skysight-inc/HackerNews huggingface dataset:
I'll say it again: why does each language need its own package manager? Why not generalize it to delivering files from various online sources, with a thin layer of glue for module loading that is language-specific.
Ask HN: Design in an early stage consumer tech startup?
Hi, we are working on a consumer tech company (pre-seed; just starting out) in a team where no one has experience in design (think UI, figmas, product design). I am wondering how should we think about the design of our website. Are there any handbooks/blogs/good practices?

Specifically,

1. Are there any starting templates that we can use out of the box for our website? We see indie products with clean design (nothing over the top, but it does the job), and we're wondering if there is a repository that we are unaware of.

2. We aren't sure of the best practices for writing frontend code and how it communicates with the "designers". Are there any standard frontend code repositories that I should look at?

3. What is the advice on hiring for design vs agency work vs "just do it yourself"?

P.S.: We are at a stage where our customers like the idea, and now we are building features and testing further. A lot of the times, we now find it hard to isolate the "product" from the design issues.

Thank you!
Almost every time anyone mentions DNSSEC here on HN, you pop up like a jack-in-the-box to claim that nobody is using it and that it is dead. And it’s always you, nobody else. Whereas, from where I sit, I work at a registry and DNS server host (among other things) where about 40% of all our domains have DNSSEC (and that number is constantly climbing). Every conference I go to, and in every webinar, people seemingly always talk about DNSSEC and how usage is increasing.

You might have some valid criticism about the cryptography; I would not be able to judge that (except when you are basing it on wildly outdated information). I’m not an expert on the details; you could most assuredly argue circles around me when it comes to the cryptography, and possibly about the DNSSEC protocol details as well. But, from my perspective, your continuous claim that “nobody uses” DNSSEC is simply false. DNSSEC works, usage of DNSSEC is steadily increasing, and new protocols (like DANE) are starting to make use of DNSSEC for its features. Conversely, I only relatively rarely hear anything about MTA-STS.

(Repost of a two year old comment of mine: <https://news.ycombinator.com/item?id=27837530>, but the details given have not changed substantially.)
Because industrial grade encryption isn't for us plebs, comrade, but for the various ~government bureaus~ megacorps who deserve security.

But not you.
There's pistons and presses in there somewhere as well.
Maybe I'm misunderstanding here, but it sounds like he's claiming they invented "interfaces". The Go interfaces seem like the same thing as a Haskell typeclass which predates them by a long shot. Either way a great invention that should be in more languages.
Fortunately, Java has virtual threads now, with structured concurrency in the works, making it superior to golang's approach.
I work at smallstep.

Not sure about the RADIUS server, but connections to the CA use TLS for SCEP and/or ACME DA so the CA root cert needs to be trusted for TLS. There may be some way to configure more narrow trust for just this one interaction, but I'm not aware of any such mechanism in the current releases of macOS/iOS/iPadOS/tvOS.
Here is an example. Go let’s structs be passed by value or by reference. The programmer needs to decide, and that adds complexity that is largely irrelevant for modeling complex business logic. Java does not provide a choice, which keeps it simple.
Bright yellow and marketed via emotion “make your statement”.

These are going to end up in a drawer by end of the week.

There is a reason the mixed screen and physical keyboard phones lost. Screens can be keyboards but keyboards can’t be screen.
PyPi, but yes. https://securitylabs.datadoghq.com/articles/guarddog-identif.... The link also mentions that PHP has been attacked in this way.

As has rust. https://blog.rust-lang.org/2022/05/10/malicious-crate-rustde...
Who opens the windows? Do I misunderstand your scenario?

1) User summons Waymo with the app to Point A.

2) User unlocks vehicle with the app at Point A.

3) User opens the hatch and tosses in some cargo.

4) User taps "Start Ride" in the app, and vehicle leaves Point A with no passengers on board.

5) Vehicle arrives at Destination Point B with no passengers.

Who's opening the windows? That's not possible. Not even the app can open windows. They require a human inside the vehicle. App cannot open doors. Requires a human operating handles. I am not sure, but it does not seem like the app can even unlock doors after the initial pickup encounter. There is no unlock option during dropoffs.

The hatch can be opened with a button from outside, and it's motorized. The vehicle can close its own hatch if need be. The vehicle is NOT capable of closing its own doors. The vehicle may be capable of opening its hatch, but this is not an app feature.
> A key point was the use of a plain string to specify the path in an import statement, giving a flexibility that we were correct in believing would be important.

Wrong.

Importing a string is like a touchscreen UI in a car: it's deferring the problem. It's lazy.

> But we didn't have enough experience using a package manager with lots of versions of packages and the very difficult problems trying to resolve the dependency graph.

No one on the team had ever used Java? Really? Maven was ~8 yeras old when Go was released. It came from previous learnings and errors with Ant. Maven did other things too that aren't necessarily relevant or necessary (eg standardized directory structure). But the dependency system was really solid even if it was verbose because it was XML.

> Second, the business of engaging the community to help solve the dependency management problem was well-intentioned

This feels ahistorical. It felt more like the problem wasn't understood and/or thought important. This fits in with the importing a string: it's a way of not solving the problem, of kicking the can down the street.
48% already have access to a charging outlet. You're right that's less than half, but that's pretty dang close to half. I'd say 48% of drivers being able to handle charging right now is mass appeal. I mean that's many millions of cars.

34 percent had private, off-street parking but no access to electric outlet. I wonder what percentage of that 34% could add an electrical outlet for <$1,000. That outlet will last 20+ years, not exactly a big cost over that time frame.

> I can barely get my apartment to follow through with maintenance requests, let alone install an EV charger.

Have you stopped to consider the majority of car owners don't live in apartments?

I'm not telling you to buy an EV today. I'm not saying EVs are a perfect fit for everyone. But they're a fine fit for a huge percentage of drivers today. And for a lot of people these hassles pointed out above are actually bigger hassles with ICE vehicles such as refueling time. It's a much larger market than just rich techies in Palo Alto.
> most of the serial link standards developed in the past ~25 years are basically overclocked Fibre Channel

Fascinating. Do you have a blog post about this?
I'm not sure why you've been downvoted at the time of my commenting; but you've probably upset someone who deserves to be upset. The sheer amount of space that is killed off in many cities to support roads and car parking is insane. If there wasn't that much dead space, walking around would be more than feasible.

Car-centric design sits in competition with pedestrian-centric design, and the bias towards road over-construction has ruined a lot of urban spaces. At the very least, rolling back government involvement in road construction would be helpful.
I guess if you can't make something complicated or push the limits, you just call it "art" or "thought provoker" and spend lots of words talking about an egg timer.
I really wish there was more awareness & coverage of HarmonyOS. From what I can tell, we're almost all ignoring it.

But they seem to have created a very ambitious interesting uniquotous & pervasive computing attempt. And consumer OS have basically barely bugged in a decade everywhere else.
People keep saying this about Japan here on HN, but the one article circulating is a random minister saying she supports AIs training for educational/statistical purposes, not an actual passage of new laws or anything of the sort.

Please do correct me if I'm wrong though
I think CHERI addresses the issue, but I don't know how much of that is in upstream LLVM. Pointer provenance as used for optimization mostly affects the IR-level optimizations, not CodeGen ones.

In any case, Azul's work addresses the GC metadata problem nowadays.
> And a REPL wasn't necessary because Go compiled so quickly you could just write a program and run it (no, that misses the point of a repl, which is that it builds up state and lets you call new functions with that built-up state).

He'd have had a point if the go compiler could reliably compile programs in faster than 50-100ms. The claims that go is a fast compiler always seem to be relative to c++ or something. Last time I checked just compiling hello world took over 200ms which was shocking to me given how I'd heard that one of the language's claims to fame was a fast compiler.
Sure, but people below the poverty line qualify for housing vouchers, food stamps, utility vouchers, public transportation vouchers, taxpayer-provided cellular phones & cellular service, and more.
Terrible example to prove a point. 25 year old BMWs are way more reliable than 25 year old Ladas except you don't see many of the old BMWs around because their wealthy owner upgraded and you see a lot of Ladas because their empoverished owners can't afford anything new so they do what they can to keep them running but that's more survivorship bias of Communist cars which had terrible reliability, hell, most had issues straight out of the factory.
Why do you believe the registers shouldn't exist rather than them being undocumented/test registers?

Having worked in the semiconductor industry, this is pretty common.

I cannot even begin to imagine how anyone could insert registers into a chip. First of all, the chip is made by TSMC and it's not like Apple give them their HDL files. TSMC will just get a GDS file which is basically just a file with a bunch of polygons defined. I would go as far as to say that it's impossible to do it at that level given the complexity of chips nowadays.
You would have liked fortress.
Show HN: Open-source alternative to Visual React Editors
But also see previous discussion of these remarks on HN:

https://news.ycombinator.com/item?id=27938122
Congressional Black Caucus Asks EEOC for Workforce Data Tech Promised to Provide
Hiring directly is a lot of work, especially in domains that you don't have expertise. The article cited workers helping to train Bard- this task is nothing like hiring Software Engineers, you know it won't last forever, and it will never be a strategic core competency to build up at your company.

So, you sub out the work to another company that has more focus on sourcing employees and keeping enough hired/productive so you can focus on developing the algorithms instead of those managerial tasks. This model is extremely common in all industries that aren't 100% vertically integrated. The only difference is that in the physical world it's easier to point to products being sold than in this knowledge work where the deliverables aren't as concrete.

In the end, these moves by a small group of people just ends up ruining the perks for the rest of the contractors. The current argument of "We work in the same office, drink the same coffee, eat the same food, and work on the same projects" has one very obvious remedy, which is to take away those perks.
Ford mocked people, saying (paraphrased) "If I asked what people wanted, they'd say faster horses."

Enter self driving cars (faster horses).
Think back pay with treble damages for every employee expensive.
I wasn't asking you personally to take over.

Nothing about the situation you described is any different in the status quo.
ML is from the 70's and Go doesn't have sum types with exhaustive matching. It has iota which is sugar for .. number constants lol.
What you're advocating is essentially the way Javascript originally worked, with the web itself serving as the "package manager." but one day someone decided Javascript needed to be a serious business language for serious business, and serious business languages use compilers and toolchains and have a package manager. And so here we are.
I don't want anything in my Rust dependency tree depending on node packages.

By being hermetically sealed, the community can make progress on testing, repeatability, and lots of things that would become incredibly difficult if you introduced anything else into the mix.

Moreover, each language gets to innovate in its own way. Cargo is fantastic and fits the needs of Rust quite well. Custom builds, cross compiling, codegen, ...
Why not just set up multiple SSIDs then? The devices connected to different SSIDs belong to different VLANs. Then you don't have to consider MAC spoofing or even deploy EAP-TLS: just give different devices a different password.

I'm sure there are simpler ways to deal with the use case in mind, but I think this article just wants to have fun with NSA-grade WiFi.
Hello, an absolute pleasure sir! Great work on rqlite.
Thank you very much.

I never liked the idea of having any database storing my data in a way which can be seen in plain sight regardless of permissions and so forth. Servers get broken into very often and protecting the data within the files is important to me.

I've created another tool called qenc that may help the at rest problem if someone has a problem with it. qenc.org

With a CursusDB node on signal or automatic backup the system will encrypt and compress block by block. Using ChaCha and DEFLATE just to put that out there, it's pretty cool stuff!
The fact that people don't realize these rights were given to us in literal blood is also scary.
Is the concern the idea that as FPGA fabric is included in more devices, some hypervisor escape is going to present this as additional attack surface?

Otherwise if it's configfs you're root on the system and unless it's integrated peripherals you plan to attack you probably have finer grained hardware context to imply physical access... which seems to minimize the farther reaching, generalizable concerns?
Does this do any analysis of the sample files themselves or just auto tagging and searching based on the sample file name?

Is it using a local LLM or ChatGPT?
From Heinlein's Waldo & Magic Inc, a fun and worthwhile read (and audiobook)
Big Data and Beyond: My predictions for 2024
Was #3 the highest pay and least amount of work? If yes, I select #3.
> ADS-B data is broadcast every half-second on a 1090MHz, digital data link.

For more than a decade I worked airborne geophysical surveying - hundred thousand to a million+ line kilometre grid draping at 80m ground clearance on routes planned in advance.

The planes ran stable known instrument configurations and were calibrated weekly to measure their individual magnetic and radiometric signature.

Aircraft positioning signals on long haul flights Australia -> India -> Fiji -> Mali weren't an issue.

Extraneous non required signalling during grid surveying was an issue.

A reasonable comprimise was to blip a quick position fix at the end of every fourth or fifth 20 kilometre line run (say) ... otherwise no broadcasts during instrument recording times .. and glow in the dark divers watches for the pilots or random chunks of metal casing there one day and gone the next.
> I can’t get over how long it took Apple to adopt the same charging mechanism.

I knew somebody with a Pre and he had to have it replaced two or three times because the charging mechanism kept breaking. It’s fairly common that somebody else will do something “first” but Apple will wait until the technology is mature enough to be reliable.
Most people outside of the US.
Errors are things that can fail after the program is written (hard drive crash, network failure, etc.).

Exceptions are things that were already broken when you wrote the code (null pointer access, index out of bounds, etc.)

To put it another way, exceptions are failures that a sufficiently smart compiler would have been able to catch at compile time. Of course, creating a compiler that smart is a monumental task, so we accept catching some programmer mistakes at runtime as a reasonable tradeoff.
Moving forward, GNU coreutils 9.0, released September 2021, automatically uses reflinks when available. I still have several Ubuntu 20.04 systems that don't have that though, so your way is necessary for a bit.
Simply because they had a stockpile of 29 million doses they were sitting on in early April that wasn't actually making it to people with pre-covid problems it was used to treat. By June this was up to 63 million doses. I'm looking for a source that isn't a video.

[0]: https://roundingtheearth.substack.com/p/the-chloroquine-wars...
Are the suppliers of windshield wipers effectively employees of car companies?
Counting makes it not so effective for me, but so do timers. I tend to just meditate however long feels right from 5-45 minutes.
They're not google employees in name only. They work on google equipment, have google badges, and go into google offices. If google doesn't like them, they're fired. Google controls every aspect of their work. These employees aren't allowed to seek other customers either.

This is a purely a scheme by google to get away from having to hire full time employees but abusing the contractor system that was meant for actual consulting, not employees-for-rent.
Isn't coordination between APs something that Ubiquiti APs already do?
It’s useful if you want a more creative output. Good for brainstorming, thinking out loud, and refining ideas.
1) Travel to Argentina (or try with a VPN? :) )

2) Open https://nordvpn.com/blog/binary-memory-protection-measures-o... in Chrome (Win11-64bits) (I get the same problem with Edge.)

3) I get an error ERR_TOO_MANY_REDIRECTS and the URL at the top says https://nordvpn.com/es-/es-/es-/es-/es-/es-/es-/es-/es-/es-/...
Also, the suggestions seem to be confused by contractions when swiping, defaulting to "didnt" or "doesnt" even when the list of suggestions includes "didn't" or "doesn't".

The lists of suggestions also include a lot of non-English or nonsense words (like “diwn” and “dizoo”), even though I'm using an English dictionary.

The punctuation screen doesn’t include some punctuation available on the Apple keyboard like (parentheses). It would be nice if there was a second screen for less-common punctuation like how the emoji screen works.
That’s my take. I wanted to love it, but found it writes extremely reliably mediocrely. It’s always there and working when I need it, which is great for EDC! I just wouldn’t want to use it for more than a grocery list.
Wait, cublas is slower?? Shouldn't it be faster because it's tuned for the specific hardware?

I know that llama.cpp has custom kernels for quantized matrices, which are fast because using cublas would require an extra memory roundtrip (read -> dequantize -> write; read -> gemm -> write, vs. read -> dequant -> gemm -> write). But if you're using FP16 the dequantization step shouldn't be necessary. So how is it faster?
Misusing contractors to perform the same work as full time employees is a separate allegation. If I recall, Microsoft got in trouble with that. But my understanding is that contractors at Google are pretty clearly separate from the employee base. For instance the contract workforce involved in scanning Google books where housed in separate offices had different badges and more.

Regardless, I'm still not seeing the rationale for why employees of a contracting corporation are supposed to be negotiating directly with customers. My sister worked at Accenture. If she wanted a raised why would she try and negotiate with who her customer she was working with at the time, given that her bosses at Accenture are the ones that set her salary?
MySQL has support for external languages
I work at Smallstep.

In this case you're getting an industrial-grade CA with a properly managed private key, etc. Still, fair. We usually include warnings about this, but looks like we forgot this time. Curse of knowledge. I'll see about getting a warning on there asap.
I wouldn't consider a driver an application
How should they work around covering the camera ?
It lacks modeling capability that you'd find even in languages like Java and C#. Enums, records, pattern matching, switch expressions, and yes even inheritance where it makes sense.
React is fine. It can be abused just like anything else. This post brings nothing to the table.
I recall being taught that cowbirds, a brood parasite (they lay their eggs in other bird's nests), were causing more problems for other birds because they stay out of the deep forests, but roads and farm fields were fragmenting the forests.
Consider current phone form factors. My phone has a 21:9 form factor. I rarely need the lowest third or so and would happily trade it for a physical keyboard.
I fail to see what is wrong with the design. The volume snapshotting is the only way to solve the unsolvable problem of «undeleting» a file in a UNIX file system, after all, and the simplified backup management is the end game here.

Volume snapshotting via checkpointing along with the copy-on-write has been used in UNIX file systems for a very long time and successfully, starting from Veritas VxFS. It is also used in ZFS, in btrfs, bcachefs et al and in some form in the log-structured file systems.

If the default volume snapshot reclamation policy does not work for you, «tmutil» provides a number of controls to fine-tune the behaviour:

1. Disable the snapshotting in perpetuity via «tmutil disable».

2. Exclude select directories from snaphots via «tmutil addexclusion directory1 directory2 directory3»

3. Adjust the quota on how much of the disk space to allot to the snapshosts/backups via «tmutil setquota»

All of the above are one-off commands that, once run, have a permanent to a long lasting effect.
The specifics of the case you’re speculating about and calling into question have all been documented, reviewed, and now ruled upon by the NLRB. It’s linked in the article:

https://www.nlrb.gov/case/16-CA-326027

What Google is doing now is appealing the ruling in federal court as an attempt to delay recognition of the union. Companies rarely win these appeals, but they use them as a stalling tactic in an attempt to demoralize and break up the union.
Check if the browser extension is safe to use