skysight-inc/HackerNews huggingface dataset:
I'm currently using xpbd to work on a physics driven 2d fighting game, and as of right now, I'm really enjoying it! Until now there was only one problem where some collisions would vanish for one frame. But stuff like that can be easily worked around and even better reported and fixed.
Microsoft and Mistral AI announce new partnership
Hey there,
CivitAI is fantastic, but there are times when I'm unsure which model can bring to life the art style I've just discovered. That's where FindSD.art comes in.

Simply drop an image, and FindSD.art will pinpoint the precise SD model capable of reproducing a style closest to your input. I hope you find it handy.
I’m not sure going public was the main issue. The barely thought out acquisitions and massive over hiring after 2020 were. If they were more conservative they’d probably already be profitable
Wow, somebody has a deep wound that still hurts.
Keep in mind that according to their forum you'll be charged $30/100GB for bandwidth over free allowance of 100GB:

https://community.render.com/t/confused-about-the-free-tier/...

> Exceeding allotted Bandwidth does result in automatic overage charges. $30 for additional 100 GB blocks.

So the same shady pracrice as on Netlify.
It means that they will charge you 20k (a year's rent for me, no biggie) instead of 100k for your free website, or 5k if you got lucky.
Title truncated to fit within character limit.
They might not get Ddos protection because Shirky principal. Institutes further problems they are meant to solve
It was the example for the makers of Path of Exile. I share Chris Wilson’s talk (Designing Path of Exile to Be Played Forever) here frequently!

https://www.youtube.com/watch?v=tmuy9fyNUjY
If it’s a static website; use GitHub to host and put behind cloudflare.

If you need a nice front end, spin up a Wordpress instance with a provider like digital ocean or vultr or any other number of places. It’s like $5-10/ month and has terabyte bandwidth without issue typically.

Then put the site behind cloudflare or at least configure a plugin for ddos protection.
I pay less than $5/mth for a VPS with static IP and 1GB/mth transfer. If I get close to any of my CPU/Memory/Disk/Transfer capacity I get a friendly email letting me know that I might want to add more capacity.
If you have used any modern product from a big tech company you have likely interacted with AI (probably some form of DL or statistical learning) in some capacity.

Do you use gmail, youtube, or google search? All 3 products use AI for several features, big and small. It might not register immediately since its not as overt as ChatGPT, but recommending you a new video to watch, a new restaurant to go to, or some product to buy is likely driven by some form of AI. Do you drive a car with lane keep assist? Same deal.
We use https://cube.dev/ as intermediate layer between data warehouse database and Superset (and other "terminal" apps for BI like report generators). You define your schema (metrics, dimensions, joins, calculated metrics etc) in cube and then access them by any tool that can connect to SQL db
If the attacker downloaded the 3,44mb audio file that OP mentioned, aren't we talking about outgoing traffic?
You presumably already have enterprise pricing discounts agreed though?
This is my worst nightmare as a bootstrapped founder. And that there's no way to put a limit on spend is ridiculous. Someone that doesn't want me to do well can simply ddos me into bankruptcy out of nowhere.

Just went through Vercel's docs:

---

"Vercel helps to mitigate against L3 and L4 DDoS attacks at the platform level. Usage will be incurred for requests that are successfully served prior to us automatically mitigating the event. Mitigation usually takes place within one minute.

Usage will be incurred for requests that are not recognized as a DDoS event, such as bot and crawler traffic.

You should monitor your usage and utilize Edge Middleware to protect against undesired traffic based on its IP, User-Agent header value, or other identifiers."

---

That doesn't help me sleep well.

I feel that by now, these hosting providers should simply adopt best ddos protection practices and take responsibility for failure to protect.

"You should monitor your usage and utilize Edge Middleware to protect against undesired traffic based on its IP" - there should be some really good defaults for this right?

Clearly it's possible - Cloudflare's ddos protection is worded more strongly.

I'm willing to pay more for the service for peace of mind. Like, even $10/mo more to insure against getting smacked out of nowhere.
Well, AWS is our "consulting company" now. Maybe they are not the absolutely cheapest one. But they are easy to work with if you are small.

Yes, you need to think that you don't go into the worst cost traps. But no form of subcontracting/purchasing frees you from making the right choices.
They are under an exclusive contract with MSFT, they can't do anything.
https://www.ferrousmoon.com/forums/viewtopic.php?f=55&t=2777

My memory is not 100% correct apparently :)
There is an archived repo on Github named Onlink too.

I originally read about this in a past HN thread[1], and played with the game a bit

[1] https://news.ycombinator.com/item?id=38048888
Yeah Like wtf is wrong with that? Are people just to lazy to check what the conditions are when exceeding traffic? I'd never ever sign up for anything that just keeps charging...!?
We really need to have list of these shady SaaS that will try to charge you money when you using their "Free" tier and never given them credit card.

This should not be tolerated. Full stop.
I think the SDL2 bindings for Common Lisp went through a similar realization and any kind of finalization was removed.
IMO they ought to have told others. They werent at fault, the process for procuring parts failed. The fact they kept quiet about it is more damning to me, than causing the outage in the first place.
Yes, but nothing novel, and this is a recent development (within the last few weeks).
Fair – but again: If it just stayed frozen in the state it is now (and that assumption is about as unreasonable, as it being "perfect" in a year), it's already going to be tremendously useful for increasingly many people (when cost will go down, and they will, accessibility will go up) — at least until something better comes around.

For those who extract value right now, the simple alternative (just not using it) is never going to be the better choice again. It's transformative.
I'm not sure how you read my comment as somehow defending the current implementation or the comments it has generated so far.
Government should buy insurance from a company that is then incentivised to build out mitigation and resiliency projects.
Yeah I think there is potentially value in generating comments at the time of generating documentation - but not actually storing them in the code.
> slightly better than operating cashflow neutral

Only because they are issuing massive amounts of stock (IIRC ~15% per year) to pay their employees and not doing any buybacks. How sustainable is that?

> It's growing at a very healthy rate

The problem is that it’s not. YoY growth they reported yesterday was -2% and they are also guiding for negative growth next year.
We should just automete these comments:
MS: Oh No! Embrace Extend Extinguish !
Google: Oh No! killedbygoogle !
Meta: Oh No! So much Ads !
Apple: Oh No! Evil App Store policy !
The current hype is all about generative AI. That's what am calling a bubble and it has very little utility in the real world if any.
It would look somewhat like proboards/PHPbb forums, maybe a little more frutiger aero-esque.

All my design elements would be mostly meant to look like 98 to 2005 tech when blogs took off.

There would be no endless scrolling anywhere, everything would be paginated. I'd have Web Share API buttons but mostly just rely on the sharing features in the browser.

You'd post your posts as threads, and those threads would have all the usual tagging and calendar view stuff one might expect a blog to have, and you'd be able to use HTML/CSS to theme at the blog or individual post level, and use hyperlinks.

You'd be able to download everything you posted, and move it to another instance if it went down , which would be important since I wouldn't be hosting it myself in this perfect world of blogs

Everything would be digitally signed, so you could import someone else's posts from a different server if you wanted to comment or just archive them, and they'd appear as they originally did, verifiably unchanged.
true. I have a 9€/mo vps at Contabo for my blog and once boasted on HN that my small VPS is able to handle reddit/hn hugs which one user seemed to take personally and they started a DDOS against my VPS.

I only realized this after Contabo contacted me and said the traffic is so high that other clients service is also degraded and they will have to take my VPS down if its much longer (which was understandable). Gladly the ddos stopped soon.

But never was there any talk about any cost, they were very supportive
FreeBSD 13.3-RC1 Now Available
Got it. So we are calling all algorithms programmed to do recommendations AI now.
Abbott died 1977, and has a wikipedia page: https://en.wikipedia.org/wiki/George_Abbott_(GC) That's the most complete description of the rescue I can find, and is backed up by other sources. I haven't linked.

This source suggests he and Knowlton declined to exchange their medals: https://www.google.co.uk/books/edition/The_Complete_George_C...

Picture of Abbott: https://victoriacrossonline.co.uk/george-fawcett-pitts-abbot...
The TL;DR of this is basically there are too many people creating content.

Best thing that creators could do is tell other creators to quit. The author doesn't say this part but really that is what it comes down to.

Instead she offers a generic advice about diversifying the medium of delivery.
How is that related? It also happened a week ago, while this is new. Houthis cause as much havoc as they want, presumably to someday get a decent deal at the negotiating table.
Kload on FreeBSD – Hot Swap Kernel Upgrade and Switching w/o Reboot
> MBA folk think layoffs

What other options they had when they massively overhired during 2020 and 21? At this point 25% is probably not even remotely enough
And those dozens are all doing narrow tasks like summarization right?
Apache Superset is a good option if you are ok with open source.
I looked up the definition of scam and the goal is to make money out of the naivety of the victim. It involves a crisis, the illusion of shared exposure to a risk.

The price of cdn bandwidth is about 0.01/gb on low volume (cloudflare, aws, azure…) so op should be billed around $500 with 40TB. Netlify probably buys this for way less. He was presented a bill at $104k, « generously » reduced to $5k, still a x10 margin. Vercel and Netlify are outrageously expensive for what they do.
GhostBSD 24.01.1 Overview – Simple and Elegant Desktop BSD OS [video]
I would say it is a scam, because you can't set a budget limit.
I see the same few sponsorships constantly: Skillshare, Brilliant, Nebula, Hello Fresh, BetterHelp, Raid: Shadow Legends. I like to guess which one it's going to be when the creator starts telling a made-up story that leads into the sponsorship segment. The fact that it's the same ones, over and over again, across a wide spectrum of channels, makes me think that sponsorship is not yet a proven reliable source of income in the long term. A seemingly small number of companies are trying it out and it seems like they could easily pull out at any time. Patreon may be harder but it feels like a more dependable source of income than sponsorships.
First of all Hetzner would't let your server to be DDOSed for 192TB if it's not your normal usage. They'll likely just null route your IP if serious attack hit.

They also likely drop any charges if you escalate via support in case it was actually DDOS. E.g if you normally have 100GB / month and now you magically have 50TB / day.

What Netlify does is a scam.
I like using this neat newtype for wrapping FFI objects.

pub struct OwnedForeignInstance(NonNull<std::ffi::c_void>);

You can then, as you say, implement Drop to give up the foreign object when it's no longer needed.

impl Drop for OwnedForeignInstance {
fn drop(&mut self) {
unsafe { /* Destroy self.0.as_ptr() */ }
}
}

You can define an un-owned reference to the owned foreign instance using a newtype like this.

pub struct UnownedReference(PhantomData<UnsafeCell<*mut ()>>);

Then, you can hand out zero-cost lifetime-checked references to the owned foreign instance like this.

impl Deref for OwnedForeignInstance {
type Target = UnownedReference;
fn deref(&self) -> &Self::Target {
unsafe { &*(self.0.as_ptr() as *mut _) }
}
}

impl DerefMut for OwnedForeignInstance {
fn deref_mut(&mut self) -> &mut Self::Target {
unsafe { &mut *(self.0.as_ptr() as *mut _) }
}
}

Once you've done that, you expose your FFI functionality on UnownedReference, relying on auto-deref. Unless it consumes the receiver, in which case you put it on the OwnedForeignInstance. This way you can't destroy the object while references to it continue to exist.

It's not perfect, but it's the best way I've found so far for making FFI wrapper objects that look and feel like Rust objects while respecting the FFI contract.
There’s a very particular and typically libertarian leaning personality type on the internet who for whatever reason seem to only be able to look at the entirety of the human experience through the lens of economics and they just come to the most ridiculous conclusions.
I guess you haven't heard. Apple is already under contract with Nvidia for the H200 and B100. I guess hell froze over. Apple will not be able to participate in the AI space w/ out Nvidia. Nvidia dropped CUDA support for MacOS, but Apple is going to have to get it back. Wait for the deal that is coming.
I have an opinion about that too. It is super competitive and very democratised. Last I checked there platforms that would charge just $2500 per year for their GRC platform. That's pretty low in my opinion.

As a founder, I'll ask you why not start with the actually value proposition or goal you want to achieve right away. Why are you making your jouney very convoluted?
Every Netlify project is assigned a Netlify subdomain (i.e. `example.netlify.app`) that cannot be removed or proxied.

If anyone figures out what your Netlify subdomain is, it's my understanding that they can DDoS you and there's nothing you can do about it.
That it why I always refuse to use hosting services with on-demand pricing, especially for personal projects: in the worst case scenario I'd rather see it down for a few days than be indebted for whatever amount.
I'm hesitant to use "fancy" cloud service/hosting providers for reasons like this.

I don't understand why they won't just raise a 503 if the traffic exceeds the spend limit, or at the very least provide that as an option.
This is not what the anybody was remotely talking about, but I am feeling pedantic, and I thought it a fun fact. GPS native coordinates are actually a 3d Cartesian grid, however polar coordinates are so much more convenient to us living as we are on the surface of a sphere, I don't think anything outside of the deep internals of a gps receiver use the raw ecef coordinate system.

https://www.e-education.psu.edu/geog862/node/1793
Electricity costs money
Unlikely to be a popular question in this forum but in my view the most important topic we need to reflect on is “are we really better off with these services?” - obviously at face value there is utility or there wouldn’t be the market penetration but the externalities and issues of market dominance are becoming more apparent and pressing.

And if we agree that better solutions are needed then the question becomes “how do we create the market conditions that support those better outcomes?”

I’d really like to see kk reflect on this article with 10 years hindsight and see if he remains optimistic.
2nd class was bronze, apparently (source: https://www.naval-history.net/WW1MedalsBr-AM.htm)
The test for federal class action lawsuit includes 4 prongs, all of which must be satisfied: numerosity, commonality, typicality, and adequacy. [1]

I would think (as a former lawyer with only passing familiarity with class actions) that 'typicality' would be the key question.

> to determine typicality the courts consider to what extent plaintiffs’ claims are markedly different or are generally the same (for instance arising from the same event or pattern) as those of other class members with respect to the relevant legal theory and factual circumstances of the case. [1]

The defendant would probably claim that each plaintiff's issues are quite unique. However, this prong is apparently not based on the typicality of the specific facts giving rise to the lawsuit, but rather the typicality of the nature of the claim or defense. And it's apparently hard to 'win' (defeat a class action) via this prong. [2]

1: https://www.bonalaw.com/insights/legal-resources/what-are-th...

2: https://california-business-lawyer-corporate-lawyer.com/clas...
Id recommend avoiding Vercel like the plague. Their entire business model is poorly aligned with your interests as a customer.
If you value uptime, even through being massively attacked, they can offer you that.
Yeah, right? How is this not hypocritical given the post-Musk implementation of requiring an account to view tweets?
> Given the limited graphics capabilties of DOM, it is near impossible to build a paginated editor on top of the DOM.

This is developed by the some of the same people who work on paged.js [1], which enables exactly that and is actually used to create printed materials, including books.

[1] https://pagedjs.org/
I don't quite understand the other comments.
The press release says Mistra Large is available first on Azure. Which means it will be available on other platforms as well ?

Also, MS's relationship with OpenAI is that they have access to OpenAI's model for use in their products as well as potentially the source code. Is there anything similar with Mistral ? I can't find any such wording anywhere.
I recently rewrote a website/small backend API for a non-profit organization. I could've gone with a serverless architecture for our forms handling API and reduced spending to nearly the free tier, but I had no good way to protect against a scenario like this. There was just not good enough documentation about how to completely cut off spending in the scenario of an attack, and I wasn't comfortable leaving the organization open to a cost attack like this.

So we're using Github Pages for static hosting and a $5 box from OVH now. Unmetered bandwidth, plenty resources for our purposes. Cheap enough, and we will never, EVER, have to worry about an attack like this. Well worth it imo.

Imo, serverless is great for internal jobs where you can control spending. For public facing things, you have to be a lot more careful.
I left a comment earlier and deleted it because there is a long history of people being really awful to me for certain kinds of comments that are deemed perfectly acceptable by pretty much anyone but me.

And it was some variation of: If you are happy with your drinking, good for you and not my business and I would never tell you that you "should" drink less. If you aren't happy with it, I will suggest it may indicate you have an unidentified medical issue.
Kind of interesting watching it add up. Any optimization on its own would be pointless.

I struggle with this. The only cost savings projects I've had success pushing forward are when it's fairly large. But I wouldn't be surprised if most waste is kind of like a death by a thousand cuts where it's to expensive to address them individually.

For some of the these, if you use a engineers pay of 100/hr, if you want to save 2000 a year you need to ship the whole thing in 20 hours, just half of a week of work. It's almost not worth talking about using the hourly rate.
Nebula is bit weird on that list as my understanding is that it is somehow creator owned and controlled, but rest yeah... I also wonder how long this model will operate, the advertising spend on these products must be significant and I wonder if it is sustainable in long run. Specially with these interest rates or in possible recession...
I think RHIDE still has source code available, even if it's 23 years since the last update?

Real problem with implementing such a terminal-mode GUI is that Unix/Linux terminals clung to a terminal standard which didn't provide all the features of an MS-DOS text mode program. In particular, it can't recognize the Alt key by itself, or Alt+Letter key combinations. Or Ctrl+Shift+Left/Right keys.
What we should change in our relationship with books
I found https://www.netlify.com/blog/2017/03/28/why-you-dont-need-cl... and it sounds like you're right.

“The cool thing is that we also provide a load balancer, and if our system has detected that our main load balancer is currently being hit by a large DDoS attack and is slow or unresponsive, we’ll simply route around that on the DNS level. Since we cache content at our edge nodes around the world, end users also experience extremely fast page load times because of this.”
Sure, and a bunch of those are already on the web, though it depends what you're trying to do e.g. mail could just be a view of an existing service (in which case it's just making the existing interface mobile friendly), or it could be an actual client (using IMAP/SMTP), in which case it should be native, rather than having some weird intermediary (which if you want to to do IMAP/SMTP via the web, you need to do). Personally, I'd rather native apps with well defined interfaces that use well defined standards (e.g. IMAP/SMTP/ical), rather than some hacked together web version. But people like reinventing wheels...
Show HN: MinutesOwl – AI meeting assistant to summarise and action discussions
Came across my personal pain point at work, looking to validate this idea , iterate or pivot, please advise! Do lmk if there are any other forums I could share this on!
But why? Why not build it like a blanket? Force things to fall the right way with physics?
What's spend limit?

Autoscaling is a feature!
Don't let your babies grow up to be coders, Jensen Huang warns
I use DigitalOcean to host some things (with my own setup for deployments with git push, because `curl | bash` is not a great way to install/maintain software).

How am I protected against extra charges for traffic?
For those who don't get the reference: https://twitter.com/JayBauman1/status/1665024103282012161/vi...
I've thrown a bunch of links in elsewhere in the thread, but basically, there was a bosun's chair (https://en.wikipedia.org/wiki/Bosun%27s_chair) running inside the mast. As far as I can figure it out one man went up in the chair to secure the pilot, waited for the other two to reach him, and the three of them managed to get the pilot into the chair and back down to the ground.
I understand that some businesses might want to take the hit from a cost surge because they get an even higher revenue surge. But a large fraction of sites aren't like that and would prefer a loss of service to a cost overrun. Service providers should always offer a "maximum out-of-pocket cost" service option. Those that don't aren't suitable vendors for most customers and customers should be warned about them.
How can I get the columns at the bottom, above the page number? Is that possible?
Looks real fun. Was it easy to deploy it on your website ? did you compile in web-assembly ? Or are you hosting all the logic onto a local server ?
A lot of creators have to realize that Patreon is a stepping stone to sponsors.

I run Casting Call Club, which is basically where amateur Patreon creators go to collaborate on projects and ideas. Many of the CCC members will only stay until they either A) fail, or B) get big enough to have sponsors.
why the hell the downvotes for asking a genuine question?
Your honor, my source is that I made it the fuck up.