skysight-inc/HackerNews huggingface dataset:
This is a case where I do want my woodworking or hobbies in the building, but I probably don't want your woodworking or other noisy/dusty hobbies in the building. Having a basement where I can tinker and a garage where I can do projects and car repairs and having that directly on my property where I can empty the rag bin, turn off the lights, and come back to it tomorrow or four weeks from now is exactly what I wanted (and why I'm not living in a denser part of the city).
Reminds me of how my boss set up a meeting to discuss my future in the company the other day.
That’s not a simple fix in this context. Try making it without slowing down the compiler.

You could try to game the system by combining such a change that slows down compilation with one that compensates for it, though, but I think code reviewers of the time wouldn’t accept that.
Yeah. Sad fact is a lot of this stuff isn't targeting individual devs. It's targeting small-medium sized companies, who are fine buying productivity so they can create more value than they pay.

Maybe a few larger companies as well, because those subscriptions tend to come with support, and larger companies love to throw maintenance to non-employees. But if they cared enough about not having a subscription, they'd make it themselves.
The jokes are writing themselves, aren't they :)
Could probably build this with paid access to Crunchbase data set and LinkedIn headcount. Their roles, when advertised, should have (broadly defined) cash comp depending on state pay transparency laws. Cool idea.

Seriously though, if you're a business like https://simpleclosure.com/ you'd probably use this for prospecting. Recruiters too might pay for such a list to recruit from companies in peril ("motivated talent"). Lots of ways to potentially squeeze some fiat from this idea imho.
The banks who provide the infrastructure for these schemes don't care.

When banks provide services to scammers, all that happens is that money moves from one account to another, it is still within the banking system.
Over 1,743 platforms to promote your product and boost revenue significantly
Do you think google is deactivating people based on HIBP? If not why do you think everyone else should?
oops! https://mint-lang.com/
I experimented with hot-reloadable C++ a while back.
https://github.com/jheruty/hscpp.git

Video for how it works:
https://www.youtube.com/watch?v=pjGngeKgni8

To migrate from one class version to another, I found the easiest way was to provide a callback method in the constructor where one could save the state from the old class, and read it into the new class. For example:
https://github.com/jheruty/hscpp/blob/master/examples/simple...

Ultimately though the limitations of hot-swapping this way limits its usefulness. My understanding is that liveplusplus is much more full-featured.
That's great, to remove 3rd party scripts, but I don't think 800ms vs 400ms is noticeable, especially if the measurement is of full load, and not LCP times.
Yeah, way too many assumptions in that other comment. I know people who moved for lower costs, and it wasn't to act like a king.
The second "we" was all too happy, and still is, to buy cheaper products, even when apprised of the economic consequences. The third beneficiaries are businesses, for whom components and manufacturing are now vastly cheaper, enabling further (taxable) wealth generation that could support the middle-class.

If the US had a sensible culture (and hence democratically driven government policy) behind education, a skilled labor pool could have emerged to develop high-tech manufacturing that leveraged China's low-skill labor pool. Instead, China has 'hid its strength, and bided its time', establishing its own high-skill labor pool and advanced manufacturing capability, giving it substantial leverage over the entire world, without so much as starting a proxy war, usurping foreign lands, assassinating foreign political leaders, etc.

US hegemony is absolutely its own to lose, but it all depends on the culture driving it.
Telemetry and "studies" are both checkboxes in the privacy section of firefox's preferences.

I usually turn both off right after changing the default search engine and disabling search suggestions, when I setup a new install.
Do the math and run the numbers; the roads are usually much cheaper because once built the maintenance is relatively pedestrian.

Whereas the cost of a bus line usually has as a yearly maintenance/labor a significant portion.
How can gradient descent work on compute graphs when the space of compute graphs is discrete?
Does that really cause legal liability, though? The state/federal entity that released them from prison is essentially saying 'okay, we think this person has paid their dues and has a good chance at being a productive member of society.'
What other language you would have chosen?
I actually picked SHA256 for the path-prefix feature in https://jacob.jkrall.net/benfords-law for “NIST compliance.” That is, I didn’t ever want to answer “yes” to a potential customer’s CISO security surveys question like “does your application use any non-NIST-approved hashing functions?”

It’s frankly broken that evidence-handling doesn’t have to follow the government's advice about hash function selection!
A Guide to Backpacking Europe
No just a standard use of the term for academia.
Yogi Berra would love you.
I tend to agree with you, although I'd say most of the tests are pretty "high quality" (for the most part they don't rely on global state and they run in parallel, randomized order). You pretty much perfectly described our current situation. There is a push to crystallize everything down to the last function. It's not uncommon to have one change result in hundreds of test failures.
I’ve written a book, edited the hell out of it, gotten feedback from friends, etc (I think it’s pretty good!)
and have tried reaching out to literary agents (this is what the trad route recommends). So far about 0/20. Any tips here? I’m located in NYC fwiw.
More likely he is excited to cash out.
Xano
Best way is to kill them and not clean up the bodies. They smell like mint usually. Keeps them away
“The future is now: you’re fired.”
> It sounds like you're suggesting that pen testers by default will not reveal discovered vulnerabilities with clients.

How so? Presumably most pen testers are working in good faith. But, if there is a malicious actor in their midst, that individual would not disclose any vulnerabilities they intend to exploit, no. What would be the point? That's just a really good way to get caught.

> Then you talk about "discovered and revealed vulnerabilities".

Yes, that's right. While it is theoretically possible for all your pen testers to be working together maliciously, if you are careful in your employment practices you can make this highly unlikely.

As such, if your data shows that 100% of all known vulnerabilities were independently discovered by multiple testers, then there is reasonable confidence that any malicious actor's failure to disclose a vulnerability will still be reported by someone else.

But if that figure is less than 100%, and especially if it is considerably less than 100%, then there is much more doubt cast on another pen tester in your organization's ability to find the same vulnerability. Here you have a problem.
> A transmitter that actually consumes 100kW of electricity would be a monster.

Before we switched to DTV from analogue, the TV transmitter tower near me was broadcasting FIVE 870kW channels. Admittedly these were between 600-700mhz and I'm not sure if that's ERP or not, but "monster" sized RF transmitters were surprisingly common.
I have heard of hooters being called an american maid cafe in a semi-joking way. I have no idea if japan has actual strip clubs either.
Copy left protects against embrace extend extinguish techniques.

It ensures everyone benefits from improvements, not just users who are willing to pay bigco.
Node's Security Problem
I found out recently Switzerland doesn't use European SIM cards. Had WiFi in the rental, but as soon as we started walking around Luzern we were text message only. The experience was kind of like turning off the TV that's on all the time. Everything got quiet and I became more aware of the people I was with. I guess I can just turn my phone off, or turn data off, but so long as I have to WANT to do it, I wont. And that's maybe as human a conclusion I can draw. Candle light and wood smoke still exist, but unless we're kinda forced towards them, we'll always go towards the bright lights and warmer rooms.
Except the highly visible destruction and violence by its residents leave a lasting impression of what the community is actually composed and capable of at any given moment. The riots just put it on display front and center.

You can just stay indoors when the weather forecast is bad. There's no way to keep all the riff-raff locked inside while your kid walks home from school. In a place like LA, there's a lot of riff-raff. Just because there's no active riot doesn't mean the riff-raff is gone, they're just not all in a frenzy showing their true colors simultaneously. They continue to exist, and continue to be a potential risk, at all times.
My 10 year old daughter did this when I asked her to test it, it's surprisingly not as awful as I thought it would be
I've had excellent results with ant bait containing hydramethylnon. Just placed a couple bait containers in the room I had them; they were gone the next day and it's been almost three years.
I’m sorry this was downvoted because I thought spangry’ comment deserved more praise than just my upvote.
>Second time I called with a question (by this point, I had learned enough to know to ask the question “how do I create a non-root user account?”), they suggested I hop onto their IRC channel and ask the community. I logged on to IRC and … promptly got booted for being logged into my local system as root.

I laughed _hard_ at this. Classic Linux community response.

I struggled a lot too. After RedHat I tried Gentoo, and they had a forum where I got in a lot of arguments, got banned a few times, got other people angry enough that they got themselves banned, etc. But I think its bottom-up approach and the absolute lack of filter on the part of some of the users was good, in a weird way.

I did start using a Mac at, I think, 10.3, and I've stuck with that for desktop use. So yeah, completely with you about the desktop vs. server experience. A couple years back I tried a couple distros out on a work x64 laptop, and still didn't care for the experience.

"How do I get my touchpad to work how I want?" I beseeched the internet, for seemingly hours on end. Far away in the distance, a wolf howled.
hah, thanks for the game. It was definitely an interesting and fun experience.

Unfortunately I've to stop because my obssesive side took over. I practically check the game every hour. I cant sleep because my mind wont stop worrying about chat/trade offers, sudden attack and which planet/tech I need to focus on.

It always popped out in my mind once in a while though. I might try it again to see if I've better control of myself.
That paper uses a nice unit I didn't know of; the 'Jansky' (Jy) ' 'non-SI unit of spectral flux density' https://en.wikipedia.org/wiki/Jansky
Being able to do it client-side eliminates the biggest cost barrier (VM time) and risks (people using your VMs for cryptomining) that you encounter trying to offer real 'labs' for users.
I wonder if the term changed to distinguish it from the classic non-learning types of AI. You'd be hard pressed to justify that machine learning is not AI while expert systems with hand-written rules are.
if everyone was as blanket-critical of early stage SaaS as you we would get a lot less innovation (or at least challengers to keep incumbents honest). someone needs to be discerning of team/product quality, someone needs to take risks to solve pain for their stakeholders. there are good startups that are good partners, there are startups that give a good try and dont make it, and there are plain bad startups. don't throw everyone under the bus
Thanks for the great question, and for checking out the project! This project started out because I noticed some really interesting properties about compiling brainfuck-like programming languages while writing high level language compilers that targeted these brainfuck-like backends.

This is the work that inspired Sage: Harbor (https://github.com/adam-mcdaniel/harbor). My goal with Sage was to take everything that makes a brainfuck-like programming language easy to compile, while also keeping all the time complexity and optimizations of regular algorithms. So, in that sense, it started out as an attempt to design around a Turing machine -- I wanted this to be a dialect of brainfuck. The VM doesn't use any stack operations, just operations on a tape pointer + an accumulator!
Yeah security is always a tradeoff of convenience and control. If I were in your shoes i would have allow listed the IP. either switch to my phone, went to a coffeeshop, or a friends house, or the library, or the gym, or mcDonalds, or Target...
What's frustrating is that the pre-2024 Model 3 and Ys are nearly peak car. Their only faults are all self imposed design decisions.

Using a more traditional cruise control (lane keep, speed keep etc) and breaking out some of the climate controls as physical buttons are basically the only things I'd change.

Otherwise the cars are basically the perfect expression of a "Car". They're smooth, quiet, quick, reasonably comfortable and inexpensive and behave exactly as you'd expect a modern car to behave.

Oh, I suppose their suspension leaves a little to be desired? Nit picking at that point though.
They ran out of runway.
Out of the box is not enough. Debian has a checklist for building a secure system, as well as some helper tools for configuration: https://www.debian.org/doc/manuals/securing-debian-manual/in...
Airplanes don’t need traction, they need lift.
The non-sentence in relation to the number of charges, harm prevention orders and decades of "sex offender" tarring...

That much drama for a sentence the state doesn't consider worth serving stinks of CSAM.
I hope all the people who bought tickets used their hand luggage allowance on a parachute
Yes, Macs do have some worth, though they are harmful.

We should take them away.
Arguably property taxes, being the main way roads are funded in my city, pays for at least part of the access to the parking portion of those roads.
I read through this hoping to have a reasonable discussion of the difference between preimage attacks (see https://en.m.wikipedia.org/wiki/Preimage_attack) and was disappointed when I did not see the topic mentioned once. :(

It is much more computationally feasible to create two inputs from scratch that hash to the same value than to forge an existing documents hash (the threat model I’m assuming they’re discussing in relation to the law).

As far as I know I am not aware of a demonstrated second preimage attack on md5. Not saying to keep using it, just trying to not spread fud.

Edit: I do see second preimage is mentioned about 3/4 of the way through the article. I confess that I did stop reading and started skimming before then.
For an alternative to airplane.dev, you can checkout Windmill.

https://github.com/windmill-labs/windmill

"Open-source developer infrastructure for internal tools (APIs, background jobs, workflows and UIs). Self-hostable alternative to Airplane, Pipedream, Superblocks and a simplified Temporal with autogenerated UIsm and custom UIs to trigger workflows and scripts as internal apps.

Scripts are turned into sharable UIs automatically, and can be composed together into flows or used into richer apps built with low-code. Supported script languages supported are: Python, TypeScript, Go, Bash, SQL, and GraphQL. "

If you search HN, you'll find the creator of Windmill comment on comparisons to airplane.dev:

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
We accept it on the desktop because the desktop app model is from before the internet. There was only 'trusted' applications that had access to all the users data (and really most of the time the entire machine), and really there wasn't even the idea of an internet connection being built in at all. In addition desktop applications are based around the ability to read the users data files. Desktop users typically want all their excel files accessed, along with any embedded images from anywhere in their user directory.

For the most part the changes you'd want to implement for security would ruin the productivity most of the workflows desktop users have these days, and would take a massive amount of refactoring to get to work anywhere close to what they do now.
All hands brace for impact.
Goto the top of the class.
Not the parent commenter, but I would imagine something involving narcotics.
Same here. wow. <3 Anton though, I know when I sit down to watch his vids, it's 8 minutes or pure information, no nonsense, consistent delivery. The man is a national treasure.
The way I look at it is, password vault is a single point of failure with a very VERY tiny attack surface that attacker will need to directly target you with a sniper rifle to actually hit you (assuming you are not using things like Lastpass. I personally use Keepass and synchronize the local vault across devices using Syncthing). Suffice to say, unless your last name is Snowden, it should not be a concern to you.

Comparing to the common way of "managing" password (i.e. reusing one password everywhere), it is still a single point of failure. The difference is the attack surface balloons up in proportion to the number of website you sign up to. And just like a balloon, all it need is one poke, one website storing your password in plaintext to blow it all up.
An eternal lunar library for aliens to discover
worthy takeaways
> As part of this transition, we will unfortunately be sunsetting the Airplane platform on March 1. We’ve closed new signups, and existing users will be receiving an email with further details.

> To all our users and customers: we are sincerely grateful for your interest, support, and feedback over the years. It’s been a pleasure and an honor to learn about, collaborate with, and assist your organizations.

i was/am a fan of the airplane founders but this is so disappointing. what went wrong? no transparency here to the users and customers they are grateful for. no lessons to pass on to others. no reassurances to the rest of the b2b software community, so people default to "startups bad" mentality seen in other hn comments here. to be clear we are not owed any of that, there's always a story that we don't know about. just disappointing but we'll live :)

Also didnt Airtable just layoff 230 people 4 months ago. now they're acquihiring?

Edit: Airtable also speculated to be worth 1-2b now: https://twitter.com/asanwal/status/1703492397739516068?lang=...
Exactly my point, he and Ruth optimize for short term market gains and have literally no vision for the future of the company short of killing adblockers.

Kodak was also doing great, until suddenly they weren’t. My own personal experience of the last year is my search engine use has about halved in favor of GPT, with most of my friends reporting the same.

If Google is ever forced to admit in an earnings call that search volume is down the stock will crater on the spot.
An acqui-hire one year after a $32M round, oof.
Hahaha I doubt there's an English word left!!!
The average passengers per bus-mile in the USA is incredibly depressing.

(It is very hard to have a transit system that handles capacity at load and still provides short enough head times as to not be annoying off-peak.)
I'm one of the macOS folk. I don't think it's status symbol as much as low hassle. For the most part the thing just works, is fast, doesn't crash, doesn't have issues working with certain hardware and software. If you want an OS you don't have to think about I think it's ahead.
A x-platform package mgmt (apt/pacman/flatpak/etc.) wrapper with super powers
Probably a right punition for people thinking that they can be lazy and build their business critical apps on a random startup proprietary and closed source SaaS.

Not to forget again that the cloud is just someone else's computer...
This is perfect. I've tried many noise apps in the past and I'll be using this for a long time I'm sure.

Feature request: Deep-links so I can share or bookmark a 'preset'.
The point of Whitney's array languages is to allow your solutions to be so small that they fit in your head. Key chunks should even fit on one screen. A few years ago, Whitney reportedly started building an OS using these ideas (https://aplwiki.com/wiki/KOS).
The movie Contact makes mention of Jansky - "Reading over a hundred Janskys". Thought it was a made up unit at the time
I suppose they determined the acquired company was just plane redundant.

Or perhaps, they were worried about too much air causing inflation...

(I'll see myself out)
If you could just throw anyone who forged a digital signature in prison, you'd keep using MD5, too.

The reason why people like us keep changing everything for security is specifically because we have no access to justice. Computer crimes are international and difficult to prosecute, so you might as well drop an algorithm like a hot potato if anyone - even just nation state actors - could break it. We build our rules out of code because we do not have access to the material they make laws out of.

That being said, continuing to use MD5 is utterly inexcusable.
Sadly true, even if they phone it in. Maybe we need a 3rd major web engine? I don't know if that's even possible at this point.
It depends. Cloudflare R2 has unlimited free egress; if you’re using a Cloudflare Worker already and proxying the download, then Backblaze B2 becomes cheaper again because egress is free and unlimited.

Here’s my rough pricing notes:

https://gist.github.com/Manouchehri/733e6235457e60de24fdbb15...

One useful trick is if you’re already using a Cloudflare Worker, you can force cache fetches to Backblaze B2 (or any S3 provider). This is allowed by Cloudflare’s ToS as you’re using a Worker.
Fun new deepfake consequence: more convincing crypto scams
Were those the first byte-addressable architectures? If they were you think they'd have had a bigger influence.
Wirth ran an OS research lab. For that, the compiler likely is a fairly typical workload.

But yes, it wouldn’t work well in a general context. For example, auto-vectorization likely doesn’t speed up a compiler much at all, while adding the code to detect where it’s possible will slow it down.

So, that feature never can be added.

On the other hand, may lead to better designs. If, instead, you add language features that make it easier for programmers to write vectorized code, that might end up being easier for programmers. They would have to write more code, but they also would have to guess less whether their code would end up being vectorized.
An assault charge is likely relevant for most positions.

If I hire a convicted felon with a track record of assault and they end up assaulting another employee or customer, I’d feel responsible.

The victim would probably hold me legally responsible.

I’d feel more comfortable hiring someone with a 100% track record of never having been convicted of assault.

If you disagree, is there any number of assault convictions that would change your mind? Or do you mentally wipe the slate clean no matter what?
And the hypothetical employer's answer to that question, in the model proposed by GP commenter, would be "I did all that was permitted by law, which of course did not include my right to access information on fully served criminal sentences", and thus the employer be rightfully exempt from liability.

If, as I understand is the case in the USA, employers are allowed to retrieve the potential criminal record of prospective employees after they have served their sentence, that's where one could argue the employer could be criminally liable for future wrongdoing by their employee.