skysight-inc/HackerNews huggingface dataset:
I've asked this 3 times across the various threads on this, and have yet to get a 100% confirmed "you are right" answer because I don't know the specifics and I haven't come into anybody who has taken the time to research the answer:

When you log in to iMessage and the various underlying protocols/services, you do it with an Apple ID. Is that Apple ID tied in a one-to-many (but you need at least one) fashion of registered, active, non-flaged-stolen, checked-for-legitimacy hardware IDs/serial #s?

If it isn't, why doesn't Apple do this? Don't they have a database of every device they've sold?

Why would their APIs that handle auth accept something that looks a real serial # instead of an actually real validated serial #? Why don't they check "is this device sitting on a shelf un-sold or does it belong to this account, activated"?
I don't get it. Can you explain me why it is, and what the emojis represent?

Do you have the projection of some binary string in the unicode emoji space? (then you'd need to chunk it and possibly use many emojis)
Or chronically warped by their recreational activities.
Comments like these really reinforce how happy I am to not have to live in the US of A.
>The feedback is a lot faster when playing an instrument, you hear if it sounds good or not

The feedback is only fast if you're already skilled. It's pretty common for new students to have no proper sense of what sounds good (particularly since it's familiar to them), such that they struggle to figure out what they need to improve. Similar to digital artists flipping the image often to make it easier to identify issues by making the image somewhat unfamiliar to them, forcing their brain to actually look at the image rather than just using its previous idealized mental representation of what the image looked like.
Mistral: $0.00 / 1M output tokens
What does SoundCloud need CRDTs for?
I would claim that SQL is the ubiquitous loop-less language.

Once you get into it, you start realizing what manipulating data is all about. And most of what you need can be expressed without for loops. And then the step from SQL to Scala is not long.

For me imperative languages are like Lego. SQL is like origami. You fold yourself to the solution.

That said, K is obviously one step further in that analogy.
I don't mean to be so tangential but this is absolutely a great example of wordpress executed beautifully.
Related. Ohers?

What This Country Needs Is an 18¢ Piece [pdf] - https://news.ycombinator.com/item?id=14579635 - June 2017 (45 comments)

What the U.S. needs is an 18-cent coin - https://news.ycombinator.com/item?id=3985299 - May 2012 (28 comments)
'Woefully inadequate': Why it's so hard to find a shelter bed in L.A
Of course compared to 70 years ago the average city dweller probably has more than 2x access to fresh fruit and veggies, so the trace mineral intake is probably higher for at least some folk.
> It ripened in transit,

Don't get me started on tomatoes. We have ourselves to blame for pivoting the supply to tomato varieties with no flavor. [0]

> But as growers bred tomatoes to meet those priorities, flavour gradually diminished. “Every time they bred it and tasted it, they thought, ‘that doesn’t taste so bad,'” says Tieman. “But after doing it over and over, the flavour has changed.”

[0]https://chatelaine.com/food/trends/tomatoes-taste-florida-re...
Certainly. Pre-COVID lots of places had little dishes near the register where people could toss one or two pennies in and take one or two out.
Perhaps the tardigrades spilled on the moon by the lander crash will become giants
Interesting, many thanks.
Show HN: Sqlauthz: Declarative permissions management for PostgreSQL
I've been working on a little project recently to solve a problem that I've encountered at every job I've ever had, and I'm eager for some feedback. Having super granular roles & permissions in PostgreSQL is desirable, but quite difficult to maintain (particularly at smaller companies without dedicated security/devops/DBA/whatever who make it their business to maintain it). I've thought for a while that having a declarative way to manage them would be really useful and allow more teams to actually make use of sophisticated security features that PostgreSQL offers in their production systems.

You can probably see where this is going... I wrote a tool to do just that! It's called sqlauthz, and it allows you to declarative manage your PostgreSQL permissions by writing rules in the Polar authorization language.
Always surprising to click through a link on HN and discover it is one's own work. For a time I was very interested in lightweight array-based implementations of common data structures and this one seemed particularly handy.
It's just a fingerprint for their chat. It's almost the same as a random four-letter code to verify that you're both seeing the ame thing.
It's amazing how people freak out when they "can't get a hold of you," after being trained to expect instant responses via smartphones.
I don't much like the spark and fire analogy with life. Not sure what analogy works. We don't yet really understand life well enough to have a good one.
Au contraire, you very much can embed bitmaps into SVGs - it's often the only way to export gradient meshes in a manner supported by all renderers. This can be done via the plain ol' `image` tag with an external file, or a data URI to directly embed the encoded bitmap file.
SQS has eventual consistency, you can get the same message twice on 2 different intances for example (which was often the case for my projects). I would rather suggest Amazon MQ.
First molecular map and cell atlas of a mammalian (mouse) brain
On video you can see the attacker himself remain there and a grenade explode right next to him.

I wonder if he either intended to use training grenades and they turned out to be real, or if these are actually training grenades and he significantly underestimated their power (otherwise he wouldn't remain right next to one)?
I don't know about Telegram, but it is indeed how Matrix does it. Here is the encoding they use: https://spec.matrix.org/v1.8/client-server-api/#sas-method-e...
> The 52-inch front wheel is unpowered

I wouldn’t call it a penny farthing in this case.

Still very impressive and a masterpiece.
> Tricks such as indexes, partitioned tables, etc can be employed, but those tricks have nothing to do with event-sourcing and are independent of it.

You might want to use different tricks in different situations. Different situations means different services, and different tricks means different storage/query technologies.

So how do you get your data into three systems - and more crucially - keep them in sync? Webhooks? Triggers? Some bidirectional sync magic app that claims to beat CAP?

Just use event-sourcing (append-only, disallow modification) and the multiple systems will stay in sync as long as they know how to process one more message.
Essentially, the fingerprint.

Emojis take up 32 bits each. So 4 emojis would be 128 bits.

Of course, this doesn't account for all the 4 byte unicode combos that don't result in an emoji, but still.
Ah, so you understand monads. The trick is that someone told you they're a big important deal. They aren't. They're useful, so they get used. But there's no great insight or revelation waiting for you. You've already got it.
It might be of interest to anyone that there's an implicit binary tree data structure dubbed Eytzinger's tree/method that only requires a single vector.

https://opendatastructures.org/ods-cpp/10_1_Implicit_Binary_...

I dare say that no tree data structure beats Eytzinger's method in cache locality.
I can't really say this surprises me, it's the natural result of certain topics being taboo. And contrary to the interviewer, I don't think it's a good thing at all. Science should be about what is true, not what is popular to say right now or how people might misuse the truth.

Moreover, as adults we should seek to deal with the world as it is, not as we wish it were. We have a duty to evaluate things clearly so that we can make good decisions about how to act based on the facts. Burying our heads in the sand because we don't like some truths is abdicating our responsibility to improve the world around us, because without accepting those truths our efforts will be misguided.
If I've understood your needs correctly Gravitational Teleport should work for you.
That's changing in CA in 2024. The state legislature passed a law permitting involuntary holds on people who are unable to provide for their own physical safety or are suffering from substance abuse disorders.

What a lot of people don't understand is that the policy inadequacies that led to this point are mostly state-based, and in CA, cities simply couldn't do much about strung-out junkies on their streets once city councils started experimenting with decriminalizing drug use and deprioritizing drug enforcement. It's not like arresting them was a great solution, but it was the only thing available to city police forces, and it kept these people out of the public eye. Once that was removed as a tool, they were pretty much left with "Unless they're actively threatening someone, nothing we can really do."

That's changing, mercifully. Here in SF, a lefty-fringe position took over for a while, wherein homelessness with thought of as some sort of legitimate lifestyle, and society had to be forced to see it so we could all gaze upon the misery that tech money had wrought. After a while though, normal people just get sick of having to step over an unconscious body while taking their kids out for a walk.

While it's tempting to blame Reagan for the contemporary homeless problem, I'm not sure that's really right. Reagan was a giant piece of shit, but I don't find it plausible that his policy decisions in 1980 were the proximate cause of the homeless problem that started taking off in the late 2000s.

Personally I think a lot of the homeless problem comes down to two things that worked together to produce unintended consequences.

1. Opioids

2. Evolving attitudes toward drug use

Opioids are a scourge that created lots of new addicts. At the same time, society finally started realizing that criminalizing drug use was stupid. So the first thing to happen was the easiest: we stopped throwing people in prison. But it's not like these were people who had their lives together in the first place -- they had problems, and previously the prison system is how we dealt with those problems and kept them out of public view. And simultaneously, we were seeing an explosion of addicts thanks for opioids and pharma marketing. So lots more addicts plus lots less enforcement means lots more homelessness.

Now we're in a transitional phase where we're trying to figure out the best way to help these people and maintain their dignity. In the mean time, they live in tents on the street for everyone to see. CA is now codifying the obvious -- these people cannot care for themselves, and law-abiding citizens have a right to use public sidewalks without having to worry that a guy in a tent will think they're trespassing.
I wouldn’t suggest a competitor in that line of business, because it’s not a line of business which should exist: fundamentally, it represents a firm wanting to bring in another firm to engage in its core line of business for it, because it no longer knows how to.

Well, if the firm doesn’t know how to engage in its core business, just fire the employees, close the offices, take the names off the buildings and return the capital to the owners!
This is intriguing and I’m very happy this exploration is being done.

But, for decades, I’ve been reading reports of the discovery of evidence for the trappings of life elsewhere: water and organics and “habitable” exoplanets. These are valuable discoveries, but the tone of the reports suggest they imply life is about to turn up.

It’s worth remembering that there is not one single shred of evidence that life has ever existed anywhere in the observable universe but Earth. Moreover, no one has succeeded in hatching living matter from non living matter and we must honestly say we do not know how this process came about or the faintest estimate of how likely it is to occur (despite much speculation, some of which may turn out to be correct but equally may turn out to be dead wrong). The oft cited fact that life arose “quickly” after the formation of Earth has no bearing on the question.
Most federal land isnt where people want to live.
Only In-Proc COM requires dynamic linking, COM servers rely on processes.

DCOM, nowadays out of fashion also uses processes, and in case of exposing In-Proc COM to the network, a wrapper server process is required.
Both of your examples don't necessarily require me to share my data completely with a third party. One could host all of that at home without much computing power.

However I don't think it's entirely just platforms only selling that. Instead I think most consumers don't want to have to host the app at home, they don't want to configure and manage anything they just want to install an app or go to a webpage and have it work and scale.
I copied it from the Wikipedia page, which also shows a layout for an APL keyboard and has a picture with the mechanisms to get your typewriter/printer to handle it.
US Government doles out paltry $35M of the $52B CHIPS Act
Lol. IMO the difference between an C and Assembly (as between vacuum tubes and the abacus) is really a difference in power, since it allows the same program to be implemented on different architechtures. It's only fair to start calling things convenience wrappers once you get past C. And often enough, an abstraction aimed at convenience leads to a reduction in expressive power.
It sounds a little like it didn’t work out as well as you hoped. How did it fare?

I am interested because I have some scientific software (astrodynamics - propagating orbits in space) that would really benefit from a cache-friendly tree, and this seemed promising.
> Now we come to the other program that we rules engineers spend our time working on, along with the GRE, which is the Game Rules Parser (GRP). This program (written in Python) takes raw English rules text of Magic cards and converts them into one or more CLIPS rules. It's what allows 80% or so of newly written Magic cards to just work in MTG Arena automatically.

Wow, didn't even think about this being a possibility! But I guess if they have a very strict dictionary and grammar rules for card effects this kind of thing can work !
Isn't the main problem to secure the distribution of the key?

> Maybe my site has been hacked and I don’t even know it.

How would the fingerprint help in this case? If the fingerprint is also hosted on the website.
Are your Mac and Linux desktops using the same Bluetooth adapter as your Windows machines? If not, then maybe you do have an adapter issue and it's not the OS.
Using Linux IMA with eBPF to protect a workload from supply chain risk
iMessage is just about the only form of communication that I’ve NEVER received any spam through. I get spam SMS all the time and spam calls all the time. I get spam emails 24/7, and even spam DMs on any social media platform that has DMs.

There is no iMessage spam. Apple has it tightly controlled and locked down. I can kinda see why Apple wants to preserve their ecosystem.

But also, there are so many other options in this space. Signal, WhatsApp, etc. Apple is even finally adding RCS support. I don’t understand why so many people want iMessage on other platforms? It’s not that different.
Not that I use much cash but I haven't seen a $2 bill in the wild for a great many years. I could see how someone might be suspicious of them (even if only because they suspected they'd have trouble using them).
> With car keys being Bluetooth

https://francozappa.github.io/post/2023/bluffs-ccs23/
and a related but slightly different threat:
https://news.ycombinator.com/item?id=38661182 are why I have no interest in that end of the convenience---security spectrum. For clarity, I'm not yucking your yum, just hoping the future is not made up entirely of c libraries written by.. security insensitive.. developers protecting my house and car
And they largely put their work online for free where anyone can read it not expecteing any kind of direct compensation by the reader.
QUIC is damn good though! Its minimal header has a very tiny overhead, and the protocol gives us so much for free. What’s to lament? The userspace impl?
I was not expecting a sweet photo of a beaming actuary when opening an article about someone nicknamed the “Annihilator.”

That Excel championship wrestling belt is really cool though.
Show HN: My wife and I built a virtual advent calendar
Following the success* of our Halloween choose-your-own-adventure game we decided to go even more ambitious and build a virtual advent calendar with some little new thing for everyday. We've been helped along the way by GPT4 and an 'actually good with CSS' friend.

We're just over half way through and are embracing the thrill* of coding up a new feature every night after work.

We hope you enjoy the silly little things we've curated or built :)

*Not measured in any particular metric apart from the fun we had building it.

**Fear
Source? I think you remember it wrong:

The compiler will only optimize the if away if you already potentially invoked UB. Like this:

val = *ptr; // May be *NULL
if (*ptr != NULL) ...
This is cool, but calling that SSH3 is not appropriate. It's an independent project, not a new version of the SSH protocol. Sure, it's "SSH3" and not "SSHv3". Still, introducing a confusion with something that could be an official protocol is not nice.
What makes this any better than say, MOSH?
Loops (Eg: in C) are a much “wilder” construct — something special could happen for i=17 or successive iterations might overwrite values, etc. more restrictive “tamer” versions help programmers & computers reason about the code.
Interesting, based on this comment, I deleted ~20GB of simulators (~/Library/Developer/CoreSimulator). Thanks for that!
I don't really feel every minute passing. If I want to know what time of day it is, putting it in terms of hours is more useful. If you're setting a timer or something where the minutes matter, then you can say 2:45.
> Books don't work

Stupidest title I've seen in some time. Maybe there's some additional context I'm missing.
Agreed with your points but this article seems to present event-sourcing as a replacement for your database(s) and even makes claims about saving storage space, thus at least hinting at not using databases anymore.
What is your favorite alternative medium?
I agree, Apple has no interest in fighting spam from users onboarded by Beeper. That’s likely the biggest issue with this and more generally opening iMessage to wider audience.
Maybe. I have years of payment history with several grocery stores stored in my bank's transaction history, could be a fun little project to figure out what my optimal coin system would look like!
Oauth for ssh sounds annoying
Elm can do iterative recursion, which is a thinly disguised loop without side effects.
Wait, are you saying that if Alice learns of an edge case by having it pointed out to them by Bob then Alice is a priori unqualified to analyze whether the edge case is important?
The higher up the rider is, the farther they will fall (and they will fall at some point, we all do).
>Why is it that Beeper, or anyone else that isn’t Apple gets to decide who uses iMessage?

Beeper doesn't decide that, it only enables.
If you have a wristwatch with hands you may not want to identify the exact minute (this can be a little difficult if it has a smaller face), but if it's 5 minutes either way then a "quarter-to" is close enough.
I must be an immature adult. Saw the picture of the while bike (is it really a penny-farthing?), and all I could think was: it has an electric motor in the back...then...

Pop a wheelie!!
We've come a long way since hunter-gatherer societies. One might say post-scarcity is today, the world is at our fingertips, and author is complaining about 1st world problems.

That said: good read, and article is spot on. Truly sad how vendors' "profit above all else" is degrading so many of our experiences.
> Green revolution pumped volume of crops, mineral density remained the same in soil.

Most minerals are in plants because plants need them for their own needs. So it doesn't automatically follow at all.

Copper is probably the only mineral where your simplistic model applies.
Yeah but I'm not sure if that's primarily a fault of CSS.

I just wanted to enumarate the "hard parts".

But even if I were to agree, what layout and "styling" language or API is the easiest, most logical and well-designed one in your opinion, that still covers the same variety of use cases? From print-like simple layouts to all complicated, nested application UIs for all imaginable screen sizes?

Just curious, I'm not writing that much CSS anymore and I have cursed at it as well.

But I feel it is also powerful and sometimes, yes, even beautiful to use.

Often things that bother people are a feature at the same time, e.g. visible overflow by default.
What is missing from this definition? The possibility of delivering it via an API? what is meaningfully wrong?
As per my calculations our two latest cars cost us around £200/month. That is £2400 per year or £24000 per 10 years. Pretty good for cars costing £30k and £40k new. Buying the same cars and driving them for 15 years would actually cost the same or more. We were lucky as prices of second hand cars were good so we actually came ahead. This might change in the future.
I also applied another mental model from my experience. There seemed to be a lot more steps in the process than were necessary. The solution seemed too complex for the problem.
Doesn't this just have very big hub? About size of the wheel?

Then again what do we consider to be a hub.
My comment/joke wasn't so far off, after all:

https://news.ycombinator.com/item?id=38575731
Every personal blog is low traffic until it lands at the top of HN
It’s unique per app, I believe.
Exactly. Does it really matter if fresh pineapples or mangoes have half as many of certain vitamins, if we're eating 30x as many of them than were available 40 years ago, when we were lucky to eat them more than once a year?

And it's also certainly not like the ways in which we used to can and/or boil vegetables was great at preserving vitamins either.

We currently have unprecedented variety of produce. Even if one item is lower in a vitamin that it didn't have much of to begin with, now you get to eat something else that naturally has tons more.
I read https://spec.matrix.org/v1.8/client-server-api/#sas-hkdf-cal...

So is it the representation in emojis of a server controlled shared secret?

That'd make 2 clients talking to eachother through the server vulnerable to tampering at the server level (ex:MITM)

Shouldn't the 2 clients not involve the server for the secret? This would require each of them being able to access the other public key fingerprint without trusting what the server says. But if they see eachother fingerprint projected into the unicode emoji space, they would see different emojis.

I think I may be missing something obvious. I just don't understand this trick.
> Why didn't my service pick up that event?

What event? If you're not event-sourcing, you can't even ask that question. Instead, some user interacted with the system and got a 500. Maybe you got a stack trace in the logs, but the user's data is gone (or maybe half of it was stored).

Persistent events mean you get to fix the problem and try again - no data lost.

> What happens with the state if a service throws an exception?

Whatever you programmed it to do. Same as any other service.

> How do I map/reduce all these events into a state?

There's no one way to store them like there is in an RDBMS. UserService listens to User events. TransactionService listens to Transaction events. SearchService listens to both. All three have different schemas. Those schemas can be thrown away and redesigned at any time without data loss.

Do a bad job of map/reducing them into a state today. Do it better tomorrow.