skysight-inc/HackerNews huggingface dataset:
Hard to say.

In asymmetric one side might be able to afford to spend a lot more than the other.

Certainly Israel's missile for Iron Dome costs more than a Hamas Qassam rocket. Hamas can certainly overwhlem Iron Dome with a barrage but they have to make missiles for months and months and build up a large stock to be able to do it. The significance of both Qassam and Iron Dome may be more political than military as either one proves that their side is "doing something" about the situation to their own people.

In general drones vary a lot in size, cost and capabilities and I think that growth will continue in the future. Some drones are similar to military aircraft in capability while others are like the DJI drones. It seems "suicide drones" that are baby cruise missiles are a rapidly growing category and those are about 100x as expensive as the cheapest drones. So far as I can tell the most effective tactic the Russians are using against low-end drones is electronic warfare since those drones are completely dependent on low security radio links.
It really is unfortunate that there isn't a straight-forward way to compile to a stand-alone executable which would "just work" --- as perfect as it would be for a project I have in mind (Erudite affords Literate Programming, and I need vector graphics, and the DrGeo tool looks to have a lot of code I could crib from), but I just can't see telling folks to download an entire development environment to use it.
People pointed out at the time that the UK literally never gave 350 million a week to the EU in the first place, and that a significant fraction of the much smaller amount of money that it did give to the EU was spend on projects in the UK anyway.

Given the discussions at the time, I think this changed nobody's mind.
Also worth checking out for more general use of LLMs in emacs: https://github.com/karthink/gptel
Do Makefiles count?

I set up various incantations like:

make build

make run

make test

make lint
Russian-backed forces shot down Netherlands' airliner, murdering over 200 people. There was no response either. Countries don't go to war if they don't see it paying off.
Digital signing seems like an obvious solution here but you actually need to allow multiple chained digital signatures so that you can retain provenance across successive edits. Without this, even a simple edit like brightness/contrast change would strip the signature.
One notable problem with user ids is that they tend to leak to users in some way. Because of this, it's really easy for competitive intelligence companies to bot create accounts just to get a feeling of new user growth if you're naively using auto increments. This maybe fine mom and pop sites, or sites where somehow the UID never leaves the middleware, but the reality is that using sequential IDs or hashes of them without salt aren't great for this reason.
WorldCoin is coming…
One of my previous energy providers (British Gas, owned by Centrica) didn’t allow an email address to be used for more than one physical address.

When I moved and tried to “set up” my online account I kept getting HTTP 500s when trying to view details about my current address. On the phone they told me “sorry, you can’t use the same email address for multiple [postal] addresses”, even with closed energy accounts from previous addresses.
The Guardian who ran the article are kind of biased against Brexit. There never were really clear goals so it's dubious to say failed. But I think most people including leavers don't think it has gone very well. The story was a bit like:

Farage and friends: The EU is rubbish, we should have a referendum on leaving.

Tory govt: No

Farage: I've set up a rival party, UKIP, to campaign for leave. If we don't have a referendum we'll split the Tory vote and Labour will win

Tories: Ok have your damn referendum - you'll lose anyway

Referendum: Do you want the current EU mediocrity or the sunshine and unicorns of an imaginary unspecified Brexit?

People: voted slightly for the imaginary unicorns

Reality: Everyone agrees the reality is a bit rubbish really.

My personal take is the referendum should have been in a couple of stages. Like when you buy a house it's do you like that one? Yeah. Ok let's do a survey and look at making an offer. Not do you like that one? Yeah. Ok you're committed now for the next few decades, any second thoughts are a betrayal of the saying yeah.
They did a few things right that the legacy manufacturers just can’t freaking figure out.

* their charging infrastructure is by far the best. Regardless of coverage, their chargers are typically in working condition.

* they actually put enough power in their powertrain. No dinky, slow cars. Fast, powerful cars. They’re fun to drive when you want them to be fun.

* technology.
The person I’m responding to claims “the backlash to soy is inextricably tied to old stereotypes of asians [sic] as weak and docile.” You are claiming that it “[fails] to acknowledge that entire nations consume it without problems”. These are two different claims.
A couple years ago I was routinely down voted on here and other social media sites for making fun of Teslas emergency vehicle homing feature. Then Musk bought Twitter and I stopped hearing all the justifications for them and former defenders of Tesla started saying what I was saying years ago.
> The biggest problem with email addresses as 'permanent' identifiers is that people's email addresses change even within a single organization (for example, a university). They change for the same collection of reasons that people's commonly used names and logins change.

True for some cases, surely, but I will be surprised if I don't go to the grave in ~40 years with my current gmail account still intact (assuming email is still a thing).

I assume this is true for some appreciable fraction of email users, although I couldn't hazard a guess of what fraction.
This is true, but I still use them, for the system I'm getting ready to release.

The reason is that we want to keep as little PID as possible, and that should be as innocuous as possible.

So we use emails, including obfuscated Sign In with Apple proxies, or even temporary DEAs. The only requirement is that the email be one that will receive emails.
We're actually in the process of changing around our email system to allow for multiple associated email addresses with an account right now.

One of the main reasons for this is that we provide a student discount for people, and the easiest way to apply that to an account is by checking if their email is an educational one (.edu, .ac.uk, etc). However most people don't seem to want to actually signup with that email. So by allowing multiple emails we can have the best of both worlds! Wish we had done it this way in the beginning.
My Favorite Articles of 2023
Dual MN 8010 Stereo [video]
Yes two core benefits:

1. Built-in Deduplication. If your ID describes the "thing that it is" handling deduplication is much easier. Of course you can try to enforce it by enforcing uniqueness on other columns (but that's not always possible / can get tricky).

2. Save a DB trip on updates/some creations / make indexing more explicit. E.g. say you are user with email address and you want to update some info. Either you run an update using the email directly (in which case you are treating it as a PK essentially even if you don't call it that) or you first retrieve the relevant PK by whatever logic (say indexing by email and name or whatever) at which point you do have an implicit natural key.

In my experience every time I have seen a "corporate" DB with non natural key you get a LOT of duplication and all sorts of services to try to resolve entities running in a batch way (the horror..).

And 2 leads to a lot of bugs because of the implicit nature where you accidentally update the wrong or multiple rows because you didn't know what the implicit uniqueness "key" entailed.
You can usually automate the renewal or buy for a long period.

But mistakes can never be completely avoided.

What if you accidentally transfer this domain to someone instead of another domain you sold them? What if you accidentally lose access to the registrar's website? What if.....
It only worked for so long. I had spammers post with the hidden field after being targeted.

I then switched the field to a hashed simple time-based value, to which they responded to by just fetching the page to get the value, and posting it back.

The posted content was often in two categories: links with stuffed keywords, or some common framework exploit (generally fetching a remote resource to test for exploitability).

While marginally entertaining in the beginning, it's just a waste of time unless you want to create some form of engagement within a blog..
I searched the thread to make sure someone mentioned this because I found it very useful. It encourages you to ask customers about real experiences instead of opinions, and gives you ways to identify things they care enough about to invest time/money into.
Ask HN: Tool for reverse engineering legacy software?
Hello community,
I am looking for a tool which allows me to reverse engineer an existing (windows) legacy business app by tracking the changes made on the SQL database if certain actions are executed within the legacy system. So basically my workflow would be:

1. Launch reverse engineering tool and connect it to the (Microsoft SQL Server) database
2. Reverse engineering tool captures a snapshot of the database
3. Reverse engineering tool listens for database changes...
4. Launch legacy business app and execute some business process manually
5. Check changes in database in reverse engineering tool (new, modified and deleted data). Ideally visualize the changes to the user

Centuries ago, there was a tool called FileAid from CompuWare which allowed me to do exactly what I am looking for, but it seems that this tool changed completely and just the name is still the same (after the company was sold many times).
Best Space Images of 2023
Tradle – Wordle like game for trade buffs
Wordle for trade buffs, get your one a day here
I had the same thought, also may as well add in set operations like ∪, ∩, △
Why Your CSS Code Is a Slow, Broken, and Hard-to-Manage Mess
> Israel has the means to kill far more people, if it wanted to - it just doesn't.

That you say this and still come on to me with that "I share your values" stuff is just gold.
The problem is that there is absolutely no incentive for a company to do this. There is no reason for Apple to work with Meta to make iMessage work with WhatsApp, and for both of them to work with Telegram and Signal so they all work together and share everything.

It kills their ability to add differentiating features, it removes their networking effect moat, and it provides them with no benefit. It's so much more appealing for their answer to be "just download my app".

It happened for telephone and email because they were developed in a different era. It's not going to happen for IM because we're in the era of "why build it if I can't profit from it?".
I was totally blown away by how good Proton is in the post Steam Deck world. I now play Steam games on my Linux laptop almost daily because they “just work” even when the only listed supported platform is Windows
A forecasting system in aircraft autopilot that can accurately forecast when the plane hits the mountain is always wrong.

Forecasting when the forecast depends on the actions of agents that can be informed by the forecast changes the game. If the Fed model forecasts recession and the Fed takes action to prevent it from happening, it changes everything.
Only a forecasting model that is not observed/believed by policy makers can predict without intervention.

Layman's idea of forecasting: Predict what happens in the future.

Economic forecasting: Forecast is input for actions. Predict what happens in the future, using this model, these variables, and everything else stay the same. You can check afterward if the model is an accurate forecaster by removing the changes caused by variables outside the model.
"GHOSTS IN THE MACHINE" (3:35)
flex/recruiting video for the US Army's 4th Psychological Operations Group

https://www.youtube.com/watch?v=VA4e0NqyYMw
V9958. Which also added some high color modes.

Looked very impressive back then. But technically a V9958 is best regarded as a V9938 with some cosmetic tweaks.

> and supported a light pen and mouse.

Mice are supported through the joystick ports which are standard across MSX models (so eg. MSX1 + mouse = just plug in & write software to use it).

V9938's light pen support was used in a few rare MSX2 machines. And yes V9958 removed this function.
I think email plus a robust protocol for resolving changes works as good as can get.

For important stuff like banks and pensions they also have phone and physical address, so there’s a way to reconcile things like email changes, as rare as they are.
>somehow people aren’t bothered at all that “messaging” programs don’t interoperate.

I used Trillian for almost a decade; it was the second best solution to actually being able to message Yahoo and MSN users from my AIM handle.

I think people have been bothered, but when an entire platform disappears, there's not much anyone can do. The coding wizards who are capable of doing something (in concert with some marketing wizards, maybe) don't seem interested.
Is this still the case on a modern distro using MGLRU and systemd-oomd?
Sure, so long as that ID actually identifies the thing in question. Email addresses ARE a great natural ID for an e-mail mailbox. If you want to store a history of what e-mails a particular address has received, they're great. They are not a good identifier for a user since they don't describe the same thing, just two things that happen to coincide right now.
Llms can filter too.
What if you passed away and someone wants to access your old data by getting your old email domain Oo
For those (like me) wondering what RAG means:
“Retrieval Augmented Generation (RAG) represents a groundbreaking approach in information retrieval, where the accuracy of search results directly influences the quality of generated answers. In essence, RAG combines traditional search mechanisms with Large Language Model's ability to understand and generate answers.”

(https://www.linkedin.com/pulse/how-we-increased-search-accur....)
I don't disagree. It's why I brought this up. It's tricky to use Hyperscan, as-is, as a regex engine in a grep tool for these reasons. I don't mean to claim it is impossible, but there are non-trivial issues you'll need to solve.

It's hard to learn too much from hypergrep. It still has some rough spots:

$ hgrep -o 'foo.*bar' foobarbar.txt
foobarbar.txt
1:[Omitted long line with 1 matches]

$ hgrep -M0 -o 'foo.*bar' foobarbar.txt
Too few arguments

For more information try --help
$ hgrep -M 0 -o 'foo.*bar' foobarbar.txt
foobarbar.txt
1:[Omitted long line with 1 matches]

$ hgrep -M 0 'foo.*bar' foobarbar.txt
foobarbar.txt
1:[Omitted long line with 1 matches]

$ hgrep -M0 'foo.*bar' foobarbar.txt
terminate called after throwing an instance of 'std::invalid_argument'
what(): pattern not found
zsh: IOT instruction (core dumped) hgrep -M0 'foo.*bar' foobarbar.txt

Another issue with Hyperscan is that if you enable HS_FLAG_UTF8[1], which hypergrep does[2,3], and then search invalid UTF-8, then the result is UB.

> This flag instructs Hyperscan to treat the pattern as a sequence of UTF-8 characters. The results of scanning invalid UTF-8 sequences with a Hyperscan library that has been compiled with one or more patterns using this flag are undefined.

That's another issue you'll need to grapple with if you use Hyperscan. PCRE2 used to have this issue[4], but they've since defined the semantics of searching invalid UTF-8 with Unicode mode enabled. ripgrep 14 uses that new mode, but I haven't updated that FAQ answer yet.

Hyperscan isn't alone. Many regex engines do not support searching arbitrary byte sequences[5]. And this is why many/most regex engines are awkward to use in a fast grep implementation. Because you really do not want your grep to fall over when it comes across invalid UTF-8. And the overhead of doing UTF-8 checking in the first place (and perhaps let you just skip over lines that contain invalid UTF-8) would make it difficult to be competitive in performance. It also inhibits its usage in OSINT work.

[1]: https://intel.github.io/hyperscan/dev-reference/api_files.ht...

[2]: https://github.com/p-ranav/hypergrep/blob/ee85b713aa84e0050a...

[3]: https://github.com/p-ranav/hypergrep/blob/ee85b713aa84e0050a...

[4]: https://github.com/BurntSushi/ripgrep/blob/master/FAQ.md#why...

[5]: https://github.com/BurntSushi/rebar/blob/96c6779b7e1cdd850b8...
I’m clear why they didn’t include it, I wanted them to tell me why, though. And I thought that both of them apologized in almost the same way, was funny.
I had to do a final project in ColdFusion in a web dev class in college (2006 I think?). It was a class where we had also used Perl, PHP and classic ASP. After that class I spent a lot more time with PHP and eventually ASP.NET, never touched ColdFusion again.

Unrelated, but by far the worst part of the class was the requirement to connect to MS Access databases, which were notoriously tricky to avoid locking, after which point the whole application would stop working until you figured out why. Many of us would keep a “clean” snapshot of the database around with the expectation we would somehow break/lock/corrupt the one the website was using. A reboot would also fix it but took a lot longer back then…
Hungary is currently hugely dependent on Russian natgas, so they're completely at Putin's mercy. Putin could have have them freeze to death at a snap of his fingers, which I'm sure was pointed out to Orban during a private audience.
I agree. You wouldn't use encoding/json or serde-json if you had to deserialize a lot of json and you cared about latency, throughput, or power costs. A typical protobuf decoder would be better.
Only if they changed that (which they might have as part of their cost-optimization). They said they mixed bing and google results back then.
>since decompression must be lossless, it's unclear to me if this approach could really help here.

All lossy compression can be made lossless by storing a residual. A modern language transformer is well suited to compression because they output a ranked list of probabilities for every token, which is straightforward to feed into an entropy encoder.[0]

On the other hand, LLMs expose the flaw in the Hutter prize - Wikipedia is just too damn small, and the ratio of "relevant knowledge" to "incidental syntactic noise" too poor, for the overhead of putting "all human knowledge" in the encoder to be worth it. A very simple language model can achieve very good compression already, predicting the next word almost as well as a human can in absolute terms. The difference between "phone autocomplete" and "plausible AGI" is far into the long tail of text prediction accuracy.

Probably a state of the art Hutter prize winning strategy would simply be to train a language model on Wikipedia only, with some carefully optimal selection of parameter count. The resulting model would be useless for anything except compressing Wikipedia though, due to overfit.

[0] A practical difficulty is that large language models often struggle with determinism even disregarding the random sampling used for ChatGPT etc, when large numbers of floating point calculations are sharded across a GPU and performed in an arbitrary order. But this can easily be overcome at the expense of efficiency.
My previous Linux laptop with 8GB of RAM (2014–2017 or so, I think) I never even got round to setting up swap, and I only ran into problems two or three times total (when running two or three Firefox instances and Chromium and a VM taking 2GB and a bunch of other things running—some of the biggest consumers, namely browsers, actually notice if they’re using too much of your RAM and adjust how they work so they don’t ask for so much RAM, at what I believe is a fairly slight performance cost).

On my current laptop and with my current habits, I’m consuming a lot more memory, and so the technique I use to avoid OOM is simply having 40GB of RAM. (As it happens, I do actually have swap set up at present, because certain circumstances meant I wanted to hibernate it occasionally; should disable swap again now I’m back to not needing to hibernate.)
The only decent solution I can think of is passkeys. Cross device synced identites that the user can choose a service for.

Just having a random ID isn't good enough, unless you want the user to remember this ID.
https://en.wikipedia.org/wiki/Genocide

> acts committed with intent to destroy, in whole or in part, a national, ethnical, racial or religious group

When they all live in refugees in other countries, they are destroyed as a national group. With this level of hair splitting you might as well say it's not genocide as long as even one member of the group survives, why not go there, too.
mine isn't -- i learned how to write css.
That's awesome. How does proton treat anti-cheat software or DRM?
But there's still plenty of signal. It isn't as if there are no working YouTube downloaders, or factually correct explanations of how transistors work. It's just that search engines don't know how to (or don't care enough about) disambiguating these good results from the mountains of spam or malware.
Yeah, I remember some of those threads here, back when the “libertarians” and right-wing UK posters weren’t quietly distancing themselves from it. It was very obvious that even people who sounded rational were confabulating excuses for what they were going to do anyway from the way they’d just smoothly pivot to something else whenever pushed for support on that figure.
What if every newborn received a chip implant under the skin (cryptographically unbreakable, unauthorized removal punishable by law), linked to a central government database with the chip’s unique identifier and a profile of the newborn’s DNA signature?
This just isn't true. In 2014 the motivation and training of Ukraine's forces was so poor that when encountering the enemy, absent any orders, most would lay down their weapons and join the other side. The majority of the Navy defected. Some western training was received from 2014 to 2020, but the most effective fighters were volunteers who had trained themselves and fought the Enemy completely outside the control of Ukraine's armed forces.
I usually dislike the idea of inviting government into this space, but if there's anything that governments have traditionally done decently well and should do (it's usually within their mission statement) its identity. Passports are really the primary identity layer of Earth.

Ideally in a perfect world we'd have governments run OIDC systems similar to the US login.gov and these would delegate from an international master OIDC system at the UN. Everyone would have their citizenship passport ID and their UN ID, and the latter could serve as a "break glass" master key to support immigration and also limit the ability of countries to "digital death penalty" people.

I can think of some dystopian outcomes here, but IMHO they are not worse than the dystopian outcomes that come from corporate monopolist control of digital identity. At least in democracies one has some nominal influence over one's government and the latter is bound by the rule of law, and if you don't live in a democracy you can (or should be able to) leave.

You're right that identity is hard, and I think most of why it's hard is human rather than technical. One could create a decentralized identity layer from a block chain fairly easily but people would lose their keys etc.