skysight-inc/HackerNews huggingface dataset:
Now I’mma Make a turquoise (er, florescent-esq) fourth litebar that animates like those on the alien craft in “Close Encounters of the Third Kind” when my ADAS is active. (Need to sniff the CAN out of a tail light socket to see if I can detect a signal related to ADAS or otherwise use a pi0w2 with CV to analyze the dash and repeat the indicator in an IR pulse.)

Just last night I was almost in a multi-car pileup triggered by some losers in their sports-car shells on SUV chassis (complete with PA speaker playing audio samples of yesteryear’s engine exhaust). They weave in and out of traffic like a video game, unaware they are triggering automatic braking and pre-collision alarms/preparations as they go…so very important to get this standard out there for them to recognize that “yeah, I can make it, but it’s going to cause the vehicle I pull in front of to auto-slam on their brakes causing the poor family crammed into a 2003 Elantra behind them to face plant into its bumper).
PowerPoint existed in the late 80s, I think, although Microsoft acquired it from what I understand.
Same, I'm using Firefox and unlock and didn't get this message either. Btw it reads even better in reading mode. Can you imagine needing a mode for reading for stuff that's actually meant to be read?
Next year supposedly.
if you think you're exposed to MITM, then disabling the chacha cipher probably makes sense. there are others that are widely implemented (depends on your clients, really).
But the percentage changes are correct, aren't they? I don't think readers will think that the graphs represents absolute popularity, also (IMO) any survey taken by a company will be used for marketing purposes and should be consumed as such. (It's just some text on the internet, nobody is going to take it as gospel.)
That twitter feed is too much. It's so extra. It encapsulates everything I hate about LinkedIn. Which is why I'm here, not there. If I wanted influencer cringe, I know where to go.
$9.99 items may go down to $9.95.
Hey, I don’t pay for your computer or electricity but I’d like to run some programs on it to mine for bitcoin that I can sell for a profit.

Please provision access ASAP, thank you.
polkit is just the layer that takes care of answering the question "is the caller authorized to do this action". It's not setuid.

pkexec is setuid, it gets launched as root, asks polkit, and then does the thing the user asks or exits saying "you're not allowed".
> If so, what's the missing ingredient? I wonder...

I see what you mean, I think personally that ingredient is belief in a higher purpose, in the sense that my creative act is not just a capricious enjoyment on my part, or even a key component of my mental health, but that it can serve a function for other people and that that is the opposite of being selfish.

I'm still coming to terms with this idea.

I'm curious about your project if you don't mind sharing. I had a moment like that a few months ago and this book reached me after that. And FWIW my friend mentioned she re-reads the book and does the exercises every year, I can see myself doing that, and it's made it easier to not berate myself for not doing all of the exercises.
Oh yeah, memory is not perfect, and I think that very often you'll have to work with a concept multiple times to fully absorb it. I think we're saying very similar things.
That is a direct quote from Graham.
Most people buy computers because they need them, not because they want them so there is that.
Not if he does the type of job hopping typical in silicon valley. There are plenty of programmers who only stay at a job ~2 years, and never have to maintain a program over a long period. You could imagine such a person saying 'this worked well at my last job' and just keep introducing that kind of pattern to new companies, eventually with '20 years of experience'.
yep, at most you might want 2 boxes for HA but you definitely don't have to start with that and it also depends on what you're doing.

I know some are going to argue that it's a slippery slope from that simple HA to DR and all the other complexities, and there's some truth in that, but that complexity can be controlled with explicit decision making. It's not obvious that a simple HA/DR story has to end up with modern day cloud architectures.
More people who make fascile pleas inevitably resilting in hopeless failure?

I think it would be better to actually change things. This and other everyday examples show that this means overcoming capitalism.
right, so if you already have a huge security problem, there are a narrow set of cases where this might allow fairly minor weakening of your ssh sessions (if you don't perform the straightforward mitigation).
That’s a totally different kind of case where the barrier to interoperability is the ability to reproduce copyrighted content, like in the case of the DSMOS chip which contains a poem which has to be provided for the OS to work. These tactics have sometimes been successful and sometimes been unsuccessful. It’s just the legal lottery.

Here they simply provide someone else’s library to perform the authentication. That’s just basic copyright infringement, however lofty the goal.

https://stackoverflow.com/questions/858511/what-is-com-apple...

https://www.theregister.com/2003/08/11/habeas_cans_spammer/

You can’t write an emulator and sell it including the bios written by Sony. Has been enforced many times. Similarly, you can’t do what Beeper is doing here.
with a domain like shipfa.st, makes me think of the old saying "good, cheap, fast" pick two. since the thing is free and fast, good got left out. pretty appropriate for the results being demonstrated in the comments.

i'd be embarrassed if I made such a thing, and there's no way i'd show it off to someone else. this feels like someone took a "learn how to use AI in 10 days" and released the first project they worked on. i read "teach yourself PHP in 10 days" in 1999 over a weekend, and was banging out a website with a database in no time. i'd never ever ever show the code written then to anyone, but at least it did what was advertised on the box.
There must be a memory leak in the icon picker. It eats more than 1.5 GB.
Whether it is or isn't a monopoly is an argument and the discussion extends well beyond a humorous hot take.
> Why isn't Disney ($175B market cap) immediately and recklessly responding to something that happened hours ago? Because they aren't Elon Musk.

"Hours ago" and also supposedly informed last week? [0]

> Disney's immediate non-reaction has nothing to do with Tesla's action. Why are you linking them?

Chain OP linked them, not me. He claimed

> I just read a news item that Musk uninstalled the Disney+ app from the entire Tesla fleet as retaliation for Disney pulling advertising from X.

I supplied evidence that it may be a bug, and on top of that evidence that it's clearly not "the entire tesla fleet" like he claimed.

You then claim "Disney's immediate non-reaction has nothing to do with Tesla's action"? At the very least, why hasn't Disney removed the help article saying how to access Disney+ on Tesla vehicles[1] if they've "been informed of this decision" as multiple articles have stated?

---

Also, why does Disney's market cap matter? "($175B market cap)"

Tesla has a market cap of $800+ billion.

[0]: https://twitter.com/FredericLambert/status/17367851281756696...

[1]: https://help.disneyplus.com/article/disneyplus-en-us-tesla
The absolutes are in a bar chart in the framework part of the survey that makes the absolute usage from the responses very clear. The chart Zack took issue with is from the editorial part of the survey where we found the biggest news in the framework section to be the growth and satisfaction for Astro.
Yes, I get that. But that's not what the researchers did. They used a database of know hashes. Can bad actors not do the same?
> You've been running a wayland, not wayland, because there is no "wayland": only many different waylands.

I am aware, that is why I specified which compositor I am running. The comment I replied to said (emphasis mine) "*Wayland* won't work well on non-Linux systems" which is clearly false. To put it into another context: only a subset of C programs run on windows, but it would be silly to claim C won't work on windows.

As for the bug report you linked, the response seems quite reasonable:

> We already have Wayland protocols for input emulation. I think libei should add support for those.

Since standardized protocols exist, why should every compositor have to integrate this library instead of the library integrating support for the standardized protocols?
What does worth it mean? FWIW PhDs are really more or less required if you want to teach at a university, or do academic research, or do private/industrial research. Most companies that hire researchers look primarily for PhDs. The other reason would be to get to have 5 years to explore and study some subject in depth and become an expert, but that tends to go hand-in-hand with wanting to do research as a career. If you don’t want to teach college or do research, then PhD might be a questionable choice, and if you do it’s not really a choice, it’s just a prerequisite.

The two sibling comments both mention the economics isn’t guaranteed - and of course nothing is guaranteed on a case by case basis. However, you should be aware that people with PhDs in the US earn an average of around 1.5x more than people with bachelor’s degrees, and the income average for advanced degrees is around 3x higher than people without a 4-year degree. Patents are pretty well dominated by people with PhDs. There’s lots of stats on all this, but I learned it specifically from a report by the St Louis Fed that examined both the incomes as well as the savings rates for people with different educational attainment levels, and also looked at the changing trends over the years, and the differences by race. Statistically speaking, the economics absolutely favor getting an advanced degree of some kind, whether it’s a PhD or MD or JD or whatever.
Advertising content is speech
Why is the photo in your imaginary scenario low quality?

Why do you think the plan is "infeasible and stupid"? You don't think the technology will catch up?
Unless this kind of dysfunctional management style burns you out. The you’re dying a little every day at work and don’t have the energy or ability to look for other work.

I’ve seen this happen so many times in my career it’s not even funny.
verbosity tends to make code worse, not better.
I had to do some pretty hardcore hacking to get Wayland working on Pop.

I wrote it up at https://shkspr.mobi/blog/2020/05/fix-screen-tearing-on-rotat...

Warning - you'll need to be at least a Level 17 Linux expert to understand the complexity involved.
> As a developer, I needed to port a custom Linux system to hardware that only has Wayland drivers and it was a giant pain. Wayland offers no advantage at all for that system but it broke a lot of functionality that relied on X in terms of window placement, etc.

FWIW, I've had decent luck running cage ( https://www.hjdskes.nl/projects/cage/ ), then on that xwayland, and then just ignoring wayland and running X clients. The result does still have some slight quirks, but it mostly works fine.
> Volkswagen Group, which also owns Audi, Porsche, and Scout Motors, is finally doing what nearly every other automaker has already done: announce its intention to adopt Tesla’s electric vehicle charging standard.

The reporting around this has been so poor. NACS is CCS with Tesla's plug on the end.

What's happening is that CCS has won the EV charging protocol wars, Tesla's plug is being standardized as CCS type 3 (aka SAE J3400), and Tesla's chargers will use the CCS protocol (like they already do in Europe and elsewhere).

To use NACS chargers older Teslas will need a CCS retrofit:

https://electrek.co/2023/02/28/tesla-ccs-adapter-retrofit-pr...
I learnt to code decades ago and later studied computer science and physics. I now work in marketing more than anything (the marketing side of other things like film, tech and politics). To do that I often build websites and apps. ChatGPT is invaluable to me. I use it as a coding assistant. It can write things in languages I don’t know enabling things that weren’t possible within budget a year ago. It works because I have the technical skill to prompt it properly - writing larger pieces of code in pieces - and because I have the ability to identify errors and fix them. If limited to the raw output it would be an exercise in frustration, but as a person with coding chops I can 5x my output by providing detailed feedback and suggested approaches. It’s quite revolutionary. That said though I work with text, photos and video I find it useless and uninspiring for creative output. For me it’s purely a technical tool.
It feels surreal seeing so many comments like this here and in public discourse in general. The advertising/hype machine convincing people a low quality continuation model is the next coming of AI must be amazing.

LLMs have lots of cool advancements involved in them but isn't what you are being sold. Anybody who knows how these models work and isn't making money off them can explain just how limited they are and how they can't safely be applied at scale. Yet they are doing so anyways. Invest and lie while you can, and get out before it all falls apart.
Undiagnosed autism and adhd
SIO Finds Child Abuse Images in Foundational Laion Training Set [pdf]
If we’re debating theoreticals, “Sorry John, Timmy died when he was left at home unsupervised and his 14 year old neighbour didn’t notice he hit his head”
> "A source told"

Says enough. Official statement or bust.
Article says the plane it came from flew 16,239 hours so I'm guessing the photo was from initial certification if it was actually used.

Now that the plane is in Seattle and the engine is in the UK, does that mean it was shipped back after the plane landed? What is on display in a Seattle, dummy engines? So many questions.
I am a fan of Marc and an admirer but I could not grasp how this works. All I see an Apple Icon..I did not know what to do
I don't mind the way codingdave put it, though. Sometimes it isn't your job to write code. In fact sometimes it's the opposite, and your job is to talk to people and explain to them why code doesn't need to be written.

Saying, "It's not your job to write code," might seem technically false, but in terms of getting the message across, I think it's striking and it works well. And getting the message across is the goal of communication, moreso than being 100% accurate.
Building a Chrome extension using only AI
I would recommend https://www.devspace.sh
I use for just about everything.
It also works well as a good gateway into the kubernetes world when coming from docker compose.
> Under what threat model? Personally I have no interest in the zero-trust model needed for proprietary app stores and would rather not pay the cost.

Under the threat model of websites using browser exploits to grab other data on your system?

Or under the threat model of company policy or legislation not allowing you to handle confidential information on a system that can't offer even a basic guarantee of privacy.
Based on these reviews, Tesla seems to want to avoid "OK, now I am not sure what to do, you have to control your steer" so much, to the point where it becomes extremely unsafe to drive it.
IIRC, on windows, podman(+ docker) desktop create a Linux HyperV VM, and run the containers on that.

As a Linux native dropped into Windows, I've already been able to bring up docker, podman, k8s, and anything else in linux with more control over the linux VM I've created.

What does the 'Desktop' version of docker or podman bring to windows, that I don't already have by shelling into my on-device VM and using docker/podman tools directly?
Scaler Academy Review (Courses)
We need more people who are unwilling to do work that they think is harmful in exchange for a paycheck.
It's super easy but it's still an extra thing to do. For an occasional user such as a tourist it would be much better if you could use your existing payment instrument rather than having to buy a local, purpose-specific one.
I tried and it was completely impossible in January of this year.

I didn't bother trying in November. Maybe they got rid of the restriction recently due to the Pasmo shortage.
FTC bans Rite Aid from using AI facial recognition in stores for 5 years
I fully agree with the sentiment, but Svelte does not seem like a natural leader on that front since their version is a JS superset. Already a bit off the map for interoperability.

Solid's attempt feels more promising since it's building on existing native functionality (proxies / getters), and has intuitive, low-footprint usage (just function calls and reference comparisons).

Edit: It seems I'm not up to speed in fact, I hadn't seen Svelte 5 and runes yet, which are not compile-time. I will need to give it another try. I agree in general that signals and signal-based APIs are the future and definitely better than hooks at least, and a single agnostic standard would be good for everyone.
I've lost the HN link now but a while ago there was also a tutorial featured that walked through how git works using Python: https://www.leshenko.net/p/ugit/
Being polite/considerate doesn't mean being stuck up.
For anyone who wants to disable the vulnerable primitives, I just made a bash function:

#!/bin/bash

# Function to apply Terrapin Mitigation to SSH configurations
terrapin_mitigation() {
echo "Applying Terrapin mitigation to SSH client and daemon config..."

# Function to filter algorithms, reading from stdin
filter_algorithms() {
while read -r alg; do
if [[ "$alg" != *"chacha20-poly1305@openssh.com"* ]] && [[ "$alg" != *"-cbc"* ]] && [[ "$alg" != *"-etm@openssh.com"* ]]; then
echo "$alg"
else
echo "Removing vulnerable $alg" >&2
fi
done
}

# Ensure .d directories exist
sudo mkdir -p /etc/ssh/sshd_config.d
sudo mkdir -p /etc/ssh/ssh_config.d

# Get and filter algorithms
kex_algorithms=$(ssh -Q kex | filter_algorithms)
ciphers=$(ssh -Q cipher | filter_algorithms)
macs=$(ssh -Q mac | filter_algorithms)

# Create configuration lines
kex_line="KexAlgorithms $(echo "$kex_algorithms" | tr '\n' ',')"
cipher_line="Ciphers $(echo "$ciphers" | tr '\n' ',')"
mac_line="MACs $(echo "$macs" | tr '\n' ',')"

# Remove trailing commas
kex_line=${kex_line%,}
cipher_line=${cipher_line%,}
mac_line=${mac_line%,}

# Output to sshd.d and ssh.d files
echo ""
echo "*** /etc/ssh/sshd_config.d/terrapin-mitigation: ***"
{ echo "$kex_line"; echo "$cipher_line"; echo "$mac_line"; } | sudo tee /etc/ssh/sshd_config.d/terrapin-mitigation
echo ""
echo "*** /etc/ssh/ssh_config.d/terrapin-mitigation: ***"
{ echo "$kex_line"; echo "$cipher_line"; echo "$mac_line"; } | sudo tee /etc/ssh/ssh_config.d/terrapin-mitigation
echo ""

echo "Terrapin mitigation configuration updated!"
}

terrapin_mitigation

Because of the way SSH resolves its config (first of CLI, user local, system wide), in some cases you may prefer to alias ssh to configure this at the command line.

Also disabling some algorithms might bar you from connections that are limited to those. I'm not an expert, this is just what I threw together now. You're welcome to use it unless you know a better way. Please suggest improvements if you see them and use at your own discretion otherwise! :)
That's what I mean with "more or less", and they were all more or less compatible and was mostly a "Vim vs. Emacs" type situation, not a "plz rewrite your entire stack"-type situation. That's really the key difference here.
Coffee firms turning away from Africa as EU deforestation law looms
Scooter Company Bird Global Files Bankruptcy
> Not to undermine your point at all, but as a tangent, you might be surprised by how powerful phone compute is getting these days.

... some phones, at least. Not everyone's on a state of the art flagship device.
Compositing in the context of window management hase a more specific meaning:

https://en.wikipedia.org/wiki/Compositing_window_manager

vs.

https://en.wikipedia.org/wiki/Stacking_window_manager

There are advantages and disadvantages to both approaches. Note that X.org is traditionally a stacking window manager but has had the compositing model bolted on for a long time now.
I guess the point is it can't be sandboxed by directly exposing X protocol messages to the sandboxed app. Although your sibling comment by gpderetta makes an excellent point. I guess they're saying no one wants to sandbox the X protocol, and breaking compatibility, proponents would claim, lets you design a sandbox friendly protocol from scratch.
Are you actually making an argument that microsoft would open up and license the 365 back end, for free, to a direct office competitior?
Yes, technically nothing prevents someone to make a customizable Wayland compositor.
You’re taking about KDE and I agree that it is certainly one of the most customizable Wayland desktops we have.

What I deplore is that those customization have not made their way into at least an extension of Wayland.

And as you say, hopefully I can still use X11 when needed but I wish the more modern option would carry everything I need.
>Well, I do think differently and I believe that Capitalism is pushing humans to the brink of destruction as it provides a strong incentive for people/corporations to exploit resources as fast as possible.

It's not really differently in any way, I'm on the same page as you.

Capitalism is mostly driven by greed to amass more wealth, and real estate is a finite form of wealth.
podman can't replace docker-compose. it can only replace docker. if you install podman-docker any docker command you run will be translated to a podman command. I think that should work when you run docker-compose as well.
No, the big problem with X isn't the transport but that once a client has access to the X server it can do more or less anything it wants (including logging keyboard input and recording other windows).

And I haven't actually used it[0] but I thought waypipe was the better option for remoting?

[0] Well, successfully or recently; I'm assuming it's usable now.
Making the case for international equity allocations
You're not wrong, but I try to assume that people who come here for self-promotion just need to be educated on the right way to do things. A new account posting their new product as a "Show HN:" is often accepted, so I recommend people try that.

In doing so, we can help people get the feedback they desire the HN crowd without assuming they are "sad people" just because they don't know our somewhat unique culture round these parts.
Single flashing red = stop sign.

Alternating flashing red (school busses and railroad crossings) = stop until signal goes out... except in case of HAWK.
Which course at Scaler is recommended or considered good?
Steve Keen is another fascinating example. He has a whole episode on Lex Fridman where he basically lays out the follies of neoclassical economics, lays out how banks print money and that's not being accounted for, his system thinking for the whole thing.

It was the first time I followed an economist from 0 to 100 and it all made sense. Yet he's considered an outlier, but he is also considered to be one of the few people who correctly predicted the 2008 crash.
It is strange when this was rolled out as to why decentralizeyes like functionality was not targeted to be built into browsers enabled by default.