skysight-inc/HackerNews huggingface dataset:
I could import matplotlib but I couldn't work out how to display the output. I guess that this library is supported otherwise I wouldn't be able to import it. How do I display it's output. This is the function I'm trying to run:

def plot(lat,lng):
plt.scatter(x=lng, y=lat)
plt.show();
Oberon is another example:

https://en.wikipedia.org/wiki/Oberon_(operating_system)
Why would you want to build your own accounting ledger from scratch? Accounting is a completely new domain for most engineers, and TigerBeetle (https://tigerbeetle.com/) already solves this problem.
The best startups always look like toys initially.
Were you worried about the 'revenge bot' upvoting you, or downvoting you?
This would be my dream setup as well. Heck I would do 7 days a week 12 hour days (with a few mental health days built in) for 6 months if it meant not having to think about work for the other 6. I'll even live on a cot at the office during the work 6!
Maybe, but there's precedent:

gadjama tuffm i zimzalla binban gligla wowolimai bin beri ban
o katalominai rhinozerossola hopsamen laulitalomini hoooo
gadjama rhinozerossola hopsamen
bluku terullala blaulala loooo

~ Hugo Ball : https://www.theguardian.com/books/booksblog/2009/aug/31/hugo...

https://www.youtube.com/watch?v=x1AmcBM5Ejg
Automating the publication of my Out of Ten reviews using Zapier and Notion
just installed on arch. looks nice. needs some better syntax highlightning though
Set up a software on a vps that uses s3 backend.

People would upload, backup, share their photos and media.

Its not in a single place so I can't use local sync and stuff.
The webpage is a bit thin, not much detail, and I couldn't really comment on the engine without trying it, and that requires signup. Recommendations is a well-developed field, it would be worth you saying why your approach is better than everyone else's (if it is), preferably backed up with some numbers.
It is concerning, but I am not sure whether it is more concerning than that it's so hard to write a web browser that doesn't execute arbitrary code. Security is like that, and security is especially hard when the system is featureful like web browsers and LLMs.
> But as an application developer, do you want to manage certificates?

It might take years of trying to avoid TLS to learn that all the alternatives are far worse. So—yes, just bite the bullet, it's not that bad once you internalize the model, and you really only need to solve this once per organization.
I wonder if we really need to have a paper for every way the technology can be subverted. We know what the problem is and we know it's an architecture shortcoming we have not solved yet.

Generalized: "We rely on a model's internal capabilities to separate data from instructions. The more powerful the model, the more ways exist to confuse the process'.

Not having a clear separation of instruction and data is the root cause for a fair share of computer security challenges we struggle with. From little bobby tables all the way to x86 architecture treating data and code as interchangeable (nevermind NX, other attempts at solving this later).

Autoregressive transformers likely are not capable of addressing this issue with our current knowledge. We need separate inputs and a non turing complete instruction language to address it. We don't know how to get there yet.

But none of this is the actual issue. The issue is that the entire public conversation is consumed by the bullshit details like this at the moment, the culture war is trying to get it's share too and everyone is recycling the same vomit over and over to drive engagement. Everyone is talking symptoms and projecting their hopes and fears into it and much less technically savy people writing regulation, etc are led astray about what the fundamental challenges are .

It's all PR posturing. It's not about security or safety. It's stupid

We discovered technology.
It has limitations.
We know what the problem is.
We know what causes it.
It has nothing to do with safety.
We don't know yet how to fix it.
We need to meet investor expections, so we create an entirely new level of Security Theatre that's a total diversion from the actual problem.
We drown the world in a cesspool of information waste.
We don't know how to fix it yet
Wow, this is pretty hard to read and understand someone who has this mindset. Best developers understand the platform that their apps run on and the infrastructure needed for it. There is no artificial separation between platform and apps. You cannot run your beautiful app without infrastructure needed. This is coming from someone who has done both and still does. Many times over, in new teams especially, you must create the infrastructure and then apps. Guess what if you can't you don't move forward. I think you want to write some code and then throw it over a wall and make it someone else's responsibility. Not very useful ;(. How about testing is that for someone else to do? You must be new to this game.
Seems to be it's an ebb and flow of complexity; sometimes it increases like with sidecar proxies and their issues, like how they might listen on NICs differently, or how they cause grey failures, and sometimes it decreases like when the sidecar moves to the kernel and gets rewritten in eBPF and we can remove another ip filtering-firewall-chain. So right now it seems to be a bit of an ebb, as these things are becoming moduralised.
you can implement mtls (and almost all the other service mesh features) without service meshes, and it's usually better because of lower overhead, less total complexity (see for example the fat client libraries in use by google, netflix, etc.). but people don't want to think about this so leave it to infra teams to plaster a service mesh over everything.
>>It seems like the original authors were convinced most of the complexity of modern languages was unjustified and have slowly proven themselves incorrect over the years

Python was the same way a few years back. People would give elaborate lectures on why Perl's features were so bad, only that they agreed to add many such features to Python within a decade, even at the extreme act of breaking backwards compatibility.

This is seems to be a common arc to so many things. When you start you are all about principles and as you age, you realise practicalities of every day life demand making lots of tradeoffs and deviations from founding principles.
My email is in my profile if you wish to reach out. Cheers!
There are a few key things that you get by targeting a terminal for your UI:

* Remote desktop forwarding through tmux, ssh, mosh, etc

* Instrumentation of your UI - simply replay the input

* Screen recording with asciinema

Not to mention that you can target the exact same UI framework across Linux, Mac, Windows, and more.

On the other hand, it doesn't play well with your desktop environment. Taken to an extreme - if all your daily drivers are in the terminal:

* You can't easily tell them apart because they all have the same icon

* Some of those bells and whistles might not be supported in all emulators - tmux and mosh are probably a good baseline.

* Accessibility support is lacking (TFA). This is probably more of a demand side problem than anything else though.

On the whole, it's a decent enough UI target for an inner platform on the level with the web - all we need now is Muon - a wrapper that includes a terminal emulator so you can write "native" terminal programs with their own icons.
So, how did the “override” work? What made it easier to replace a part not whole page without understanding how the framework worked?

Agree completely that is the only sane goal - just wondering how you got there?
Mobile Phones: Safety Measures
That's a bigger percentage than Musk's pay package was compared to the increase in Tesla's market cap since 2018.

If shareholders think paying 10% of money the lawyers won for them is fair, they should also think paying 10% of the money Musk earned for them is fair.

But then, the suit was never about the interests of the shareholders; it was brought by someone who held just nine Tesla shares.

(And before anyone mentions it: I do think the workers deserve a bigger share, but that wasn't an issue in either pay package.)
"Safety" is really a weird term for "bad pr for corporate software". It has nothing to do with safety as it's in any other context. Talk about speaking without mutually intelligible semantics!

Unfortunately, this pretty much destroys anything useful about chatbots to most humans outside of automating tasks useful to corporate environments.
One of the hottest places on Earth, 120m under sea level, with lakes of sulphur and iron and apparent absence of life. Could this place had been the inspiration for our idea of Hell?
The 0.1x is the 10x developer. Slow is smooth and smooth is fast.
A tradition indeed, from a couple of years ago: https://www.theguardian.com/lifeandstyle/2021/dec/13/even-th...
Every testimonial uses broken English in the same way that the website uses broken English, and they don’t link to real people.

Another blatant attempt at lying to fake social validation.

This is AI-related spam, like all the other submissions by this user.
The 10x developer was never supposed to be "churning out code at breakneck speed" or "leave a trail of destruction in their wake", except for maybe some misguided recruiter/manager/CV-padder. Saying that they are is an easy strawman argument since we all agree no one wants those.

When you think 10x developer, you should instead think about devs who built industries, or devs that made such huge impact that them being human has been questioned. Widely known examples might be: John Carmack, Linus Torvalds, Joel Spolsky, etc. For industry-specific ones, in JS-land you could think of TJ Holowaychuk or Sindre Sorhus. And for quantifying it a bit from the "business" side, think that Instagram reached 14M users with 3 Engineers and Whatsapp supported 450M users with 35 engineers. For a more general view, "/fast" is a great read: https://patrickcollison.com/fast
> Use actual pixels, it'll look prettier!

No, thanks. My problem with such ideas is not the feature itself but the fact that UI tooling always aims to make use of the medium's full potential, and applications then always follow suit. The only reason we don't have animation frameworks for the terminal is because it's not possible, and I'd like it to stay that way.

More accessibility would be great but you don't need pixels for that either.

Better than images & pixels in the terminal would be a GUI platform that is as simple to use and integrate as the terminal and still feels natural to use with the keyboard. And has a toggle for animations.
See my comment here: https://forum.banana-pi.org/t/leading-the-future-of-computin...
What? No. I can run these on a server and get the same UI as locally, which is great. As with everything else sometimes TUIs make sense, sometimes not. There are a lot of crappy GUIs out there as well, which would have been better served as CLI tools (in my subjective opinion).

And what is "IS NOT meant for fancy user interfaces" supposed to mean? (and what about various constraints back in the day as the actual reason for a data in/data out-only interface as opposed to "intent"?) I could argue that tmux is "fancy", since it is a multi-panel workspace, mirroring GUI capabilities, but apparently that's Ok according to you. So your conclusion seems to be that TUIs are actually ok in general - you just don't like bad/over designed interfaces (subjective terms, of course), which is understandable. Sorry, but I don't get your point. Bad interfaces are everywhere.

(I kind of like fancy TUIs when they make sense, to be honest, so there's that)
Also - no way to remove third-party Pocket.
It might come as a shocker for you but many medium-sized orgs that prefer to pay salaries for people who can do N things and just augment their capabilities with some Salas/paid service. But if the service is too costly, they will not allocate budget for it.
Also, unlike many Salas/software vendors would try to make you believe, those solutions usually need tweaking & knowledge to be operated. And if any issues happen, swift support comes at a hefty premium.
Also, not all salaries are SV-level, while these softwares usually have the same cost wherever you are in the world.
If you think https://arxiv.org/abs/1801.01203 is a good paper, I am not sure why this is any different. Yes, we want a paper for every way the technology can be subverted.
So was the atom bomb.

Terrible, but great.
I LOL-ed at this because I used to cry when no goats were around.
i see this as a new thing. people are starting to charge for components and boilerplates.
Honestly the Harry Potter studio tour near London is a very nice experience.

And I'm not even particularly a fan of Harry Potter.
Mine is very similar (fortune -c | cowsay -f tux)

I don't think I've ever seen a cookie repeat in over 10 years, but it might just be my poor memory
I think ssh keys signing goes a long way to point 3. I haven't looks if you can (or if it matters) to sign with an ssh certificate, but that would be useful to add some context to the signature too.
Just listened to a bit of this. As a Brit listening, what accent? She's completely audible with only slight inflections on some words.
Don't you see how it is bad to trade with the terrorist state?

China has issues, but it is not so evil as Russia and Iran.
> The "unethical" part is subjective so the manipulation doesn't get to me.

Good specialist engineers designed gas chambers in Nazi Germany
This only makes sense if you are thinking of these tools as replacements for people.

If you see them as a force multiplier, something that makes many tasks much more efficient, then, it is not irrelevant.

My own experience in using them like the author to get fully working code with libraries I was not familiar with demonstrates this to my satisfaction. It didn't get everything right on the first try, but I managed to try out 4 different libraries, with gpt rewriting the code for each to get more or less the same results in less than a day. Would have taken me at least 2 or 3 days without it.
But the guy on Youtube promised me that AI generated content would make me rich? /s
To set up an open-source service mesh, the infra team anyway has to configure a private certificate authority and cert-manager to create k8s secrets for the service mesh components. From there, it's straightforward to extend the common deployment template (hopefully there is one) to mount a volume with an auto-rotated certificate. All an application developer has to do is to use that certificate, which is much less effort than what you are implying.
Do you not understand the concept of paying for large sums by yourself? (or paying off the loans for that sum)

It would not be that wonderful because of this burden, hence the comment.
It won't have decks. You will be able to upload your notes and texts on it.
You will learn whenever it tells you to.
Then rate how you learned it.

It's better because it has feedback-based learning.
Based on your feedback, it will tell you when to revise it for better learning. Based on the Spaced repetition technique!
You do deployments as one used to do with big C++ programs also, you can delete everything and deploy again to make sure everything is new. The latter is preferred. Doing continuous deployments is very hard and not sure possible, at least I haven't seen it work well even though it's touted as fundamental k8s feature. K8s groups resources and presents a platform, how you use it it's up to you, and the management.
As a side note, can we please stop using being on the spectrum as an excuse for everything?
> looping over `read` is essentially never the right thing to do

Why? I do it quite often, though admittedly usually in one-time scripts.
I will aldo be trying android next round. I remember i had a samsung xcover back in the days and it handled touch in the rain. If there is a droplet of water on ypur thumb the iphone freaks out. Also mich more spelli g errors and slower typing. The only thing missi g is hide email and private relay
Maybe the next gen of terminals that use structured data instead of dumb text could achieve that
> Bash/sh is good for when you need to combine some commands and what needs to be done can be accomplished mostly by CLI commands with a little glue to tie them together.

Once I’ve learned bash, I realised how much more problems i could solve, in addition to a majority of old ones. It’s an entirely new level of “computer literacy”; and a more genuine one.
and accessibility, and standards compliance, and maintainable code...
> they don't care for the work itself, so of course they'll take every opportunity they get to slack off and watch Netflix if they can.

Overall you do make it sound like you condone this, I got the same read as the person you are responding to...
Hello, Author of Pkarr here.

First I very much share your opinion of Mainline and IPFS. Mainline is a miracle.

As for the spec, I personally prefer working code first and at least won't allow for design by committee to turn a good thing to awful mess.

That being said, Pkarr is so simple that did-dht doesn't really rely on software, in fact they have their own Go implemntation.

I agree with you that Pkarr is better on its own without w3c complexity.

And I agree with you that stable simple ideas deserve spec, but the spec is simple so far (put DNS packet in BEP44 without salt), still, I owe everyone to write that down.

> The choice to sign an entire DNS packet seems very strange and probably hasn't been through through properly.

I did think about the encoding choice thoroughly, in fact the earliest version was just a JSON inside BEP44.

The reason why Pkarr signs the entire Packet, is because that is the most efficient way to pack the 1000 bytes limit in BEP44.

The reason we use DNS Packet is because I couldn't come up with any smart encoding that offers any non-marginal advantage vs using an old, tried and tested spec that would work great with plenty of encoder and parsers, and really fits the use case.

I understand that you think that leveraging DNS infrastructure doesn't make sense because they won't pass the signature, but so would be the case even if you sign individual RRs, in fact even if you try to use DNSSec, recursive resolvers have no way to verify these DNSSEC signatures because they don't understand that Pkarr TLD is the key and it doesn't need a certificate.

Using Pkarr through DNS infrastructure, is not trustless, but it is still good to have, 90% of DNS is not trustlees (doesn't use DNSSEC) and it is great to have.

If you want to use Pkarr in trustless way, then either use Mainline directly, or use the relays spec https://github.com/Nuhvi/pkarr/blob/main/design/relays.md

But if by a strike of luck we managed to convince 1.1.1.1 or 8.8.8.8 to resolve Pkarr TLDs, then sticking to DNS packet encoding will prove to be really useful, even if their answers are not trustless, at the very least, we are not forcing them to integrate with bespoke encoding for no reason at all.

If anyone thinks that this encoding is bad for their use case, they are welcome to use BEP0044 directly, but they won't benefit from the network of relays I and others will deploy for lowering latency with variant degrees of trustlessness, for that we need to agree on an encoding, and DNS Packet encoding is the choice that makes most sense, if only for the track record.

Finally, if you still have more questions, or arguments, please bring them to https://pkarr.org
Sadly, visiting many parts of Ethiopia (including Dallol) is now not recommended unless essential, with large areas of the country having blanket 'Do not visit' advice due to violence and kidnapping. So think twice before booking, or recommending that others should go.

Ten years ago things were very different, with huge growth in tourism. The famine of the early 80s finally receding into history. In the 2020s, war and starvation have returned.
What do you mean? Animating the terminal is totally possible!
It does work: an init system shouldn’t have a knowledge of what constitutes a process being "ready", but it knows damn well if its executable is running or not.

Any dependent/client task should be able to wait or retry. If it cannot retry on its own, systemd has a facility for this, too.

At this point it really looks like after having some nice things you are running out of legitimate complaints and want a pony on top.
Did this extensively in the mid-naughties. Huge site, lots of data and traffic.

Performance exceeded what was available at the time, scaled super well, but not something I’d ever go back to.

- xslt is not a programming language. As soon as you start using xslt:functions you’re doomed.

- it is not a fit for interactive UIs. It’s good for static content, trying to mix in js goes wrong very quickly.

My opinion is that these days infra is cheap enough that you get all the same benefits by doing standard templating in your language of choice from your data in json or whatever. Which I know is essentially the same thing without the specialist software and dsl. And that’s kind of the point.
Ente verification code email is considered dangerous by Google mail.

"Similar messages were used to steal people's personal information. Avoid clicking links, downloading attachments, or replying with personal information."

So you know
I'm puzzled why would anyone make windows out of wood when PVC exists.
Money exists outside us dollar and should be stored ideally a a composite of currency and decimal or just a decimal.

Then use currency specific rounding rules and always defer to CLDR [0] when displaying.

1. https://cldr.unicode.org/translation/number-currency-formats...
I wonder what the various measures are to improve the security.

If their measures are effective this could lead to a snowball effect where more and more untrusted packages would vanish from the current dependency jungle.

This is a great opportunity.
Isn't Takeout their GDPR compliance tool? I don't see them ever removing it. Only exporting lower quality pictures at some point down the road is a valid concern, though.
Hell, why build with wood at all when other materials like bamboo are around? Because nobody is trying to sell you bamboo. Our use of wood has everything to do with market effects run amok.
It's not exactly a single place, but this page [0] lists the Github organizations for many federal agencies. It's not comprehensive, notably it's missing the NSA organization [1].

[0] https://code.gov/agencies

[1] https://github.com/nationalsecurityagency
I think they were suggesting they chose "a column-oriented database like Clickhouse" to solve the summing problem for them, with some magic under the hood, maybe doing aggregates, as was mentioned separately as a solution if you wanted to roll your own.
Can rctl give me an ability to run two instances of the same executable with different limits?
Do Not Reply Cards
People don't get the security concepts. Probably, just a lot of people wanted signed commits because they somehow "better", but couldn't get PGP to work.

But they use SSH keys to push to GitHub anyway, so someone added the option to use SSH keys to sign Git commits. Now everyone can have a green "Verified" symbol on their commits.

It's worth less, but it looks better!
Feels more as a way to introduce a product (scratch data), rather than a technical article. If you have only one entity to manage accounts for - why would you need to build an accounting engine? In other case, when you manage accounts for multiple entities, such as different "clients" or "branches" - you have millions of transactions, and a query such as "get accounts for this client" will take a long time - and you still need to introduce some kind of materialized views.
Can we fix the post title? We don’t “need for” things, we “need” things.