like 50cents for down the road, to maybe 1.50/2$ for within 10 mins drive.

Haven't had issues receiving anyorders.

Plus it's not like you get tipped wages here in BC, but they did recent mandate a $21 delivery wage (2$ cad more than standard wage)

For long distance I have tipped more but I am reducing my tipping overall.

Like I am paying a BC bag fee to get a paper bag for 25 cents, well unfortunately that means I am paying 25 cents less for other things including tip
Ah, AFAIK the tip is hidden for the UK services. They’re also batched so the driver can’t know who tipped/what tip an individual order gave them. It sounds silly to show a tip on the order that can then change later.
When I can't use Kagi, now, it's a very "wow, this is what it's like to browse without an adblocker" kind of moment
Yeah… but people sometimes dont do this
It seems that the QA on Windows is getting worse and worse, this kind of high visibility bug should be caught beforehand.
There was a lot of backlash when it was revealed DoorDash was taking tips like the method you stated. Now they give the entire tip to the driver regardless of minimum pay.

OP was making a joke that no, it's not "as always" because there wqs a pretty large scandal just a few years ago centered around DoorDash not paying 100% of tips.
The topic has changed in this subthread; this is now why build something (with discrete components, be they transistors or tubes) rather than simulate.

The educational value of building hardware is obvious to me; it cannot be replaced with simulation, and simulation runs on hardware that someone built, who knew how.
Maybe I am mistaken but it seems to me that the stack is implemented with a Javascript. I am a bit disappointed, in the sense that the stack too could have been implemented as a a list of tags in the containing document.

This would enable interesting features such as visual debugging (you just check the document to see the status of the program) and more importantly would enable the "code as data" paradigm, giving us easy metaprogramming and essentially a "lisp with brackets"

(Yes, I am not being completely serious)
People are unhappy about housing.

If you own a house with a fixed rate mortgage then inflation will have a heavily muted effect on your personal financial situation since your (most likely) largest expense isn't effected.

However, people look around and see that they can't afford to move to a different house of similar size/quality because prices and interest rates are so high. And they definitely can't afford to move out of that starter house into something with an extra bedroom so they can start a family or take care of an aging parent.

This creates a deep sense of instability and the sensation that you are stuck where you are, and people generally don't like feeling unstable or stuck.

I truly believe 99% of the economic woe in America can be traced back to the lack of housing.
You wonder why they even have a review team if this passed.
> Is that a common scenario? Where you can use a (presumably) usb attached keyboard but you cannot insert your security key?

I don't know how common it is, but this is the exact issue that makes passkeys a nonstarter for me.
Event based state management with vanilla JavaScript
Which if I recall correctly they are only profitable due to a one time revenue boost right of something like hundreds of millions ?

And that one time "revenue" boost was that a company they own they are asserting is now valued more than last year. And they are calling that "revenue".
Wow what a mouthful, I'll send you some wheels
For what it's worth, the average tech-smarts in the legal realm and within the FBI are significantly improved compared to 8 years ago. This is just from my personal observation.

That said, there are still tremendous gaps yet to be bridged with the understanding of many procecutors and lawyers as well as weird applications of the law that aren't intuitive to people whose life is technology.

For example (and I caveat this with IANAL): Did you know the physical medium you get Internet to your house determines what laws and processes the government can use to monitor your Internet traffic?
So, a search engine, then!

At my former company, they used a product to search across Google docs, confluence docs, help desk tickets, Amy source of tickets and documents they could get their hands on. It was actually quite useful!
Reid Hoffman was privately unhappy about leaving OpenAI's board
`when myCondition():` instead of `if myCondition:` is done at compile-time.

Alternatively you can use a `static:` code block to force compile time evaluation. Or tag a function {.compileTime.} or tag function inputs with `static` modifier.

It is possible to create a compiler or an assembler running fully in Nim macros as well:

- https://github.com/mratsim/constantine/blob/master/constanti... (all that file runs at compile-time)

You can also implement Continuation-Passing-Style transformation at compile-time:
- https://github.com/nim-works/cps

Or a neural network DSL or for a self-contained example, einsum:
- https://github.com/mratsim/Arraymancer/blob/master/src/array...

It's worth noting that nim async/await transformation is fully implemented as a library in macros.
>It's a psyops campaign run by DevOpsers/SREs

sometimes the only way forward is to run psyops on yourselves
Is there an archive snapshot of the Towel bar Cam product page as displayed by Amazon?

Kinda wondering what the product actually looks like, and how Amazon allowed it to be presented.

Edit: whoa, @navels how'd you do that?! Thank you, amazing: https://web.archive.org/web/20230527030738/https://www.amazo...

The product reviews are creepy.

--

Rest of my comment for posterity:

There's an image in TFA, though it's only a partial, limited view: https://cdn.arstechnica.net/wp-content/uploads/2023/12/MS-v-...

Another article from yesterday contains a zoomed in image but no description: https://blog.ericgoldman.org/archives/2023/12/amazon-may-be-...

If we knew the product ID it could be checked for existence on archive.org.

Anyhow, the research link I used is: https://www.google.com/search?q=%22it+wont+attract+attention...
Lets keep filling the internet with .....
Julia code is actually very Fortran-like (if Fortran was designed in the 21st century).

I did some Fortran in undergrad, and while it's pleasant to work with, if you have to do anything beyond numerical calculations you are basically screwed.
44% of All Single-Family Home Purchases Were by Private Equity Firms in 2023
I guess you are right; I kind of fly off the handle when I see this kind of topic come up. But the underlying premise of the research in question is that Facebook should be an unbiased, moderated forum for open public discourse. I just don't see how anyone could reasonably expect that to happen.
Ideally, but what if you're a new hire and the passwords already exist?
It's always annoyed me how I can query hundeds of millions of records in a SQL database instantly, but searching metadata from my filesystem is still comparatively slow. Are there any filesystems out there that take a more database-like approach to this (while still appearing and integrating like a traditional filesystem - I'm not after object storage, nor do I want to rely on a decoupled indexing process).
I use lists as one of the coping mechanisms for ADHD, depending on the day it's anywhere between 20 and 100 of various granularity depending on what I'm doing and how I feel the given day.
I've been using Kagi for a few months and agree it's a great product, especially the lenses.
Quantstamp | https://quantstamp.com | Remote | Full-time

Quantstamp’s mission is to secure the decentralized internet, and has protected over $200B in digital asset risk from hackers. More than 500 startups, foundations and enterprises work with Quantstamp to keep their innovative products safe.

We are looking for Auditing Engineers and a Senior Rust Engineer to join our team. The full job description and how to apply can be found below. https://jobs.ashbyhq.com/quantstamp
You think more crap is better. I think less crap is better. I rest my case.
I looked it up, it turns out you’re right, Apple didn’t invent it, there was just a lot of stuff with “pod” in the name in that era.

Either way, common usage of the term “podcast” has changed. Language is defined by how it’s used.
Why not just get rid of prices and the contractors can just put in a price per delivery that makes it worth it to them?
Link to that particular product please? I'll see if I can suss out the spectral emissions. In general, with lights that bright you probably don't want to be looking directly into them anyway, and you may want to add a diffusor if it isn't built in already.
> Perhaps most alarming to the plaintiff, Amazon's Product Safety Team specifically inspected the camera to "ensure" that Amazon wasn't platforming a product being used to “infringe privacy,” “surreptitiously record others for sexual purposes,” or “create and store child sex abuse material.”

This is the key bit that makes it different from your examples.
I love technology, but some things we're able to build today cheaply and using mass-market parts concerns me. Hidden cameras can be so good now that it is impractical for someone to find them.

You may disagree with that assertion, but I'd put to you that maybe you just haven't seen some of the top-end products where the only clue is pin-hole sized, or even invisible like hidden behind the LCD screen of a set top box/clock/etc.
I can’t find any references for when the 3 major labels held significant stakes in Spotify. Only Sony did with 5.7% at the time they went public, according to the principal shareholders section:

https://www.sec.gov/Archives/edgar/data/1639920/000119312518...
FWIW Sentry has recently (within the last year or so) rolled out support for N+1 monitoring as well.
So can I sell a camera with the following description?

SpyCam

Disclaimer: should not be used for spying
There hasn't been any QA for years now. The old QA team that gave us masterpieces like Windows 7 has since been laid off.
> Maybe more importantly, you could get a distribution to support you but what about upstream projects? It'd be a big lift (if not impossible) to get projects like cert-manager cilium whatever to adopt the longer release cycle as well.

Exactly this. I see a lot of parallels between k8s releases and OS releases.
Even if you're paying microsoft for patches to windows XP, I'm not seeing any of that and the python runtime that most of my software relies on also isn't seeing their cut so... I guess upgrade to at least python 3.10 and then call me back?

I would prefer to see the conversation turn more to "what can be done to reduce reluctance to upgrading? How can we make k8s upgrades painless so there's minimal incentive to stick with a long out of date release?"
I'm not totally sure. There isn't a mechanism in the app to remove a tip as a customer. Drivers on DD-related subreddits say it isn't possible for a tip to be taken back.
See also,

Llamafile is the new best way to run a LLM on your own computer (simonwillison.net)

https://news.ycombinator.com/item?id=38489533

And

https://news.ycombinator.com/item?id=38464057
I was told genetically targeted weapons were just five years away, literally 25 years ago. So forgive me if I seem unduly cynical.

“The BMA has warned that the possibility of developing weapons genetically targeted at different ethnic groups could be just five years away.”

Published Jan 30, 1999

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC1114775/
Cool! I had the same project idea recently. You may be interested in this for the step of speech2text: https://github.com/SYSTRAN/faster-whisper
Am I the only one that gets really weird vibes from this website and the news it posts? Feels like the UK's Sun, but not as bad.
If Facebook showed illegal images on its platform and didn't do anything to counter that the I think most people would argue that it was Facebook's fault. Why is it so hard to imagine holding corporations to higher standards?

And for all the examples you gave: Facebook marketplace has safety features to try to prevent robberies. Gun shops do background checks to avoid selling to murderers.
It's too early in the week, and I'm too sober for this.

My one nit, is the lack of static typing. I'm not a fan of radically changing the direction of a project, so instead of baking it into HTML, the Programming Language I suggest the TypeScript route. Something like a hypertext typed programming syntax, HTTPS, to compile to HTML, the Programming Language.
Neverending doom loop of

One more step
Please complete the security check to access archive.is

no matter how many times I click the box or answer the bus/traffic lights questions. On starlink
FWIW that's definitely not gutting a team. Swapping out leaders makes a big impact but it isn't gutting a team. It could lead to the same outcome.
No worries - if word gets out, you can simply deny the windows update! Oh wait, you can't.

This may be an attack vector, for sure
The alternative today are renewables with minimal environmental problems, and recycling potential.

Framing it as a question of fossil fuels vs nuclear is building a strawman.
Yeah but then you have to leave your home. I know people who use it plenty because they're too lazy or busy (the person I know who uses it most is in med school and has basically no life currently except for studying and school).

I use it when I'm too sick to leave home and I'm not stocked up on food. Or board game nights when we don't want someone to have to leave to pick up food. All the delivery apps have such bad customer experience though, we usually now just agree on food beforehand and have one person pick it up on their way.
Why raising the price for the tourism to the match the actual cost would mean no tourism? If they can't afford the travel cost there, maybe go somewhere else cheaper? The only reason short rentals are cheaper was that they are getting around the regulations AND they sacrifices the local population and push up the prices of the real estate and rentals.

Or do you mean tourism was invented after Airbnb? huh?
That's some pretty faulty reasoning. Reactor failure rate is a function of age and number of reactors.
Meals-on-Wheels or similar volunteers/charities that deliver meals, groceries, and essential supplies to the disabled and elderly.
chaining accessing a likely air-gapped rsa private key to sign the malformed update with an already unlikely attack vector of a metadata parsing exploit itself means this is pretty pie in the sky
This is a great idea though done naively could cause unintended side effects. But key to the consideration today (and as pointed out by the commenter in TFA) is that not just SQL would need to be considered, especially in the dawn of the LLM era.
An approach I've done in the past for projects that are publicly API-based:

Django handles the database migrations and user accounts/models/etc - and you get the useful admin to boot, which is just incredible if you ever need to open up the data layer to someone else.

Then just write the API interface in Go/Rust/your language of choice. It decouples the DB modeling from the API layer, but in practice... I've just not run into significant issues with it. I'm sure it could be an issue though, so YMMV.
Either that or it makes it really hard to find the person who understands the code you just changed to verify you didn't miss anything. I don't work for Facebook, but I'm often the person who does large scale refactorings - since I know I'm human I want an expert to verify those that look at all scary.