skysight-inc/HackerNews huggingface dataset:
> When people make rules and say it is to stop X, I always ask why don't they just make a rule to stop X.

Because the more general the rule is the easier it will be to enforce it. To stay with the example if there is a rule against auto shops, and you run what in effect is an auto shop but you say you are not taking money for it can we shut you down? Will we need to go to court where expensive lawyers battle it out what it means to be running an autoshop? That is a lot of cost and even more uncertainty.

If the rule is about not being allowed to work on cars at all, then all they need to show is that you worked on a car. They don’t have to care who owns the car, they don’t have to show if it was commercial work, they don’t have to show if it was a regular activity or not.
Thank you. Did you mean to #include stdio.h twice?
Uh oh it's Magic (comparing magika, file, siegfried)
My understanding is that's an implementation detail, not a design. That is, there's nothing inherently anti-Rust or -Python there, but they first worked on the languages they needed to use themselves.
The Google Pay Android app is such a mess. I live in Russia, where the app is now useless for its main purpose, but I still use it for loyalty cards. But whenever I travel abroad, and use it for actual payments, it changes its entire UI to some supposedly newer design. And then reverts back to the old one when I return! IIRC it even changes its name and icon.

Someone, somewhere, somehow, wrote the code that does that. Someone thought that it's a nice idea to pack two copies of the app into one apk. And apparently no one ever questioned this decision. I can't even...
Of course. Blue collar work has always been discredited in the past few decades since if you were doing it you were seen as the one who failed to get in to college. How many devs did you ever see greeting the cleaning staff?

Unfortunately your status in society and the way you get treated comes from how much money your profession makes. SW devs were also not very popular until google and meta started the bidding war.
To be fair most framework and library examples or showcases never show the error handling or edge case pieces so I don't think it's unusual.

htmx doesn't promise to do away with client side code. Most uses of it I see still have client side code. They tend to go in one of two directions with it.

1. Web Components to encapsulate client side error handling and behavior.

2. The hx-on attribute for scripted event handling.

It's not really an anti Javascript library. It's more of a different approach to server side state synchronization.

I have to dynamic apps I use for personal usages. One is an offline first spa app so htmx won't work well for it. It's all client side code with json apis. The other has no offline use case and htmx is a great fit for it but I still have several hundred lines of vanilla javascript in there for client side behavior bits.
They released it like this because people inside Google were too afraid to speak out against it. Only now that people outside the company are shouting that the emperor is naked do they seem to suddenly notice the obvious.
I still just cannot wrap my mind around how we could get people there, and then all this time later have lost that ability. What happened?
Why is bias a problem?

When you prompt "business man" and it outputs a white man, this is quite probably reflective of representation in reality.

Whether this overrepresentation is even a problem at all is debatable as the idea that every job, role or subgroup of people is perfectly diverse or that this even should be the goal isn't just ridiculous, it's demographically impossible.

If you do have a problem with a specific representation in actual reality, reality itself should change. Which it does, it just takes time.

In the meanwhile, just prompt "black business man" if that's what you were after.
A lot of people in China can afford to spend $9.50 on luxuries. It’s not North Korea.
Where is this promise on the htmx website?
Raise your hand if you know an actual position at an actual company that was made redundant by ChatGPT, DaVinci, Stable Diffusion or related tech
Definitely wise - you're more of a veteran here than I am. And of course that's the standard any company/analyst should shoot for.

I'm curious how policy will shape anything outside of that standard, however. Because for a company, that philosophy (full mitigation is not the goal, risk acceptance is) is sufficient. But for civil function, it stops a little short. It's unacceptable at the policy level if major banks go offline for 48 hours - or if traffic lights stop working on major roads - or if the hospitals go offline.

I don't have a solution, either - I'm just pointing out that when Cybersecurity is talked about, it really isn't understood from this perspective. Really, all we can do is mitigate risk, BUT, there will be a time where all these vectors will be utilized (hopefully not) and when/if that happens, people will debate how we got there. It's a near-impossible thing to avoid.
And apparently live video..
Uber burned 250m a year for 10 years without making a profit; are you sure your logic still applies?
React on the backend + HTMX on the frontend would be hilarious. Someone should write a tutorial on this pretending to be serious.
I see resolutions for protecting against the now-known error modes discussed, and better alerting to get the on-call engineer (aka always Zeke :D) looking into things quicker, but curious how they might approach preparing for "unknown-unknowns" that will come in the future.

Are there good ways for a small-team to proactively stress test a system without mucking up customers? Open question.
You can save `.html` and `.mdx` single files, I just don't have great support for collections yet (I'll need to sort out a few things as right now it expects a frontmatter to display the table).
And people who comment their code. Even if it is just a little. I swear, 90% of my time in coding is just fiddling around with functions to see what they do so that I can actually pull them together in the right way. If there was just a little documentation this would greatly reduce my time. It should also be in every team's and company's best interest because people hours are expensive. It should also be in the best interest of an open source project because more people will be able to build on your stuff. It should also be in your own interest because taking the 30 seconds to a minute to write those lines interrupts you and allows you to rethink and verify your method. So not doing it is only in the interest of moving fast and writing spaghetti code. But you're not actually moving fast. You move fast at that moment, but not in the race.
The default place for younger online communities is now overwhelmingly Discord. It's not a 1:1 replacement, but that's where the people are.
Yes! One of my university textbooks and I still remember what a nice physical artifact it was.
Red-eye gravy is another example of pork and coffee together. It's delicious. But, like the other examples, no milk.
Yahoo lays off the leaders of Engadget
Capital One-Discover merger deal termination fee set at $1.38B
It's a little like comparing HTML and JavaScript, isn't it? React is a JavaScript library (in the sense that you write your own code that calls React functions). Whereas HTMX doesn't integrate with your application logic at all. It provides a mechanism for placing your application components on the screen.
It's largely a matter of incentive. In the sixties, the US had an incentive to prove that it had more advanced technology than the USSR. Once we proved we could land on the moon, the novelty quickly wore off for the public, which influenced Congress's decision to cut funding for the Apollo program.

We also haven't returned to the moon yet because of cost, I would imagine.
Delphi supports inline variable declarations.

https://docwiki.embarcadero.com/RADStudio/Sydney/en/Inline_V...
Full circle, maybe. But at least a bunch of mid level product managers got promotions.
> Yes, it can be phished if you fall for that, but it removes several attack vectors.

How was the first factor (the password) compromised?

Assuming the user is using site-unique passwords, in 99% of cases where an attacker obtains a functional password they can get at least one TOTP code or the seed in the same manner. (ie, if I can steal your password DB, odds are pretty good for me stealing your TOTP seed DB as well.)

The outcome of a single successful authentication is a longer-lived session cookie. Once an attacker has that they can reset your creds (usually just requiring re-entering the password) and the account is theirs.

IMO, the only 2nd factor that matters are those that mutually authenticate like PassKeys / FIDO keys.
Is this still quadratic to prompt size? Could somebody explain?

Because paying like $100 for a 2M query wouldn't be cool for most of us, so the applications would be very limited.
FTC bans antivirus giant Avast from selling its users data to advertisers
This is already the law in many places.
This is an article about Canada but, for example California Model Penal Code 466 says that:

Every person having upon him or her in his or her possession a
picklock, crow, keybit, crowbar, screwdriver, vise grip pliers,
water-pump pliers, slidehammer, slim jim, tension bar, lock pick gun,
tubular lock pick, bump key, floor-safe door puller, master key,
ceramic or porcelain spark plug chips or pieces, or other instrument
or tool with intent feloniously to break or enter... is guilty of a misdemeanor.

Basically, if you are carrying anything that will be used for breaking and entering, with the intent of breaking or entering, that also is a crime.
Well-enough written. A good reminder.

Miffed that they are numbered 1-10, not 0-9. Something to work on in my next lifetime.
A major AT&T network outage is currently affecting tens of thousands across the U.S., disrupting cell and internet services. Restoration efforts are underway, with all affected customers reportedly back online. The cause remains under investigation by the FCC, FBI, and DHS amid concerns over cybersecurity. Stay connected for updates and use Wi-Fi calling if you're impacted.
> Jco: a native Javascript WebAssembly toolchain and runtime built for WebAssembly Components and WASI 0.2

> WebAssembly Components are an extension to WebAssembly to create strongly typed interfaces between different programs. WASI 0.2 is a re-work of the “WebAssembly System Interfaces” based on WebAssembly Components

https://github.com/bytecodealliance/jco
rope or ringattention?
> TOTP or stronger, please

One of the biggest weaknesses with TOTP apps I've tried using is that you have to remember to transfer them to a new phone before you get rid of your old phone. I once got locked out of a domain registrar because I set up TOTP on an old phone many years back. That was long gone by the time I wanted to do something with my domain.

TOTP is fine, but always give me recovery codes I can print and out and keep with my other important documents. Too many services don't do that.
"While in-store and online payments via Google Pay remain unchanged"

Subway payments should keep working.
> So what I’m looking for is the 30 minute broadcast where these clips are used, where a less important story (objectively! I don’t want personal content that defeats the point!) gets perhaps broadcast cut down to 10 seconds while the big headline clip gets the full 3 minutes.

Maybe the solution simply is that what you want is not youtube? Horses for courses. If broadcast TV fits exactly what you desire then that is what you should watch. Ain’t nothing wrong with that.
Section 230 lets them pretend they don't own the content, shielding them from liability, yet they can simultaneously claim ownership enough to sell it. That's effed up. Either it's not theirs, it's mine or ours, in which case I get to sell it or at least get a cut, or it's theirs in which case they're liable for any illicit content and should face those suits. Which is it, Silicon Valley? Is my post yours or is it mine? You shouldn't get to have it both ways.
Yeah i am gonna even judge anyone who says copilot does not make them productive. Like what code could you possibly be writing that copilot is not autocompleting you properly? Yeah if you dont know what to write then copilot cant auto complete you.
Google hasn't had principles since "don't be evil" got deleted from the mission.
Any piece of software reflects the organization that built it.

The data transferred is going to be almost entirely analytics and miscellaneous 3rd party scripts, not the javascript actually used to make the page work (except for the "elephant" category which are lazy loading modules i.e. React). Much of that is driven by marketing teams who don't know or care about any of this.

All devs did was paste Google Tag Manager and/or some other script injection service to the page. In some cases the devs don't even do that and the page is modified by some proxy out in the production infrastructure.

Maybe the more meaningful concern to have is that marketing has more control over the result than the people actually doing the real work. In the case of the "elephant" pages, the bloat is with the organization itself. Not just a few idiots but idiots at scale.
Notes from Buffett Meeting (2008)
Not clear to me that it's "indigenous". They're surely buying lots of ASML and TEL and AMAT tools like everyone else is, just not the fancy new EUV stuff they can't get. Absolutely it would be news if China was generating 28nm chips with a 100% domestic industrial base. But I don't think that's the case?
> This happens in organizations that don't measure and respect precursors or leading indicators of success/failure

This happens in organizations that become over reliant on metrics and indicators of success/failure instead of recognizing that these are fuzzy concepts and indicators are just that... indications, not answers.
Needing the pkl CLI adds a runtime dependency I'd rather not have.

Is there any way to use pkl from Go without needing to shell out? Maybe Go library that calls a wasm blob or something?
This is exciting yet a little scary TBH
I love this demo. It's easily accessible, fast, and intuitive. It's stunning that we can get this level of quality so easily.
"turning a big dial taht says "Racism" on it and constantly looking back at the audience for approval like a contestant on the price is right" - dril
· menstrual cups

· zip ties

· disposable diapers

· transparent blast shields

· bulletproof glass

· more generally, safety glass other than tempered glass—tempered glass shatters into tiny pieces that won't slash open your arteries, but sometimes safety actually requires the broken glass to remain intact, as in car windshields

· transparent riot shields

· safety glasses and visors (glass glasses increase the risk of eye injury from projectiles in the right size range, rather than decreasing it)

· plywood, particleboard, and osb (though perhaps in theory you could make them with binders that aren't plastic, plastic resins are for some reason the only things actually being used, so i consider it unproved that you could make them with something like hide glue)

· glue strong enough to reconnect the broken stem of a wine glass

· superglue (superglue is a plastic)

· hot glue guns

· o-rings and other gaskets that don't leak. historically these used to be made of leather, but leather is of course porous. as a result

· virtually anything that hermetically seals around a rotating shaft

· the monterey bay aquarium

· photolithography resists, such as used for making integrated circuits; all the photoresists used for photolithography are plastics. so without plastics you'd have to find a different way to make integrated circuits

· laminators, the kind that sandwiches paper between two sheets of transparent plastic

· aluminum soft drink cans, which depend on a thin coating of plastic to protect the aluminum from the acid

· mechanically stabilized earth walls, which are used for most cuts into the earth for highways and underpasses (often mistakenly believed to be concrete, because concrete plates are hung on their faces). these depend on layering the earth with geotextiles to keep it from slumping over time, and the only natural material that could be used for the geotextiles would be asbestos, which is unacceptable due to the resulting health hazards. natural organic materials would rot and metals would oxidize. conceivably glass fiber could work, but it might be unacceptably hazardous as well

· nomex firefighting suits; no natural material combines the light weight, heat resistance (370°), thermal insulation, and flexibility that aluminized plastics do

· the most common types of 3-d printers (fdm, sla)

· scratch-and-sniff

· pencil erasers (natural rubber, again)

· car batteries; only plastics have the necessary combination of acid resistance, impact resistance, electrical insulation, and waterproofness for this application

· hepa filters

· n95 masks

· carbon fiber (made by carbonizing fibers made from a thermoset plastic)

· silicon carbide fiber such as tyranno (made by carbonizing fibers made from a thermoset silicone plastic)

· asbestos-free brakes (nomex/kevlar again)

· fire poi (kevlar with fiberglass or cotton)

· ping-pong balls

· knife-resistant gloves for meatpackers and cooks (kevlar again)

· shrinky dinks

· breathable waterproof fabric (gore-tex)
I think it just reinforces the point. It isn't even a significant proportion of a person's cancer risk.

It's like worrying about the KGB covertly planting listening devices in your house while tech companies are openly planting listening devices in your house. It's not at all unreasonable to be concerned about invasion of privacy, but the people who think they're at significant risk of being individually targeted by the security service of the former Soviet Union because of what they saw on TV have got a screw loose.
I loaded one of the pages up for fun expecting an error message. My mind was blown when I saw a loading screen and then the applet load. Pretty awesome. I've got to try swingjs with some applets I wrote decades ago.
I don't think it can't be done right, but it's been cargo-culted pretty hard at Fortune 500 companies. But the best scrums I have ever done have just been literally post-it notes on a whiteboard - I think Jira ads a level of complexity that is unsustainable for most orgs.
I’m curious if you’ve looked at the prior attempts at memory safe variants of C or compiler-assisted safety for legacy C? They are really safe with better performance than Fil-C is. More important, you might find some of their ideas useful in your own work.

Here’s a few I remember:

CCured
https://people.eecs.berkeley.edu/~necula/Papers/ccured_topla...

Softbound + CETS
https://people.cs.rutgers.edu/~sn349/softbound/

Clay Systems Language
https://www.eg.bucknell.edu/~lwittie/research.html

Cyclone Language (Rust drew on it)
https://en.m.wikipedia.org/wiki/Cyclone_(programming_languag...

Fail-Safe C
https://staff.aist.go.jp/y.oiwa/FailSafeC/index-en.html

CheckedC
https://github.com/microsoft/checkedc

Also, one can combine subsets of C with FOSS, static analyzers that can handle those subsets. Then, compose only in ways that the tools can handle. Then, combinatorial and fuzz testing of the interface composition.

I know you’re doing the project for fun while exploring specific ways to achieve your goals. So, these are just some links and concepts that might help on your journey. Lots of folks don’t know about prior work in this area. So, I keep passing it on.
Gotta keep the gimmicks coming. Or just train your baristas on an Italian espresso machine and use fresh roasted,
lighter roasted beans. But the brand is gimmicks.
A few years ago I did an embedded Linux project on an ARM7 CPU without an MMU, a vehicle tracker for trucks with GPS, cellular modem, ODB2 interface, and other I/O.

Lack of MMU caused some unexpected issues:

* Because there is no MMU, there are no shared libraries. All the binaries have to be statically linked. We had a total of 2MB of ROM, of which about 1M was the Linux kernel. So we ran out of space for the programs we needed for the application about 3/4 of the way through the project. The solution was to use Lua, which was a 200k binary, and it could run scripts to do some things.

* Lack of MMU means no memory protection between programs. One program can step on another program's memory. Just like the good old days of DOS. Ouch!

* We started with the ucLinux distribution, which is pretty lame. A lot of programs in the tree didn't build. We ended up rebuilding with Yocto, and making patches to things where necessary.

* We found other entertaining bugs: https://www.cogini.com/blog/debugging-your-space-probe/
it really feels like GPT-4 is Google and Everybody else is Yahoo/Bing.
i.e cute but not really
Any reason why we're looking at uncompressed data? Some of the listed negative examples easily beat GMaps 1.5mb when compressed.

Also, I'll give a pass to dynamic apps like Spotify and GMail [1] if (and only if) the navigation after loading the page is fast. I would rather have something like Discord which takes a few seconds to update on startup, than GitLab, which makes me wait up to two seconds for every. single. click.

The current prioritisation of cold starts and static rendering is leading to a worse experience on some sites IMO. As an experiment, go to GitHub and navigate through the file tree. On my machine, this feels significantly snappier than the the rest of GitHub. Coincidentally, it's also one of the only parts that is not rendered statically. I click through hundreds of GitHub pages daily. Please, just serve me an unholy amount of JavaScript once, and then cache as much as possible, rather than making me download the entire footer every time I want to view a pipeline.

[1]: These are examples. I haven't used GMail and Spotify
I'm pretty sure it was because people were seeing other people's data. Feel free to search for sources of you're curious.
"We were building something similar in house, but then we found Danswer". That's something we keep hearing all the time :D

(1) We handle chunking, embedding, building the keyword search index, etc. all on our end! We use Vespa as both our Vector DB / Search Engine (it allows a custom hybrid search, which we've found to perform really well). So no, you would not need to bring your own Vector DB - everything needed to run the system is managed dockerized and managed by Docker compose / kubernetes (whichever you choose).

(2) It would be straightforward! We both offer an API to ingest documents into the system as well as a pretty simple connector interface that you can implement to add your own custom connector (https://github.com/danswer-ai/danswer/blob/main/backend/dans...)
> But it does, there is plenty of uncertainty: you can have a long sentence that wraps multiple lines, includes quotes and maybe code snippets with . inside them or just ..., so you can't easily tell where a sentence begins and where it ends.

Multiple lines or … doesn’t matter to vim if you want to something with a sentence since a sentence is defined as ending at a '.', '!' or '?' followed by either the end of a line, or by a space or tab. Any number of closing ')', ']', '"' and ''' characters may appear after the '.', '!' or '?' before the spaces, tabs or end of line. A paragraph and section boundary is also a sentence boundary.

One code snippet inside a sentence with ˋ. ˋ could be d2) or simply d). Feel free to add . For every . Or count them.

Word selector: try W to select that function with a , in its name. But maybe it’s better to look where your special word ends and do what you *t*+I’ll that end like ct)