skysight-inc/HackerNews huggingface dataset:
> Show me a hit song that was generated by AI.

https://www.nytimes.com/2023/04/19/arts/music/ai-drake-the-w...

AI Hub had half a million people in it creating music before the RIAA got it taken down.

https://torrentfreak.com/popular-ai-hub-discord-taken-down-f...

> Show me one hit movie or game that was generated by AI.

This is just getting started. The early results are getting serious attention.

https://www.youtube.com/watch?v=KrjL_TSOFrI

https://www.youtube.com/watch?v=d-8DT5Q8kzI

https://twitter.com/pika_labs/status/1729510078959497562

Camera and scene controllability is almost here. Temporal stability and the uncanniness are being solved.

Indie game developers have been incorporating AI assets (art, vocals, textures, sprites) in their games for over a year already:

https://www.reddit.com/r/gamedev/comments/wtpgqo/anyone_usin...
This book is great...I am a big fan of the rifters trilogy also by Watts.

They have some great fictional speculation on the Internet and how it's chaotic mix of automated agents tearing at each other that really reminds me of what could be possible with the content creation of LLMs.

"In Peter Watts's Rifters Trilogy, which includes "Starfish", "Maelstrom", and "ßehemoth", the internet is a significant theme, especially in its altered, chaotic state. It is described as no longer trustworthy, having been overwhelmed by self-evolving viruses and the descendants of self-evolving anti-viruses that spiraled out of control. In this futuristic setting, the internet has been renamed "Maelstrom" to reflect its chaotic and unpredictable nature, becoming a space that is both electronic and ecological, complete with its own digital ecosystem" - synopsis I ironically used chat gpt to write
The Effective Altruists using that logic (which seems to be the most prominent of them) are no better than the Eugenicists and Fascists of the 1930s. They start with a flawed axiom, mix in a staggering lack of self awareness of their own bias, and strive for power.

Fuck em.
Yeah I saw a couple clips from this and management was straight up "you need 13% black, mid teens Hispanic ... we are getting rid of people who can't get with the program ... and to be 100% clear Asians are NOT an under represented minority"

I definitely feel bad for all the talented folks at IBM who earned a spot there but will be seen as forced diversity hires.
Amazing to me that he could write this history and not once refer to the golden status of "holder in due course."
What technology did you use to build the scraper and how did you get around the usual challenges (anti bot, ip banning, etc) with scraping large amounts of data?
Spawn: A New Approach to Actors
Don’t put words in my mouth, I never made the noble savage argument and never will.

I also disagree with your calculus. 1 million deaths is worse than 10 irrespective of the overall denominator.

Even if I granted your hypothesis, there are more people pervasively living under coercive threat of death than any other time in history.

However it is my claim that pervasive violence was caused by QME via the creation of domination based systems. You can read my thesis here:

https://kemendo.com/Myth-of-Scarcity.html

So far every expert in this field that reads it thinks it is likely correct.

To wit, Riane Eisler read this and asked me to edit and submit the IJPS so I expect (hope) that it will take off from there and real anthropologists can test the hypothesis further to give it more power.
> the infrasound is produced before tornadogenesis even begins.

Then doesn't it have a similar potential for false positives as doppler radar? It might have a lower rate, sure, but it doesn't sound like a silver bullet.
I lived down the pike from the place where the largest tornado in history touched down, and you are spot on about warnings and knowing beforehand. If you are letting a tornado sneak up on you, you are doing it very wrong.

Hell, you know bad things are coming when it is 75F in the morning in December. The last bit of tornado weather telegraphed itself in the morning and didn't touch down until mid afternoon, yet I heard people on motorcycles when the storms hit.
I am gonna surprise you, but nobody from cybersecurity is finding vulnerabilities either.

ALL of cybersecurity is just operating and configuring a platform, whether it is Qualys or Snyk or Wiz or something else. "cyber" people are basically TOOL MONKEYS, and if SRE people can handle operating and configuring kubernetes - they sure as hell are capable of operating and configuring Qualys and Snyk and Wyz platforms.

Pentest is the same, I have not met any inhouse dedicated pentest folks, it is always third party contractor hired as needed for a short period of time. All inhouse fulltime cyber engineers are dedicated to blue team operations, rather than red team operations.
Oh man, I knew when I saw this headline there was going to be a massive asterisk like this. Saved me a click.
Taylor Swift is a personality, not a musical genius.
I have the Quest 2, Quest Pro, and Quest 3

For games, I feel that the Q2 is still the best because most games haven’t upgrade their visuals yet and because the original controller has the best tracking. Also it’s about half the price of Q3. It won’t last for long and the frenel lens aren’t great compared to the new fish eye lenses.

Quest Pro has the best form factor. I like the open headset style. Since it has eye tracking, it also has the best performance for PCVR streaming especially for Steam since Steam link supports eye tracking

Quest 3 has the best performance and resolution. Resolution is now good enough for doing work in VR. Some games optimized for it also look close to PCVR visual fidelity. Wireless PCVR streaming is terrible though, and I’m not sure why.
Not every street yet: https://waymo.com/research/block-nerf/
In arrays, you can use char. In structs, there are also bitfields like unsigned flag : 1.
I honestly believe that because things are changing so quickly, we have a problem extrapolating the "synthesis" that will be possible with AI. AI won't be able to report alone--not yet--but it will make reporting much easier and faster and stylistically interesting for the best writers.

I believe that investments in AI made by companies can have more to do with the increased productivity and quality of top talent rather than the replacement of mediocre talent with mediocre stories. This improves customer value, and this increases the bottom line.

I also believe that AI will eventually be about private, continuously updated LLM's that are "tuned" to the specific needs of a company--relevant to its product or service. Right now, we are toying with generic LLM's that are trained on data that > 2-3 years old. That will change very soon.
I bought it on eBay in Germany.

No idea how prices are where ever you are.
Out of the tar pit changed how I look at everything.

Relational modeling can be the ultimate answer for wrangling complexity. It supports real world messy things like circular dependencies without a hitch. You can achieve the same in OOP, but then go and try to serialize or persist an instance of such a thing... you will find a very unhappy variety of dragon lurking in that stack trace.
> As a compliance person, SOC2 says that all change requests must have an associated ticket

Does soc2 actually say this? IIRC their spec docs are proprietary so chumps like myself can’t actually read them. But a (imo great) SOC2 auditor I worked with previously allowed us to treat GitHub PRs as their own sufficient justification. We still used Jira for most, but for minor fixes, quick upgrades, no Jira necessary. A former coworker said they did the same at a previous job. I think, in this particular case, it isn’t SOC2’s fault, it is the fault of auditors who are afraid to not just do what everyone else does.
I am a Vtuber (though it's not my day job). Out of professional courtesy to anyone or organizations I interact with, I'm keeping a backup. The last thing I would want is to tell my partners that I couldn't show up because my Quest didn't boot up.
Out of the Tar Pit.
I don't do it for everyday tips. But for the annual Christmas tips, yes. Like to the doormen or the parking garage valet. Anyone that would get a card, I think it's OK to put a check inside.

But not for tipping the bellhop at a hotel. I think that would be weird.

As for writing checks to people whose name you don't know (or in my case, there are certain doormen whose names I would surely misspell), you just write "Cash" on the name line.
wow! Nice work. I've been trying to build an index of shopify stores. Did you search for all domains pointing to shopify's name servers?
It feels like having a predefined list of keys that are ignored is a "hack". Would a better solution be to simply wait until none of the _trigger_ keys were pressed?

E.g. if the sequence was "Ctrl" + "F8" then it would just ensure that neither Ctrl nor F8 were pressed.
> There are no limits to what AI can achieve

This is an absurd statement. AI is just as constrained by physics and math as everything else in this world.

AI won’t make a perpetual motion machine, and if wind solve NP problems in polynomial time if in fact NP != P
Uhm, have you asked "them"?

I yet to see "let's end the occupation" call that resulted in a less naive conversation.

What you propose is not a plan or a decent answer to "how to end occupation".
Is it truly regenerative farming, when your produce is made from non renewable energy at high cost, inside a large urban structure (which takes away land area for housing, hence more homes have to be built elsewhere) with water supply transported from rural to urban areas?
From a first glance, it's a love child of FastAPI and Django?
First author is a postdoc, second author is director of the institute and probably gets last author even if they did no work. The same criticism applies, even moreso for a postdoc than a grad student. They're probably under huge publish or perish pressure to get a faculty job soon.

I'm so glad I left that racket.
Indeed, there actually was a conviction of an elderly man via the NSA within the past few weeks. 14 months in jail for a poem.

> In this latest case, Lee Yoon-seop was accused of submitting a poem in 2016 to the Uriminzokkiri website, which is a state-controlled North Korean website. Submitted as part of a competition run by the website back in 2016, it praised North Korea, stating that “if the two Koreas were united under Pyongyang’s socialist system, people would get free housing, healthcare and education.” The sentencing court said that Lee had glorified and praised North Korea and had threatened the “existence and security of the country or the basic liberal democratic order over a long period of time.”

https://www.jurist.org/news/2023/11/man-in-south-korea-jaile...
Laws. The American banking system has to many draconian regulations coupled with "know your customer" and any money laundering laws, it makes banking difficult. And hard to disrupt
I recommend this book to junior devs over "clean code". It's nice an short too, but dense with great advice.
Just reminded of the an old trope for estimates, either:

- less than 3 months

- 3 months

- 6 months

Anything less than 3 months - is an accurate estimate. Otherwise, 3 months is the amount of time it takes to do _anything_, right? If it's a really hard problem, then we say, okay, it's 6 months. At the end of the day, those 3 months and 6 months means "NFC", which goes back to the estimation technique that everything is either a "1", "TFB", or "NFC". 3 months = TFB, 6 months = NFC

On a more serious point, we (as software engineers) generally feel we can solve almost any problem with 3 months worth of resources and effort. 3 to 6 months sometimes (IMO) can be a bit of the scariest estimate to give or receive.

For reference & more on NFC/TFB/1 estimation technique: https://pm.stackexchange.com/questions/26218/how-to-implemen...
REST isn't too painful yet, but it will be in the not too distant future.

As you know, the REST API will deliver a maximum of 2000 records per request, so beyond a certain scale it's not really tenable in terms of speed & consumption of API calls.

So yes, Bulk API is probably going to feature soon.

Cheers Ian!
when apartheid south africa ended, the people remained. populations were not mass deported as you're suggesting must happen to end occupation - simply ahistorical. why is that more farfetched to you than mass deportations (to, as you say, where?)

btw, i used "they" to refer to the same "they" that you wrote. don't insinuate anything with scare quotes.
Yates – Use Postgres RLS with Prisma ORM
I'm on two sides about this article.

The first side is that ultimately the argument that the author debunks is a strawman argument, and the counter-arguments are equally sophomoric.

The second side is that I agree with the author on (some) of the recommendations and I think its great that the author made recommendations, instead of just pointing out perceived problems.

Cybersecurity isn't special. At least not any more special than any other subfield is in its own way. But the rest of the article doesn't follow from this axiomatic position. In fact, it's irrelevant to the meat of the article (the recommendations), and comes across to me as griping.

I think the article misses some of the realities of the business environment.

Why do (some) security teams (sometimes) try to put in roadblocks to software releases? Usually it is because the the release is going to have a business impact for which: (a) the business has not acknowledged (b) no person is accountable for (c) there are no plans for.

Why do security teams feel they must dictate outcomes rather than recommend? Usually because their leaders (running up the the Board or Executives) are holding the security team accountable for outcomes they have only indirect control over. Another common reason is that the incentive structures of various organizations push for development groups to release as quickly as possible, feature release estimates rarely include security work estimates, and teams/managers feel pressure to release anyway to avoid delaying due to missed work estimation at the project start.

Usually, these kinds of issues represent the failings of other structural aspects of the business.

Ideally security teams wouldn't be needed at all, the same as SREs and many other kinds of roles. Ostensibly developers would be so capable, so knowledgeable, so well rounded, so careful, that they would plan for, mitigate and manage all operational risks on their own.

There's depths to explore on this topic. I'm excited for the article author that they are just starting to get introduced to it. I hope they continue to explore this as they develop more seniority and experience, and share in more detailed public posts as they go along.
This isn't how LLMs work - they're trained to be helpful and give correct responses. You could argue to what extent that's achieved but the point is that it's not a weighted average of the internet, it's been fine-tuned towards correctness and helpfulness.
https://btrf.ly/store/instances
The Failsafe Diet
What's absurd is that any sort of non-local/online account is required at all to use a hardware device you own.

Half the reason VR's adoption and progress is so slow is Facebook buying Oculus which poisoned the well for the vast majority of the hardcore gaming / high spec userbase, who typically popularizes and drives innovation in the hardware space.
Here are more real-world, compiler-related examples: https://github.com/true-grue/python-dsls/blob/main/python_ds...
A simultaneously beautiful and heart wrenching story wrapped in truly exquisite literary presentation.
The implementation is trivial. But the regulations aren't.
https://www.searchagora.com/search?query=red%20shoes

It doesn’t work very well.
Seriously?
It’s data. Unless your client and server are Lisp
That's funny, I made a domain-specific version of this for canadian coffee deals.

https://beangrid.mcconomy.org/
Amazing, impressive, almost unbelievable :O
Excellent advice on software development based on like 20 years of experience teaching software architecture at Stanford IIRC. It's really good, lots of specific advice, and not very dogmatic.
the app is useful, but guess more people would take the mac with them when walking away, not risking it ?
You typically authorize payment with a card before pumping, then the final amount is captured by the gas station after you're done. You only have to guess the amount if you're paying cash or if the pump card reader is broken and you have to pay inside.

It's the same concept as paying for a meal at a sit down restaurant: they authorize your card for the check amount plus some extra, then you write in the tip on the receipt, then the restaurant captures the correct amount later (at least, that's historically how it works, many restaurants are shifting to payment terminals where it's all done at once).
I don't fully understand the example in the GIF:

- Why is it using Cargo if this is a Python tool?

- How does it know that it should install "cowsay"? Is the only reference to cowsay that "export PYAPP_PROJECT_NAME=cowsay" line?
(not the OP, but I have some experience with Shopify)

Shopify stores publish their product catalog at /products.json. From personal experience, you can hammer it pretty hard without being rate limited.

A challenge is that the pricing info in that endpoint is based on the stock Shopify catalog fields, and can be misleading depending on the specific theme customizations that the merchant uses.
I played enough times to realize I'm an inferior opponent. Yikes.
It really all depends on the subreddits and what each individual got from it to begin with.
Scraper is built in Javascript and a Mongo database. Probably not the most scalable way to do it, but I found that all Shopify stores have a public JSON file available at [Base URL]/products.json. So found a list of stores, built a crawler to go store-by-store, and standardized the data on my end.

Here's an example: https://www.wildfox.com/products.json
Hey, I have a Shopify store that sells e-paper calendars / smart screens.
I tried to search for it but I could not find it.
What should I do so your crawler can find me?

https://shop.invisible-computers.com
please do not double post the same content, even if hosted at two urls

please also do not copy and paste the same content to HN that will be found at the other end of the link
That's a bunch of cherry-picked gossip. You could make another list with a lot of people saying positive things about him.
FFI very much remains a priority today which can be seen with changes and migration to [LibraryImport], bespoke NativeAOT modes to produce native dynamically or statically linked libraries which expose C ABI functions with [UnmanagedCallersOnly] and now there is also a project to implement direct Swift library evolution ABI interop for improved support of iOS with MAUI as one of its main goals.
Observations made about design systems in my career

- You need seasoned designers to make it work. Design systems are akin to the technical architecture but for UI. Putting a junior on is like asking jr engineer to make decisions on your system architecture. Please don't do this, especially in a large company, it will fail.

- It will never be done - kinda why we have jobs in the first place right?

- Not everything needs to be in a design system. Only the things that repeat consistently. Obvious things are colours, buttons etc but also patterns that are key to your experience. This is dependent on what your company needs.

- It is a cultural & process change not just a tooling adoption. It changes how people work and how they think about building UI.

- Adopting a pre-built design system won't solve your in-ability to make good design decisions or guarantee you use it correctly. Often people who use pre-built systems end up outgrowing or discovering they need to customise the system or implement it without designer input which leads to another set of problems. Out-of-the-box design systems don't tell you how to solve your product experience problems. Designers are still very much needed. You need the right people to wield the tool.
"Adaptation" is absolutely amazing of a movie. Kaufman's works are all amazing but I think this one takes the cake. It's so smart and so well executed. I know Nic Cage is a very controversial actor, and I don't doubt he acted terribly before, but this movie is a good demonstration of how incredibly good he really is if he decides to play well, which really strengthens his other works because you always question "did he really mean to do that just now?" like a Schoenbergian "did he really mean to put a minor second at every measure?"
I agree with this, finding vulnerabilities is really hard, and there's people coming out of college with no experience anywhere else in the field trying to get high paying jobs looking for vulns in technology they don't understand or have never worked with.

One of the best vulns I've ever remediated was one discovered by an application developer in their own authentication that was prescribed by our platform. He knew it was a problem and knew it needed to be fixed, but knew he needed us to report it before a fire got lit under the appropriate people's butts to make it get fixed.
SD still can't do interactions (between people, objects) as well as DALL-E 3 can. I hope that improves. And unfortunately this isn't like software where we can just slowly build a better open source version. This costs millions to train. I hope that as the hardware and algorithms improve (and perhaps the datasets as well) it won't be that way in the future. Random kick starters can get hundreds of thousands easily and I think we could see something like that with with something like SD as well in the future.
>We're paid to find risk and reduce risk.

There's a dedicated department that already does that in most organizations -- risk management.

One could argue that 'cybersecurity' ought to be a component of 'risk management' versus being on its own which only adds to bloated organization structure and increases bureaucratic complexity.
ooo that is a hot tip!
In response to community feedback Kinde's free tier inclusions have increased to 10,500 MAU, and 10,500 users will be included on every Pro plan.
Quest 3 is just too expensive for relatively minor benefits.

I sold Quest 2 in anticipation of Quest 3, but now I see that it was rather a mistake.

Quest 3 video passtrhough, while is better than Quest2's, is still rather bad.
ЦГК ФТС is a Central Clinical Hospital of the Federal Customs Service it has nothing to do with the Federal Tax Service.
The Huns and Mongols absolutely did have large hierarchical societies, though. The Mongol army had a decimal system organizing forces into groups of 10, 100, 1,000, and 10,000 men. This is about as explicitly hierarchical as it gets.
Looks really fun! Looks like there's also Rust bindings to Maelstrom [1] and since its a network challenge, it should be doable in any language. I might try it in Rust!

[1] https://docs.rs/async-maelstrom/latest/async_maelstrom/