skysight-inc/HackerNews huggingface dataset:
I'm surprised no one has ported it to some container-friendly runtime.

In any case your threat model for container workflow is already 100x more complicated than some one-server blog with an open SSH port, I would give up on fail2ban immediately
Isn’t that the point that the article is trying to make?
I wouldn't call it "more thorough", as it doesn't do much more than the OP, but it's certainly a nice read. Thanks for the link!
It’s true that autohinting is nowadays the norm but I’d be more generous to those old fonts as they were aggressively hinted for black-and-white rendering. It’s not until ClearType was enabled by default in Windows Vista c. 2007 that those old hints became undesirable.
One of the best advice I've found in this subject is "Leaving things broken": https://news.ycombinator.com/item?id=35456059

Just like the author suggests leaving a failing test case so it's easier to resume, I leave a syntax error, or something small of the sort undone.

It has been a much better way to tackle the inertia of getting started.
I agree. Probably 90% of the power I consume is from a 100 watt solar panel and a 12v solar battery as I currently live out of a minivan.
These become a real problem when my first son was born. I got some stickers on Amazon done specifically for this and it was just perfect.
X has failed in a way that endangered lives, and in way that will likely persist. Mastodon has yet to be tested. It seems logical to start testing Mastodon's limits in earnest.
Banning things, adding taxes for things, providing incentives are all tools we have to manage externalities. We generally have a budget for how many restrictions we can impose, and we've banned plenty of things (such as slavery). Obviously we don't just go on a banning spree, but the argument that "banning is bad, America doesn't do it" is, IMO, not realistic or how our country has always operated.
Not to mention the electric and magnetic fields that AC currents release. This alone is a health hazard that is ignored by most modern builders.
> The commit starts with the ID of the ticket for the code change (or some placeholder for very small commits where a ticket wasn't necessary, e.g. [no-tix]).

Taking this a bit further you can make sure your branch names have the ticket in them, which you then extract in a git hook (git-prepare-msg) and put as a trailer at the end of the message using ‘git interpret-trailers’

This reduces clutter when looking at a list of messages (eg git log —-oneline) and makes it easier to script things based on the ticket numbers (other git commands can pull out the trailers)
Your boss displayed the opposite behaviors most all the creativity literature says are barriers to creative expression: close-mindedness, evaluation, etc - that is, creating environments that have no psychological safety where people don’t feel comfortable expressing their ideas. Wild that this boss was involved with product development and crazy how people like this come into positions of power and just ruin shit left and right.
Since a lot of people seem confused, this is a real disaster prevention app made in partnership with the Japan Meteorological Agency that's been on app stores since 2019: https://www.gehirn.co.jp/en/news/2019-09-01/01-press-nervapp...

Their Japanese Twitter account has 2 million followers, the branding hasn't really caused enough confusion in Japan to hinder them: https://twitter.com/UN_NERV
I get the idea, but don't consider Temu or Wish exactly competitors. Having tried both, both seem to have a problem with misrepresentation - showing something that leads you to believe the product is much better or especially larger than it really is. I'm not saying that doesn't occur on Amazon, but hasn't in my shopping experiences.

Temu and Wish may have completely fine items, also, but the one experience I had with each soured me from trying again.
E621, Pornhub, and others block North Carolina residents
There were already competing things in these areas already. They were the ultimate standardizations, but the momentum was already there and something would have standardized. It happened that after crushing Netscape no one bothered to develop the alternatives. I’d note that all of these emerged while Netscape was still a viable business delivering those alternatives. I look at the gap after AJAX and notice nothing really comes along until almost a decade later.
Even reading that document, I think the answer is "it depends".

For example, this[1] work is entirely derivative, created only using cuts from another piece of media and yet the resulting work is a complete departure and loses practically all meaning from the original. If Disney had done something like this years later using Steamboat Willie, I don't think there'd be any question that it should be considered a copyrightable piece of work and exceeds the threshold of originality.

According to the Copyright Alliance[2]:

> There is no requirement that the work be novel (as in patent law), unique, imaginative or inventive. A work need only demonstrate a very small amount of creativity in order to meet the originality requirement.

If J.K. Rowling replaces the word "wand" with "wang"[3] in the Harry Potter series and publishes a new revision, has she created a new work? According to your link, yes, she has. If you upload Harry Potter "wang" edition to the internet after the original edition enters the public domain, have you violated the copyright on the "wang" edition? Well, I think it could be argued that you have!

[1]: https://www.youtube.com/watch?v=694_jtbvJuY

[2]: https://copyrightalliance.org/education/copyright-law-explai...
basics/requirements-for-copyright-protection/

[3]: https://web.archive.org/web/20080618113626/http://www.bash.o...
If you cross certain lines, toxic messages should be blocked and sent to HR for review.

Criticism is fine, when it is constructive and done with tact.
If One Part Suffers: The enigma of body integrity dysphoria
https://archive.ph/TOrsC
See comments above -- its not logic for banning, its a coalition-building tactic, which is generally employed in most decisions we make/persuasions we carry out.
While I tend to grade generously when instructions aren’t followed, it is a real pain. It takes a lot more time to grade an assignment when someone does not follow the requested protocol. It’s likely to me that the prof saw a mess of printed code, said “I don’t have time to untangle this and grade it properly,” and didn’t give credit. Hell, I’ve wanted to do that on many an occasion but a fault of mine is that I am not respectful of my time and will try to help the student out by finding a way to award them points even if it takes 10x longer than it should have if they followed instructions.

I can sympathize that bad assignments are tedious and you might know a better way to do them, but you can’t expect to get credit when you don’t follow the instructions.
Author here. The psychology portion isn't subjective -- things are easier to scan if the more important part is first. One would have a hard time refuting that. Also, there is some familiarity bias that comes into play when reading a commit message style that is foreign, so the experiment I offer may not be super compelling. We are used to what we are used to, and that takes some time to overcome. I know it took me a while to overcome it both in writing, scanning, and reading them. It was worth it for me and our team.
I'm an incorrigible book non-completist. I only read to get what I need and I duck out.

Now with ChatGPT-4, I can read and comprehend even faster. For dense books in areas I'm unfamiliar with, I ask ChatGPT to, not summarize, but to break things down for me. For me, it's the new efficient way for doing syntopical reading (Mortimer Adler's technique for reading deeply).

https://www.masterclass.com/articles/how-to-get-the-most-out...
Nikola Tesla did not invent the induction motor.

edit: Nikola Tesla is credited with inventing many things he did not invent. He was very skilled and prolific at patenting his improvements on existing inventions, though.
They could make them decaying blue in a white matted plastic rather than piercing your eye and a wall bs. I tape all these useless components on everything I have. They are useless, because people tape them or turn off and then can’t test the outlet power loss anyway.

I wish I lived in a world without marketing idiots so much.
LunaNet by NASA and ESA
Yes. I don't think there's anything to be gained from monitoring login logs. The only real use is after you recognize some sort of breach to try and help determine exactly what did or didn't happen.
With apprehension for his passing worth.

Desire to work his proper nature out,

And ascertain his rank and final place:

For these things tend still upward — progress is

The law of life — man's self is not yet Man !

Robert Browning (1812-1889)
Word to the wise; a cheap 15 bar portafilter espresso system will make your everyday average black coffee (a-la Americano) along with the frothy drinks if you have a foaming wand. You'll spend less on better-tasting coffee, and can trash/recycle/compost 100% of the waste.

A decent Keurig is ~$100 and will buy you maybe an hour or two of convenience over the lifetime of the machine. A decent cheap espresso machine is only a little bit more and the difference in drink quality is night-and-day.
UX looks good, would be great to add ChatGPT's bidirectional voice chat too with e.g. Whisper and Bark and end-of-utterance detection. (That would be a strong differentiator.)
Afaik iCloud supports adding custom domains for your mail account, and I am currently looking at something called iCloud Mail Rules in the Settings with which you can apparently define custom handling rules for each sender.
Always use multiple layers of defence.
A sturdy 6ft fence and a locked wooden front door can be more secure than a 50m impenetrable stone wall, if it turns out that there is no such thing as an impenetrable stone wall.

Brute force protection is completely unnecessary for openssh when you've disabled password authentication because it's impossible[really expensive] to brute force.
Until you are impacted by an authentication vulnerability which still requires a valid user, then you are brute forcing a user away from being totally compromised. All of a sudden doing all the "unnecessary" things, like brute force protection, disabling root logins and not using default accounts make the difference between you being at the front or back of the line to get compromised in the race to get patched.

If you are one of those who believes a vulnerability like that is extremely unlikely rather than inevitable, then consider this. An ssh key gets leaked, the system it has access to is known / discoverable, the username is not. Brute force protection is now the main difference between being highly at risk and still reasonable safe.
It's a contrived scenario, but hardly an outrageous one.
My trick for this, which has been working extremely well for me over the past few years, is to make very heavy use of GitHub Issues.

Everything I'm working on, no matter how small, starts as an issue.

I post a continuous stream of comments on that issue as I make progress - documenting what I tried, what failed, what I've figured out, what micro-decisions I've made.

Many of my GitHub repos, both public and private, have issues with dozens of comments, all of which are me just talking to myself.

This is the single best solution I've ever found to the "interruption" problem. If I get interrupted, or distracted, I can read through my issue thread later and pick up where I left off.

I wrote a bit more about this approach here: https://simonwillison.net/2022/Nov/26/productivity/

A recent example issue: https://github.com/datasette/datasette-enrichments-gpt/issue...
<10 instances of looking at the commit history in >10 years is exceptionally little. I think you may have a different use-case if your commits are write-only and crafting commit message texts is probably a waste of time at that rate

Which is a very interesting take, for what it's worth. Might be worth a blog post what circumstances lead to this working well for your organization!
I'm the OP, and I'm not referring to any specific wallets of any kinds.

"I'm sure there is a world where the best way to store crypto is with a distributed service, rather than a wallet."

I think you've nailed it.

The best place to manage your private key / seed phrase could be the blockchain itself, as it is decentralized, distributed and open.
I do, indeed, highly value port knocking and I use it in my personal infrastructure.

It is simple and elegant and we're coming up on ~20 years of deployment in various places with zero hangs or crashes or unexpected interactions.

While nobody should rely solely on port knocking, it is a wonderful layer added to a defense-in-depth strategy.

Which is to say: lock down everything the way you always do, then put the port behind a knock.
I remember having a friend with an extemely sluggish server. Turns out the reason behind this sluggishness was that he set a permanent fail2ban bantime, which added thousands of records to iptabes; any packet, even not SSH, the server had to check the source IP against thousands of records.
After purging the rules and switching the bantime the server was usable again.
https://archive.ph/XhSEE
Author here. You're well within your rights to believe it is personal preference, but it's somewhat hard to refute the fact that it's easier to scan lists when you put the most significant (i.e., the part that varies the most) first. Imagine if every item on Amazon's list of products was of the format: "Product for purchase, Headphone, Sennheiser Momentum 4"
That's right, but a bi-gram model is just a big table of bi-grams and their probabilities (which are really their frequencies in a corpus normalised over the number of all bigrams in the corpus). You can use those probabilities in two ways: to calculate the probability of a string, by taking the bigrams in the string and multiplying their probabilities together; or by starting with some bigram (e.g. a search term entered by a user) and then selecting the next bigram according to its probability (i.e. its frequency in the corpus), or according to the probability of the entire string so-far (which you get by multiplying the probabilities of the bigrams so far); and repeat until you reach some maximum string-length.

So you're right that my comment is a bit confusing: I refer to the way you sample from a bi-gram model, so as to generate a string. Sorry!
It had live wire, which was a before its time nodejs
Re your question on economics books, I think Advanced Macroeconomics by David Romer could fit your bill. It goes a lot into why the math is the way it is (arguably more interesting, like another poster said). Modern macroeconomics is also built on microeconomics, and to that extent it's covered in the book, so you're sort of getting two-for-one here.
One of the more common approaches to AI in games is called GOAP [0][1] (Goal Oriented Action Planning), and it essentially "selects" which action set using the same concept -- graph searching (typically using A*) the available options.

0 - https://www.gamedeveloper.com/design/building-the-ai-of-f-e-...

1 - https://web.archive.org/web/20230804100329/https://alumni.me...

See also (not mine): https://github.com/agoose77/goap-resources
Nice graphs. 1971 coincides approximately with the start of the era of stagnation[1] in Soviet Union, when the socialist block began stalling, until its dissolution in late 80s/early 90s. I think the elites of the capitalist block stopped sharing the productivity gains with workers the moment they felt Soviet Union was stalling, as the perceived threat of squeezed people sympathizing with socialism and kickstarting some revolution vanished.

Capitalism, that has competition as one of its pillars, seemly started degrading when its sole competitor collapsed.

[1] https://en.m.wikipedia.org/wiki/Era_of_Stagnation
> that GitHub can pull from the body

I think that breaks the thing that people want which is being able to `git commit -m "Fix #234353"` without a body at all.
wait, you mean not enough people are impervious to science.

you see, many people consider their pets to also be people, and while fireworks are based on science, apparently these people are not impervious to that science. thus the conundrum.
I pretty much never read fiction and was at a book store some years ago when I thought "maybe I'll give it a go".

I found a book that looked pretty cool called "The Binding" about "book binders" - people that could erase a person's memory by writing their stories in books.

As I read on it seemed to turn into something less about book binding and more into a kind of homo erotic novel.. boy was I disappointed and felt totally bait and switched.
Experts say there are rare galaxies that act like they have no dark matter.

I thought that was what put the end to taking MOND seriously. Isn't the whole point to explain the alleged dark matter by some uniform rules instead of local conditions?

But I never understood what started the interest in it.

Everything I have ever read by proponents on the internet has resembled "believing in stuff (like "luminiferous ether") you can't see is unscientific".

I have never understood the feeling that dark matter is illegitimate, because there are so many invisible things that we do take for granted, like radio waves.

I have written similar things before and gotten lectured by anti-dark-matter-ites on why radio waves are obviously different from dark matter, but it didn't illuminate anything.
Do you mean this tweet? https://nitter.net/Peter_Turchin/status/1330581699512688641
... that they never update

... because they're all posting on social media platforms big and small, just like everyone else.
W.r.t. most of those graphs, the (rightfully so) collapse of Bretton Woods: https://en.m.wikipedia.org/wiki/Bretton_Woods_system
Defending copyrights held by small fry is usually of negative value, which is why they do their best to give all the material away themselves. They want the exposure more.

The counterfactual to making an illicit copy of Thriller might conceivably be that you pay for an official copy. The counterfactual to making an illicit copy of Everybody Needs A Robot is not that you pay for an official copy. It's that you go do something else, which is worse for the artist.
Author here. We have actually managed to use the same task tracking tool for the three years our project has been running: Linear. We don't do pull requests, and we don't put our work item number in our commit messages.

I can count on zero fingers the number of times I have ever wished I had this.

We do, however, keep daily work logs (each person submits them) so we have a log of everything that everyone worked on. We have Slack history, which is sometimes referred to.

I'm curious what folks find this useful for. What are the scenarios where one has to refer back to an issue from a commit?

By the way, I also have the experience of inheriting a code base where the commit messages were mostly (or just) issue numbers. Guess what I didn't inherit? The issue tracker. The commit messages were useless to me.
There Are 14 Different Games of Tic-Tac-Toe [video]
I use microdot on a pi pico w and while it does work it also runs the board out of ram and makes connecting to wifi somewhat nondeterministic.

I solved this my precompiling to bytecode both microdot and picozero libraries. Works great now, I just have to remember to do this again every time I update micropython.
For me it's usually blame, look for a line that hasn't been touched by some triviality, then from that commit message either to a ticket reference, or, if absent or unavailable, to history shortly before and after. So yes, I do look at old history. In a codebase that has seen a lot of squash rewriting that won't be of much help of course.
FYI: You misread your link, it quotes the average value of a Twenty Foot Equivalent Unit as 55K, so 109K for an FEU which costs 3K to ship.

Furthermore, these numbers are wholesale values; a reasonable rule of thumb is to double that for retail prices. That puts the cost of sea freight at about 1.3% of retail using your numbers. Even a doubling would be dwarfed by other factors driving inflation.
TBH running a full A* for each soldier is not only waistfull but also not realistic. Most people are just moving with the group and might not even know where the entire formation is going
There are far too many books[0] and too few hours in a lifetime to not aggressively cut your losses when something awful (or even just mediocre) has found its way before your eyes.

Carl Sagan made this fairly obvious in Cosmos[1] speaking to the number of books one could read in a lifetime relative to the number of books in the library.

[0] https://en.wikipedia.org/wiki/Sturgeons_law

[1] https://www.youtube.com/watch?v=EuvKdE5e3eo
What if I told you my dogs are afraid of drones but don't flinch at fireworks blowing up 400 ft above them?

I'm going to be rather blunt here because I love fireworks and your argument is tired and has been played out on every local nextdoor, reddit, and facebook group. The problem with the world today is everyone is so worried about offending someone else that they give up their own freedoms and that's where I draw the line. I'm sorry you hate fireworks but at the same time, I'm not. I'll continue traveling across the Colorado state line to buy my boom booms, and setting off my "illegal" fireworks in a safe manner. If we banned everything that could be potentially dangerous, we wouldn't have cars, electricity, or many other facets of life.

You do you, if you hate fireworks, please move some place far away from where other people might celebrate with fireworks. Same goes if you have PTSD, living near other people can be noisy at times and you might find refuge living far out in the woods, away from any thing that might trigger your PTSD. Lastly, please desensitize your dogs to fireworks. Everytime a firework goes off, turn it into a party for your dog with their favorite treats. Eventually the dog will look forward to the next boom.

Lastly, it's well known the NFPA has been anti-fireworks for over 100 years now. They produce one sided propaganda to support their straw man argument.
I'll be honest. You've put way more thought into this then I did.

But in the spirit of hacker news, I'll continue the argument.

> There are no implications.

Untrue and absolutist.

> Simply downloading a zip from Amazon has zero risk.

Agreed.

> Even opening an arbitrary zip has essentially zero risk. RCE from opening a zip is obviously a really critical and valuable vulnerability and would not be wasted with a public link.

Broadly agreed. History is full of unzip vulns, but I agree that this doesn't seem likely. Much easier to persuade folks to deliberately run their malware by using the latest fad as a hook. I'm not claiming that happened here.

> Combine that with the fact that this comes from a voice cloning GitHub repo and the chance of this having some 0-day are infinitesimal.

Maybe you know these authors and this repo and trust them. I don't. I'm sure they are lovely, I have no idea, I've done no research, and I've never heard of them before. That being said, if I wanted to distribute a backdoor or cryptominer to a bunch of people with powerful computers, I'd definitely hop on the AI bandwagon.

> Finally just making the link non-clickable does not add security.

I disagree. Some of the commenters here are rather savvy and will properly evaluate what they are downloading. Some are not. Making a link unclickable will prevent a percentage of people from downloading. If shenanigans are discovered, someone will make a very loud comment warning folks to avoid the download. In that case some of those non-downloaders may have been saved from themselves.

Again, this wasn't a well thought out decision, but it was also a rather low impact decision, and I stand by it.