skysight-inc/HackerNews huggingface dataset:
Nice write up!

I used RoR and Turbo Native for both iOS and Android apps last summer on a client project. To do that I used Jumpstart Pro’s iOS and Android add-ons [1]which Joe (the author) contributed to.

As a non-mobile dev they were an absolute dream to use. I was VERY pleasantly surprised how easy it was to get our apps out the door. Even though it was 10/10 would use again I would’ve loved this write up last year as seeing more how-to examples in the wild is always helpful.

1- https://jumpstartrails.com/ios
We use kustomize with multiple copies of kustomization.yaml and I don't know if there is a way to do it without that. Basically, there's a base kustomization.yaml and then there's test/kustomization.yaml, prod1/kustomization.yaml, prod2/kustomization.yaml, and so on.
There's no real cartel for older nodes. It's not even really possible considering how many fabs exist and how many players are operating those older fabs.
I still put Halcyon and on and on, in my playlists, entirely thanks to this movie. :)
Come on, are you really comparing a calculator to any web API server that is exposed 24/7/365 to malicious people trying to exploit it using various ways, which has many network endpoints with various HTTP methods, authentication, authorization, RBAC, using databases, connection encryption, randomness, hashing, maybe compression, graphics/video/audio conversion, caching and so on?

I'm in love with "bc", I don't know if I use your version or not, but well... it's a calculator... It's well written, it does the job, but come on...
> VSCode was more laggy than native competitors on my machine. Especially when selecting text. Maybe our tolerance for lag is different?

This is interesting because when I measured that a couple years ago it was one of the fastest options, right up with the native apps. I wonder whether there’s something like display scaling or an extension responsible for the difference.
If you're curious about emulating even older apple devices (Clickwheel iPod), I worked on an emulator for a few months called `clicky`. Very nifty project, given the weird and undocumented architecture of those early iPods

https://github.com/daniel5151/clicky
And now it's your job to figure that out!
I thought the whole point of ledger was that it's a physical wallet that can't easily be compromised. Not your keys not your crypto and all that?
That's possible on most payment card networks that have their historical roots in credit or "dual message" processing.

Historically, the default assumption was that a credit card was always good for payment; the issuer took the credit risk for the cases where that was not the case. Ubiquitous electronic/real-time authorizations (a concept also known as "zero floor limit") have changed that default assumption and liability, but are a relatively new feature for credit cards.

Since debit cards in the US usually feature at least one international "credit" scheme/brand (credit in the historical and processing sense, not in terms of actually being funded that way), there can accordingly also be force-posts.

The issuer can trivially charge back any such charge in case of insufficient funds, though, just like they can with checks.

This is mostly true for credit cards as well, by the way! For historical reasons, some merchants (like hotels or car rental agencies) treat the two differently, but there is no formal basis for the distinction anymore. There is still a practical difference though: Opening and maintaining a credit card usually requires having a non-disastrous credit score; the fact that somebody can present one that still allows authorizations by the bank to go through can therefore serve as a weak proxy for that customer's credit.

tl;dr: The merchant (or their bank) is almost always liable for this, not the issuing bank, with very few exceptions.
If this warrants a name, then I'm claiming the Unobtainium SAML Attack now--target the keys used to sign the federation metadata. Use those keys to insert new trusted identity/service providers, and use those to issue whatever assertions you want.
> If the goal is openness, i.e. why GitHub has the prestige it does, allying itself with open software development goals

I guess that is why Microsoft acquired them.
> Probably even better is to ship a controller and a CRD for the config.

Maybe it's just us, but our operations team puts pretty hard restrictions on how we're allowed to talk to the K8s API directly. We can turn a regular Deployment around as fast as we can write it, but if we needed a controller and CRD update it'd take us like three days minimum. (Which, I even sort of understand because I see the absolute garbage code in some of the operators the other teams are asking them to deploy...)
Why is everyone so overly dramatic about this stuff. I remember when FSD was announced on HN everyone knew it'd be way longer and he was just pumping it up cuz that's how he is. It wasn't some big surprise.

Now everyone is acting like it's do or die, as if everyone bought Tesla's just so they won't have to ever touch a steering wheel at some point in the future. Only 19% opted for it and plenty of those are probably wealthy people who can afford novelties and all that matters at the end of the day is if you're competitive with the alternative options on the market (holistically not just feature to feature). Ultimately it's still just a car people bought instead of a BMW or whatever. They're not making car purchasing decisions comparing it to some beta project only running via taxis in silicon valley and some random small cities.
> And I have to assume bodycam software is less reliable than iOS/Android.

I'd argue that it's waaaay easier to make stable bodycam software than a stable mobile phone OS.
Current personalized cancer "vaccines" arent really comparable. They typically cost millions and require the a team of scientists to harvest your cells and create tailored biologics to treat you.

Even if you strip out the profit motive, you still have huge amounts of skilled human labor
For the repositories not in the index, we do show a message to try again later. For documents that have been excluded, we agree we need better visibility.
> No consumer vehicle has a driverless system that tolerates inattention...

Mercedes's Drive Pilot (L3), which you can buy in a production car today, is explicitly advertised as allowing drivers to take their attention off the road and do other things in specific situations.

It's not L5, but it'll absolutely tolerate inattention and let you e.g. pull out your iPad to wage an HN comment battle while it drives you from Berlin to Potsdam.
Despite being a chemist, I don’t fully follow this, though it seems legitimate.

But if there’s that much latent energy, I really have to think that there could be some kind of atmospheric, “local ecological” side effect on microorganisms or “something” at scale. It’s not like nature lets massive amounts of energy go completely unused.
+1 for using a semantic layer. I built (and open-sourced) one for use in my own business but Cube looks well done.

https://github.com/totalhack/zillion
Even worse for Intel, AMD announced their 8040 series with both better efficiency and with an NPU which (with what little details we've had so far) can possibly hit much higher TOPs.
"Would I object if the city decided to raze all the single-family homes on my block and build a housing tower for teachers?" is a good example of where zoning beliefs and neighborhood beliefs often come into conflict, and where United States land politics tend especially to get mired in "anything but that"; thus, the tendency to sprawl.
Just read this. I have had enough weird incidents where you for example chat with somebody about a topic and a day later I suddenly received ads Youtube recommendations about this topic. There is a lot of reason to not believe big companies. I don't see why Facebook should be more ethical than tobacco or oil companies that have been lying and obfuscating for decades.

The only solution I see is to make it illegal to use personal data. Especially make data brokers illegal. When you give a company access to your data, you often agree that they will pass the data to third parties who then pass it on and suddenly everybody has your data because you have permission to use your data.
Adding on to this, companies as “AI-orgs-running-via-human-individuals” can be checked by other similar entities of comparable competency, e.g. activist groups, governments, non-profits, and so on.
A version that would run without batteries would be super sweet! I understand such dev-kit for phones/tablets may not benefit from economy of scale and may be expensive but it would be nice to have the option. They could be built to be stackable, so you put them in a furniture or maybe even in a rack of devices. But once you are developing for phones and tablets and you have one device on each system version, different sizes and all, it gets really boring getting each of the drawer and charging and testing and all. Once in a while I see some offer of a platform that has these things remotely accessible through as a service, but it's not the same as having the devices available for real touch.
Yes, but what are the impacts?
I assume most of it is access to guns. But I do wonder how much is due to people are not using giant ego-soothing trucks in the parts of the world where petrol doesn't get subsidies. So there are fewer truck owners to do the murders.
Device Posture Management now in beta
Mozilla took away native ALSA support and forced everyone to use PulseAudio, fortunately there are emulation libraries you can install to work around that.
Counsel to the member of the public, whether appearing as legal defendant or as plaintiff against the police, should be able to demand full access to camera footage as part of standard pre-trial discovery.

If police fail to produce the footage, judges should instruct jurors that the adverse inference may be drawn (in case they're insufficiently skeptical to do so themselves).
That's awesome to hear, thanks for sharing!

We put a lot of work into Jumpstart. And I recently added a Strada integration which makes forms feel a whole lot more native. 2FA is coming soon, too.
Perhaps important to note that this result comes from a lab experiment done on mice, with as far as I can tell N=24 mice split in a control and two treatment conditions. I would be very careful concluding anything from that study about what human males should or should not do.
> Anyone else heard this? Does alcohol perhaps keep all the bad stuff(lipids et al) in your blood in solution better in cold weather?

No, but it sounds like a great excuse for alcoholism.
That's exactly who I was thinking of. I'm really hoping for some precedent to be set here at some point – right now there's a large amount of FUD looming over many emulation projects.
I would highly recommend reading the Shape Up Methodology from Basecamp if this interested you:

https://basecamp.com/shapeup

It’s short, but high quality and digestible.
My favorite movie hacker tech is Tron: Legacy.

They literally just used Linux and Emacs, and it looks beautiful.
I don't understand what you mean. Mercedes-Benz is currently ahead of Tesla on autonomous driving. They have a working SAE Level 3 system already. It is currently very limited but will expand over time.

https://www.caranddriver.com/reviews/a45326503/mercedes-benz...
Probably not :P
Tree-sitter is very cool! We use it to power semantic analysis for GitHub code search.
> Car infra takes next to nothing to plan and build. Trains, trams, metro, anything big at all really, takes decades, riddled with corruption, environment destruction, landscape change.

As opposed to building highways, parking lots, massive car sized neighbourhoods etc...?
I would trust that sloth with my life
Coming soon! Watch this space:

https://github.com/joemasilotti/daily-log/tree/main/android
You can have gradations of control. USDT and USDC are centrally managed.

We used to have DAI, which was fully decentralized and over-collatoralized by Ethereum tokens (the native currency of the platform DAI is rooted on) - but the founder mysteriously died as the DAO was taken over and made to begin collateralizing DAI against USDC and USDT, ironically.

It is a shame how far crypto has fallen culturally that this stablecoin business is some niche story. Most people are in it for the money, but many good people are not.
> 2. Far more people each day die in GM's not-self-driving vehicles. Why are they not firing people over that?

First, you need to consider accidents per mile driven.

Second, you need to consider accidents attributable to the manufacturer as opposed to user error. In driverless, every accident is manufacturer error to some degree. Recalls are a decent proxy for manufacturer error in non-driverless. I'm sure that heads do roll at GM when a recall occurs.
Alcohol makes you feel warm, but crucially it doesn't make you any warmer and by bringing blood closer to the skin makes you get colder faster.
Morning Person? You Might Have Neanderthal Genes to Thank
Guess where little State Prosecutors grow up? Working cases at the municipal level until they move to the minor leagues. Federal prosecutors work up the same route, so all the institutional bias and privilege is instilled early.

How many Attorneys General worked as public defenders? I bet out of the current 50 US AGs, it's probably close to zero.
That's right! It has a few native buttons that interact with the web view, like navigating between days and submitting forms.
>> but 4 beers is into ‘drunk’ levels for me.

Bro 4 beers in I would be actually sick, I definitely can't drive after 1 beer(nor would I want to). I literally don't understand how some people can chug 10-12 beers in an evening, like even ignoring the alcohol where does all of this liquid go?? I'll have two beers and the third one is literally a struggle to drink, it's just too much.
While I really enjoy helm when playing with k8s or kickstarting projects, I never feel "safe" when using it in the long run for updates/upgrades.
"values.yaml" files and templating YAML files are too error-prone...
I don't have that expectation, why would some library for dApps (or some other crypto nonsense) care about security? Like do you take this industry seriously? Why on earth would you?
If you want to call something simple like winit, GLFW or SDL a 'middleware' then yes. It definitely would not be a game engine in the popular sense like UE or Unity, those are way to bloated for most use cases such a minimal cross-platform wrapper would be good for. It would be something you could build a game engine on top though.
Why would they want to abandon FSD? I look up videos whenever these threads come out and over the last few years it seems to have made astonishing progress.

2 million miles per day of FSD driving is impressive. The resulting training data from every corner of the USA is a bonkers advantage.
> If someone chooses to drink alcohol and it doesn't negatively impact other aspects of their life

Almost everyone who drinks has this view of their own alcohol consumption. They aren't always wrong about this, but certainly very many of them are. Even people who are very obviously experiencing negative consequences of alcohol use will confidently assert that this isn't the case.
Helm is a tool to use Jinja to write an object tree (or dag), in yaml.

This is not endorsement. This is to point out that it makes hardly any sense! Use a proper programming language and serialize the object tree/network to whatever format is necessary.
63% of Americans live in an urban area having a population density greater than 1,500 per square mile. There's no agreed-upon definition of "sprawl", but it's generally computed at being under 2,000 residents per square mile. None of the people collecting this particular data used that definition, they used 1,500.

Even so, some 2/3 of Americans live in areas that would benefit from pursuing alternatives.
You're right. I have always avoided Microsoft products on principle. (Until Github and ChatGPT, unfortunately.) Ever since “embrace, extend, extinguish”, and having to fix my family's Windows machines (which I vehemently advised against purchasing) while using Macs since 1984.
The fire department has a saying - what do police offices and fire fighters have in common? They both wanted to be fire fighters when they grew up.

It's not a job you'd want your children to do, but it's one that someone has to do.
There are at least three type of vulnerabilities here:

1/ Handling the custody of secrets by the company. The attackers first attacked and accessed a former Ledger employee with official Ledger account secrets. This is where secrets were mismanaged since the actual company secrets should never be in the hands of former employees.

2/ The attack could occur on an actual employee so they should employ ways to be protected against this kind of attack.

3/ The use of CDNs should have security measures in place. This is one of the most common attacks nowadays.
> Doesn't come from his dissertation, does it?

No, it came from a talk he gave entitled "A little REST and Relaxation":

https://www.slideshare.net/royfielding/a-little-rest-and-rel...

> This is no different than someone doing exactly the same, but requesting JSON, XML or binary streams from the server, as long as their client knows how to deal with them.

I don't disagree w/ that, so long as there are hypermedia controls imposed on top of those formats (which are not natural hypermedia w/ native hypermedia controls) and are being consumed by a client that implements the uniform interface properly (https://htmx.org/essays/hypermedia-clients/)

> This is "different hypermedia", that there's no client for

Hyperview includes a client, which is one of the reasons I think it will be a successful hypermedia, in contrast w/, for example, attempts to impose hypermedia controls on JSON but not providing a client to consume those controls. (See the above essay, where i discuss this)

> acting as an overconfident teenager with a very superficial understanding of things, and taking everything as a personal affront.

I try to be a humble man and i certainly have much to be humble about, and i appreciate the reminder that at times I fall into the sin of pridefulness. Pride goeth before the fall, and a haughty heart before destruction.
Alcohol is very caloric. A single shot of vodka can have 100 calories. Also it can increase blood flow to the skin, making you seem warmer than you actually are, at the expense of your internal body temperature.
I am in control of the update roadmap of applications that run on my system.
It's all very frustrating if you're a very pragmatic and detail oriented person, but I guess it makes sense.

Humans have only been reading and writing for about 6000 years (and mass literacy has only existed for a few hundred years).

Compare that to a 200k+ year evolutionary history of verbal and face-to-face communication.

So maybe it's understandable if most people prefer the latter.
Uh...highways and roads don't build themselves. The planning and costs are huge.
Alcohol actually lowers your body temperature slightly, making you feel more comfortable in the cold. The big problem is that the alcohol metabolises straight into the citric NADH, which means your body converts the rest of the food you eat straight into fat.

The eating part is as you can see above relates but it has been demonstrated that the mitochondria in your brown fat burn significantly more energy after cold exposure, so it makes sense you would be hungrier.
> I took that screenshot on my own account. It’s toggled “on”—but I never turned it on myself.

There is a consent crisis as well, though I agree it's a smaller issue related to trust. There needs to be an actionable, legal definition of consent as it applies to website privacy—my naive assumption is that there was, but clearly that's not true, or it's not good enough or actionable enough—and it needs to preclude implying users must positively grant consent to harvest, process, or transfer data to third parties, when in fact the dirty deeds have already been done in secret.
I use Matter(iOS) for reading and annotating articles. It has the capability to load transcripts of videos and podcasts so you can read them as text. It's pretty neat.
I want to be open-minded about AI, but I’ll be damned if my tax dollars are going to a self-driving car’s unemployment cheque!
And the sky is blue. News at 11.

But in all seriousness, Coinbase is not a particularly ethical company. I still won’t forgive them for how they pulled off the insider trading and boosting of Litecoin, which made Charlie Lee rich off the backs of the peanut gallery.

EDIT: for those with seemingly limited memories - Charlie Lee worked for Coinbase at one point, and was able to successfully get his shitcoin (which was basically a hastily tweaked bitcoin) accepted for off ramping to fiat. Sounds like a direct conflict of interest, and I’m surprised Coinbase wasn’t investigated for this.
Tuple Spaces (Or, Good Ideas Don't Always Win)
This was a UI popup that got injected into the middleware provided by Ledger that is used to make it easy for apps to prompt Ledger users for a signature. The keys aren't compromised by this attack, this is more similar to a phishing attack, but via supply chain to increase fake legitimacy.
Wow! I did not know that! Thank you for sharing!
Definite[0] is the cloud version of this idea (data stack in a box). We have ETL, modeling, a data warehouse (Snowflake), and BI (dashboards) in one app.

We're experimenting with using DuckDB as the warehouse. Would be awesome to let people pull down parts of their warehouse locally for testing.

0 - https://www.definite.app/
I agree. I write all of my K8s and surrounding cloud infra specs in Pulumi using TypeScript. Never going back to Helm.
That's true. It's very reasonable to worry that OpenAI's "we only hold on to your data for 30 days for auditing purposes" policy means there's 30 days in which they might have a breach that leaks your data.

Especially since they've had a few documented security problems in the past.
Supabase Auth: Identity Linking, Hooks, and HaveIBeenPwned Integration
HN is just generally awful on this topic and not worth commenting in imo.

Tesla is very well positioned even if they did zero on FSD (which they won't). The Model Y was the best selling car on earth across all categories (including ICE and EVs!) - not sure what more you could want for car company success.
oh yes, 100% agree. Few months back I was given link to a repository in which I needed to add a configuration file in yaml format. In repository readme first thing I saw was a screenshot of a text editor with possible yaml objects and properties and a text description for them, second was a paragraph of vague description on how the tool that consumes this repo works. No text on yaml structure in readme, no schema, no validation, nothing.
That would likely classify you as a "heavy drinker" by CDC definitions.

> For men, heavy drinking is typically defined as consuming 15 drinks or more per week.

You're definitely not the only one.

https://www.cdc.gov/alcohol/faqs.htm
I'm not buying the example of using the operator to figure out things dynamically. Especially that detection of the cloud in the example is done by looking at some random labels or other attributes specific to a cloud provider.

This is what values and templates are for: no need to guess where you are deployed, I'll tell you that via values, template will make sense and adjustments of how resources will look like.
The cost/benefit of believing an infotech company about privacy concerns not backed by an explicit contract is firmly on the side of "don't bother believing them".

Restore the trust? Pay us.
The point isn't that you can never query the API, but that you can't really use helm chart as a controller (and, e.g. restart a pod under a certain condition, which is trivial for an operator).