skysight-inc/HackerNews huggingface dataset:
> unless you actually build something, the money isn't going to arrive, and you'll be out of a job.

The sad part is that many employees have come to the rational and correct solution that the above is not true. Out of the people I've known, more have lost their jobs to the results of C-suite malfeasance (e.g embezzling, illegal behaviour) than have ever lost their jobs to their own actions.

Conversely, unless the organisation you work for is exceptionally incompetent, your own personal failures shouldn't put them out of business. Think about all the cancelled Google projects. If the devs that worked on them had just come into work and played Minecraft all day, Google would still be in business. My personal opinion is that, if the Google Reader devs had never delivered a product, Google would be better off today than it actually is because it wouldn't have such a devoted community angry at it for killing off a beloved product.

The navel gazing framework discussion is like selling your own lotto tickets. If someone's number actually comes, you're on the hook for millions of dollars and probably broke for life. However, a person with a risk taking mentality will recognise that the odds of someone winning the lotto is tiny and, barring that outcome, selling your own lotto tickets is free money.
Yep, it's a very "trust but verify" industry.
could you please stop posting such advertisement? why would anyone read vector database benchmark results generated by a vector database vendor?
If someone registers on my website with the same password as in LinkedIn, then LinkedIn gets hacked overmorrow, and the attacker then logs in with the correct password on my website, what should I have done to prevent that successful login to this user's account?

We can get angry and make jokes about 23&Me but I don't know what people would expect of me here; what solution I ought to implement as someone who runs several websites as hobby projects

This problem is also one of the reasons why I'd not recommend doing such a DNA test with a web service...

Edit: could I know why a moderator pinned this comment to the bottom? It got votes and was at the top for a few minutes, but now sorts below literally every other comment, also greyed-out ones and downvotes are starting to appear (maybe by association because it's at the bottom?). What should I have written differently to not get moderated away?
The parent you’re replying to started his statement with “fire the board”. So I think they are agreeing with you.
When you are able to log in, you then see who are related to you as well. I believe the news sites use those inflated numbers to make it more dramatic.
I assume it’s easier to find an engineer who went to engineering school to learn how to build airplanes that are safe than it is to find an MBA who went to business school to learn how to build planes that are safe. (It’s not about the knowledge but about the root desire)

Similarly, I assume it’s harder to find an engineer who went into the field purely for money.

I do think on average engineers will prioritize safety (since they likely understand failure modes and production and long tail statistics better. We literally have to take engineering ethics classes), at the cost of doing a worse job at running the business. But when the business requires this level of safety, that IS doing a good job.
Tofuenv – An OpenTofu Version Manager
And pornhub, unironically
That's only one dimension - Another major dimension is country.

The same tax applied globally will have very different effects in a third world country to a first world country. Farmers in the USA will react very differently to a 5p per litre tax to farmers in Burundi.
Seems like every day I am now seeing multiple companies laying off X% of its workforce.
I have zero commercial airplane pilot friends, what have you heard?
Forced 2 factor authentication for critical biometric data.
No they’re not, we’re talking about major shareholders. They’re the ones driving these layoffs to eke out a few more dollars that they don’t need.
You (probably) don't need to learn C
The book is probably "Specifying Systems" by Leslie Lamport[1].

I recently started reading this book and felt amazed at the way it progresses. It introduces Propositional logic, Predicate logic, and then Temporal logic. Enjoyed it so far and looking to apply it in the real-world.

[1] https://lamport.azurewebsites.net/tla/book.html
Yeah... I have only found a single negative comment about the quality--"As realistic as my blurry dream."--and it comes across as more of a cynical joke than a true negative review.
Thanks for the feedback. Will go ahead and implement them :)
Peacock lost billions of dollars in 2023. Amazon Prime Video is a bit weird because amazon can absorb its giant losses, and prior to this last quarter they were absolutely dumping money into productions that didn't make sense, chasing game of thrones by burning money. Netflix, meanwhile was profitable.

Why is the profitable company chasing the business practices of the companies that are burning billions of dollars per year?
I scraped the these websites https://wiki.openstreetmap.org/wiki/Map_features and gave it to OpenAI's Assistant maker -> This made great results in making valid queries

Could even make prompts like "Can you find the buildings closer than 500m to a café?"
If people don’t think planes are safe, they won’t fly on planes
The only part about the father in the entire article was a touching vignette about how Saunder’s dad would go above and beyond to answer his son’s questions.

Did something in the article or Saunders’ life point to him being neoliberal or into eugenics?

Your comment is strange; I assume you would not like it if people applied the sins of your father to you. If anything, the fact that Saunders turned out the way he did despite his father should be a cause for celebration.

Your comment made me sad that you thought a clearly positive-sum person’s life story could be summed up so pithely.
yeah that must have been a bad experience. will fix this.
The issue isn't that it's not real-time/sped-up, it's that it doesn't actually take video as input, but multiple hand picked stills.
How critical is this data, really? What could an attacker really do with my genetic profile?
If this isn't the bell ringing, announcing that an entire industry will soon collapse, then I don't know what could announce it more clearly.

I give it 5 years until it has been normalized to see AI generated TV/YT ads, 10 to 15 when traditionally made ones will be in the minority.

In the beginning just a bunch of geeks in front of computers crafting the prompts, later everyone will be able to make it.

It will probably be access to computing resources which will be the limiting factor.
Thanks :-). I'll video chat with you when I boot into Windows this weekend.
Ryanair operates 546 Boeing jets (https://en.wikipedia.org/wiki/Ryanair#Fleet). Do you have insights into their maintenance operations or base the comment on their low-cost advertising and leg room?
thank you for the feedback. adding support for this soon!
The problem with Nanopore (which I've used for some projects) is that the per-base accuracy is still quite low. This can be helped to a degree by either high coverage (basically sequencing the same area over and over again with the hope that the errors are stochastic and will be corrected if you take the "average" base at each position) or combining it with shorter read but higher quality data from Illumina.
How would you do this for historical accounts? 2FA needs to be set up by users. It has gone through multiple iterations over the past 2 decades and was not always standard practice. 23andme was founded in 2006.
The point being made here is that sacrificing the CEO does not solve the problems in the company and is completely unrelated to their pay.
> use those inflated numbers to make it [clear how serious it actually was].
4 years ago Boeing cut their quality inspection staff as part of its "Quality Transformation". "In the Puget Sound region, there are currently [2019] just over 3,000 Boeing Quality Inspectors, who typically work as a second set of eyes. For each of the tens of thousands of jobs that go into assembling an airplane, they formally sign off that it has been completed and done right. By the end of next year, Boeing’s plan would bring that down to not many more than 2,000 people." [0]

"They got quality inspectors, quality managers, out of the picture," one former quality manager said, adding that the positions had been reduced from about 15 inspectors per building per shift, to one. [1]

0: https://www.seattletimes.com/business/boeing-aerospace/boein...

1: https://www.npr.org/2024/01/17/1224998393/boeing-737-max-9-d...
It's an engineering process.. so yes to get quality culture you might want a engineering quality expert, which is to say probably an engineer.
Slope Stability and Soil Mechanics of Impact Craters Around the Lunar South Pole
This a devils advocate response.

I remember asking this of r/programming (Reddit). Most people there didn’t want it because either they were cowardly or couldn’t find the words to formulate a legible comment.

Also, it’s kinder to be downvoted than flagged. Being flagged to death for mere disagreement is rare but if passions are high enough it does happen. I remember this specifically for comments in threads about Julian Assange that didn’t praise or defend him as a saint.
difficulty as a feature will be out soon, thanks for the feedback!
I tried Atlas for quite a while now and compared to others (both in-cloud and local softwares) it's the most interesting.
I'm an Italian urban planner and I've been using various GIS tools for 9 years now. It makes pretty easy for me to add layers quickly, and share my projects with co-workers and online.

I'm really looking for what's next!
Why LLMs are vulnerable to the 'butterfly effect'
You could kind of argue that users that reuse passwords are responsible for leaking their own information. But how do they explain the remaining 7 million? Also they are suddenly able to enforce changing passwords and 2FA, so how do they want to claim they reasonably protected sensitive data before? If the 7 million users made their data public to other users that may explain a little bit, but I would assume the company would say so.
> For a comparison of existing assistants API vs. vector search

Sorry, but I am not going to read it as it is not an apple to apple comparison atm. OpenAI just released its assistants APIs literally just weeks ago, when so called vector databases have been burning money for ages. You can write a thesis on how those vendors are doing slightly better for now, that won't be the big picture showing the reality on the ground. All those minor issues & unreasonable restrictions can be solved & removed, I don't see any real challenge for openai to implement them. Give openai a few months, they will convince most vector database vendors & gamblers to pack up and leave the field.
Aren't these all "yes, and" examples?

Who do you want, a good director, a good actor, or a director who's a good director and a good actor? Which do you want, a quality culture, an engineering culture, or a quality and engineering culture? Of course one is "in charge" but pretty clearly "engineering" and "quality" aren't even in the room....
Men make friends in different ways? Just like, you know, almost all human things vary.
I never thought of it as showing [off] the inside, interesting thought
You need to be able to steer a large and complex organisation - being an engineer has nothing to do with that. And, yes, incentives matter, but those can be set.
> How does this normally work when a Korean business needs to downsize?

Don't know how it works in South Korean but typically if a business is losing money, then it's easy to layoff people.

The problem for Google is that they are not losing money (understatement), so they can't claim that they need to downsize.
It's not much that the point: did you notice your phone lighting up the screen when you move around it? That's not much an "image" capture threat (meaning you covered the phone cam and allow the other sensors in that example) but a "person presence" and "person activity" threat.

Essentially with apparently innocent and cheap sensors you can determine what happen in a home, perhaps selling some smart bulb who can just tune the light and light on automatically when you enter a room then turn off after a short period of time. Apparently a simple and innocent comfort idea, but also a potential cheap remote spying device.

We already know some "strange" attacks like discovering keys pressed on a mechanical keyboard via the produced ambient noise, any of such potential threat alone seems innocent and low risk, but put together allow for a potentially cheap mass surveillance inside homes walls in a far less monitored ways.
The video inpainting is interesting. My kids were watching old Spongebob episodes recently and the 4:3 aspect ratio was jarring to me. I thought it would be an interesting use case to in-paint the side borders to bring it back into 16:9 aspect, but I suppose it would need some careful fine-tuning with some kind of look-ahead for objects that enter frame from the sides.
this is different from project euler. explained here[0].

[0]: https://news.ycombinator.com/item?id=39115376
To try to answer my own question, I suppose they could try detecting elevated login rates. Let's do the math:

Getting a few thousand IP addresses for a month is cost-effective for any serious business (criminal or otherwise, but especially criminals that can buy botnet access). Spreading it out over a month, you could do 0.1 logins per minute to stay under the radar and get:

0.1 × 60 minutes × 24 hours × 30.4 days/month × 1000 IP addresses = 4.4 million login attempts

> The [attackers logged in] to around 14,000 accounts using previously compromised login credentials

14k is well below 4.4M. To get that number lower than 14k (assuming they only ever use 1000 IPs), you need to ensure each IP address stays below 0.07 logins per day. Even allowing some bursting (3 attempts on some of the days), that's going to block paying customers from logging in.
Nobody, unfortunately Chinese vehicles are not sold in the US of A. Which is too bad, we need the competition.
Let me ask chatgpt to solve
thank you for the feedback, i will see if some sort of curation as a feature is possible.
Yep, and my cynical side is just hoping that the GPU vendors aren't going to deliberately limit the number of user-accessible resources there are to force people to depend on their cloud platforms.
"be careful, you'll cut your feet" seems like something I would say, but it would be out of well-meaning concern, and not in any way intended as an insult.
Tesseract OCR fallback sounds great!

There are now a lot of file loaders for RAG (langchain, LLMindex, unstructured, ...), any reasons, like a leading benchmark score, to prefer this one?
These are not applied on disk, they're injected at runtime. Just open the process and write to its memory directly.
> For added context, the plot of the movie Charlie's Angels from the year 2000, was about stopping an evil guy from using some evil software he developed to ... track people using their cellphones.

This makes me think we should have a big revival for that movie.

On the other hand, essentially the same functionality in a more grandiose presentation was prominently featured in Batman Begins (2005) and the explicit message was "not even Batman should be able to do this".
You want engineering quality experts, but not clear at all that needs to be at CEO level. If you have someone with that skill and great experience running large and complex organisations - great take them. If not, take someone who knows how to get organisations to change and do stuff.
Force them to change their password, prevent use of the account? If it’s a dormant account, force a password reset using email?

Doesn’t feel like an unsolvable problem, certainly not one without edge cases but surely we can hit 80/20 without too big a hassle.
In an extensive analysis of 1 million popular domains, our research team uncovered over 18,000 exposed API secrets. Among these, 41% were deemed highly critical, highlighting the widespread challenge of API secret sprawl.

The financial risks are significant, as exposed financial tokens and API keys, including $20 million in vulnerable Stripe Tokens, pose potential exploits.

Other exposed secrets include GitHub/GitLab tokens, RSA private keys, AWS tokens, Twitch secret keys, Coinbase keys, X tokens, and Slack and Discord webhooks.

Discover our methodology and full report now!
They already release the 7 million people's data - to the same extent the hackers got it - to anyone who manages to upload a sufficiently similar genome. There's no additional data privacy concern in releasing it to hackers or Equifax or the FBI or 4chan or the Washington Post. 23andMe limit access to it for commercial reasons, not privacy ones.
Elon Musk responded to claim that something shady helped MrBeast earn $263,000
They have to know what normal access patterns look like, and if it looks unusual send confirmation magic links as well as look into what’s causing the unusual pattern, if anything.

The data they guard is up there with banking information except it’s impossible to restore privacy, unlike funds in a bank.
And eBay laying off 9%
Not until a tragedy hits too close to home (America, that is). I mean, we've had two 100% fatal crashes and yet here we are.
Yeh, they should've Bing'd the local laws before doing it.
I work in embedded software and we fight for every megabyte of NAND flash. Multiple smaller executables add up, too.

Reducing the binary size is usually more important than performance (and often more important than memory safety, if we are totally honest...).

Personally, I hate bloated software just as much as slow software.
It's crazy what you can do with 64 kilobytes, let the demoscene blow your mind: https://www.youtube.com/watch?v=ZfuierUvx1A

Would be awesome if compilers could do the same :)
The reality is that whether Boeing choose to do a re-brand of the Max, the underlying airplane is here to stay. For this class of airline, there are basically two suppliers in the west - Boeing and Airbus. Boeing has about 6,000 orders for the Max, and Airbus has about 10,000 orders for the A320 Neo. Airbus is delivering about 500 planes a year. So let's say an airline bites the bullet and cancels their orders for the Max and goes to Airbus - Airbus won't be able to deliver for the best part of a decade at best. Meanwhile, it would be enormously expensive for Boeing to design a replacement for the 737 Max from scratch and it still has tonnes of outstanding orders. And that's not even considering the fact that these airplanes have a lifespan of 25 years.

So in general there's simply no replacement for the 737 Max. People will be flying on them for the foreseeable future unless something causes a massive drop in air travel.
> e.g. the mona lisa smiling

This was not Leonardo da Vinci's "Mona Lisa"[1], but Johannes Vermeer's "Girl with a Pearl Earring"[2].

[1] https://en.wikipedia.org/wiki/Mona_Lisa

[2] https://en.wikipedia.org/wiki/Girl_with_a_Pearl_Earring
Ah, but then it's not like you get all of the data, just the names that are often fake anyway no? I mean I don't know anyone who used 23 and me under their real name.
You show popup "are you hacker?". If somebody lies, it's not your problem, right?
Tell HN: GitHub no longer readable without JavaScript
A few weeks back, individual files were no longer readable with Javascript off and a much worse browsing experience with JS on. Now its main repo pages too.

I've not seen any announcement about these changes.
We don't have satisfactory 2fa solutions for consumers yet.
What do you expect them to do? Replacing a whole fleet of aircraft takes years.
Thank you both. I went through both thoughts in that order!
I wonder if Lockheed couldn't take a run at passenger airliners again. It would be nice to have a backup plan.
I do not reuse passwords, and from what I understand, my account was not accessed directly. The message they sent me was:

"After further review, we have identified your DNA Relatives profile as one that was impacted in this incident. Specifically, there was unauthorized access to one or more 23andMe accounts that were connected to you through DNA Relatives. As a result, the DNA Relatives profile information you provided in this feature was exposed to the threat actor."

So there's nothing I could have done with password security that would have prevented this; my only mistake was using a feature of their site.
> More people using existing online services means infrastructure scalability, surely, not generally "we need to hire more people across the board"?

From what I saw, the hiring was driven more by an influx of cash than an actual need to respond to business needs. Companies began hiring much too early during the pandemic response to have down it based on seeing an increase in use and analyzing where their resource bottlenecks were.

The government dumped new money into the financial systems and investors moved funds to more heavily invest in tech assuming that the industry would be less effected by lockdowns and would see more benefit from work from home, distancing, etc.

tl;dr; They did over hire, but for all the wrong reasons. Balance sheets and new money.
I have not verified the list but you are correct. Anecdotal but this kind of green washing happens a lot with richer nations. People rally behind a cause to save the world while doing no real change on their own part.
Furthermore it's a reactive measure. Locking credit reports and unlocking as needed can help mitigate some risks.
Sorry if this is dumb but if the idea is stripping debug stuff, why would a parser for translating return addresses into file names and line numbers be useful?

EDIT: oh, ok, so I guess it's because strip is "debuginfo" here, rather than "true".
Not who you’re responding to, but I agree with the notion that if you want an engineering culture, you need an engineer at the top.

Engineering is one of the few fields that understands value. Most other functions, within a corporation, are more process oriented and have a more transactional world view as a consequence of dealing with costs for most of their activities.

In other words, if you want to slash budgets, lay off staff, and deliver value to shareholders, your faithful MBA is your go to. If you want to build cultures that create products that strive to satisfy arrays of non-functional requires, like efficiency, reliability, and safety, engineering managers have spent their careers building these departments.
Yes, you are correct. The case is this one: https://en.wikipedia.org/wiki/Phantom_of_Heilbronn
Let me put it this way: someone who is a great engineer but has no skill in running and steering a large organisation will fail. Someone who knows how to do the latter might succeed by "using" talented engineers within the organisation.
23-and-me could implement something like Troy Hunt's K-Anonymity API. The password is hashed, then the first n characters are sent to the API. The API then returns the count of times that password has appeared in data breaches. If the result is >0, the user's account is blocked until they've gone through a forgot password journey.

23-and-me could probably check if large numbers of people have all tried to sign in from common IP addresses within the space of a few hours. Even checking their login APIs for enormous spikes in unexpected traffic too.

The requirements for your hobby projects are different to that of 23-and-me, but you could potentially implement a similar feature too.
These kind of provisions provide an effective counter measure to hire and fire, which is welcome.
These days I stick to a minimal profile for the default shell (zsh on macOS and bash on Linux), adding no further than some aliases. When I need more “friendly” interactive features I launch fish which is… friendly and interactive, and exit when I’m done. Thus I get the best of both worlds.