skysight-inc/HackerNews huggingface dataset:
I was curious too so I took a look. I think this is the relevant bit:

Recent work [94] shows that “lazy promotion” and “quick demotion” are two important properties of efficient cache eviction algorithms.

[...]

Quick demotion removes most objects quickly after they are inserted. Many previous works have discussed this idea in the context of evicting pages from a scan [16,60,67,70,75,77]. Recent work also shows that not only storage workloads but web cache workloads also benefit from quick demotion [94] because object popularity follows a power-law distribution, and many objects are unpopular.

[...]

[94] Juncheng Yang, Ziyue Qiu, Yazhuo Zhang, Yao Yue, and K. V. Rashmi. FIFO can be better than LRU: the power of lazy promotion and quick demotion. In The 19th Workshop on Hot Topics in Operating Systems (HotOS 23), 2023.
If I remember anything from my high school social studies class, the reason was the ability to spread investment risk across multiple investors while also shielding the investors and employees from some personal legal liability. I think I even remember that companies/corporations predate stock exchanges.
I don't understand why they name projects after something that has nothing to do with the project. What do they hope to achieve when someone goes to search for Thorium in a search engine?
It used to annoy me but then I realised it's largely meaningless.

Nobody who really cares is reading the generic press release; if the performance of Xerox is strongly relevant to your interests then you have better sources of information.

The presser is just something for the comics to reprint verbatim, the more meaningless it is the better because that prevents it being in any way legally actionable.
Retrieval Augmented Generation for New Orleans City Council Transparency
Had cool sounds too.
Is Rolling Back the Inheritance Tax Break Making the Housing Crisis Worse in SF?
They offer "subreddits nearby" so that would suggest ip-based geolocation.
This is like a home security provider blaming the victims of a break-in for not changing their locks every 6 months. Just take the L and own up to it, 23andme.
Location: Europe

Remote: Yes

Willing to relocate: No

Technologies: Golang, Python, Flask, FastAPI, SQLAlchemy, Alembic, Kubernetes, Docker, PostgreSQL, Redis, AWS, GCP, CI/CD, AWS Lambda.

* CV: https://shorturl.at/himRT

* GitHub: https://github.com/shaked8634

* LinkedIn: https://www.linkedin.com/in/ozt-3890324

* Email: devforhire34@pm.me

Hello, I am a versatile Software Engineer with more than 10 years of experience (Backend, Desktop...), ranging from developing small tools to full SaaS products. My expertise includes Backend Engineering, Cloud Solutions, DevOps, Maintenance, as well as code refactoring and migrations.
Of course solar farms don’t produce the food we require, which leads to mass starvation, which I guess ends up being good for the ecosystem eventually - but the wars and damage caused before then wouldn’t be.

Or we could go for less economically efficient methods, which would mean more expensive food.
I bet this is ChatGPT style
Yeah, I used to not have an autoformatter, and still occasionally I'm working in an environment without access to one. I don't get how this example is clearer than a multi-line if, or perhaps a ternary operator (idk if lua has that).
That isn’t what they do though. Defcon 30 shared what an actual Darknet user did.

https://youtu.be/01oeaBb85Xc?si=6vFztCVsbMKWByVD
Yes took a bit of fiddling but that does work thanks.
They shared their info with a compromised account. If you didn’t share your DNA matches with the other person, you would have nothing to worry about.
Yesterday I discovered fortune(1) and in turn display-dhammapada(1).

I'm tempted to set up a cron job and receive daily emails.

Were you just doing shuf(1) on a text file of Bible quotes?
The fact that you have a relatively cheap, small and efficient device in your home that reaches that temperature is what makes -9F significant.
> The response was that if access to %Appdata% is completely blocked Windows won't work anymore.

Yikes. I really wish that instead of Microsoft wasting resources on telemetry nonsense, they would focus on optimizing their OS and modernizing some of these blatant security issues.

I guess it wont happen until we have another wave of ransomware malware or something of the sort.
I'm not sure I see your point unless you're saying that opting into a feature a site offers also means they are taking on implicit risk of that feature causing a data breach through no fault of their own? Again how is that their problem and not the website's?
Show HN: Ambiphone, no-nonsense ambient music and white noise
I built this free, no-nonsense white noise app. I know there are plenty of them out there already, but I wanted to make something beautiful and easy-to-use, without logins or ads or in-app purchases or any of the other stuff a lot of them have.

I appeared on The Economist's The Intelligence podcast [0] this week talking about Ambiphone and another ambient music project, Ambient ScotRail Beats [1] - I'm on at about 17:30

There's a big selection of music and sounds already but I'm always adding more - if there's anything you'd like to see added, let me know!

[0] https://www.economist.com/podcasts/2024/01/01/why-2024-could...

[1] https://matteason.co.uk/scotbeats
We have small quantum computers, we don't have big ones.

We have fusion power on small scale, we don't have it on commercial scale.

Seems to be the same argument.
If you start saying that more, a bunch of games top investors will feel a need to jump onboard.
> the stop "bar" on the way to the runway should have been flashing brightly

They were out of service:

https://www.reuters.com/world/asia-pacific/police-probe-poss...
The (boot)ROM is on-die, within the CPU, there's no way to replace it.

You can potentially replace the OS image (confusingly, often referred to as a "ROM") on the flash storage, but unless the bootloader agrees to boot it (either due to it being signed correctly, or due to the bootloader being unlocked) you're SOL.
what is it about this mostly-text page that Firefox is struggling so hard with?
Quite true. That’s one of the reasons that having to continue to support it for so long was so horrible. If it behaved nicely even if it had been stagnant it would’ve been quite as bad.

I guess I’m sort of assuming that if they kept new releases coming those bugs would’ve been fixed anyway in time. Which is certainly not a safe assumption.
> Probably just public relations.

https://www.npr.org/2019/03/18/700877189/japan-is-betting-bi...

https://www.csis.org/analysis/japans-hydrogen-industrial-str...

https://ieefa.org/resources/japans-bet-hydrogen-still-unwave...

---

There's a general attempt to make a hydrogen economy on Japan... which might work given the island... but also might fail, given that it's an island and thus low demand outside of Japan. https://en.wikipedia.org/wiki/Galápagos_syndrome
The company Galois notably supports this sort of arrangement (you pick your hours and your pay is scaled accordingly). I think their corporate structure could be applied more widely.
Feel free to reach out to the email above, I think it's one of the most interesting jobs I could have gotten coming out of a postdoc due to the mix of physics and real world, technically interesting problem solving.
https://archive.is/YGg6Q

and the website of the documentary: https://www.notablefeatures.com/the-puzzle-palace
OpenBSD is implementing Wayland if you like it instead of Xenocara.

Again, in which way it's any GNU/Linux distro better then?

See: https://www.openbsd.org/papers/eurobsdcon2023-matthieu-wayla...
I wonder how many great, slightly insecure apps are floating around the ether in TestFlight/HockeyApp/Android Beta
Previous discussion: https://news.ycombinator.com/item?id=38841080
Wow I've had my terminals open with fortune | cowsay for years but somehow had no idea that there were different cows.

Should anyone also happen to be interested in taking a quick glance at everything installed by default:

cowsay -l | tail -n +2 | sed 's/ /\n/g' | xargs -i% bash -c 'echo %; fortune -s | cowsay -f %; printf "\n\n\n"'

edit: I like the novelty, I'm going to try out having a random "cow" saying my fortune greeting:

fortune -s | cowsay -f $(cowsay -l | tail -n +2 | sed 's/ /\n/g' | shuf | head -n 1)
The Newest Sports Prodigy Is a 16-Year-Old Who Lives on Kebabs and Orange Soda
I usually negotiate my contracts to be 20-30 hours per week of work. This gives me ample time to work on side projects (aka playing ck3) and run my Etsy shop.

The soft skills aren't much, you have to remember your boss is also just as social awkward as you, because, they are usually cut from the same software developer cloth. But remaining on good terms with past managers helps a lot. I still have annual dinners with almost everyone I've ever worked with, even if we are all scattered across the US.
> On one hand, I have to somewhat agree with 23andMe here. If someone uses the password "password1" for some service, they should not be able to turn around and blame that service when their account is compromised.

I call BS. If the service thinks the user's password is acceptable to perform authentication, how should a user know they are actually wrong about that?

Either it is flawed, and therefore the service's job to catch, or it is acceptable. But the service doesn't get to say afterwards "haha, that was really dumb of you, you should have used a stronger password".
While this article has the right message, there are some things that stand out as odd

> If you’re over 30 (or even in your 20s and able to afford it), hire a personal trainer to start. They can check your form and avoid any kind of injuries. With weights, it is really easy to get a bad form, no matter how many youtube videos you watch. I went to see a Physiotherapist 4 years after I started squats, and this is the best thing I’ve ever done. She retaught me everything I think I knew about squatting.

This seems to suggest that "bad form" (which has no clear definition) would be a reliable source of injury, which it isn't. People like to harp on this because they've had a bad experience, but it's not a scientific fact that you have to move in some particular way to avoid injury. Don't let the absence of a personal trainer stop you from investing in your health.

> But excessive cardio is counterproductive, leading to loss of muscle mass and potential joint issues.

Such an incredible claim would need substantial evidence. As long as we are not talking about extreme exercise volumes, I call bullshit on this one.

---

I see a lot of in humble opinion uninformed comments in this thread. I believe the hackers here might be interested in barbell medicine [1], they have a podcast [2] that has way more info than one might ever want on health and training-related topics. I also feel it's a great innoculator against bullshit, which feels to be the majority of content about fitness these days.

1. https://www.barbellmedicine.com/articles/

2. https://open.spotify.com/show/3orDJTthUjwYdSPTSKuyZP
I felt so bad for them. They worked hard and made a really good engine. They got out the door, started to see usage, and were then told by management one day “never mind we don’t care”.
That’s not at all what it’s like. This is like using the same PIN for your work lock and home lock and then blaming the lock maker when thieves from work got into your house because they found your address in the stuff they stole from your work.
this material is very similar to lk99, nobody would be studying it if not for the lk99 hubbub
The PostgreSQL pg_restore utility is used to restore a point-in-time database backup, also known as a database snapshot created by the pg_dump utility. In this guide, we will dive into how pg_restore works and the different ways it can be used, depending on your needs.
I think they reference two different things

The first statement means you don't need a compiler (or larger build system) to use the library. With React/Vue/etc you need at least something like Babel (but usually also needs a bundler); which has become common lately in the web dev ecosystem. This is all just vanilla JS (or TS) you write; no need to transform JSX or some else.

I assume the second statement means there's not a lot of added type checking time burden for using the library, if you do decide to use TypeScript in your project (but don't have to). Not sure what this means specifically, but I might be something along the lines of it relying on simpler types or eager `any`s in internal types to short-circuit resolving/checking types.
If the passwords are leaked after the user creates their account with your service, you can't go back and re-check their password against HIBP (unless you're inexplicably storing your passwords as plain text or SHA-1). Using HIBP is a partial solution, but not sufficient to prevent a leak like this.

Mandatory 2FA is sufficient, but not very user-friendly.
They don't need to force anything, they could just negotiate a favorable license cost, and make sure people aren't getting mediocre versions of Windows after spending over a thousand dollars on a Windows machine. I'm definitely going to be buying System76 for my next desktop.
What is New in Photon OS 5
Bad analogy. The issue was passwords used on multiple sites. Nothing to do with rotation.
I can see this learning exercise applying to other things, only it takes a lot of time and commitment. So far I've also learned a lot on other projects that I was able to carry out more fully. But everyone has their thing.
Location: Dallas, TX

Remote: Yes

Willing to relocate: No

Technologies: Python (Django), AWS (EC2, ECS, ALB, Lambda, DynamoDB, S3, CloudFormation, IAM, SQS, SNS, StepFunction & many more), Docker, Docker Compose, Redis, ElasticSearch, Postgres, MongoDB, GraphQL, Bash, Flutter, Riverpod

Résumé/CV: Please message or email me

Email: mradamjramirez at gmail.com

---

With around 12 years in tech coding & managing, I'm your hands-on tech leader, specializing in infrastructure and backend development. I've steered teams through startup hustle, growth vibes, and even the occasional merger chaos. Actively involved in crafting systems from the architecture to the coding. Open to management or hands-on coding roles (backend, DevOps, Infra, Platform, etc.)
You can print hardcover on demand too these days.
Show HN: Get a PostgreSQL instance, 100% free, forever
What's wrong with that statement? Other than it was spoken by a demon.
ha yeah totally. things are out of whack. i did misspeak when i said "never" because there have been times when I have learned some of those algorithms for an upcoming job interview, which i always failed to get if they required that.

i generally get jobs through people I know. going back to about 2009 every FT job I've gotten has been through that way, 3 or 4 jobs. So not much in the way of technical interviews, just kind of "we know you, welcome aboard."
Wikipedia. Most authors in the western cannon are descendants of aristocracy.
Without using a vault, people end up re-using passwords or using weak passwords, which is IMO worse.
Did it get very big? I know it obviously never challenged Chrome but did it ever get up to like 10% before the switch?

Even if it didn’t it was an independent browser that could have been a competitor until they gave that up.
I think 23AndMe could perhaps have done better in detecting this sooner – "perhaps" because with a sufficiently large botnet that's not so easy to detect quickly and details are not available AFAIK.

But other that that, I ... kind of agree with 23AndMe: users should be primarily responsible for their own accounts. I don't like the "assume all users are blubbering morons and treat them as such" security model, and then blame $corp for treating their users as adults. Again, 23AndMe could have done better, maybe, but I strongly disagree that they're primarily responsible – at best they're partly responsible.

And maybe 23AndMe also could/should have pushed 2FA harder, I don't have an account so don't know how hidden this feature was or not. All I know is that mandatory 2FA is a right pain for me, adds basically no security for me because I just store it in my password manager next to the password. For TOTP it's just an inconvenience, but I really dislike phone-number based 2FA – I've been locked out so many times...
The first thing that popped in my head seeing this post was the Christmas Dunkin Donuts commercial about ties.

The guy would keep opening up the present year after year and it was another tie.

It seems like the same thing with frameworks and now this library.
That's a myth. Most Linux contributions come from paid employees from various companies not unpaid volunteers.
Got fired in April. Basically lost my mind after private equity turned our company into a sweatshop. Told my manager I didn’t want to work on a project anymore (albeit in a colorful fashion) after they pressured me to work while I was sick with COVID. They claimed I was refusing to work despite me actively working on it.

Got a job at a startup a few months later. Hate working here, but I’d like to own a house in the coming years. Can’t wait to leave.

FWIW I originally rejected their offer, for the reasons I now wish to leave.

I need a break :(
How does something leak on Tor?
It's hard to detect credential stuffing. If people reuse passwords[1] they are going to have a bad time. Maybe they could have automatically locked accounts that appear in compromises, and while they should do that, I wouldn't go so far as saying they must do that.

Maybe they could have detected the exfiltration, but maybe they couldn't. If the hackers were smart they would have properly distributed the calls and rate limited to avoid detection.

>effective access to 6.9 million accounts

The relatives feature lets you -- if you opt in -- see your DNA relatives and their very basic details, and vice versa. I have literal thousands listed, and those thousands, all over the globe and of mostly minuscule relations, can see mine. That really is being a bit overwrought as a facet of this.
Problem is using multiple browsers, or when a privacy-conscious user decides to delete internet history.
TS tried, and I didn't like the end result.
Anthropologist finds South American cultures quickly adopted horses
These are subreddets based off reality tv, which I do not watch.
That is true. Crypto is not faster/cheaper because of a technological breakthrough. The reason crypto can be faster/cheaper is because it cuts out the middleman. The traditional financial system is full of incumbents and middlemen who take a cut of every transaction. Crypto rebuilds the financial system from the ground up and removes ALL middlemen. Instead of verifying the legitimacy of a transaction using a trusted third party, crypto uses cryptography. The same kind of cryptography used in PGP or encrypted email.

Crypto is a disruptive technology class that many incumbents hate because it literally removes them from their powerful position as a middleman. There are usually at least 3 middlemen in every credit card transaction. [0] Combined, these come to a fee of (on average) 2.24%. [1] There are zero intermediates involved with a crypto transaction. The total fee on Solana (the leading payments blockchain) is less than $0.01 for any amount transfered. A 1 million dollar transfer on Solana costs the same amount of fees as a 10 cent transfer.

> a creative way to evade banking regulations.
Coinbase, the leading US crypto exchange, has been trying to get regulatory clarity for years [2]. Crypto wants regulation, but the SEC refuses to provide it. The SEC would prefer to "regulate by enforcement" [3]. It sounds to me like the SEC is the one trying to avoid having to create banking regulations...

[0] https://www.managementstudyguide.com/intermediaries-to-a-cre...

[1] https://www.fool.com/the-ascent/research/average-credit-card...

[2] https://www.forbes.com/sites/digital-assets/2023/12/15/coinb...

[3] https://www.goodwinlaw.com/en/insights/publications/2023/05/...
Seems that the project is dead. The repository does not receive any commit for two years.
Tim Cook is a pretty good CEO. Satya Nadella has turned Microsoft around from the Ballmer days.
Agreed. Loodio will not cover all sounds but makes it a hundred times better than having a dead silent room, distracts and dampens anything going on inside.
Scientists hail new antibiotic that can kill drug-resistant bacteria
Wayland does not stop a process from manipulating the home directory, doing various things on the network, using a ton of memory, recording what other processes exist etc. Once you add all that stuff you start to get something that looks a lot like containers.
This has always been his magnum opus.

Sounds neutral to the layman while legitimizing the "brushing under the rug" of all the sins possible without severe legal recourse. Then promptly followed by some hand waving that really puts the you-know-what in fiduciary, Mr. Potter.
> I want to say they both aren't exactly the same, as I noticed through some responses to same questions by each, but I am interested in a detailed analysis if anyone has done that.

That is very well possible and can be due to one of the many parameters of the LLM being different, like the temperature for instance.
There was a policy in the early part of the 20th century to establish a green belt of preserved space around London.

This didn’t stop people from sprawling ever further, they just skipped over the green belt.
While there may be less demand for books, I am less sure of the corollary that there is less reading. I remember when Harry Potter was having its hey day, and the Amazon Kindle was first announced, there were stats showing that worldwide reading blipped up.

I suspect folks these days read faster, and read more words, than people past. Except it might be content like Hackernews, YouTube comments, X/Twitter and other doom scrollers, that make that up.
I don't think 2FA should be mandatory. Leave that decision to me, the user.
If you read the article, it discusses how the initial breach was due to users using same password for 23 as on other sites. It’s really very difficult to guard against that, no?
As mentioned in the article, a few mitigations could have been applied to mitigate, though not eliminate. None of these are perfect, nay sayers will pop up lamenting "it wouldnt work" but the point is it would help.

1. Fraud detection on the metadata like IP address, access timing, access patterns etc. eg: Why is a person from UK logging in from China IP?

2. IMO orgs should be importing and refusing known leaked credentials and the top 1000 passwords. This could happen both at password set time ("You cannot use that password as it's a known leaked credential, click here for more info about the breach"), or at login time "You're using a leaked credential, please follow the password reset flow".
I've advertised on Reedsy and gotten an excellent illustrator. It costs. You can query "Albert Cory" on Amazon and judge for yourself.

All the designs I got on 99Designs were crap.
Because the breach wasn’t on 23andMe. It was on another site.

The only way you’d be affected by this is if you used the same password on multiple sites (where one of those sites actually had a breach) or if you shared your DNA profile (since it is opt-in) with someone that reused passwords. In the latter case, only the info you shared with that person would be accessible to someone using a compromised account.

In other words, if you shared your info with someone you didn’t know and didn’t trust, your info can be used by bad actors.
in practice MS will just keep injecting new ones in new ways and you're stuck wasting your time in a never ending battle against a user-hostile OS.

Microsoft has decided to use their OS to collect people's personal information and use it against them as a ad platform and no amount of registry edits or setting changes will make that untrue.
I implemented one in R this year and feed it with religious content. Then I text to speech output and post it on youtube. https://youtube.com/playlist?list=PLEB5tND7siCOe7ySYjVOBwR2v...