skysight-inc/HackerNews huggingface dataset:
Did you send crash reports, report the problem with the missing subscriptions, maybe even have a go at finding the cause if you happen to be versed in the technology? I've never seen it crash [1] on any of my devices so I can add that piece of anecdata to yours. I'm not a heavy Newpipe user since I run my own Invidious instance which offers close to the same functionality (minus playing in the background since that needs to be implemented on the device while Invidious is a web service) but for those times I do use Newpipe it works well. On those odd instances it doesn't load the video the solution tends to be an upgrade away.

[1] as in 'the app crashes', not 'the video does not play', the former is a crash while the latter is an incompatibility with Youtube and tends to be solved by upgrading Newpipe.
How much do you pay for data?
History of Antarctica revealed in octopus DNA
People, that means the kids parents, are not voting for horrific zombie enabling politicians, but it’s in their hands to stop supporting the war-hawks.
Why would the WTO involve itself in a domestic issue that's not related to international trade?
I think the problem might be that in the wrong hands the issue is used to muddy rather than enhance the discussion. Generally the problem with focusing on water as "a greenhouse gas" is that there is limited scope for doing anything about it. Indeed, it's likely part of various feedback systems so acts as a confounder rather than an independent variable.

Of course we should consider the impact of dumping lots of high altitude water into the atmosphere, but we should primarily consider the impact of dumping lots of co2 and methane since those are a much bigger slice of the anthropogenic delta.
Regarding "Now, I am not a politican, and these bills are huge, so I wasn’t able to figure out how these bills do this specifically [..]", I think the relevant reference is on page 864 of [1]:

"SEC. 1613. POLICY AND GUIDANCE ON MEMORY-SAFE SOFT- WARE PROGRAMMING.
(a) POLICY AND GUIDANCE.—Not later than 270 days after the date of the enactment of this Act, the Secretary of Defense shall develop a Department of Defense wide policy and guidance in the form of a directive memorandum to implement the recommendations of the National Security Agency contained in the Software Memory Safety Cybersecurity Information Sheet published by the Agency in November, 2022, regarding memory-safe software programming languages and testing to identify memory-related vulnerabilities in software developed, acquired by, and used by the Department of Defense."

The mentioned "Software Memory Safety Cybersecurity Information Sheet" is probably [2] which explicitly lists "C#, Go, Java®, Ruby™, Rust®, and Swift" as examples for memory safe languages.

I'm still looking for the equivalent EU document and would be grateful for any hints.

EDIT: I could not find any reference to memory safety in any of the EU documents but interestingly the "Impact Assessment Report" [3] mentions Rust and Go specifically.

[1] https://www.armed-services.senate.gov/imo/media/doc/fy24_nda...

[2] https://media.defense.gov/2022/Nov/10/2003112742/-1/-1/0/CSI...

[3] https://ec.europa.eu/newsroom/dae/redirection/document/89545
Kalm • Saving silence, focusing minds
Artificial Intelligence and the Law of the Horse
No paywall: https://archive.is/ScZfb
https://nitter.net/chess24com/status/1737835403556917730
Dendron development stopped about a year ago: https://github.com/dendronhq/dendron/discussions/3890#discus...
We built an in house tool for self service provisioning of Entra ID (Azure AD) app registrations. It has some business rules enabled to require MFA, naming conventions, and generates a ticket if someone requests a privileged Microsoft Graph permission.

Not aware of a COTS alternative.
For anyone else wondering:

Leonardo da Vinci's self-powered cart, often considered one of the earliest forms of a robotic vehicle, was powered by a coiled spring mechanism. Here's how it works:

Coiled Spring Mechanism: The cart was powered by a pair of coiled springs, which were the main source of propulsion. These springs were wound up manually, storing potential energy.

Gear and Pulley System: Once the springs were wound, the stored energy was transferred through a system of gears and pulleys. This system was designed to control and direct the movement of the cart.

Steering Mechanism: Da Vinci's cart also featured a programmable steering mechanism. By setting pegs into a series of gears, the operator could predetermine the cart's path, allowing it to turn and move in specific directions.

No External Forces: The cart did not require any external forces like animals or humans to push or pull it once the springs were wound. The energy stored in the springs was enough to move it forward.

Early Example of Automation: This invention is significant as it represents an early example of automated transportation, displaying Da Vinci's advanced understanding of mechanics and engineering.

Leonardo's self-powered cart was far ahead of its time, showcasing his genius in mechanical invention and his ability to think centuries ahead of the technological capabilities of his era.
Nope, nobody writes every single line of code in a program as cleverly as possible attempting to do so generally means you don’t finish.

And no it’s not saying in ALL situations you can’t solve ANY bugs. You only finish debugging when you solve every bug not just 1 of them. Further sometimes you’re going to write a clever bit of code that doesn’t contain a bug and thus doesn’t need to be debugged.

So it’s saying writing buggy code is easier than correct code, so avoid writing clever code or some of it is going to stay buggy. That’s what the quote actually means.

PS: Also, that wasn’t an insult it’s a statement of fact. You’re trying to twist the statement as not being qualified but it’s got a qualifier.
Plenty of previous discussion at https://news.ycombinator.com/item?id=32422522 (Mindustry – Open-Source Game, 135 comments)

Great game, though a bit addictive.
Is there a similar tool that allows pasting of images and uploading of files --- that I can self host on say AWS and use S3 for storage and hosting?
There is the "Almost Always Auto" idea in C++, but AFAICS it's (fortunately IMO) not catching on.
You choose your own risks.

If you buy from the internet from a fly-by-night based in India because someone on an internet forum said it was good, you can.

If instead you only take what your doctor provides, and pick a doctor who checks independent tests of drugs before prescribing them, you can.
The caldav and carddav work well, even if you don't use the web ui.
My latest one is boardgames.

It gives me chance to get off computer (so only physical boardgames - no BGA) and meet new people (so no solo games). And since I like collecting stuff it also plays nicely into this quirk of mine (my collection just passed 140 mark).

The world of modern boardgames is really fascinating and totally different than I remember from childhood - playing boardgames in early 90s in Poland was geeks territory (up there with math and computers) and nowadays its almost badge of honor and all the coolest people will happily play boardgames (just to be clear I do not claim people playing games in 90s were geeks, it was just the prevailing opinion of my peers)
Research shows that sniffing women's tears reduces aggressive behavior in men
What business doesn't use some kind of framework, even for the backend? I've never heard of a successful business building everything from scratch, usually you'll have something like Qt for GUI construction, or Django/Ktor/ASP.NET for a web server.

I believe Wikipedia uses mostly frameworkless Javascript, but, as you might expect from any sufficiently sized project, they have come up with their own frameworks instead.
It's not either/or. The observation that freezes and no Friday deployments capitalize on is that the single most likely cause of production incidents is production changes.

We always should target better stability, but no matter how good your system and incident response are, if your goal is to minimize customer disruption during a certain time window, or avoid dealing with incidents on weekends, minimizing production changes is the simplest and most effective measure
Cyberrunner – robot playing Labyrinth board game
Our current production deploys for our B2B/SaaS banking product run "in-house" authentication.

We were essentially laughed out of the room when we showed our biggest prospect how we managed users in our legacy product. I felt really smug about my fancy hand-coded user management tooling until about 50% into the presentation when I could see an equivalently-smug look + mild sideways head shaking coming from the customer CTO. Running in-house authentication is literally a joke to many of these orgs in 2023. Most developers probably won't ever experience this. I think it is a shame, because this one experience forced us to embrace a new kind of light that much of HN probably won't ever see. Our roadmap was accelerated by this rejection.

Realizing that we might have lost a multi-million dollar customer over an ego trip was a bit of a wakeup call. I have some skin in this game. I don't know about the rest of HN. At a certain point, it's about making money and being able to sleep at night. Running in-house anything typically works against that (i.e. spending finite innovation tokens). Like it or not, if you are dealing with a big crusty organization, outsourcing authentication might become mandatory at a certain point.

Further, if something goes wrong and one of our customers gets breached, I don't want the investigation to wind up at a line of code in my codebase. That means I have to get involved in legal proceedings. I am completely out of the game of touching end-user passwords or MFA tokens now. We get claims from an IdP and that's that. We don't even write SAML/OIDC integration code because our tech partner has done that for us by way of a happy DDL election on our FaaS runner config. The authenticated user's claims are injected into our HTTP trigger function arg list, and since we do stupid-simple PHP-style SSR web apps, the rest is fairly obvious. We still have a "Users" table, but all that password hashing/salting/iterations crap is replaced by a simple UPN string field (i.e. the user's email address).

Above all this, use case matters most. If you are unregulated and dealing B2C with 100m customers, you'd have to be the maddest hatter to ever live to consider paying someone else for authentication duty like we decided to do. If you are working B2B with US banks and other regulated orgs, the exact opposite appears to be true.
As always, it depends what properties you're relying on MD5 for. Just because something uses MS5 doesn't mean it's broken, because its preimage resistance (i.e. 'invert this hash') and second preimage resistance (i.e. 'find an input that goes to the same hash of this other input') are both not broken (yet) from a practical perspective.

Sometimes whether a cryptographic protocol relies on collision resistance can be surprisingly nuanced, so it should be phased out for this alone (and as we have better options) but for simple examples (e.g. to make a signed hash of an executable, which is probably equivalent to what you're describing) it's not broken.
If anyone actually ever wrote that, pre-C23, then more likely than not they intended for i to be a double. Otherwise, why write 0.0 when 0 would suffice? It could go either way: Switching to C23 could cause a bug, or it could fix a bug. Or maybe fix one bug and cause another.
You think Europe does not have roads covering everyone?
This is the sunk cost fallacy at it's finest.

Maybe the most offensive thing about public transport to an American is that it cannot really be profitable by itself. Infrastructure rarely is but it is still worth investing in for the downstream effect.
I remember there being talks of a complete rewrite of Newpipe. Did anything come of that? I'm a happy user, so I don't really have an opinion on whether it should happen or not.
AI consciousness: scientists say we urgently need answers
CO2 is generally used as a proxy for IAQ as in the link you posted. I strongly suspect it's another factor than just CO2, for example reduced O2 levels, or VOCs and particulates. I'm sceptical that usual levels of CO2 have a noticeable impact on metabolism.
Separating science from morality in the new anti-obesity medications
The only solution they offer here is to rely on the authority of the source. But every entrenched political party extreme, dictator, or military propagandist has popular media reinforcing the views that are beneficial to their group.

The worst part about these discussions is that there is no distinction made between the most unsubstantiated off-the-wall ideas and, for example, serious accusations against governments about real events (especially recent ones).

Appeal-to-authority is ultimately deadly for millions of people because it is a primary aspect of military propaganda. The way that works is that warfare is mass killing for strategic ends, and humans won't engage in that consciously. So propaganda is needed to dehumanize the enemy and provide a supposed moral basis to continue the killing efforts.

The primary distributor for this propaganda is your most sacred and trusted media source.
Can you elaborate ont he crashes more? when i still had an android phone newpipe was the only app i actively enjoyed using because it was just reliable and simple. the only issues i ever had were the same everyone had when youtube broke the functionality and usually there was a dev build ready in a few hours with a patch and then a proper update pretty shortly after on the main app. but i never used it to sign in to youtube so might be a difference. i specifically chose newpipe because i didn’t need to deal with google’s nonsense when using it
> why you'd even want OIDC for most apps

If you can get away from OIDC, don't touch it. It's only usefull if you don't control the source of users, need to have some seemless login across many apps or if your app is integrated with many other apps for which you need something that work everywhere and that is a standard. OIDC and SAML are the lingua franca when you need that kind of capabilities and those scenario are just the one I've faced, there's a lot more to it

> I don't see why it is preferable over basic forms auth with a cookie.

Cookie is how you typically persist session on a browser, this is the step that usually goes after you've authenticated / been authorised, the scope of OIDC is purely in the authentication/authorisation and doesn't even specify how you should persist the session. Also the scope of OIDC goes beyond the browser

> OIDC-by-default seems like overengineering but I appreciate I'm probably missing a critical reason.

By all means, if your use case doesn't need it, don't touch OIDC/SAML it would be like using kubernetes to host your mum wordpress. OIDC and SAML are complicated because SSO is made to fit the need of companies with all sort of use cases that goes beyond simple use case like the one you seem to describe.
Guess triangular and hexagonal grids are somewhat rare, but not exactly unknown. I remember the Programming Clojure book included a maze-generator that was shown for both square and hex grids (and could probably be easily modified for triangles as well?).

Surprisingly the linked generator does not seem to have any choice of different maze algorithms? I guess it only uses one of the perfect algorithms then, meaning all possible mazes have equal probability. Those tend to be pretty boring. I think the biased algorithms often create more interesting mazes.

(EDIT: I see after reading some other comments here and the Help page that the E and R values can be set to create more biased mazes which sounds useful.)

Jamis Buck's Maze algorithm page is a great resource and the book he wrote about programming mazes is even better. It has nice visualizations of how the biases from different not perfect algorithm creates different patterns of mazes.

https://www.jamisbuck.org/mazes/

Implementing and visualizing different maze algorithms is probably my favorite kind of exercise when trying some new programming language (or things like game frameworks/libraries). Most of the algorithms are very easy, so there are no distractions from trying to get the logic right, but there are still some data-structures to play with and a bit more weight than Hello World.
And what research is for? I mean, it can be something long term but research could also be short term. I don't know if it was Bellman or Knuth that said: "If you can solve it, it is an exercise; otherwise it's a research problem.". I understand that labs could have a problem in mind that could be solved technically but NOT solved businesslike but also include problems that are short-term research and could be feasible or not.
No Oversight: Inside a Boom-Time Startup Fraud and Its Unraveling
Are you smarter than an LLM?
so 90% are car crimes, not public transit crimes
Ask HN: What's your "it's not stupid if it works" story?
Cursed hacks, forcing proprietary software to do what you want through clever means, or just generally doing awful, beautiful things with technology?
http://archive.today/iT8f5
> What you disliked about Logseq?

For me it was the fact that it's a pure outliner and I couldn't write free-form text. Everything had to be list.
Does working on a relatively old ARM laptop mean that more modern laptops may be become easier to support/develop drivers for?
If the link has something to add to your argument, can you quote the specific section?

It appears to reinforce my point, in that it never defines 'large chunk' to have any specific range of values. Certainly not anywhere near a majority.

> Like who?

Some of the human individuals I've met and talked with throughout life.
Great.

Now, care to guess why this isn't already the case?
Why would that made me feel better, tdeck? It doesn't make me feel better.

Besides it’s different what you mentioned about where you are from and what I experience and see as the norm where I am from.
Trying to get funding and exposure by jumping on the AI bandwagon doesn't seem weird to me. Much like during the peak of the dot-com bubble, companies and orgs are shifting towards generative AI, whether it's related to their core business/competencies or not.
Technically, a software project does not have to worry about collisions for hashes verifying their releases. That only becomes a problem where there is some sort of trusted third party that can be tricked into authenticating one of a pair of collided hashes.

There is a usability issue here. A 256 bit hash is so long as to be very hard to manually compare. A project might want to keep the length down to something reasonable.
If people use the database as an integration layer, IMNSHO, they deserve what they get. Database is implementation - not integration interface.
Not really in the same way. And you forget that what is the most important in a prosecution is the intent.

Beeper intent is to serve both Apple customers and non Apple customers to exchange messages securely. Its goal is interoperability, not stealing, or blindly using resources it doesn't own.
every single newpipe problem is google actively breaking them.

every time it crashed failing to parse some video is even more reason to use it!
> I'm not sure why they all roll their own editor. Can't it be a plugin?

There are multiple reason, like editors having too much of their own baggage, or not being meant to be used as a foundation for a mature app. But I guess mainly it's a matter of licensing, and building your own editing-experience.

VS Code is for plaintext, while obsidian has deep rich-text-handling. It's probably not that easy to combine both flawless and still supporting all the plaintext-editing.
Not only does the superior ESDF have tactile feedback (because of the nub on the F key) but you also get an extra column of keys (QAZ) on the left!
Capacities too. But I feel like Notion is easier to maintain in the end and has the databases with linked records and you can do lots of stuff with that... not sure why Notion gets so much hate.
I used Newpipe first after degoogling, then switch to Libretube for the supposed privacy benefits. App looked a bit better too and crashed often, but way too often there were problems with connecting the Piped instances it was using for streaming and it was laggy and slowly. Newpipe, conversely, when it works, is fast. Sometimes it crashes repeatedly but the problems are usually resolved quickly. Streaming is good quality and fast.
Title is editorialised. How would one even determine “the most ever written” in this case?

Original title is “8 Thought-Provoking Fantasy Books You Won’t Be Able to Put Down”. To follow HN guidelines, it would become “Thought-Provoking Fantasy Books”.

https://news.ycombinator.com/newsguidelines.html
Irrelevant. This conversation is not remotely about incompatible ideas or poor implementations.

You attempted to justify the devs policy with demanding users, which is ridiculous on multiple fronts.
Anthropocene traps that challenge global sustainability
Using a unicode character to reverse order of characters and create links that have “trusted” value like: ln.instagram.com//:sptth. Neat and indeed something that could be well exploited.
https://aviation.stackexchange.com/questions/12528/jet-engin...

https://www.sps-aviation.com/story/?id=2623&h=Engine-Leasing

The engines also have an always-on connection back to the mothership via satellite, eg:

https://www.forbes.com/sites/johngoglia/2014/03/13/aircraft-...
this is part of the: passkeys as the ultimate centralized online identity plan.
Really interesting approach to use right to left override in that way, that's very clever.
Does this intend to fill a similar spot in the Rust ecosystem as fsspec (https://filesystem-spec.readthedocs.io/en/latest/) does for Python, or am I getting the wrong idea?
build an export and import and offer it with docker and I'm on board. I dont care much If I have to take a few extra steps... but I'm done hosting my private stuff in the cloud. Self host is the future.
"Prove To The Court That I Am Sentient" - https://youtu.be/ol2WP0hc0NY
It crashed multiple times daily when I tried it a few months back. Same thing on my partner's phone.
Wasn't the claim that even those people, at that time, recognized Nazis as bad news? I'll review the thread but I don't recall anyone claiming the soldiers, politicians or civilians were particularly woke by modern standards.
Meanwhile China has built 42,000km (26,100 miles) of high speed rail.

https://www.travelchinaguide.com/china-trains/high-speed/rai...

US is now cursed by their own success. Eisenhower jump started the highway to connect all of US as the largest transport infrastructure project. We have been riding the success of that for a massive economy. We are on the plateauing side of that S curve.

cursed because we spent a ton of money and got into debt with trillions spent for wars without much to show.

Now we don’t have to money, nor the will to invest in the next S curve infrastructure project.

Meanwhile China is pumping out infrastructure at speed of thought.
I currently don't have DMARC setup on my mail server (which runs for a couple of domains plus subdomains for me and a couple of friends/family), but have SPF records set appropriately and DKIM configured. We've not noticed any deliverability issues.

Though I'd be interested to work out (or, be told!) how this might affect this vulnerability. I always assumed that most mail servers both check against SPF records and verify DKIM signatures if both are present, rather than it being a this-or-that thing, so DKIM offering some mitigation is not undone by the presence of SPF.
I discovered this book in an HN comment, it's only right I post it here as well http://www.mazesforprogrammers.com/