skysight-inc/HackerNews huggingface dataset:
Given how well Preview.app and Safari work for viewing >99% of PDFs I actually encounter in the wild, this article makes Apple's engineering decisions look good.

It also confirms many suspicions I've had over the years that have led me to, e.g., running all PDFs from questionable sources through VirusTotal before viewing on platforms where I wouldn't normally run antivirus software.

The original article also confirms my suspicions that this step is inadequate:

Because the Launch action can be considered as a dangerous feature, we conducted a large-scale evaluation of 294,586 PDF documents downloaded from the Internet, in order to research if there are any legitimate use cases at all. Of those documents, only 532 files (0.18%) contained a Launch action. While none of the files was classified as malicious according to the VirusTotal database, we conclude that the Launch action is rarely used in the wild and its support should be removed by PDF implementations as well as the standard.

Incidentally, the Launch action is still present in the most recent version of the PDF standard[1], with only OS-specific launch parameters deprecated (which include passing arguments to the launched executable, so eliminating deprecated features is still a significant security gain).

Finally, I'm both personally and professionally curious about how the non-DoS examples in this articles may apply to non-viewer PDF tools and libraries like qpdf[2] and Ghostscript's original and recently reimplemented PDF interpreters[3].

[1] https://pdfa.org/resource/iso-32000-pdf/

(registration required, but at least the base standard is available at no cost; sadly, important incorporated standards like ISO 21757-1:2020 [ECMAScript for PDF] are not)

[2] https://qpdf.sourceforge.io

[3] https://ghostscript.com/blog/pdfi.html
I don't normally post here- normally I lurk. But this spoke to me.

Learning and research is something you(someone) has to impose on themselves as a self-discipline(like working out, eating right or some other habit). I learned this early in my adolescent years- but it was not honed or realized until university. Once I got into college, I found out that I need to push myself to do the research for things I wanted to pursue- even if it wasn't directly related- in order to achieve my end goal. In comparison, as a naive kid- I would research hitboxes, best shooter tactics and related gaming notes. Now, I open myself to anything and everything- because I realize now 20 years later, that I can easily make what I learn into something I benefit/enjoy from with enough effort and perspective insight.

Long-story-short(tldr)?

Just because you don't know something now, doesn't mean it won't be important to you later. When that day comes, the last thing on your mind will be passive interest- and moreso long-term passion. Which, in retrospect- the former is the dopamine calling you home to stay placated with who you are- rather than you want to be.

Read a book. Save a life.
-Chuck
This is like pulling teeth; so much for the guidelines about generous interpretation, no cross examining, etc.. The article is about jobs and life, I'm didn't ask to get into a debate about "What is the true meaning of opportunity?"
+1. I almost mentioned Scotch bonnets, too. They're another excellent chili.
Automate on-call and support with a simple Slack-bot
Rapier is a set of 2D and 3D physics engines written in Rust
Hey Hackernews, my wife was on-call a few weeks ago when she got paged after 2am again lol. This has been an on-going issue in her team and to some extent mine so we decided to build a simple slackbot to automate some manual stuff that we need for on-call.

It's very straightforward - 1) you provide trigger words like critical, pagerduty, or any recurring text in your slack-based alerts. 2) Add links to your run-books, rules, procedures or any relevant data in the 'knowledge base' and, 3) provide a ChatGPT prompt to instruct the Slackbot how to behave when it's triggered eg., provide remediation steps using the knowledge base.

After finishing this we realized this MVP has become a general purpose chatGPT wrapper bot which acts based on the prompt and uses the knowledge base you provide to reply to the slack message that invoked it. Some of the friends we gave it to started using it in some different use-cases like below:

Customer Success Team: 24/7 Support
- Trigger words: help, problem, issue
- AI prompt: Answer customer support queries and engage relevant team members in the thread
- Knowledge base: Customer support runbooks, team members’ responsibilities and work arcs

Product Team: 24/7 Support for Customer Onboarding
- Trigger words: demo, tutorial, guide, onboard
- AI prompt: Provide links and references to product demos, tutorials, guides and FAQs
- Knowledge base: Product documentations, links and resources for onboarding

Give it a try - it's a free Slack-bot rn. We would really appreciate any feedback!
A great reminder, and interestingly prescient given the AI growth in the past couple years.
Lol, I haven’t seen that tried.

One nice strategy these days is having downloadable trial fonts with limited character sets. Get to use it locally as much as you want, until you need a quotation mark or a dash, etc.

Works great IMO—wish all foundries did so!
Thanks for your feedback, I've added it to the footer of each article and made it more distinct on the main page.
Is it possible that people might have genuine concerns (no limp wristed scare quotes) who don't watch Fox News?

Hypothetically, if Google was somehow taken over by Elon Musk, you would maintain this attitude? =)
Most of us don't ride nor want to ride rockets. We do use them to blow each other up, statistically.
This is the first time I've heard running windows in an internet restricted sense as a "dark island" but I like it.

I've been doing something similar for quite a while, by default blocking windows machines from having internet access, except for a tiny subset of programs. A dark island with a boat dock if you will.

Turns out its a real PITA with "modern software" much of which can't even install itself without internet access and programs that actually provide self contained installers becoming fewer and fewer.
I'm working my way through Building a Second Brain by Tiago Forte. I can't say I've digested it well enough to recommend it, but a key point that stuck with me is to get into the habit of making a note of things you encounter day-to-day (including while reading and researching), and using the "PARA" method to file them into projects, resources, areas, or the Gmail-like "archive." Projects are things you're actively working on -- 2023 taxes, planning a night out for your anniversary, reaching a level of proficiency with LLMs, etc. Resources are a little longer-lived than projects; they're subjects you find interesting that don't have a clear start or finish the way a project does, like a bash cheatsheet, or a gardening hobby. Finally, an area is something that never goes away, like personal finances or family paperwork.

These groups have helped me organize my "lifestream" a lot better. Rather than torturing myself about deciding the perfect place for everything I learn, PARA helps me understand that organization is more of a lifecycle with stages over time. Something might go into a project folder today, but when that project is complete (or abandoned), its parts can go into reusable resources, mini-brain areas, or the archive. That fluidity has made filing of information a lot easier.

This isn't a full answer to your whole question. But knowing how to deal with the influx of daily information, and developing more of an opinion what a research session's work product should look like, is a piece of the puzzle.

*https://www.buildingasecondbrain.com/
Best to bribe the police into a speedy resolution. That’s how you do things in India!
the statistics of a collection of particles, ie fermions or bosons, depends on their symmetry under commutation. that is, the wavefunction of the collection of particles, which does have physical meaning isofar as its square is the real density of the particles, must also obey this symmetry, ie it must negate (-1*) under exchange of two identical fermions. so it's not that the 'fermion' cares, but that the consequence of (anti)symmetry under exchange affects the density of a collection of such particles, which leads to a measurable difference in their statistics (how likely they are to be close to each other) compared to non-symmetric (normal) counterparts.
> 737

So, everyone's forgotten about that uncommanded rudder hard-over issue from a couple of decades ago? I can only wonder what kind of noise that would have made were it happening now, as that root cause was far harder to track down.
Sounds like a problem a small pellet of nuclear fuel could resolve even without a reactor.
The AI is adding comments like these:

private void makeAllWarningsFatal(Project project) {
/**
* Makes all warnings fatal for the given project.
*
* @param project the project for which to make warnings fatal
*/

What does this achieve? The code already has readable function names. It just creates clutter and makes things worse by forcing people to scroll more by making less code fit in a window.

What would be useful is commenting why a setting to make all warnings fatal is a use case. For example, a comment stating that this is used to improve code quality and reduce risk by forcing the developer to fix all warnings which could be hiding errors. This AI is utterly useless at coming up with that.
It would be nice if it also supported the If-Modified-Since and If-Unmodified-Since precondition headers.
> If I were a lawyer in Texas, I'd be posting billboards about specializing in suing doctors for not providing care.

This is a fantasy, it has never happened, and it's fundamentally not how the law works. Show a single instance where a doctor has been sued for refusing to give care due to risk of running afoul of restrictive abortion laws.
Rental cars and hotel rooms in your example are not necessarily free.
I am not impressed. These comments don't add much at all. There are some that superficially look OK and to add some knowledge but in practice are wrong. Then there is stuff like this that doesn't need to be there.

/**
* Returns the type of the artifact release.
* @return the type of the artifact release
*/
public String getType() {
return this.type;
}

But then you also have the following which looks reasonably promising and does contain useful information that you would only get from the code or the docs.

/**
* Constructs a new instance of AutoConfigurationMetadata.
*
* This method retrieves the inputs and sets the file path for the
* AutoConfiguration.imports file located in the
* META-INF/spring/org.springframework.boot.autoconfigure directory. The path
* sensitivity is set to RELATIVE and the property name is set to
* "org.springframework.boot.autoconfigure.AutoConfiguration".
*
* The method also sets a dependency on the processResources task name of the source
* set.
*
* Additionally, it creates a configuration named
* "AutoConfigurationPlugin.AUTO_CONFIGURATION_METADATA_CONFIGURATION_NAME" if it does
* not already exist in the project's configurations.
*/
public AutoConfigurationMetadata() {
getInputs()
.file((Callable<File>) () -> new File(this.sourceSet.getOutput().getResourcesDir(),

@@ -68,19 +84,35 @@ public AutoConfigurationMetadata() {
.maybeCreate(AutoConfigurationPlugin.AUTO_CONFIGURATION_METADATA_CONFIGURATION_NAME);
}*
There is zero chance Apple would buy Unity. One programs and scripts in C# and an outdated version of .NET via Mono.
Yeah, but how many people like you are out there? We'll find out in about 5 years.
> Let's just stick with what the boffins have come up with, yes?

Speaking for myself and my friends (to whom I have talked about this matter), we have too much going on right now.

Life is full.
Having said that, I see a lot of people with "Independent Research" background, meaning they currently not affiliated with any institution. That's not encouraging. On the other hand, I see a person from MIT CSAIL, so there is that.
They are much less bitter if the plants had been exposed to frost before harvesting. My parents used to have them in the garden. Brussels sprouts in winter were nice.
There would seem to be about 10 countries with a budget of $50 million or less and most of those are islands you've never heard of with a population under 2,000.

https://en.wikipedia.org/wiki/List_of_countries_by_governmen...

In the US, $50 million would be closer to the budget of a small city (~50,000 people.)
Awesome stuff! We're also working on comic segmentation @ https://toona.io and other stuff for motion comic generation. The synthetic dataset approaches are really interesting, I'm curious if you could use an algorithm like https://en.wikipedia.org/wiki/Flood_fill to aid in segmentation (especially for manga).
Hey! I managed to make QLoRA finetuning of Gemma 7b 2.43x faster than HF + Flash Attention 2 with 57.5% less VRAM use. When compared to vanilla HF, Unsloth is 2.53x faster and uses 70% less VRAM.

On 1x A100 80GB GPU, Unsloth can fit 40K total tokens (8192 * bsz of 5), whilst FA2 can fit ~15K tokens and vanilla HF can fit 9K tokens.

I also found a RoPE bug, and posted my learnings at https://unsloth.ai/blog/gemma
Isn't that what they're trying to do though? Perfectly price their product for demand at any given time? Not saying I like the idea, but it seems like pure supply and demand in action.
As someone who travels a whole lot - I love the idea of this service being accessible. But I dont think its good for the environment to be encourager more smaller planes to fly - fewer larger planes seem better for the environment - even if you ignore carbon, those emissions are not free.
This was tried with vending machines.

It's just another way to shake down the masses with gotcha capitalism.
I would love to know what sort of pitch they made to bring in that amount of capital. There seems to have been no business plan whatsoever besides enshittify to the max and alienate customers with ham-fisted retroactive cash grabs.
> Noone thought beating the game of Go was feasible.

Oh, yes, we did, once we beat chess. It was just a matter of time.

> Noone thought self-driving cars would actually work.

And... they don't? Call me when I can buy a regular car where I can sleep while traveling 8 hours, driven by the car itself. We're probably "flying cars" away from that.
If the door doesn't fall out first :)
The question is will you notice, and will you stay because you spent 10 minutes in the line already anyway?
POGI
Ars is insane in that they will claim, by setting up reader's likely inference, that Age is getting its first new expansion in 25 years. But will in the same article admit the ~5 it's gotten since 2019.
Timings are much less important for GPUs than bandwidth; the cores are slow and doing the same work on similar memory. A 3090 has ~270ns of memory latency - <70ns is normal for a CPU. See https://chipsandcheese.com/2021/05/13/gpu-memory-latencys-im...
Thin by modern standards, but it's my understanding that the Roman administrative system set it quite apart from many of the other polities it interacted with. Certainly the post-Roman West.
Tri-City Sporting Goods' perpetual going out of business sales.
Which is why I said “small county”. A county in the US is a division made up of the land around some cities.
There is no risk free 5% yearly return. The current interest rates may be temporary and there is inflation that erodes the 50M and the Principal amount.
Future housing site potentially.
I have hope for many more turns / revolutions!

Boy have we been in a holding/consolidation pattern. The age of massification has been upon us; getting everyone else online has been the effort, the way to rise. Free online services we can connect to from anywhere has been an amazing change, a totally new expectation that totally changes how computing situates itself in our lives.

At much cost to figuring out further places to pioneer, I feel. We need new cycles with new energy, where lots of people are trying stuff out again. Computing & tech should not stay well settled; we should be trying crazy stuff. It feels like a lifetime ago that Tim O'Reilly was preaching "follow the alpha geeks", look for those very capable folks doing excellently for themselves. That ability to trendspot & try lots of things has been somewhat by these huge scales & systems, but I believe a return to personal-ity has to crop up again sometime. We'll find some fertile terrains where new things are a happening again.

2014 was when thing were actually really setting in place, when the pioneering stage was really giving way to some settlers (and town planners, see: https://blog.gardeviance.org/2015/03/on-pioneers-settlers-to...). There's a lot of roughness, but tech getting it's mojo back may be not far off. It's a challenge though; the reality of creating ever-connected ever-online systems is hard. We have amazing amounts of server we can fit in a pizza box, at incredibly low $/performance, but we're unpracticed at doing it without pain at smaller scales, by ourselves, anew. Trying to create new generative platforms, that serve as a basis to let more value spring up: it needs a strong foundation, so that it can keep "creating more value than it captures," another O'Reilly-ism.

The future is (with hope) exciting!
> one political party whose goal is to hinder US interests in any way possible while complaining that the US doesn’t do enough to bolster said interests.

I’m really amused because I genuinely can’t tell which of our useless “parties” you’re referring to!
Autodesk's CAD stuff started life in the early 80s and needed to do plenty of trailblazing on fundamental concept of CAD user interface. They have a well-established client base that rely on intricate details of the interface. By its very nature their product is aimed at experts well educated in their domain.

Meanwhile, companies that burn most effort into "design systems" seem to be heavily B2C, and mostly concerned about getting their colors to pop, fonts to be fancy, and buttons to be rounded. (Or old ancients like IBM that are just so big that they probably are among the few exceptions to the rule and actually need a design system![1])

Not a great comparison.

[1]: Love me some slashed or dotted-0 fonts. Thank you IBM for popularizing that.
Segmenting panels is a graphic design element of storytelling that's part of the artist's job. Doing it programmatically ignores its actual nature in storytelling - establishing the amount and direction of the story beats, helping the reader understand the right reading order, and establishing the important elements on the page (Which beat is the most important, etc).

It's an interesting tech but giving such an important creative job to a computer instead of an artist is a bad idea for any comic artist who cares about their work.
That was during Covid, but it is 2024 now. The Fed started quantitative tightening in June 2022 and has sold over $1.3 trillion in assets; it also raised interest rates to the highest level in two decades. These are traditionally considered contractionary monetary policies, the opposite of "printing money".
It could be argued that the placement of the huge engines was to do with fossil fuel issues as the main reason for them was improved economy.

Due to this the flight characteristics changed and Boeing implemented MCAS to make it feel the same as the NG version.
Excellent! Do you have any plans to support NIST SP 800 171 in future too?

https://csrc.nist.gov/pubs/sp/800/171/r2/upd1/final
Does india have an equivalent law to section 230?
Umm if you're a Boeing expert and you don't notice you're on a Max until you've boarded and see the safety card, you're really not that much of an expert.
Even frozen spinach is extremely unpalatable. Fresh spinach is great, saute of fresh spinach is also great.
Weren't the Tarquins Etruscans?
I made character AI but with voice
Shouldn't the bucket name / URL be enough?
I switched my project to godot last year and have no regrets
I don't know enough to be able to comment on the content, but am nonetheless extremely skeptical that this person managed to find something that

> predicts the market’s future long-term returns better than any other classic valuation metrics to date developed–price to earnings (P/E), price to book (P/B), price to sales (P/S), CAPE, q-ratio, Market Cap to GDP, Fed
Hey, I love the recent UI update! Thanks so much!
Accurate I guess. Amazing given this was a decade ago!

> Because here is the other thing the greybeards in 2044 will tell you: Can you imagine how awesome it would have been to be an entrepreneur in 2014? It was a wide-open frontier! You could pick almost any category X and add some AI to it, put it on the cloud. Few devices had more than one or two sensors in them, unlike the hundreds now. Expectations and barriers were low. It was easy to be the first.

Personally the AI aspect feels like the least compelling aspect of how computing can build in-roads & become genuinely compelling to the world again. Many many many people are on the sprinkle-on-some-AI-and-get-rich path, but it's just incredibly non-contributive to the field, to expanding the frontier to me. Apply deep-learned expert-systems doesn't making computing better on iota, doesn't enhance man machine-symbiosis.

I crave a computing era where we can return to the fundamentals. To me, computing's 90's/aughts boom was because we created a democratized access to all the tech, because OSS helped us all learn and grow together. We never had better leverage to augment intellect (the Douglas Engelbart vision/mission) than that, and that made all the difference. It's hard for me to imagine owned proprietary ML spawning lateral growth & understanding, to me.
A little tangential but is there a good place to share one's personal website?
They already figured out bronze that you can build anything you can imagine out of. Why would I put any more effort into metallurgy ?
Are you seriously asking residents to subsidize their own training working 60-80 hours a week [1] and being paid maybe $20-25/hr for 3-7 years while the hospitals make money from their services?

If that were the case, then the only ones who would put up with such a system would be those who have rich families to back them up.

I came from a blue collar background and my family could not help subsidize my training and I could not afford to live, make rent, or afford food if I had to pay for my training as well.

There are so many other things that you are completely glossing over including annual income between generalists vs specialists, pediatricians vs non-pediatricians, reimbursement inequality from Medicare (has not kept up with inflation and is ~40% below inflation), Medicaid pays at best 10-15% on the dollar, and so on.

American physicians also work almost teice as many hours as their European counterparts which would increase their incomes.

[1] it’s considerably more because if you report it then the program can be in danger and lose its credentialing
Again, the core of my post is pseudo-extraterritoriality brought about by these kinds of laws, which I'vestated plainly twice now. If you'd like to discuss that, I would have been happy to. Not so much now, because you're not giving discussion vibes. But if anybody else wants to discuss the point of my comment and not try and drill down on specifics that are entirely tertiary to my point, that's cool with me, and exactly why I made the post on said discussion board.

That you want to discuss something totally anciliary is not my fault or concern.
Marlboro Friday (2021)
Typically you order the dish and it comes with the sauce "baked in". The only time that you physically add salsa yourself is when you are eating tacos or a few other dishes, and even then, all of that is going to be prepared fresh, in-house. Even at home you prepare it yourself. The idea of buying a distinct sauce at a store to keep on your counter or in the fridge is kind of foreign.
Are bell peppers not peppers? Surely a bell pepper is the least spicy.