skysight-inc/HackerNews huggingface dataset:
Can also think in terms of half-life.

For example at an inflation rate of 2%, that rule of thumb means the value of money has a half-life of 72 years.
It’s not just about offline coders. A lot of companies have a policy that code can’t leave their internal systems. No GitHub, no OpenAI, just internal tools.

Far more than 1% of developers are affected with that.

But let’s take it from another perspective: you will be happier if jetbrains increases the prices 100$ per year and AI is included instead of having an optional 100$ payment?
I just don't think the grid storage market is going to be leftover vehicle batteries. The demand will be big enough that battery technology will be tailored toward grid storage; cheaper batteries that are less dense, super-high lifecycle numbers that cars don't need, less need for high charge and discharge rates.
Do it on a bicycle, it will have the opposite effect.
Good luck with that. He pissed away $44B buying and running Twitter into the ground and now expects others to invest? Especially this area—-Musk was so certain OpenAI was doing it wrong and too slowly. How’d that position work out?
> unelected government/political entity whose decisions happen to affect people's lives on a national level

Since you're referring to Brexit, you mean a political entity like the UK's House of Lords? A lot of the people in the pro-Brexit camp were often blaming EU unelected bureaucrats but seemed to be perfectly fine with their own unelected, appointed for life (and in some cases hereditary) lords.

I would like to understand why. I agree with you it's not all "the Russians' fault", and I may have jumped the gun a bit with my earlier comment. There's definitely a weakness in the disconnect between Brussels and the states/citizens.

Is it a fundamental belief that local government is "better" or more adapted to local circumstances at least? ("sovereignty trumps economy"). Or that a vote for the EU parliament is too "diluted"? Maybe, but being a part of the EU is a trade-off: there's a lot of advantages in being a part of a bigger trading and political bloc.

After the (IMHO) unmitigated disaster that was Brexit, very few other member states still have an appetite for leaving the EU. But it'd be better if the EU was something they'd enthusiastically want to be a part of, instead of begrudgingly. However, eurosceptics seem to have difficulty articulating the changes they'd want to see.
Of course they are. Openssl didnt prevent that malware from modifying a ufi driver so of course it's worthless.
Nice toy Google, now how can it improve MY life?

....yeah, that's what I thought. This is another toy and another tool to spy on people with. It's not capable of improving lives.

Additionally, I had to tap the Back button numerous times to get back to this page. If you're going to EEE the Web, at least build your site correctly.
Start installing coreboot then?
> Remote attacks work by first exploiting an unpatched vulnerability in a browser, media player, or other app and using the administrative control gained to replace the legitimate logo image processed early in the boot process with an identical-looking one that exploits a parser flaw.

I don't get the point of this. Any vulnerability that requires local access can be exploited if you first get remote code execution through another vulnerability. Also, exploiting the browser or the media player doesn't give you admin privileges, you need another privilege escalation exploit for that.
> you can also run everything locally and debug it. I didn't see that with the FLAME but maybe I missed it.

He mentioned this:

> With FLAME, your dev and test runners simply run on the local backend.

and this

> by default, FLAME ships with a LocalBackend
Moisture-controlled triboelectrification during coffee grinding
Community MH is IMO functionally the same as the public defender system. We do not spend enough on resources to care for populations via this arena. In a ton of ways we treat mental healthcare the same as crime. I'm considering leaving software to go into the field as I have an extremely traumatic background and want to do more with my life, so the economics of it are very front of mind.
Yes, and China's problem will in fact be much worse, but it will hit several decades later.
I find it useful to distinguish between social networks (based around people/accounts; e.g. Facebook, Twitter) versus forums (based around topics/posts; e.g. Reddit, myriad phpbb instances, etc.). HN is more of a forum than a social network.
It is quite interesting the various anecdotes in the comments that all seem to have different opinions and contradict each other. All of which of course can be true--including the article. One thing can be linked to another and there still be outliers of course.

For my story. I moved within walking distance of my office 20 years ago. Since then, I will never do any sort of commute. It completely changed my day. I since changed to remote work, but if I have to go into an office again, I will move within a couple blocks of wherever that office is.
Great. But school's out. It's time to build product. Let the rubber hit the road. Put up or shut up, as they say.

I'm not dumb enough to bet against Google. They appear to be losing the race, but they can easily catch up to the lead pack.

There's a secondary issue that I don't like Google, and I want them to lose the race. So that will color my commentary and slow my early adoption of their new products, but unless everyone feels the same, it shouldn't have a meaningful effect on the outcome. Although I suppose they do need to clear a higher bar than some unknown AI startup. Expectations are understandably high - as Sundar says, they basically invented this stuff... so where's the payoff?
This is a confusing attitude - you felt OK with spending that time listening to something, so you "disagree with these conclusions"? The conclusion isn't that some people can't be OK with a long commute.

You sound like you're trying to be helpful, but you also sound accusative toward people who are miserable commuting (regardless of what they are listening to while doing it). Obviously we can't solve the misery of the majority of those people by saying "you have the wrong attitude". "Making lemonade out of lemons" is simply inapplicable in this context. If a person can give up that time to commute, then that same person, without the commute, could give up that time to listen to something if they actually wanted to. The listening is merely a mitigation, which will help some people a lot, some people a little, and some people not at all - it's not some kind of opportunity.
Standard Blu Rays? Are you sure about that? I started ripping my blus at the beginning of the year and don't remember it being more difficult than buying any random Blu ray drive, downloading MakeMKV and clicking the start button.

Now, I'll 100% agree about 4K Blu rays. I got lucky in that I bought one of the handful of drives that supports ripping 4k disks (since its encryption keys were leaked?) but even after that it required finding and flashing custom firmware that was a hassle. But I got it working which is cool.
If you autoscale based on CPU consumption, doesn’t the macro level scaling achieve the same thing? Is the worry scaling small scale services where marginal scaling is a higher multiple, e.g. waste from unused capacity?
> However, if there are no other entry/exit stamps in your Japanese passport they will know you are using another countries elsewhere.

If you only ever travel between the USA and Japan, they wouldn't know anything since the USA doesn't stamp your passport anyways.
Seznam.cz blocked all emails contained links from OneDrive recently.
Shazam has shown synchronized lyrics for many years.
Being able to watch the afternoon storm roll in on the verandah with a beer in hand counts as outstanding weather for me :)
Awful interface. I have to click three times and scroll to see code in a tiny font, the name of the function is repeated on the page like 7 times.
We were trying to get TPUs. We work in audio AI (ASR, TTS, translation, etc). When we saw whisper-jax, we wanted to test the viability of the TPU platform. From our napkin math, the cost/performance ratio seemed great as they always mention on these TPU blog posts.

I posted this in another comment, but the default provisioning for V4 and V5 TPUs is ZERO. They don't tell you this anywhere. So when we'd try to allocate V5 TPUs on our GCP account, it would just fail with a generic error and a huge error number that led to nothing in a search.

So I reach out to our GCP rep we had been working with. After about 10 days and 3 follow-up emails/calls that went unanswered, she replies, "you have to fill out this form." I click on it and it's a Google Form. The same type of Google Form you and I can make.

I submit it. To this day I have heard nothing back. I reach out to various executives at GCP we had been talking with. They said, "you have to fill out a form." I tell them we did, and they say, "oh, it's usually pretty fast." I heard this so many times from so many people. It seems that not a single person who actually works in sales or account management knows how this process works.

When I finally got a response, they told me that "my account has no billing account associated with it." I showed them yes we do, they replied that they were trying to provision for the wrong account. It took another couple weeks to get a follow-up response.

Luckily they eventually connected us with one of their partnered consultants who was finally able to help us, but by then we just decided to go back to GPUs on other platforms because it was such a miserable experience and in that time, all of our providers came through with the volume we needed.
It'd be nice if this was more clearly labeled as a React plugin. I saw "drop in replacement for <textarea>" and thought it was a web component and only realized it was a react plugin after reading further. Not a huge deal, but since it is a plugin and not a stand-alone thing it might make sense to make that clear up front.
The point of uefi was to unlock the future bios was preventing. It's crazy how quickly the mob forgets and then turns against what it used to love.
It seems to be getting more and more common to leave your git repository completely undocumented. If you're releasing a software project on github, I want to read about it on github.

A basic README that outlines what it does, how it does it, and basic syntax - this is really easy. Table stakes, I might say. I can checkout your repo and I have everything I need to work
I think it's an interesting idea, but I feel like creating a whole new language has too much overhead for adoption. You would need to create a language server and extensions for every editor you want to support.

A language-specific DSL (Pulumi, CDK, etc) just works in any editor that already supports your language.

This is a similar reason to why I dislike most docblock-based infra tools as well. If wing is confident in their ability to maintain editor tooling, more power to them, but it isn't maintenance I would want to manage.
Because they care less than any other industry about positive customer experience and convenience.
Once commuted bicycle + ferry (SF Bay). I looked forward to it every day.
> 2D image library

Maybe I'm ignorant but what's a 1D image ?
I'm wondering why they're keeping him around. Maybe they feel like they've got more control when Sundar is in charge, since he's less likely to make any rash decisions or sudden movements (or any movements at all...)
Wikipedia and the Problem of Historical Memory
But this makes the access persistent, and allows the removal of all evidence of the initial penetration, survives OS patching, vulnerability scanning, etc.
Test it.

Produce results.

Market it.

They can’t enforce if it gets too big.
There are a lot of companies that are paid big bucks by nation states to find vulnerabilities and not make them public. NSO for example. So yes Apple only fixes the bugs people or companies find that make them public. But not for the reason you are implying.
As a friend used to say about a service for which he paid $60/yr, I get way more than $60 worth of use out of this thing. If you're going to use it regularly, or frequently, and you get benefits from it then it's definitely worth paying for ChatGPT Plus (or anything else).
They can’t even get panels to line up right.

Still.
Location: TX, USA

Remote: Yes, and hybrid is acceptable

Willing to relocate: Yes

Technologies: 5 years in the following: C#, PHP, Kotlin, Ada,
C/C++, Python, SQL (Postgres, MariaDB), IaC, SaaS, CI/CD, AWS
Cloud, Vue, Rest APIs, Docker containers, full stack programming, embedded software programming, real time programming, multi-threading, Linux,

Résumé/CV: www.linkedin.com/in/jessica-duplechin-b62a37aa

Email: jessica.duplechin@gmail.com
Have you cleared cache and cookies? I was getting the message but clearing the browser seemed to reset the countdown.
It's completely unenforced. When exiting the US no American authority checks what passport you are using to leave, and when entering they are legally required to let Americans reenter the country. At worst the border guard will be cranky and give you a stern lecture about how you are supposed to use your US passport.
If you're a Chinese citizen, you are not allowed to leave China unless you show a Chinese passport with a valid visa for your destination.

You can still get around this by going via a third country, but then they can ask for a return ticket from that country etc. The only foolproof way to evade the system and keep citizenship in a 2nd country is to acquire permanent residence in 3rd country!
Wait so it doesn't exist yet? Thanks for watching 45 minutes of video to figure that out for me. Why am I wasting my time reading this thread?

Somebody please wake me up when I can talk to the thing by typing and dropping files into a chat box.
Good article. Ended too early. Let's keep going.
Don’t disagree, but technically the docs are in the same repo. Not easily consumed though.

We removed bits from the readme as it kept becoming duplicated and eventually wrong. I think that’s the usual reason folks like to avoid it. DRY and all.
Add the coupon WH25 in your cart and get 25% OFF your new Webhosting plans L, M or XL
UEFI update protocols have a variant where you store the update Capsule in memory, mark it so that it's not overwritten on reboot and picked up by update handler during boot.

The same protocols are afaik used by the bootable updaters (there are IIRC three ways to pass the update capsule to flasher that is actually part of the firmware)
Because if you did, the next place you'd be working is a prison laundry :-)
Secure boot and TPM that only come with PCIe card drivers signed by the Microsoft CA are definitely the problem here.

If it weren't closed and controlled by one large corporation's interests, there wouldn't be a monoculture, which would make this less severe of a vulnerability.
What I find interesting in this whole situation is that there are huge Swedish companies like Spotify (which I believe are run/founded by Swedes) that do not have a union agreement [0]. Yet somehow Musk is the evil American capitalist that does not respect local customs :)

0: https://www.business-humanrights.org/en/latest-news/sweden-s...
No, ownership doesn't have a clear definition. You can own all sorts of interests in real property or personal property which fall short of the whole.
I don't really follow here. Is Jordan Peterson one of the sources claiming the real solution is church, army, etc., and that therapists aren't allowed to say so?
E2EE push notifications are an option. I don't know how many apps use it, but it's a feature in Pushover.net
I've seen undo.io several times at cppcon. I've been throughly impressed with the demonstrations at the conference and came to this thread specifically to recommend undo.io. I was particularly impressed this year by a demonstration of debugging stack smashing -- that's something I recently worked around stack smashing in protobuf which happens before `main()` even starts. It seems perfect for undo.io to help debug :)

I'm still waiting on the keyserver to be able to run in Kubernetes though
These are all just openai wrappers with a nice ux, better to build your own prompt and go straight to the source. More visibility into errors/edge cases and ability to leverage new model capabilities as they come out. Whats more, as your use case gets more complex, you will outgrow these apis. You could have just written your own prompt to begin with and added edge cases as they arose
Could you please stop posting unsubstantive comments and flamebait? You've unfortunately been doing it repeatedly—not that your account has been posting frequently, but this comment and its predecessor https://news.ycombinator.com/item?id=37072443 have both broken the site guidelines.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.
Hmm, bad analogy. They aren't really even in the same category, it would be rail vs airplane not car.

"Powerful software is complicated." > you assume software today is somehow more powerful, its mostly not. Some Facebook engineer way back when stated as a senior engineer, a 1% improvement was a major deal. That was ~10 years ago, and 1% progress is not additive, it is multiplicative, so 1% of 1% of 1% ... etc. Quantitatively today's software is barely more powerful than anything ten years ago.

And most of it is just re-written to satisfy some ego/marketing/merger/etc.

In your analogy, this is like saying you're strapping wings onto someone's car because the car has trouble going 10 (mph/kmph) down the road, so you can continue loading the backseat with sand and skimping on the engine (because in 10 years they had to switch out the engine to save on costs).
$9B in profit vs $300M will have that effect.
If you think world governments can’t back door into any aspect of your life, you’ve been deluding yourself.
K-Cup creator John Sylvan regrets inventing Keurig coffee pod system (2015)
No one I know who wore a mask properly and kept a distance from others were infected with covid. If you don't wear them properly they don't work, it's as simple as that and it doesn't matter what your age is.

One of the real issues for children is we didn't have a supply of masks designed for them. We only had access to cheap cloth and paper masks designed to fit adults.

Another is the cheap cloth and paper masks that were available the 1st year were not designed to prevent covid infections, they were only for reducing the distance covid would spread in the air when breathing and coughing.

Where I live, most of the very conservative folks who live here (78% of the population) flat out refused to wear a mask and made a point to boldly walk into stores cocked and primed to take anyone on who told them they must. I wore them and was snarled at everywhere I went. Fair to say their children were taught to refuse to wear them too, and that while required to wear them in school, almost none of the schools staff enforced that here.

So, yeah, if you analyze the effectiveness of masks reducing covid infections in children here you'd conclude they did not work, but you had to be here to know why.
I called someone I knew from college and asked if they were hiring. I think I interviewed the next day and started a week later. Turned out I had gone to college with the rest of the team too but only vaguely knew one of them and another's husband.

Second job, the same guy had moved on and let me know they were hiring. I'd already had lunch with him and his boss a couple of times so the interview was a formality.
> And then the whole thing is really terrible security theater as you are technically out of certification if you apply any non-inspected updates.

The days when FIPS compliance required using relatively weak ciphers and modes were lamentable. But all the other tedious box checking work arguably shows that cipher bike shedding is the real security theater. If you don't have a plan--and follow that plan--to track software origins and updates, or an ability to quickly resolve dependency issues that make it difficult to refactor or even update your systems, then you have much bigger problems than whether your latest software is using the Noise protocol or has migrated from BLAKE2 to BLAKE3.

Which is not to say that maintaining FIPS certification or FedRAMP compliance equates to good security. It's trivial to identify simplifications that would result in better operational security. But the vast majority of projects and organizations struggling to meet those standards are struggling precisely because their security posture is horrendously poor when looked at comprehensively.
Yeah I was one of those. Now that the power it brings has dawned on me I'm trying to integrate it everywhere I can with a "where was this thing for half my life" feeling. I truly think it's a bigger revelation than Google was when it first appeared.

There's definitely something disquieting behind the elation.
Wow, that “packaged terminal” page is terrible. They’re a single object, and the refrigerant doesn’t leave the object. Outdoor air flows through part of it, and indoor air flows through another part of it.
Pfizer ?
lol.

Just going to drop in here that we need to be working on these solutions faster than is commonly known. The SOTA in breaking large swaths of our security infrastructure, including SHA, is much farther along in certain rarified environments than is commonly understood.
"One can block AI features for the project by creating a file with the name '.noai' in the root of the repository."

Is this a standard among vendors yet, or are we veering into more dotfile project directory pollution?
I do use coreboot on my 51nb faux-ThinkPad X210 thanks to @mjg59 :)
> This is a forum for technologists to discuss interesting new ideas.

It's not a sci-fi board though. One of the distinguishing characteristics of science and technology is that it's usually based on objective data and evidence. If you want to make a claim that something is more efficient than an alternative, you are generally expected to provide measurements and show that hypothesis to be true. If you can't prove a claim at-scale then you can show a model or a small-scale example. Or show an equation that uses known data applied to your model, that explains why you think your claim is true.

But there's simply no room for feel-good, trendy, pie-in-the-sky experiments that don't contain any data. That's reminiscent of the viral knee-jerk behavior against plastic straws a few years ago. Somehow people who lived hundreds of miles away from the ocean thought that forgoing straws would have some positive impact on the environment, but it was all for nothing (most of the ocean's trash comes from a handful of third-world countries).

I'm not sure if you're aware, but there is a bunch of academic fraud going on and lack of reproducibility in journal publications recently. Adding skepticism is completely warranted given the various levels of academic dishonesty.
>While doing chores, I asked chatGPT "tell me about Genghis Khan's sons", and then follow up questions like "what was the name of the khanate or empire Ogedai founded?"

You actually trusted the information it gave you?