skysight-inc/HackerNews huggingface dataset:
Indeed Microsoft Teams once contained a bug where specially-formed HTML messages could trigger arbitrary code execution when received.

Any platform where the security model is two steps:

1. Check if the message contains any code. If so, reject it.
2. Scan the message for code and eval() it.

is extremely susceptible to code execution bugs.
For me it was creating “gift card code generator” for games like Habbo Hotel and RuneScape in C# and distribute it among my friends to get into their accounts. 14 year old me was proud of my “hacking” skills.
Also Celsius is the name of a guy, and you're misspelling it throughout the code base. :)
Actually, you might want to check out https://tailcall.run (Disclaimer: I am the core maintainer of the project)

It's an open-source API Orchestrator, in other words "a Zapier for APIs". If you find it interesting, hit our discord channel to learn more about it.
Haaa, they will figure out to sell that too. Buy, “The new AI-powered disc audio based off the standard high-quality analog technology of the early hard drives, that will make your computer perform 4X better at 1/3rd the price.”
Peaked Technologies
Does the language part really cover just JS and Python separately? Also, it looks to me like lots of developer-oriented stuff, whereas I have a picture of software engineering as the more hardcore side consisting of robust systems, scale, fault tolerance, reliability etc. Essentially, a step up in terms of the organization’s ability to put direct responsibility on a ”credentialed professional”, akin to an architect or a civil engineer constructing bridges and buildings.
Nothing works there, it's all 404 or disallowed_useragent
All of those suffer quite a bit in case of artistic text.
It happens more than anyone wants to admit, but even at 2g speeds, 256kb takes almost 20 seconds to download (I get about 120-180 kbps). When sites provide the HTML and CSS, I can usually stop the page from loading and at least read the content within a few minutes. When there's a js bundle, there is usually a fairly large initial bundle, then that loads a couple of other bundles ... and I'm still looking at a white screen, and not even a loading animation (from the browser or the developer) because as far as the browser is concerned, it has loaded the HTML and most developers don't even realize they can edit the base-line HTML sent to browsers because they never even see it.
Maybe they just like the specific form factor or Sony controller more than the steam deck's.
Perhaps bookmarklets could make that possible? It could generate loading of the resources using the SRIs hardcoded directly in the JS contained in the bookmark itself.

Or even simpler, use the data: URI for the initial page as a bookmark.
I can, through coil whine. Although it usually kicks in on high transfer rate sequential access only.
Winteracter – The Fortran GUI Toolset
Would it be able to generate ideas in certain domain? Let's say I want to add some keywords, give it names of products in similar industry/domain? Also can it generate like things to implement for a mvp, something that customers can be charged for?
The Old House at Home (1940)
This prose desperately needs an editor and a rewrite pass, which would be unremarkable in technical fare—but in an argument about the information density of prose, it severely undermines the author’s trustworthiness.
That would be a situation for which I'd request a transcript - probably the only situation, because the second you're handed that degree I no longer care what your grades were.

Where I'm from, if you're bombing out of classes you'll be excluded from university. Takes about two years if you're terrible and incapable of getting the message. But it's something I would like to know because it is a signal.
With Tailcall, you could compose API over multiple any of the following formats REST, GraphQL, and GRPC APIs to create a unified API endpoint. This could also be any of the above. So you could expose a set of REST endpoints atop, multiple GRPC APIs, where you are not just doing basic translations, but also sophisticated data transformation that has business logic inside it.
“I salute you sir!”

(aside) “You may fire when ready.”
I don't think you are a fool because I ask such a question... I am honestly asking.
Thanks for the link. That certainly shows that Google was sponsoring an aggressive and fairly ugly ad campaign.

> UI was comparable.

They were not at all comparable. Here is an image of what Firefox looked like when Chrome was released [1]. Here is an image of what Chrome looked like at release [2]. Barring some design tweaks Chrome looks roughly like any modern browser whereas Firefox looks ancient by modern standards. It has the app menu, no integration with window decoration, a separate search box, tabs below the address bar, etc. Lots of things that Firefox would copy over the coming years. There's a reason Chrome was named after its Chrome–the UI was a huge selling point.

1: https://user-images.githubusercontent.com/25581533/141687681...
2: https://blogoscoped.com/files/google-chrome-browsing/search-...
Well because these banks can only function from the money they borrow from the government, it’s insane they’re allowed to censor 1st amendment protected speech.
This sentence does not make sense and still I understood it perfectly. It's the reason I love PHP over JS.
Not completing something simply because you dislike it is a big red flag. At work you often have to finish stuff you don’t like, you don’t want employee that will start something but rely on others to finish it.
90% of ventures fail. Be defensive...
Ok, I hate the reddit tropes and I don't like seeing them here, but... "username checks out".
I think the 'molotov cocktail' solution is for PC makers to ship with ad-block installed by default. PCs these days ship with all kinds of shitty anti-virus and crappy addons, but somehow they're shy to tackle the ad-based "download now" malware vector.
That was the figure my business subjects at university quoted...
Notably, software is the moat.

There’s more hardware than nvidia but it takes some time to unwrap the proverbial matmul from CUDA. Much more hardware is in the pipeline, it just (ahem) has to be much better than nvidia to make migration from CUDA worth it. groq is one such limited but extremely impressive example IMHO.
I can't remember where but I have read that "one in six mobile phone batteries around the world are manufactured by BYD"
Sorry I don't really understand the question, but:

- if you ask whether the way of using GPIOs on a Raspi is elegant, I would say, yeah quite. Python and gpiozero are a good elegant way to go that route

- if you ask whether it is elegant to use GPIO on a Raspi in principle, I can't answer your question because that depends on what you use it for. There are extremely elegant ways and there are ugly hacks that shouldn't exist.

That being said if you quickly need analog input you can just add an ADC to the gpio and you have it. That is more elegant than having to add an usb peripheral.
What if there are better treatments that are being held back because they are less profitable?
You can always hook up one of these: https://www.tomshardware.com/news/hdd-clicker-v02-restores-a...
The more silly[1] comments are from the maintainer, saying you should update configs with workarounds for patch releases.

1: Suggested package: sillier.
Every time my girlfriend buys lottery tickets I tell her to buy the winning ones, and every time she gets the numbers wrong. Every. Friggin. Time.
Having seen this but not yet having gotten to building it - is it wildly impractical? It looks a little slow (and obviously there's a learning curve) but it seems like it would work nicely in a number of cases where a normal keyboard wouldn't. (Ex. I bet I could use it on an exercise bike)
That has always been a bullshit justification. Inventions are not one off events, almost everything gets rediscovered many times, it's patents that make them so, and restrict the invention to something that can only happen once. It's basically a legal fiction.
My TODO list is a .txt file on the desktop
Using palaeoclimatology, palaeogenetics, proteomics, etc. E.g.,

Analysis of stable isotopes preserved in human bones and animal teeth has allowed scientists to track the movement of a single girl from Germany to Denmark in the bronze age, ...
Honest question. Why don't simply use the filesystem? Vector databases just store a pile of numbers
This is what makes the the big players seriously pissed and has been since the first convnet revolution. NVIDIA’s customers are dying to see worthwhile competition.
> But all this could be replaced by an abstract class, perhaps some templates... And if you disable stuff you may not need (RTTI, exceptions) then you'd get just as efficient compiled code.

Isn't it just that your personal in-head GPT has been trained on C++ and wants to see it everywhere? It's not so easy to make very small embedded implementations and there's a reason after 25+ years C++ has not made inroads there.
I don't think so. It depends on the product, ie. Digital Trends are good for stuff like TVs, Serious Eats have great kitchen-related stuff reviews, etc...
Inside Windows Product Activation (2001)
Shameless plug... I do!

Big Old List of EVERY Custom Amiga Chip and Chipset Name I Could Find

https://amigasource.com/bol.php

Please visit AmigaSource.com!!! Since 2001... Your BEST source for Amiga information. Again... ** Always Under Construction ** (Over 3000+ Amiga links for your viewing pleasure! -- Please help spread the word!)
https://archive.is/ohSUA
I was under the impression that hacker news was not a place for sharing personal anecdotes, but rather a place for factual debate.
What basis do you have for saying that, and for refuting the AP Style Manual? Are you claiming it says otherwise?
The domain name right along the title should give you a hint…
I don't have a large amount of time to devote to this.
But no, google is not out.
They just choke slammed ChatGPT with the Gemini announcement.

10m context with that retrieval rate is such a monstrous leap.
And to top it off, we got LargeWorldModel in the same week, capable of 1M token context with insane retrieval rate in the open source space.
So not only is the open source world currently technically ahead of ChatGPT, so is Google.
Which is why they had to announce SORA, because google's model is so far ahead of the competition.
That's also why it will probably be ages before we get access to SORA.
Now don't get me wrong, the average person can't afford 32 TPU's to run LWM, but we already have quants for it, which is a step towards enabling the average person (that somehow has 24-48gb of VRAM to get a taste of that power).

What is also striking is the fact that the new models are all multimodal as a standard. We not only leapfrogged in context size, but also in modalities.
The model seems to only benefit from having more modalities to work with.

I think the statement Bill Gates made claiming that "LLM's have reached a plateau" itself indicates they don't believe they can make more money from training better/larger models. Which indicates that they already did as well as they could with their existing people, and are now "years" behind google.
I never thought google could catch up, especially after their infamous "We have no moat" situation. But it seems they actually doubled down and did something about it.

To a lot of people, last Thursday was a very nihilistic day for Local Models, as the goalposts shifted from 128-200k context to 10M tokens with near perfect retrieval. It's literally insanely scary.
But luckily we got LWM, and that means we have only been 10xed.

Now the local people will work on figuring out how to bridge the gap, before being leapfrogged again. What is really insane is that, we have had LLAMA2 for over a year now, and nobody else figured out how to get this result from it, despite it being around so long.

I still believe there are modifications to the architecture of MoE that will unlock new powers that we haven't even dreamed of yet.

Sorry, this was supposed to be well thought out, but it turned more into stream of consciousness, and I honestly had no intention of disagreeing with you.
> Not switching between mouse and keyboard to navigate,

I found the opposite solution also works:D A combination of keynav, a tiling window manager, and ex. vimium[0] make reaching for the mouse pretty much optional:)

[0] The key feature is a hotkey to quickly select links with the keyboard.
Sure, they're so far advanced that we can't see them, and they just came over here to chill. Like a nice vacation for them. No desire to extinguish us or talk to us. Just hanging out.
Thanks. I searched an older edition of the Guide and my (lack of) results are the basis of my question; I think the current online version requires a subscription.
Yes, but Apple sells mosrly overpriced luxury products that needs rich executives for the customers to identify with.

We don't want our medicine makers to have the same attitude.
I found your comments helpful. Thanks.
A team I'm doing some work with uses eslint and has not configured prettier, so instead of simply having everything get formatted correctly, I get red squiggly lines under blocks of code because of an omitted meaningless whitespace character.

There are a few linting rules that can help identify semantic errors or dead code, but only a small number of rules are needed to get all of the benefits.

Autoformatting (prettier, gofmt, etc.) is the way to go.
I wouldn't guess, I am definitely certain that both Groq and Graphcore will be bought out soon.
Stacks for Simple Static Sites
It’s a streaming device to play the games from your PS5 remotely.

Just an accessory.
You can get some relatively affordable 10G-BaseT SFP+ transceivers these days too. My home server has a DAC to a switch whilst my desktop is connected at 10G over Cat6. I don't really have the ability to saturate 10G but can quite easily exceed 1G for file transfers. It would be nice to get a laptop dock with 2.5G+ Ethernet as well, but I haven't gotten that far yet...
While BTRFS' RAID has issue, BTRFS on RAID can be done.

I do something like this, https://kb.synology.com/en-us/DSM/tutorial/What_was_the_RAID...

Basically, mdadm, then on top, format with BTRFS
I didn't know about the guideline, so thank you, even if I disagree with it. A shallow dismissal is anyway a signal you can ignore, but meaningful, especially when people flock and say the opposite.
Maybe people don't have definite ideas about things, and just want to say "no" because they feel like, and that's freedom, imho.
Anyway I don't use types or type checking, I think that they are the crippling reason why I switched to Python in the first place. There are plenty of typed languages or IDEs that do completion nowadays (which I don't use), but the freedom to completely rearrange the architecture of a program that comes from very loose coupling is not easily traded for compilation time warnings. We've been doing tests because typing blocked us from development, and we just wanted to be able to screw things if we wanted.
The company I work for, Odoo, big opensource ERP, also doesn't have types at all.
If I wanted types, or a fast language, or "precise interfaces" I would definately rewrite. When I developed in C#, most of the coding time was spent on typing, interfaces, adapters, factories.
2) you do the same in Helix in its visual mode, so no waste. But also it's not needless, precision is the need, instant visual feedback is what serves it, showing you the target of your actions

1) have you tried it long enough (might stop bothering)? Also, maybe it could be improved by highlighting after some delay so on move you only get a highlight when you stop, not for each individual word you jump over

F/t is also a lot less precise with multiple cursors since you don't have a single unique mark, so you'd need to get there gradually (and you wouldn't count, it's also a waste with small numbers, pressing a "word forward" key 3 times is more ergonomic), and that's where seeing is better than imagining
> It is easily worked around with e.g. subresource integrity, or rolling your own signing scheme.

Or, you know, not loading resources from third parties in your secure web application.
There's eviacam, though it's code rotting:(
If you want to keep doing programming in a way you are already familiar with, and are not willing to change your way of thinking about programs, yes then it's a bad fit. If you want to write reliable programs, there is evidence that changing the way we think about and express programming problems, can have substantial effects on reliability.
It turns out that compression, especially for media platform, is trading off file size, quality, and compute. (And typically we care more about compute for decoding.) This is hard to represent in a two dimensional chart.

Furthermore, it's pretty common in compression research to focus on the size/quality trade-off, and leave optimization of compute for real-world implementations.
Because VSCode is also not an IDE.
Ask HN: Open-Source Query Builder
I'm looking for a frontend library that would take a database schema as input, and then provide a visual query builder like Metabase that supports filtering and aggregation. The output would be SQL that I would then send to the server to get data and render charts/tables.

I'm surprised that this doesn't exist as many SaaS want to provide self-serve analytics to their users.

I've found 2 react query builder libraries but they don't support aggregation at all [1] [2].

Did I miss something? Any reason why this doesn't exist? If we built this open-source, would you use it?

[1] https://github.com/react-querybuilder/react-querybuilder
[2] https://github.com/ukrbublik/react-awesome-query-builder
> But is this such a big problem?

It really is. It wastes a ton of time even if the user explicitly requests that code listings be printed in full.

Further, all the extra back and forth trying to get it to do what it is supposed to pollutes the context and makes it generally more confused about the task/goals.
if you're looking for a fairly flexible stack that supports all kinds of frameworks and programming languages, checkout https://primatejs.com
Yeah, but we also do not know whether there is an giant mass-less invisible teapot shaped like an unicorn circling the outer rim of the solar system.

The problem with theories that cannot be tested is, that once you accept them arbitrary things follow from them. That teopot could influence the thoughts of our politicians for example.

While I have nothing against a little bit of fantasy, it is always important to keep the understanding that those are in fact stories and that they appeal to certain people precisely because they are literally detached from this harsh reality. Don't get me wrong, you can also be fascinated with the possibility of there being aliens without having to believe in them being already here.
LibAgar cross-platform GUI system
Not at all, no bulk video editing..that will miss out the real beauty of video editing.
Goal is to make content creator/video editor task easy. GPT of video editor + Freedom to make changes if needed
Hah, I missed that. The corrugation was used on Junkers because it added a lot of strength. The downside is the drag it created.
>He was among the loudest voices pushing to oust Harvard’s first Black president, Claudine Gay, after concerns about her handling of campus divisions around the Israel-Hamas war snowballed into questions about plagiarism in her academic work. By January, Ackman’s second wife, the glamorous and slightly uncategorizable scientist-architect Neri Oxman, was being accused of plagiarism, too, and Ackman was promising to not only sue Business Insider, which published the allegations, but to use artificial intelligence to audit the work of other college professors as an act of spousal vengeance.

I am reminded how much of a clown show that whole event was but I didn't know about this part with AI.

I first heard about Ackman when he was an "activist investor" against ADP.

>Ackman said management complacency had turned ADP into an inefficient corporate slugabed pushing outmoded products that even a top sales force could not sell. ADP countered that Ackman brought no new ideas to the table, risked disrupting the company's steady path to growth and behaved like a "spoiled brat."

There may be some truth to the statement. ADP serves a huge load of customers and some complain of their products. But I never forgot how this affected friends who worked at the company: real people just trying to do their best at work and for their families. It really cemented an idea that is brought up in the Bernie Sanders wing of the the left: Billionaires are a policy failure.

Seriously F this guy.
DJI – The ART of obfuscation
It looks like standard C99 variable-length array (VLA) syntax: https://en.cppreference.com/w/c/language/array#Variable-leng...

The major difference is when the array is multi-dimensional. If you don't have VLAs then you can only set the inner dimensions at compile time, or alternatively use pointer-based work-arounds.

Even in the case of one-dimensional arrays, a compiler or a static analyzer can take advantage of the VLA size information to insert run-time checks in debug mode, or to perform compile-time checks.
PSP was the golden age for me.

I started university the year it launched in the UK but I already had a Japanese import PSP1000 I'd bought the year before.

Studying CSEE a few friends and I were all over the hacking and homebrew and wrote a few apps/tools ourselves.

We spent all of the boring lectures gaming on our PSPs, modifying them, dumping and swapping games etc.

Later we got Compaq iPaQs and modified those, installed Linux etc and dreamed of a Linux phone, then came the first iPhone, I imported one of those the year before it released here (UK) and everyone who saw it in the EE department were amazed.

Then of course came Android, the dream came true. Fast forward over a decade and Google has well and truly put a bolt through the head of that dream.

It was a different time in my life, but I definitely feel it's (tech/gadgets) all a lot less interesting these days.
Yeah data plays key role here..and the fine tuning ..need to see how it can be doable
What's incredible is that nobody is yet in jail for all those swattings
Imagine the Voyager probe ending up on a planet and being discovered in 500 million years. It wasn't sent with extinguish plans, not will it be able to communicate.
> was famously commented on by a Google exec

It was just a rank and file IC.
How ElevenLabs is Preparing for Elections in 2024
> Fundamentally, if you write a wrapper around memory management that keeps track of allocated resources, much in the same way how rust includes some runtime code during compilation for memory safety, you gain the same functionality.

Can you substantiate that? There are commonly employed tracking allocators, such as ASAN that can catch certain kinds of UB, and UBSAN other, and with special interpreters you can catch even more. But even basic ASAN is more exhaustive than what you are suggesting, and it provably can't provide the same guarantees that safe and sound Rust gives you https://stackoverflow.com/a/48902567:

> And that is not accounting for the fact that sanitizers are incompatible with each others. That is, even if you were willing to accept the combined slow-down (15x-45x?) and memory overhead (15x-30x?), you would still NOT manage for a C++ program to be as safe as a Rust one.

Also, I think you misunderstand the way Rust works, it does compile-time ownership checking, which allows it to avoid run-time checking, so this part "same way how rust includes some runtime code during compilation for memory safety" is factually wrong.
(Take with a pinch of salt, I don't know economics or social science.)

It seems that even though economic growth raises all ships, just some more than others, inequality causes social unrest even if they were in a better position than before (e.g. having access to new innovations and a higher standard of living).