skysight-inc/HackerNews huggingface dataset:
Yep that’s a fair point, the tax burden in India in general is pretty skewed, however worth noting that Mumbai pays a fairly significant amount of it (especially when factoring in indirect and non income taxes). Iirc BMC’s budget is very directly from taxes (very little/no loans or other handouts, though I could be wrong about this).

(Edit: quick googling shows property tax to be the biggest current revenue stream since octroi has gone away after the introduction of a national GST.)
>Proxmox, XCP-ng, VMWare ESXi, Kubernetes, docker, etc, etc.

It will be a bit general but what's the best use case here?

I mean try to build a home server, self host some services but there are so many options.

- Proxmox, run a VM for each service. And it supports LXC too.

- A vanilla Linux server which runs a type 2 hypervisor (QEMU) for each service

- Docker can be also done either in a single server but some people do it with something like Unraid (which is for NAS but support virtualization too). Very similarly you can install Docker in OpenMediaVault too.

Feels like there are so many ways to achive the same thing
Puppets App
But that then creates the problem of lowering expressivity.

GraphSCAD addressed that by allowing functions to have custom icons.

I'd really like to see that become more prevalent.
> Random, variable rewards, with the possibility for really great rewards

The more I've thought about it, the more I realize that variable reward is a key component of fun. All of the most fun and successful games have it built in, even if you don't realize it. Does it have ranked match making? That's variable reward. Why do you think online chess is so popular now? The ranked match making gives you just enough wins to keep you hooked.
We would have broken some fundamental laws, because to multiply two n x n matrices, it takes n^2 time to write down the answer.

So the better question to ask is: What happens if we find a practical algorithm (and a theoretical approach) that lets us do matmul in only n^2 time? And the answer is - well, some important things get faster and we're able to solve larger problems in things like optimization, simulation, deep learning, etc., or save a lot of time and money doing them.

We'd go from about n^2.8 to n^2, which, let's say for a 1M x 1M matrix, is about 64k times faster. That's really nice. But the speedup for more common sized matrices is smaller - 256x faster for a 1024x1024 matrix.

It would be a very important thing that would cause us to re-examine the use of matrix multiplication as a primitive for more things, and would have very important practical implications - and at the same time, would also kind of look like 15 years of Moore's law, not that we're guaranteed to have 15 years of that. So, "big" but not necessarily "totally reshape the world".
Some of the current players are already screwed. There is less water available than is desired. The government isn't supposed to come in and screw everything up they're supposed to spread the hurt around "fairly" or in some other way compatible with the national interest. This isn't some arbitrary reorganizing of water rights for political ends, there just isn't enough water in the American West for old ways to continue.
https://xkcd.com/927 comes to mind.
It's very distressing to see this insightful and helpful comment[1] grayed out because of a pedandic argument about what "tight" means. The HN community used to be so much better than this.

[1] I'm sure everyone who clicked the downvote button thought it was obvious, but not everyone here has that level of intuition about big-O analysis. This isn't a math forum, we're all hackers here, right?
Article is about the recently graduated, what in the UK would be called "graduates", "post-grad" usually being a graduate who is now working in a university research post.
What is your point? It's not plagiarized, and the WHO 'article' is a press release. Which is literally published for other journalists to use as primary sources and statements on events. WHO made their statement to explain their involvement in this event and provide information about said event, so it can be disseminated to a wider audience.

Don't throw such accusations around when they so unfounded.
Welcome! Having it activated is pretty eye opening at times.
Off centred keyboard and touchpad kill it for me.

Which is related to the presence of a numberpad. Not that I care about a number pad, but I dislike it making everything to the side of the screen.
It's not for people with other locales and keyboards
I don't think using the US as an example here is very strong for your position. The US has fewer restrictions than the EU for exactly the same reason the EU sells poisonous shit to poorer countries: there's a lot of money to be made that way.
IMHO, links to podcast episodes aren’t super well-suited for HN. Text works much better here. And in this case, there’s not even a transcript AFAICT.

So what is the tl;dr? What are we supposed to take away from this podcast episode?
> I tend to think Rust isn't suitable to rewrite JavaScript tooling

If only you could have warned all the people that the work they did was untenable before they went and did it.
According to who? It's a restyled checkbox.
Nice to see congress doing their job. China kills many Americans via tainted products and general incompetence. For example the COVID pandemic was the CCP’s fault. Many products from CCP China are toxic, bad for the environment, literal spyware. People who want to foist more of that on American citizens are, thus may offend some people, literally traitors.
It’s not generated JS, it’s concatenated JS (plus some glue). Rollup make this clear.

In web extensions you can’t quite use sourcemaps unless you include the sourcemap in the .js file or upload it to your own server
It's delaying the feedback I use to know if I clicked correctly.
I would go further: we shouldn't use the word "nature" in this sense at all. Because what is nature? The woolly meaning you are using, which I presume is the common one we hear in this context, is at best so utterly banal, that it looses all meaning. At worst, it is incoherent. What is "natural" vs. "unnatural" according to such a definition? Is nature all that wasn't produced by human beings? Since everything human beings produce is produced from preexisting things (a process ancient philosophers might call "mutation" -- mutatio and poiesis), does that mean all such things are unnatural? Is rainwater natural, but water synthesized from hydrogen and oxygen unnatural? Is corn unnatural, given it is the result of selective breeding carried out by human beings? Is a blueberry natural, but a blueberry danish unnatural? Are human tears unnatural?

And this contemporary use of the word isn't really in accord with the traditional meaning, if we can say that, certainly not the traditional philosophical view. Nature concerns the nature of the thing. Thus, the nature of water is to be wet and transparent in its liquid state, but equally, the nature of certain plastics is to be flexible within certain conditions. And we can extend this to organisms: the nature of human beings is to be rational; the nature of lions is to hunt prey and consume their flesh; the nature of synthetic water is identical to the nature of water found in a puddle; the nature of corn is to grow to produce the fruit that we happen to eat.

Now, in a traditional philosophical context, we may speak of creation, that is, all that is, metaphysically speaking, contingent, that which did not need to exist, or that which cannot account for its own existence, not just in time, but here and now. This draws the distinction between creation and creator, that is to say, that cause which causes things to be and which itself is not a thing, not contingent, and does not require a cause, as it is that cause. But this has nothing to do with distinguishing between things we already find in the world, and things made by human beings, like pesticides or artifacts or synthetic objects. Everything that is is creation in this sense, man-made or otherwise.

Also according to this traditional metaphysical view is how human beings differ from other embodied living things, and that is the capacity to reason and the capacity to choose (either in accord or against reason, effectively). And these faculties of intellect and will, dependent as they are on the physical to function, but inexplicable as physical phenomenon as such, mean human beings are a unity of the physical and immaterial. It is not my intent to prove this claim here (it has to do with the act of abstraction and matter as the principle of individuation, if you're interested; you might find this video of use [0]). The point is to show a sound basis for making certain distinctions, none of which conform to the woolly, contemporary notion of "nature".

What we might say is that the pesticide in question, because of its nature, is harmful to human beings, because of our nature.

[0] https://www.youtube.com/watch?v=w6GmCyKylTw
But then wouldn't those new owners just avoid the notification entirely by buying the original developer's account so there's no way to tell that ownership changed? I'm pretty sure that's how it usually works already, so any notification system would necessarily have to be voluntary.
But we're exceptional - they would never work here because there's no way we could manage those things without screwing it up.
Just make a good game, there are plenty of games that don't follow the skinner box/psychological tricks that are extremely addictive e.g. Counter Strike.
So, a transphobe.

And the right sure have taken that ball and run with it.
It is true that C does not have a single tool enforced by the language platform.

But, there is plenty of excellent documentation available for using build and packaging tools of your choice to work similarly to Cargo.
I understand the psychological need, but I agree this is going to bite them at some point.

A "community" is the weakest link in their chain, it seems. Even if you get your OpSec 100% tight (very, very hard, if not impractical), the human factor is never securable.
About the security content of macOS Sonoma 14.4
They were pretty "hardcore". I once went to a meetup there to learn about the Pony language.
I found the August 24, 1934 issue of Shenbao https://archive.org/details/shenbao-1934.08-226/mode/2up but I couldn't spot the article in there. (It's amusing that the front page has a huge ad for school textbooks.)
As an alternative perspective, this is my home lab:

* Location: Sitting on a shelf in my basement office. Ventilation is okay, the WiFi is fine but not great.

* Hardware: An old PC I picked up at a neighborhood swap meet. I added some RAM taken from another old PC and bought a hard drive and WiFi card.

* Software: Debian stable and podman/podman-compose. All my useful services are just folders with compose files. I use podman-compose to turn them into systemd units.

If the stuff in the article is the kind of thing you're into, that's awesome, go ham! But you absolutely do not need to ever, and you certainly do not need to do it right away. I run a bunch of services that my family uses daily on this thing, and we use less than half the 16GB RAM and never get over 5% CPU usage on this old, ~free PC.
Oh yeah, we feel this pain point as well re: large and unwieldy containers. The best approach we've been able to come up with is ship a reliable if large container image and slowly factor out or reduce our heaviest and least reliable dependencies. But it's a looooong process.
In many ways its not an alternative, in particular, SWC does not handle resolving and other bundler specific concerns, and dropped the concept of JS interop with plugins (its all rust built WASM now).

I also blame Vercel, they have put zero investment in documenting SWC. The person behind the project used to be more prolific in documenting things, and that all stopped once Vercel scooped them and the project up for use in turbopack (which has not materialized as a standalone solution like they promised, funnily enough)
https://archive.is/zemz3
I also see the opposite where a company has a web app product and a public API. The API is also a product. Some front-end developers think the API is the webapp's API and they shouldn't have to make any tradeoffs.

My suggestion in these cases, is to give the front-end devs a node/express server where they can compose the API calls the way they like and consume that from the webapp. But... they have to own it.
I wish Nix had a shallower learning curve (or that I was smarter). It's been on my list of wishes to play with, but that list is long, and getting Nix over the hump hasn't been something I've been able to do yet. The concept makes sense to me, but when I see a new package or app I want to play with, I can get there with docker-compose and a VM more quickly than I can wrap my head around doing it in Nix.
This is something I struggle with a lot in API design. If the frontend is to never join, then the backend has to provide either:
1. a very dynamic API (e.g. GraphQL) and support arbitrary queries
2. a static but 'bloated' API where every query joins in too much data to cover every use case
3. a static but 'wide' API where each use case gets its own specially crafted response

I have no good answer for what makes sense but I usually straddle 2 and 3.
Am I missing something, or are the examples both projects with less than 20 C source files?
Make it easy to play "one more turn". Each turn only needing a few minutes is what causes players of turn-based games to suddenly find themselves still playing at 7am. The built-in "pause" in the game's action—with each turn accomplishing a discrete task—offers an automatic offramp out of the game, which makes it easy for players to decide that they will take that offramp after "one more turn". If gameplay were not so discrete, players would at some point just pause the game on their own and leave.
Then there is the classic Nintendo approach: "so you've put a lot of effort into this game? Well, you better keep coming back every day or we'll chip away at that".

- Animal Crossing: your island may become overgrown with weeds, villagers want to move out, some furniture will rust, your home will have cockroaches

- Nintendogs: the puppies will get very hungry and thirsty, they'll lose weight and stop recognizing your voice.
I owned a number of 2001 CNG Chevy Cavaliers around 2010, purchased through govt. surplus auctions. Their tanks were 3600 PSI. The tanks were certified for 15 years with no recertification. Nothing would stop working but they would no longer be certified. The tank would get hot while filling so I imagine the fatigue from many cycles of heating up was one factor in the certification period. Internal corrosion is another factor. If the natural gas compressor farm does not dry the compress gas then moisture will get into the tank and over many years will corrode the tank. There's a video out there of a CNG tank explosion at a fueling station somewhere in South America. No doubt metal fatigue plus corrosion contributed to that failure.
So 10,000 PSI for hydrogen is a lot of pressure to be transporting around in a vehicle for multiple years of heating / cooling and possible corrosion.
I din‘t use it myself, but people around me swear on Vellum. It‘s Mac only, though.
"Our major software systems cannot be brought back in their pre-attack form, either because they are no longer supported by the vendor or because they will not function on the new secure infrastructure that is currently being rolled out."

Ouch.
My local Costco's did not jack the price up.
qpdf[1], and, in particular, libqpdf, is possibly the most useful PDF tool I've ever used, because it was the first library I found that works at the proper level of abstraction for dealing with the PDF file format on its own terms.

In other words, the library directly exposes the essential PDF object structure (pages, dictionaries, strings, numbers, streams, etc.) for easy editing, while abstracting away as much of the incidental PDF file structure as possible (encryption, compression, object references, the page tree structure, etc.).

Among many other applications, I've used it to

• Automatically repair minor PDF file format problems (of the sort that would be fixed by Open + Save in Acrobat).

• Concatenate multiple PDFs into a single PDF, adding a bookmark to the first page of each, with the bookmark title derived from information not contained within the PDFs or their file names.

• Losslessly reduce the size of PDFs in not-entirely-trivial ways. For example, I was given a ~1 TB set of PDFs that stored 1-bit monochrome scanned images as losslessly-compressed (RLE, LZW, or flate) 24-bit color images with every pixel either 0x000000 or 0xFFFFFF, but also stored color and grayscale images in the same way, and included important non-image data. libqpdf made it easy to loop through each PDF file, extract and analyze the pixel data for each image, and replace relevant images with JBIG2-compressed "true" 1-bit equivalents without otherwise modifying the PDF.

• Lossily recompress large images embedded in PDFs, but only if they matched certain criteria. Specifically, I had a large number of PDFs that contained lots of lossless high-DPI 4K screenshots of a specific application, where even relatively high JPEG compression maintained legibility, interspersed with images where such recompression was undesirable (photos, document scans, 1080p screenshots).

• Create PDFs by overlaying plain text on PDF forms — "paper" forms defined by PDFs, not PDF forms — without duplicating form content for each page.

[In the above examples, JPEG and JBIG2 compression was performed with other libraries, as these are out-of-scope for libqpdf itself.]

[1] https://qpdf.sourceforge.io
> And for all the fascination with bureaucracy, the bureaucracy is never efficient

Isn't that perhaps the point? Corruption allows everyone to get their hand in the till for money, power, etc. Maybe this drives the "central planning" so that the elites get their graft too.
The picture at the top of the article is the cover illustration to Imagica by Clive Barker.

https://ixgallery.com/artwork/imajica/

The name of the artist is Kirk Reinert.
I haven't seen the segment, but I have just finished reading "Flying Blind" which focuses on the 737MAX disasters, and goes through the history of other issues.

The 787 did have its issues, and was certainly a bit of an early warning for the issues to come with the MAX, however it seems like it was more cheaping-out on things, than actively hiding ways in which they were going against regulations. The main issue was the battery housings, which after a few early issues, got re-
designed and retro-fitted to the fleet. There hasn't been a 787 hull loss yet.

Additionally because it was a new program, lots of legacy stuff never got in the way. The 787's cockpit is fairly modern, seemingly up to the standards Airbus have been setting for years, and without all the legacy gotchas that are present in the 737's cockpit. Being a higher priced plane also means that there seems to be less nickel-and-diming on the options, and therefore fewer opportunities for airlines to turn down optional safety extras.

As a frequent long-haul traveller, I'm fine on a 787 (although I'd prefer an A350). The 777 is uncomfortable but fine.
>I can’t find it myself so I asked here.

Here you go: https://digital-markets-act.ec.europa.eu/about-dma_en
An overview and learnings from the Bigtable paper
I welcome this extension as I, too, hate when sites prevent me from pasting (eg. to confirm my account and routing number, email address, etc). It fucks with my password manager and of course it's annoying when intricate password rules are implemented to counter the use of weak passwords. BUT. Yeah there's always a but.

But. I have implemented these exact security measures into web applications. I've been handed the requirements and I implemented them. I asked my client why we had to do this, when "everyone" knows that this stuff is terrible user-experience and can backfire spectacularly for security (the same people who would memorize a shitty password and use it everywhere, will now write their expiring, "strong", impossible-to-remember password on a sticky note or save it to a text file or spreadsheet called 'passwords.txt' on their Desktop). The answer is: we have to, for compliance. To pass a security audit. To prove to some major client or insurance company that we have a number of industry-standard measures in place to improve security. Unfortunately, your bank does not care about the 2% of us using password managers. Everyone else is still memorizing passwords, forgetting them, and making jokes about it like it's 2003.
It can be for fun or practical. Having access to ECC hardware is a big plus for some stuff so the server racks aren't all for show. It just depends on your goals.
"This episode will change how you look at games. We talk to Ben Brode, the designer behind Hearthstone and Marvel Snap, about how a creative person learns to make the things they love, and about the secret ideas hiding in games as simple as rock-papers-scissors."
This isn't only happening in front-end.

Entire backend teams can become unnecessary using cloud services like Firebase, then the front-end devs are the only devs.

Also on the back-end, SQL is often not considered a programming language.

I wouldn't get all twisted about sematics, schemantics. What people probably mean is that CSS/SQL aren't general purpose programming languages. Maybe you can make a complete webapp in CSS or SQL, but I wouldn't want to maintain one.
That's always the case when there's a numpad so you can easily move your cursor and write without barely moving your hand placement.
Software Development Bumper Sticker Practices (2009)
It's regarded as an inflation hedge but it seems more accurate to describe it as a measure of liquidity and liquidity expectations in capital markets now. Like a "Risk-on" gauge.
If it’s closed source and for profit? Definitely meet people where they are.

If it’s open source, and only for self gratification then I’d use my preferred tools so I can convert more people into using my preferred tools and thus get a broader better community.
>TailwindCSS v4 written in Tailwind

Didn't realize it was a self bootstrapping language now. Thats awesome
I think it's important to differentiate between corporatism (rule of corporations, also known as crony capitalism or cronyism) and capitalism (existence of private property and enterprise). IMO the former is bad, the latter is good.
Yeah, we’re new to this, so probably weren’t smart enough to work with the agency effectively.

Even though we’re providing a specific medical procedure, it’s for a common condition. And our doctors want us to build awareness about the procedure since we ultimately want to go nationwide (even global).
As soon as a security patch is released, it will be reverse engineered and exploited, regardless of whether PoC code has been released.

>Rapid7's "we release full details and ready-made exploits the very day vendor releases a patch"

This is not their whole policy. They have exceptions, extensions, etc. But yes, they will publicly disclose a vuln if your company decides to refuse coordinated disclosure and choose to silent patch.

They also don't release "ready-made exploits", please don't be hyperbolic. They release technical details about exploits, yes. But they aren't releasing metasploit modules or the likes...

See also from Project Zero (assuming that is your preferred vendor?):

>Any attacker with the resources and technical skills to turn a bug report into a reliable exploit chain would usually be able to build a similar exploit chain even if we had never disclosed the bug