skysight-inc/HackerNews huggingface dataset:
It's bounded, because the underlying DEFLATE algorithm has the maximum compression ratio of 1032:1 [1]. You still need at least one literal code and end-of-block code, but the former can be encoded in a separate block so you can indeed use only two bits per each run of 258 bytes.

At one point you will be also bounded by the maximum size of IDAT chunk, which is 2^31 - 1 bytes with a 4-byte-long chunk name included, and after that point you will constantly need 12 bytes of overhead for each additional 2^31 - 5 bytes. And we will eventually hit the maximum permitted dimension of (2^31 - 1) by (2^31 - 1) pixels. Since the long-term overhead (12 bytes) is much smaller than the one-time overhead (>50 bytes), the biggest image will result in the best ratio. Such biggest image needs at least N = (2^31 - 1) * (2^28 + 1) uncompressed bytes of IDAT, as each scanline needs one filter byte and 2^31 - 1 bits pack into 2^28 bytes.

We can now compress them down to ceil(N / 1032) compressed bytes plus small overhead, which should be divided into ceil((ceil(N / 1032) + eps) / (2^31 - 5)) = 260,112 IDAT chunks. Each chunk of 2^31 - 5 bytes contains at most ceil((2^31 - 5) * 1032 / (2^28 + 1)) + 1 = 8256 scanline boundary, which consists of one filter byte and one unused padding bit. Therefore we should have (2^31 - 5) * 1032 * 8 - 8256 * 9 uncompressed bytes (i.e. pixels) per each chunk, giving the upper bound of ~4127.99997308 pixels per byte. The actual value will be very slightly lower than that due to the one-time overhead---aforementioned significant digits did account for this.

[1] https://stackoverflow.com/a/16794960
If I recall correctly, HTTP clients do not need to care about Content-Encoding at all and can choose to just not do anything with your ZIP bomb. To really hit them, you will want to do this at the Transfer-Encoding level.
"but it feels like they're expected to fight harder and harder for less and less."

And they also should feel ashamed for what they get and consume, as it has a CO2 impact and their future is doomed if they use too much. But in my experience, climate change is a minor factor, compared to the always comparing yourself not to your local group anymore, but the whole world.
The last time wikihouse showed up on HN (September '23) I did a deep dive on the process I still haven't come out of. 20 years ago as a grad student getting my masters in architecture, I definitely would have had similar comments to most of what's on this page. But I don't feel that way any more and I'm actually disappointed by the negativity toward this project – not because it's not warranted, but if this were a software project I feel like the criticism would be more constructive rather than so dismissive.

WH is not a perfect system, but the approach is commendable for its comprehensive take on building systems. And building systems are broken. For the past two years I've been trying to build my own house (using a contractor), and even as a trained architect the process is ridiculously opaque, costs are exorbitant, and quality control is difficult to manage.

I applaud the fact that WH has tried to tackle the entire structure (and for that matter the entire building process – their parent organization has additional projects [0] for design, local building codes, and innovative financing structures). Yes, in the US 2x framing is cheap and relatively inexpensive, but is still complex in its own ways. Floor systems are different from wall systems are different from roof systems. I like that WH has tried to make one unit type (plywood boxes) work for the different systems. Is it the most efficient way? Probably not, but it affords other opportunities.

From an ideological perspective I also like that they prioritize sustainability, low energy use, and accessibility of design information to laypeople. On top of that, they've organized their building information like a programmer – they use GitHub to track versions and even have the start of a components database. They are an API short of making this really something the HN community could easily play with.

That said they have a long way to go. Framing a house is the easy part. I think if they could standardize the interface for cladding and interior finishes they would be in a better position to disrupt the building industry, but for now contractors will still be a requirement – so there goes your budget and quality.

[0] https://www.opensystemslab.io/projects
> #1 it does fine on

By default, I'd say no. But with a few config settings and one or to aliases it is excellent.

> #2 fails because it uses jargon that's internal Git state, staging, index, etc.

Yes, it uses it's on jargon. But before Git there were no generally known terms for those concepts. And Git's concept do exist in the real world, previous vc systems simply tried to abstract them away and failed miserably at that.

> #3 mostly does ok but doesn't provide useful undos for stuff like shallow copying

The reflog is a very comprehensive undo mechanism, but it is hard to discover and certainly not as easy to use an undo button. Considering the target demographics of Git, I'd say it is acceptable.

> #4

This has and still is Git's weakest point.

> #8 No. It's CLI is huge and byzantine.

The default porcelain (Git's CLI) is inconsistent and very large, yes. But the underlying model is very elegant. To an expert user, this should matter more than consistent wording in the CLI and documentation. Although, I would still like to have that consistent wording. And because of the qualities of the underlying model it is possible to improve on the porcelain. Which has been happening for quite some time.
I'm talking about the kernel space itself, not the APIs exposed to userland to interface with the kernel from your application. Internal APIs and behaviors are mostly identical over the past ~20 years, and any changes are usually moved to a new export. I don't think this should be taken for granted.
Speaking of design, your website asks me to sign up for a newsletter before I can see the page. It's missing an X button where I'd typically look for it.
Defending themselves in this case takes the form of a desperate lie. I very much find it silly and made up in the last minute as it does not align with any prior communication or how the user experiences things.

The Google Play example is accurate. iPadOS does not differ from iOS in this context in that they both run exactly the same applications from the same app store - application that themselves can implement iPad or iOS specific behavior of course, but that is internal to the app, not a difference in the store.

In the same vein, Android TV is a separate OS from that in Google Pixels which is very different from that for a Samsung Galaxy - but they all run Android apps. Whether you give a name to the shared foundation (Android here, and what used to be iOS before they decided that iPad-specific features deserved distinct marketing) is not important - Apple users know that they see the same store with the same apps on all their devices (with an apple TV caveat as fewer developers add app support).

(An app can itself declares requirements and dependencies that will hide it for particular devices, but if those filters counted the number would be way higher than 5 - it would be per-model, per-OS-minor)

The Mac App Store has been marketed separately, so that makes two. An Apple TV compatible app also have to live up to some different requirements, but having apps filtered to a device based on its declared support and requirements is not different than similar restrictions within iPhone apps, and so it is not itself enough to fork the singular App Store. It is still presented as one familiar entity to users.
I think they set it automatically, at least based on https://blog.cloudflare.com/email-routing-subdomains
Recently visited South Yorkshire for the first time in 4 years. I didn’t notice a big difference between 3 and 4G coverage, but it was shocking how much of the city area has complete coverage blackspots. Both for myself connected to EE and a friend connected to Vodafone.
I think the sort of people who push "climate change anxiety" and espouse theories about "late stage capitalism" are a huge, huge part of the problem. Near every communist I've met was miserable.
Also importantly, did Airbus actively deceive people, causing these incidents? I don't think so.
They do seem rather miserable.
I am curious about these solidarity strikes. How much is the postal company paying a postal worker who refuses to deliver parcels only to one specific client? The answer could vary between "a small percentage less than a regular worker" and "zero". The viability of the solidarity strike depends on it- how long can workers afford to strike against how long Tesla can afford to suffer the strike.
it is tightly regulated in many countries and can cause fatal heartbeat irregularities

Participants received a magnesium supplement alongside the psychedelic to lower the risk of cardiac side effects.

I'm impressed. Came here to ask if anyone knew how it worked and was going to say the fatal heartbeat irregularities suggest it interacts with magnesium.

Noteworthy comments:

https://news.ycombinator.com/item?id=38934501

https://news.ycombinator.com/item?id=38934828

https://news.ycombinator.com/item?id=38934517
"Linux" does not have a singular answer for binary distribution. Docker is one of many, with differing trade-offs.
S̶o̶u̶n̶d̶s̶ ̶c̶o̶o̶l̶,̶ ̶b̶u̶t̶ ̶t̶h̶i̶s̶ ̶r̶e̶q̶u̶i̶r̶e̶s̶ ̶y̶e̶t̶ ̶a̶n̶o̶t̶h̶e̶r̶ ̶l̶a̶n̶g̶u̶a̶g̶e̶ ̶t̶o̶ ̶l̶e̶a̶r̶n̶[0]. As someone who only has limited knowledge in this space, could someone tell me how comparable is the compute functionality of rust-gpu[1], where I can just write rust?

[0] https://github.com/Hugobros3/shady#language-syntax

[1] https://github.com/EmbarkStudios/rust-gpu

Edit: No new language to learn required, this was about IR
Demographics and destiny: the case of the disappearing young people
> but it's just way too slow with large history files

hey! what issues were you having here? slow to open or slow to search?

we have a whole bunch of people with way more than 170k lines, so that shouldn't be happening :/
The Total Addressable Market (TAM) for tomato was valued at USD 181.74 billion in 2022. It is projected to reach USD 273.2 Billion by 2031, growing at a CAGR of 4.635% during the forecast period (2023-2031). Asia-Pacific is the most significant revenue contributor during the forecast period.
>I don't know why "incredibly stable" is such a remarkable thing

It's remarkable when you look at the landscape of Linux and Mac device drivers.

Can you run non-kernel drivers for Linux 2.6 on 6.6? Can you install a device driver from 2007 on a modern MacOS? Well, many Windows 7 drivers also work on 11. That's stability.
I mean, they still offer financing on Itanium CPUs https://buy.hpe.com/us/en/options/processors/intel-itanium-p...
Communities used to naturally form in third spaces, when people were bored.

We have an unhealthy deficit of both third spaces and boredom.
In the spirit of a good offence is the best defence, etc., I wonder if there are any other ways to defend my website.
Is it possible for someone who has no knowledge of ML (but can code) to get into this space? Where would one start?
The DSM-5 was published in 2013, redefining the 'mental health' diagnosis landscape substantially. You will see in some pf the graphs arpid onset of the climb in 2023.

Could changes in diagnosis and treatment be a factor in this?
Why Prince Changed His Name to an Symbol 30 Years Ago, and What Happened Next
One simple case where the resulting image is bigger than necessary:

```
COPY ./package.deb /tmp/package.deb

RUN dpkg -i /tmp/*.deb && rm -rf /tmp/*.deb
```

This results in two layers, with one layer containing a huge file, thus being part of the final image if you don't do multi-stage builds.
That's fair. My comment is not well-informed with regard to whatever has happened in the last 10 years.

The impression I formed back in the late-2000s and early 2010s when I was doing this type of development was that there was very little change in the low-level NT kernel. I actually don't think this is a bad thing; going from XP to Vista was a breeze because nothing about the driver APIs changed in the slightest, and Microsoft even provided a bunch of new filesystem examples with the Vista DDK.
Anything changed since 2013,the year that post was made?
If it can handle the normal amperage a US outlet can supply, it should be fine. Washers don't use that much electricity; they run on standard 120V/15A outlets in the US.
Looks like cache.nixos.org may be a long term archive (never evicts artifacts) so that is suitable for long-term reproducible builds for nixos things.

If I'm following correctly, this would prevent issues like builds failing due to the leftpad package getting unpublished, since you'd use the cache/archive instead of failing to fetch the missing package.

> and you've lost (or pruned) your store

It's common for academic code, for example, to be built once, published and then shelved. The "you" in "your store" ends up being different people over time.

Apt generally has this issue too, while Debian keeps old packages around (snapshot archive), third parties origins and other apt based systems may not.

I'm going to explore nix more, thank you!
Ask HN: How does the search with Text in Mobbin works?
I came across this awesome feature in mobbin.com which highlights the given text in the image. I'm sure they are using RadixUI, TailwindCSS. But not sure about the part how the highlight is done.

It's kind of overlay above the text.

Any idea on how does it work?

Here is the Stackoverflow link (If relavant): https://stackoverflow.com/questions/77104440/highlight-the-text-in-image-using-tesseract-js
If you're going to be pedantic, JS Bach isn't classical, it's baroque.
As a PHP developer I refuse to use Python because I know how unwieldy it's felt whenever I've had to do serious work with it.

To each their own, but even PHP's setup these days is way ahead.
A zip bomb is way more effective as it will be transferred very quickly and saturate attacker storage as fast as possible, with a good probability to make the system inoperable (login into a machine with with 0 storage left can be challenging).
Fair enough, it was just meant to connect the dots on how a longer trip also means lower capacity.
seems too good to be true. Uber, doordash, and travel planning are too fast to be true...
Once he had access to Firebase (the database) he was able to add an entry to the list of admin users. With that done he could login as an admin user to the website and access the administrator dashboard.
Would the issue persist on ZFS with dedup? Nix(OS)?
Hey! Author here, thanks for sharing cwaffles

Happy to answer any questions :)
Yes, it would be trivial to make an "endless" gzip stream.
never link to it and add to robots.txt

digital castle doctrine or whatever.
related: https://news.ycombinator.com/item?id=14707674 (July 6, 2017 — 183 comments)
Is it really malicious though? 10 gigs of zeros doesn’t seem that malicious to me. Microcontrollers often have a few megabytes of RAM if not less, does that make a few megabyte photo malicious?

Edit: spelling. I’m old school and used to typing on my computer. It’s getting repaired and all I’ve got is my phone. /rant
I'd also imagine the time complexities of string rewriting systems are significantly more efficient than passing it off to an llm.

Why not burn a couple hundred watts to do find and replace (/s)?
Interesting. Reminds me of the Playdate
The answer you're looking for is that woke culture arrived. Your God is not dead, you've just abandoned him (again). Social media is obviously a catalyst for patterns of communicated harm that have always been around. The communists have been unraveling the nucleus of family and faith, to be replaced with isolated rage and hate, with government to provide 'proxy support', whereas once was family. We've been divided into us vs them teams on issues that used to bring harmony and coherence.

Damn, maybe there is just too many people now? and we're all connected all the time. The brain can only handle so much (much less than I think we admit).
They way I see it relationships to the deleted record must always be nullified/marked deleted, because otherwise you get broken records referencing deletions. And relationships from a deleted record might as well persist because the foreign key will (fingers crossed) remain untouched.

Again, not versed in db at all so this is likely total rubbish.
> inflation is around 3%. My feel for it is around 9-10%

Why do you think that’s the case?
I have a mail server on Hetzner and one on Vultr, neither have problems delivering to any service. That said, both domains are fully and correctly configured. Banners match rDNS, DMARC aligns, I’ve even configured MTA-STS. The IPs aren’t particularly warm either.
This is a huge possibility. One should not even begin to discuss this topic without factoring in what you brought up here.
Walkways in 2026, paper and pencils in 2027.
Im getting nineties Nortel Bay Networks all stock flashbacks.

The Company that Broke Canada - BobbyBroccoli https://www.youtube.com/watch?v=I6xwMIUPHss
thank you for the kind words!

> I’ve also enjoyed running SQL queries on my atuin-history to learn more about my own workflows to see where I can optimize.

if you could share more about what you found useful there, that would be amazing
I can recommend Ledgy
i think magespace maybe, i tried prerendering and selling as nfts which was a total waste of time.

I'm running https://ebank.nz an AI Art Generator thats also open sourced.

even myself i'm thinking of moving to opendalle, can't beat open source...

would like to work with you on that if your interested its open sourced at Netwrck/stable-diffusion-server which would serve as a good base for a project like that, Needs to do model swapping caching for this kind of use case perhaps.
Or a comfyUI approach is good too.
Depression is not a rational response though, is it? It's an irrational response that persists even when there is no reason to be unhappy.

That's why I give little credence to ideas like those in your link. I don't consider the worldview of depressed people to be valuable to my own life experience.
People have been coming up with ideas like that regularly. I'm not a fan.

The title says that you can "defend" your webpage, but it is not clear how it "defends" against anything. The only thing you possibly achieve is that every now and then, someone with an automated scanner (which may be an attacker, or may be a security researcher or service) will see his tool crash or consume large amounts of resources.

You're spending time trying to annoy attackers that you should probably just ignore. If you really worry that someone running some automated scanner against your webpage causes you any harm, you probably should spend your time with something different than building zip bombs, and instead fix the security problems you have.
Linux succeeded in large part because of Linus, not (just) because it is open source.

Many open source projects languish, or get mired in petty bickering, same as any other large organisation of humans.

The successful projects -- closed or open -- often have a strong-willed visionary with the political clout to enforce his way of doing things.

Big corporations tend to eventually drive those visionaries away, resulting in a bland mess designed by committee with more paperwork written than actual code.

> "That's literally the explanation for PowerShell. Many of us wanted to improve cmd.exe, but couldn't."

However, this is the opposite of this effect, and the anonymous MS guy complaining about it in the article is dead wrong.

Jeffrey Snover developed PowerShell, it's his unique vision, and in this respect he's very much like Linus Torwalds, Guido van Rossum, Larry Wall, or any other such famous developer you care to name.

It's literally impossible to fix CMD.EXE because meaningful changes to it would be breaking changes. That would destroy backwards compatibility, and is not something anyone responsible would do. Linus keeps saying the mantra: "Don't break the kernel ABI!" as well for a reason. It's not just Microsoft doing this kind of thing. Similarly, Bash and "sh" have barely changed over decades.

PowerShell v1 and especially v2 were brilliant, elegant, and beautiful. Then Jeffrey Snover went on to do other things, PS got handed over random Microsoft developers, and it slowly started to accumulate inconsistent warts and bugs.

Jeffrey Snover works for Google now, which does circle back to a valid issue raised in the article: The FAANGs do keep poaching the best people from Microsoft, and Microsoft hasn't done much to fix this. Even from the outside, it's noticeable just how poor the average developer skill is at Microsoft.
I can use Windows drivers from Windows XP era. Try that on Linux.

And I can run any win32 binary, regardless how old is it. Try that on Linux.
Not sure it works for the scanners, sure it crashes the browsers, but I would guess most scanners use libcurl which has a callback function for saving data and would give up on loading the resource if over 2MiB let's say.
I think if they’re burning it though they could allow logging it (maybe with the stipulation that you also remove undergrowth?), it’s not like fire leaves the trees alone.

But someone else pointed out that apparently logging up there is much more difficult than getting easy trees in the less remote, flatter southeast, so it’s probably still not an exciting reason why this logging isn’t happening.
It's a joke answer at best, plus if someone would go complain, their actions for discovering the booby trap were illegal anyways.
Another method that stuck with me: in the early days of bitcoin someone built an "ssh paywall" – i.e. you would pay to enable ssh remote authentication for a minute or two.

In essence a hacker would have to pay before attempting to hack the ssh endpoint. Of course the admin would have to pay too but the money would end up on his/her wallet.

Quite ingenious if you ask me.
Oh you're totally right about the driver APIs. A fair amount has been added, but that stuff gets a new export to avoid breaking anything. For example, there's a dozen different `ExAllocate`s now. I wouldn't call myself a driver-writing expert but I'm sure that same driver for Vista could be made to target Windows 10 with little effort.
Maybe but I think going with middling ARM chip is more the right call then trying to pursue a RISC-V based chip. The OpenWRT folks don't have the needed logistics chain to distribute this at all, and it sounds like they're leaning hard on both MediaTek and the Banana Pi team for this. I don't know of anyone else off the top of my head that would give a bunch of open source devs working on a niche distro that kind of support.

That said, the VisionFive 2 is available. There's some people on the Openwrt forums working on trying to get OpenWRT to work; might not be a bad idea to reach out to them and see how far they've gotten.
Show HN: Circumventing YouTube adblock policy – Firefox extension
Introducing Firefox extension designed to preview any YouTube video into the current browser tab. Simply navigate to a YouTube video link, and the extension dynamically generates an iframe for it. The tab's body is modified to embed the video. "YouTube Embedder" circumvents YouTube ad block "block" policy.

This probably could be done better, but it is my first extension.
We just have too many assumptions about names.

There should only be one input field that asks for a name. Even systems that require a legal name should be like that as there are people whose legal name cannot be written in two forms.
Running clubs and associations and churches and any nonprofit oriented community organization is hard work.

Throw more parties. That’s one solution. It’s not easy either, but it isn’t pure hedonism. It’s creating real social bonds. And it takes real work!! Underappreciated.