skysight-inc/HackerNews huggingface dataset:
The new ssh client key features:

- Batch Login ( prompt to select and log in from ~/.ssh/config )

- Group Labels ( prompt to search by group labels )

- Automated Interaction ( similar to expect )

- Remember Password ( Include one-time password )

- Support Zmodem ( rz / sz ) file transfers.

- Support trzsz ( trz / tsz ) which similar to lrzsz ( rz / sz ).
We don't question Big Comet here; those who do are taken care of.
Minimal process: Edit SQL in editor, have peer review it, debug in your head, copy&paste with 4-eyes.

Compliant process: Write Ticket, approve/review ticket, (give DB access to developer/ops) or CI/CD run SQL with migration, (revoke access), close ticket.

Why? Because I've deleted portions of a live db when I thought I was on testing.
The end of the post talks about hiring him, and honestly, if anyone’s hiring, here’s one heck of a bargain: Someone who’s just starting out but who’s already shown he’s perfectly capable of figuring stuff out by himself.
> It’s also been fairly easy for tech teams to obfuscate performance and bamboozle managers who don’t understand tech.

Just as much a problem for sales oriented roles. Most “line managers” are experts in the field, so I don’t know if this is a valid point. In the anecdotal case, the managers still have sales targets and got to be managers by being the most effective sellers.

> With sales the performance criteria tends to be very simple and there aren’t really any good excuses for failure (at least none that seem to be accepted).

Here we are talking about producing, which by its nature is the measurable stuff. I think we don’t have it because we (some we) don’t want it, not because it wouldn’t work.
I should reduce the spacing
>LLMs are really smart, and also really, really dumb

Machines will always be dumb. The notion that machines are smart, probably stems from people inexperienced using engines. In chess we use engines for more than 20 years and humans always lose against the engines. The games they play however are garbage. Even if they are better than the human games, they are still garbage, as Magnus Carlsen have commented in the past about the CCC. Compilers in programming are engines too.

I am trying to write an article about Terminator using GPT, and every time i have to generate 10 different drafts, edit them afterwards and manually string together the different parts. It is great help like the chess engines, but they need a lot of human supervision.

Engines can output text, but they cannot output articles. They can output code, but they cannot output programs. They can output musical instruments, but they cannot output songs.
Always has been (the linux desktop is the terminal!)
I did not know this. Thank you. Updated my blog post!
The Dolby/Doremi servers certificate ended the Dec 31 too. Our maintenance subcontractor updated them few weeks ago. SO I guess it is common for the industry. Then it is an industry which often play 365d/year so, it's just another sunday/monday. (Add to this our weeks doesn't start Sunday/Monday, but Wednesday for France by example, and Friday for the US, day of the release of new movies)
https://docs.gtk.org/gtk4/broadway.html
It's an interesting technical challenge. I wonder if there is any "tangible" benefit by moving your land these few meters and spending $4600 on a surveyor to do it considering it's a woodland property. One immediate benefit I can see is that it now borders a road and previously it didn't. That's prety useful.

What are the laws in that place? Could you, let's say, not do any surveying, build a fence, and then have a new neighbour show up 25 years later with a survey and ask you to move it?

Here, we have this law that if you occupy some piece of land for 20 years (with no "malice", if it can be proved you knew it wasn't your land the amount of time is 30 years). After that time it essentially "becomes yours". The neighbour had no fence, but I imagine he could argue his camper being there for the required amount of time fulfills the requirement and then I imagine the boundary would get redrawn.

What is the authoritative thing that defines the boundary in absence of pins/markers?
I'm deep diving on machine learning basics right now. All new to me. I want to understand the nuts and bolts of ANN's so I get a better handle on the everyday higher order work people are doing to train networks for everyday work.

On a personal level, we'll see what happens. Typical eat better, lose weight, etc.
Agree. Think I peaked watching whole video on car indicators, filled with nostalgia and finally solving childhood mystery. There is something in his videos which teleports me to old times plus vids are packed with knowledge. Nerdiness is through the roof. HNY HN.
R has got great parts to it. It has the two best libraries for general data manipulation (dplyr and data.table), which blow equivalents in other languages away. It has the best plotting library (ggplot2). And the RMarkdown and Shiny ecosystems are incredibly powerful and useful tools.

R is used because it remains the single best language for data manipulation and reporting.
Thanks for share ur suggestions, I will carefully review each point and take them into consideration.
For me it's... neither, I guess? I hate that Disney abused the political process to milk their cash cow for longer, but I don't hate Disney otherwise. I just am glad that we didn't get another Mickey Mouse protection act passed.
First: your arguments, even if I accept them as-is, do not constitute evidence of fraud, but of a systemic problem. Second: your argumentation raises the question: what are reasons for retraction?

Shoddy science is (currently) not a reason for retraction. So just because a paper's results aren't replicable doesn't mean it should be retracted. Deliberate falsification is. But you'd need to distinguish those from not-perfect science.

Last, a sanity check: your comment implies/suggests that 1/3 to 1/2 of published science is fraudulent because it's not replicable. But fraudsters might accidentally hit upon the truth - at least sometimes. Moreover, plenty of research answers a binary question (yes/no, which of the two has a greater effect, etc). For those research questions, just guessing the answer gives you a50% chance of being right.

All of that implies that, following your logic, a huge portion of published research is based on fraudulent practices - not mistakes, but deliberately falsified contents. Add to that the "meta-fraud" (playing with authorship, citations), and one has to wonder if every second scientist on the planet is cheating and faking everything they publish.

To me, that is an obvious sign that the reasoning went off rails somewhere - much like the result of a sine function being outside of [-1, 1].
So no, you shouldn't expect 1/3 to 1/2 of all published research to require retraction.
I should point out that I only taught online course. The students lived all over the world and never met in person.
2023 Orbital Launch Stats
Japanse live feed: https://www.youtube.com/watch?v=Kz2EeMSzqHg
Such a high degree of certainty but without any actual argument is usually a certain sign of someone afflicted with Dunning-Krueger. Can you tell us anything about why you're so sure of all these things?
Something that is surprising to me is that there are seemingly no strong open-source poker AIs available. Maybe it's because implementing CFR for poker is genuinely difficult?
Entirely unfounded FUD!

Wallets wouldn’t just let some random thief access all your credentials. They have safeguards like biometric TEE unlock. If you’re being targeted by someone who can get past that, then they could do equal damage with your physical drivers license. Nobody is going to drive by swipe your phone, bypass biometrics, and access your wallet just to post revenge porn. Give me a break!

The way you fight companies trying to do device attestation/profiling is to provide a system that meets the current needs but controls structurally the philosophy around what you’re identifying (user, not device). And you legally limit behavior, not technically. I am sick of losing every nice thing we had because some privacy wanker says “oh that’s a persistent identifier better neuter it”. I want well regulated identifiers that I control judicially and around which there is a clear legal framework preventing abuse. I don’t want a world where I can’t manage my kid’s phone on my home network because some tin foil hat at Apple decided to change the device’s mac address every day “for privacy”.
> Second, not every change needs a great commit message. If a change is really minor, I would say minor is an okay commit message!

I want to slightly disagree on this for folks who are early on in career e.g me; I think there is a lot of value in learning to communicate precisely and having a habit of writing good commit message has certainly improved my skills, both verbal and written.

Even though, this activity appears futile for a minor change; it might help to improve other skills :)
Author here. Yes, you can still make money in online Poker. Its not as juicy as it was and rake is very high these days making micro stakes unbeatable. Moreover, highest stakes usually run live and access is gated. The old 2000s dream of grinding from micros to become a high stake player is no longer possible.
Regd. RTA and bots, they have always existed and constantly keep getting better. Its a cat and mouse game between websites and cheaters which will continue

GGPoker's anti fraud detection system: https://www.natural8in.com/security-ecology-agreement

Remember this is the public stuff and they work with professional players to do a lot of behind the scene stuff to ensure a fair game.
Today, I woke up feeling that elixir/phoenix is the best platform for rewrites.

I mean, when you know the problem domain well, you can build a master piece in elixir/phoenix. I still feel that putting together the first prototype has to be faster in ruby on rails.
Web browser as GUI, with your preferred language in the backend
Look up BF2. Cheat tools would just disable limits locally on ammo requests, vehicle requests, artillery strikes, and so on. Server didn't check anything. It had fancy anti-cheat tech. Which was bypassed by just writing and restoring executable memory changes faster than the anti cheat detected.

Things are certainly not always as professional as they appear to be.

Visibility test is definitely feasible against wallhacks, it's not that expensive.

Aimbot is an assist cheat, which technically does not violate the physical rules of the game, so you are right that it's more difficult to detect. One solution to detect this class of cheating is to record the player's movement, and rely on a combination of outlier scores and outlier movement behavior to detect abuse. It's not watertight, but neither are any of these client side anti-cheat detection schemes.
Have now implemented a version of this at https://github.com/michalc/sqlite-memory-vfs/blob/74a24ce567...

I think different to yours in two ways:

- If doesn't go via PENDING if it doesn't need to. Not sure what's best really - but since RESERVED can already be skipped in some cases (recovering from a hot-journal) then so far happy with "skipping is a thing", and PENDING is private to the VFS anyway from what I can tell, so nothing else should care I think

- It doesn't do the blocking in the lock function, but depends on SQLite's core code doing it via the busy handler/timeout
I moved to digital ocean and hetzner

I get some downtime from digital ocean too but I like to have a backup plan in case hetzner has issues (which didn't happen yet)
No it’s not. At least that’s not what anybody in the security community means when they say device bound. Device bound implies the key is cryptographically tied to a piece of unique physical hardware.
It was such a gigantic and obvious screwjob twenty years ago, when we were young and sorta optimistic. God bless the tree that Sonny Bono ran into.

The cartoon had very limited distribution on film, I saw it at a university showing. Disney would distribute Donald Duck and etc but back then all the Mickey material was kept on the shelf for some reason. But then the "Mickey Mouse" law made this notorious.
Companies are full of weird cargo cult like that.

Having a ssalary cap on certain positions, but paying top dollar for external consultants doing the same is very very common.
Felt it a few hours ago about a few hundred kilometers from there. This had the same vibes as the 2011 earthquake (while the 2011 one was much further away) - you could feel it was a very powerful one because it made you feel like you are on a boat for about a minute or so. When a small earthquake strikes closer it's usually short, quick vibrations.
damnit. i though this was about TCP algorithms...
OpenBSD – TSO for em(4) committed to -current
Show HN: Durdraw – a modern ANSI art editor for modern Unix terminals
I've been working on an ANSI art editor off and on for a while. It works like a traditional ANSI text editor, except it supports 256 colors, Unicode and CP437 encoding, frame-based animation, custom UI themes, terminal mouse input, HTML and IRC color output, and runs in Utf-8 terminals.

It's written in Python and curses, and is fairly portable across Unix systems. If you have ever used TheDraw or Aciddraw, the user interface is similar. It can also load/convert, view, edit and save most CP437 (MS-DOS style) ANSI art in a Utf-8 terminal, so you can view ANSI artscene packs in the comfort of your favorite terminal, and even convert them into 256 color Unicode ANSI.

I've been using it for my own ANSI and ASCII art for a number of years, and hope this will help artists work with less restrictions. I think there is a lot of opportunity for ANSI art beyond its dominant 16-color Code Page 437 format. We all have computers with amazing ANSI terminals with modern features. Shouldn't they be the natural home for making text art?

It's still a work in progress, and I'm always adding features. Thanks for checking it out!
It took about 30 minutes for the first wave to hit. So you usually have enough time to escape, as long as you have a way to get out and move away from the risky area.
Author here. There are CFR implementations and even open source implementations of Pluribus. A google search shows me many such implementations.

The tough part is not implementing the bot or replicating the research(Noam Brown mentions in the linked AMA that it just cost couple hundred dollars for its training). The hard part is the infra for cheating. Setting up multiple accounts on the website (bypassing KYC checks) and getting reliable cashouts (poker sites do a ton of AML checks). Its easier to do it in lower stakes but the cost of running the bot will eat up the win rate. On the flip side, the chances of you getting caught are very high when you play high stakes.
> but 10 or 15 years … it’s an immense difference

IIRC there is a huge decrease for the last few percentiles. For males the difference between 50th percentile and 80th is about 2 years, and about 6 years compared to the top 1%.

For women the curve still exists but is a lot less steep.

Interestingly in some more well-off areas like New York City the life expectancy is fro the 10th and 50th percentiles is almost the same and then it start increasing at a much faster pace.
btrfs and zfs at least, probably most frequently used FSs for RAID
(Although his workforce is 100% composed of animals)
That sounds super cool, but to be frank with you, without some details about how you did so or at least some evidence that you have, I don't see how this belongs on HN or what sort of discussion we're meant to have about it. Currently this link drops you into the UI for your product, which is putting the burden of connecting these dots so we can have any kind of discussion about it on the community.
No it's not. Boltzmann Brains are not platonic forms. You need to conjure an entire physical world to contain a Python interpreter to run your 500 lines of code on.
You’re just sea-lioning at this point. Please stop.
Big +1 to this. Much of the programming stuff I've read that's made a big difference to me and my skills and career has been the older "classic" and fundamental stuff. Unless it's directly related to the specific tools you're working with on your current project, and even specific issues with those tools, maybe let it age before you spend time on it.

"1+ year" actually sounds pretty short to me. Maybe 5 or 10 years to see if something has real insight and staying power and you want to spend your time on reading it. For stuff that's like, books or serious papers & essays, and not small news or release-notes or security-update posts. Many of the things I've read the last ~10 years that had lasting value were from the '90s or even '70s. (Though there's often updated editions of them, and AFAICT the new editions are pretty much always better.)

There's a "Somebody's Law" for this that basically goes "for a thing that's currently in use, the older it is, the longer it will probably stay relevant, and vice versa". Can't remember its name or exact wording, but it's basically reflecting that old things still in use have proven their value and flexibility, and are less likely to be just trends, and also have inertia and network effects.
I vaguely remember a quote from someone at Bell Labs explaining that, when they left, one of the hardest things was realising they couldn’t just turn on their home computer and just pick up what they were doing exactly where they had left it at the office anymore.

Sadly haven’t been able to find it.
I'm really thinking that's the feature.

Compile Linux kernel to wasm. So it can run inside a browser with a very nice performance.

Write FS drivers to enable seamless caching and remote data storage, so you can shutdown your system on PC and boot from laptop. Or even some kind of hibernate mode, so you can just continue from where you left off.

Write graphics drivers using WebGPU and other technologies, enabling very nice performance. May be not perfect for AAA games, but for anything less demanding it'll work.

So basically make a proper Linux port for browser and then reuse all the applications already built.
For a summary line, I don’t see big problem with recommending they be kept that short. The git commit docs say this:

> Though not required, it’s a good idea to begin the commit message with a single short (no more than 50 characters) line summarizing the change, followed by a blank line and then a more thorough description.

It’s like the headline of an article, it doesn’t need to tell you everything. That’s the job of the “more thorough description”. And if you omit the summary line, then you’re just writing a description, and the limit no longer applies. It’s not a hard limit anyway.

I’m not sure it has to do with tiny terminal windows so much as encouraging people to be concise. It allows you to skim commits without reading essays, for example.
Well, it's definitely not solved by throwing the problem over the wall and praying that anti-cheat tools aren't broken as easily as your game.
My thoughts usually go out to those living with say an elderly parent that can not walk and may even be without a car. 30 minutes (it can be even less than that, as it was in say 1983 with ~12 minutes [1]) is not much to act on in a case like that. It also emphasises the importance of having your evacuation backpack/gear ready, especially on a cold day like today.

[1]: https://en.wikipedia.org/wiki/1983_Sea_of_Japan_earthquake
You said this to a few people, and you’re not wrong but i also don’t care? This should be an issue we can resolve without really getting into the politics of their belief systems. Secure shipping channels, it’s been the MO of modern economies for a hundred years or more at least.
Operationalizing Microsoft Security Copilot to Reinvent SoC Productivity
> I am also skeptical towards DSLs

What you would suggest instead of DSL?

SQL is a DSL for data manipulation and I like it more than non-DSL code (ORM frameworks). Puppet language is a DSL and and I prefer it to Ansible (and alike) Yaml files (yaml is OK for small projects but hard and tedious to maintain for large ones).
I’d challenge you to live life without a government ID, and without giving your phone number to any “public service”. I’m sure we could be more private than we are, but you aren’t going to get far without your permanent ID.
I'd love to hear some of your stories about marketing it!

I create nocode plugins on a specific proprietary stalled platform, for a living, for a few years now, so I am definitely aware of the pitfalls in the area.

For me the problem is that the API to it got created in a nice format but then got abandoned, if they just listened over the years and added the changes we third party devs needed it would have been great.
> Your position is both unrealistic and untenable. Medicine and science would literally grind to a halt.

Medicine and Science would grind to a halt if we try to replicate things? Did I read this correctly?

If you don't do replication, you are not doing Science, period.
Didn't work very well for dinosaurs.
Only the steamboat Willie version, the one without gloves .

Also practically it doesn’t matter whether it could be fine, most businesses can’t afford to fight an extended legal battle with Disney
I am waiting to run our dinosaur b2b java swing app in wasm in the browser. It is an app that has multiple windows inside the main window with JInternalFrames, haha. Awesome. I hope clients will see that as an awesome feature in the browser, not they all want somehow b2b and instagram-like trendiness.
You never saw it go differently but it must be in many organisation.

I can't imagine you can sustain the technical excellence over decades in places like Nvidia, Apple, Nintendo, ... without having a very robust process of protecting high-performance deeply technical people from wider organisational politics.
This hits waaaaaay too close to home.
the screenshots looks super cool! the video doesnt play on ios safari. gonna signup when i get to my desktop. but this is supercool! i really thought character consistency problem wouldn't be solve in the near future
Great animations.
TheDraw was one of the few pieces of 1990s shareware i purchased, and i have fond memories of it, but i feel compelled to ask: what use is that sort of thing nowadays? Back then we used them to make animations for dial-up BBSes, but the internet has long since obsoleted that. :-?
Ask HN: What are you working on this year?
Dropbox is a worthless idea (long term) because it's not running on my own server. :')

And exactly. You cannot detect that with client-side anti-cheat nonsense either. Record on the HDMI and output a fake USB mouse, why not? Botting doesn't break the physical rules of the game, so you're right that it's hard to detect. One "solution" is to record player movement on the server and detect outliers in behavior and scores. Not perfect (and also very difficult), but just as unreliable as client-side anti cheat nonsense.
My point is it’s not cheaper it’s more expensive, at precisely the wrong time. Sure shipping costs might be a small fraction of the costs of goods…but…unless it’s <= 2% that ain’t helping inflation so let’s do something about it.

TLDR: it’s more than 2%, the average value of a shipping container is 50k, it costs 3k to mover. This is an issue, let’s resolve it.

https://porteconomicsmanagement.org/pemp/contents/part1/mari...
Is Mickey content good enough that we'll see continued interest? My encounters with Mickey (35 year old American) have been only through the movie Fantasia and I know he is a prominent mascot of Disney World. But the pull to Disney world is probably what, Star Wars or Pixar these days? I was recently thinking Star Wars and the Friends TV series could reach that permanent status. Mickey seems unlikely to me.
AI super resolution can do text with no issues, it "only" "fills in" the missing pixels so the overall shape of things is the same, just smoother.
Disney's workforce is 100% composed of animals, too.