skysight-inc/HackerNews huggingface dataset:
Building your backend/s and frontend/s in the same language makes keeping your data model, api inputs/outputs and business validation consistent much simpler and easier.
yes, I loaded the 1.35GB .bin file.
nope, all my prompts lead the the same answer.
Fitting things into 4096 tokens is an advantage of RAG, but quality of answers is night & day when you have actual sources. It also commodifies web indexing, which is interesting
Seconding the sentiment on this thread, I used this book to learn JS 5 years ago, and it's awesome. I've never seen another resource as good. YDKJS is more of an advanced treatment. If you're a beginner it feels academic, while Eloquent JS is very practical and approachable.
Typically universites dont fund any but the most seed research of the most junior faculty. What they will provide is RAs and lab/center space. Even then, it is usually encombant on the researcher to buy thier RAs, course releases, summer salary, as well as pay for institutional overhead from grants.

Of course the more you get in grants, the more overhead you can offset and typically the more you can publish thus the more likely you are to get tenure (assuming your institution even offers it any more).

Granting organizations want there resources to go to proven successes in general and the more you publish and speak at conferences the more recognition you get for the funder.

This is not to say that some funders won't risk a grant to a junior faculty member but senior facuty are likely to be safer bets. They PI the grant projects and junior faculty are participants, co-pi, and co-authors.

Put in layman's terms, I am not likely to contract a guy with an interesting non conventional idea on how to build my house but you might and that is great for the new idea guy if you are willing to accept the risk. In the house building world, the senior is a general contractor or master builder. The juniors are apprentices with energy and ideas. Again though, I'm not got to contract with an apprentice to build my house or lead a multi million dollar research project.
> For an action to be a shitty thing to do, someone must suffer as a result

Does somebody suffer if you urinate on the grave of a random person who died a hundred years ago? Is it a shitty thing to do?
>Windows doesn't have the same client/server o̶v̶e̶r̶h̶e̶a̶d̶ ̶a̶s̶ ̶X̶ ̶t̶h̶o̶u̶g̶h̶

...features and functionality as X, regretably
Security firm Quokka has briefed Congress about its relative risk: https://www.quokka.io/blog/the-security-risks-inherent-in-th...
Grats author here. That's supported as well. You can simply write annotated wrapper functions/classes/types/interfaces around your GraphQL agnostic API.
First jquery, then React, now this book reaches a new version. Good times for JS
> I think a key part of why this was confusing to many back in the day was that the big thing at the time was "client-server computing".

Anecdata, but that's why it's confusing to me even today.
> in a CPU or GPU, who cares, moving around the data is 100x more expensive than the ALU operation

Moving data is indeed expensive, but there’s another reason to not care. Modern CPUs take same time to add or multiply floats.

For example, the computer I’m using, with AMD Zen3 CPU cores, takes 3 cycles to add or multiply numbers, which applies to both 32- and 64-bit flavors of floats. See addps, mulps, addpd, mulpd SSE instructions in that table: https://www.uops.info/table.html
Has there been meaningful innovation in messaging? I had free AIM on $3 T-Zones in 2006. So I see no downsides to just forcing interoperability.
Thanks a lot for reading the post and reaching our with questions!

> That's great. Is it persisted to retry even after a reboot?

Absolutely! Our scheduler service manages the state on behalf of the application, even if the program restarts, the operation persists until completion.

> What informs the end user, in interactive situations, and what does it tell them?

Since the Dispatch SDK integrates directly in the code of the application, it's compatible with typical system observability tools. Say you're using metrics or traces to track operations, you can emit this telemetry on your dispatch functions. That being said, we know how important it is to have a built-in solution for this!

> What if the operation is delayed so much that it no longer makes sense; can we cancel it?

Different ways to solve this, one is to simply raise a permanent error so the operation stops, but in some cases it makes more sense for the system to expose controls so the operator can act on group of similar operations for example. Those are features on our roadmap at this time, but definitely agree on the importance!

> How do we identify a particular one, out of thousands going through the same function: by some of the arguments, like in memoization?

Searching through the state or history of the systems is also a key feature that a platform like Dispatch needs to provide to be "complete". We're still in early development so we haven't gotten to add this feature yet, but definitely excited to delivering it!
Presidential pardon is the one weird trick that employers hate, when you steal IP and get caught
So you hire only "10x developers"?
No. (article supports this too)
AT&T T-mobile was down, then Facebook messenger and WhatsApp, now Signal?! I’m not much of a tin foil hat kind of guy but this is getting uncanny.
That's interesting. I find Kafka so arid and GM so colourful I would never have guessed this fact.
It's not in gitlab's CI infrastructure, but I have continuous integration set up in a private server for https://gitlab.com/specbranch/r5lite and also for my company's proprietary hardware.
what does EDR mean?
I'm not sure if anyone know but I would like to ask about Signal.

I have an Android backup version of Signal message around 2020. Of course I have decrypt key. Since I can't restore it with current version, or the 2020 version of Signal (on Github release), how can I decrypt and extract all the message? Thank you.
Without NATO's involvement, far more Ukrainians would be dead, their children kidnapped, their possessions stolen by Putin's thugs.

If the KGB did achieve a coup in Canada, we probably would invade to put it down. The differences are 1) Euromaidan was a popular uprising, not a coup, and 2) the whole thing would have been over in a week, instead of bogging down into a stalemate and humiliating our army.

Your link is just quoting Putin complaining that Bush wouldn't help him with his coup in Georgia.
Google already apparently logs every network packet on the internal network (including DPI), so I imagine scanning corporate registrations can't be that much worse.
Astra Space to Be Taken Private
Looks like Temporal and Prefect had a baby. I hope this gets traction and best luck to the team.
I have a Bulbdial clock sitting on the mantel. I bought the kit around when they first came out but only got around to building it a few years ago. Recently when my niece stayed over, she slept in the living room, and she asked for "a nightlight". I turned up the brightness setting to provide a multicolored glow.
Isn't that just Lagrange points?
Yes, node/TS backend APIs are extremely common.
Yeah, I get it. There's a lot of complexity. I considered including something about "when the author has explicitly said not to release it" which draws up even more complexity in this case because the children argued 'Dad wasn't in the right mind.' So does that make it OK?

But honestly, for my part anyways, I'm not sure any of that matters.

I'm a big fan of creativity. It's probably the most valuable thing people have and it ought to be protected and rewarded.

That's why this is even a dilemma for me because I would be disappointed to see a good creative work lost forever just because they didn't see the value of their own work.

But that's also why I'm against that kind of inheritance. Children, especially those who have the luxury and of good upbringing, should be encouraged to pursue their own creativity and produce their own value, rather than riding on the coattails of their forebears.
no but calling it catastrophe over and over not working. comes off as crying wolf
https://github.com/Whomane/Whomane/blob/cc3a65ffba589b6ff996... and https://github.com/Whomane/Whomane/blob/cc3a65ffba589b6ff996... will likely interest any potential adopter

I guess it pairs with the phone for network connectivity?
First thought: "737 MAX? Did they forget a few more bolts?"

Nope, 777-200.

Still not a good times for Boeing, I'm not gonna be alone with this train of thought.
You are simply wrong. NodeJS is a popular server technology. I've implemented server APIs in NodeJS (both with and without GraphQL) in everything from large, well-known enterprises to brand new startups.
The docs have a page [0] addressing this question. The tl;dr is because grats uses the TypeScript compiler to parse an AST, and the compiler already recognizes docblocks and attaches them to AST nodes.

[0] https://grats.capt.dev/docs/faq/why-use-comments
Why isn't this just done with an industry standard lookup table these days?
They're open source and easily accessible, so I would practically guarantee some/most of them are using it and other open source books.

Given so many are just on Github and very well known/linked-to I doubt they even put any special effort into getting these specific resources.
No, Putin is not a madman - he was cornered. These are the facts! The West is slowly but surely bringing us at least WWIII, if not extinction! The West is always greedy and salivates over Russia's colossal territory and resources! And always gets hurt! This time, it could hurt the entire civilization, though!
Yeah, you make some good points, orchestration has been historically painful -- we've personally seen the headaches that come with scheduling on slurm and lsf; I'd guess some of the most thorough bikeshedding in history has been around tinkering with slurm's multifactor scheduling logic. We're trying to not to re-invent the wheel with orchestration, and we're in the midst of building interfaces to hook into slurm, instead of replacing it entirely :)

As for buck2, we decided to go with it for a few reasons:

More forgiving with gradual adoption, from our experience -- running non-sandboxed actions in bazel is a pain, buck2 has been much easier to plug into existing flows.

Buck2 installation is easier, and by extension, is simpler to embed into our test runner.

Respectfully, bazel's implementation is a monolith beyond comprehension -- if we want to modify buck2, and package our own fork, we have confidence that we could do that.
Grats author here. It's spiritually similar to type-graphql or typegql, except that it's able to see the TypeSCript types as well as the class/method names. So, there's less duplication, less overhead, and a less confusing API (specifying argument types and return in type-graphql for example is pretty confusing.

Unlike Pothos, this implementation-first approach is able to leverage simple type script names and types, whereas Pothos requires you to explicitly define all the names and types using their builder-pattern-for-graphql-SDL API.

More here on why Grats does not use decorators like type-graphql: https://grats.capt.dev/docs/faq/why-use-comments/
It seems to me the incentive is mostly that it costs tons of effort to maintain these things in-house, and that it doesn't actually hurt the business to share (most) things.

Does copyleft help? Perhaps, but that's not clear to me. There are tons of successful non-copyleft projects so copyleft certainly doesn't seem to be a requirement, and look at how many companies are violating the GPL and basically just keep doing it. While GPL suits do happen (just last week in France), in general they're exceedingly rare, and the risk consists of a bit of negative publicity among a small number of people.

All of this is of course an old discussion, and to be fair I don't think anyone can be sure of anything here which is why people have been discussing this for 30 years. Basically we'd have to construct an alternative universe to be sure.
It's probable you can train the same system on the same data multiple times and still get an improvement. You could also train on universal sequence prediction data in between as well.
> It is not Apple's job to protect its customers from third party stores malware. They just have to build a secure OS with a safe apple store while allowing third parties to provide stores.

Yes... it is.

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A... (section 64 paragraph 3)

> In all cases, the gatekeeper and the requesting provider should ensure that interoperability does not undermine a high level of security and data protection in line with their obligations laid down in this Regulation and applicable Union law, in particular Regulation (EU) 2016/679 and Directive 2002/58/EC. The obligation related to interoperability should be without prejudice to the information and choices to be made available to end users of the number-independent interpersonal communication services of the gatekeeper and the requesting provider under this Regulation and other Union law, in particular Regulation (EU) 2016/679.

"the gatekeeper and the requesting provider"

Apple is still on the hook in combination with the requesting provider that doesn't intentionally deploy malware.

Apple is likely claiming that Epic has in the past demonstrated clear and willful circumvention of their own security and rules. Apple would be putting itself at risk by allowing Epic to deploy applications given Epic's past history of intentionally trying to harm Apple's reputation and would compromise Apple's high level of security in data protection that it is required to follow under Union law. Apple would likely state that Epic has shown that it would intentionally break the law to harm Apple - and that's a believable concern.
The answer is always no if the article title is phrased as a question ;)
Specific callouts occur deeper in the bill too - and with no standard or policy or reasoning why other than appearing on a list.

Ownership restrictions didn't keep Facebook from allegedly selling the space for mass influence of an election to Russia operating through a UK company. If politicians were actually looking to protect the US, regulations on social media and advertising that apply universally regardless of ownership would be much more effective. I would welcome a well built set of regs for that.
I don’t understand why it is phrased as either or at all. The two techniques seem to come with very different trade offs which can be harnessed appropriately
I use this, which uses crowd sourced thumbnails from within the video https://dearrow.ajay.app works really well. Made by the dev that made SponsorBlock
Can you give me a jurisdiction that product placement is illegal?
That reminds me of how Torque [0] debuted in 2001 using Tribes 2.

[0] https://en.wikipedia.org/wiki/Torque_(game_engine)
“The Protecting Americans from Foreign Adversary Controlled Applications Act”
It’s interesting to me that google doesn’t do a security clearance review on its engineers.

I’ve had a security clearance in the past and there’s no way a foreign national passes. I got questioned significantly about a family member who was a citizen of another country.

I wonder if it’s just a matter of time.
As annoying as it is, I remember a channel I subscribed to once mentioned that they did a little AB experimentation and turns out “surprised face” thumbnails do actually attract more views.
It was also bad for Google, as it cost a lot to build, was almost completely unused by their userbase, and resulted in a lot of inbound spam.
Good Lord how the hell was this study published? Given the obvious conflicts of interest, selection bias inhering to using a baby formula company listserv, and the lack of any sort of rigor in the methodology in the main paper, I was hoping to find some salvation in the supplemental methods. Survey details:

"You are being asked to complete this survey because you meet all six conditions "

...

"5)you experienced challenges with feeding your baby because of the infant formula shortage in May 2022"

Somehow the idea that 80+ percent of respondents switched formula is less shocking in that context huh. Also half these study questions seem like a well designed market research survey for Bobbie.

At least it looks like they didn't waste taxpayer money on this
https://www.youtube.com/watch?v=Km5XQxRrQvw
Intelligence agencies often have their own interpretation of the law, which coincidentally allows them to do what they want.

And if you don't like that, you can sue them in the special intelligence court where the evidence cannot be revealed, the proceedings are secret, and the judges are very unbiased.
I was using “10x developer” as an equivalent to “a great developer”.

I try to only hire great developers.

(I don’t literally believe that there are developers 10x better than the average)
Ya and I've seen similarly basic support in small IP houses that support Verilator alongside whichever proprietary suite the house uses.

Is there a need here? Are there IP design houses that are so bad at CI infrastructure that "we run Verilator for you" is a value add?

I don't mean to denigrate the OP, just wondering what the market is. Undergrads build this stuff and let me tell you my undergrads are not a particularly talented group.
Yep. Networking was the beginning of the end of anything comprehensible.
Node.js is almost 15 years old at this point. JavaScript has been a mainstream server-side programming language used by experienced, thoughtful developers for a long time now.
> I wonder if this change signals it is "Database for Large amount of Data" is what drives most of business

Hasn't this always been the case?
> on account of them being Chinese

Ethnically, yes, this would be immoral. On the basis of nationality, it's absolutely not immoral. In fact, in the US, it's /required by law/ to discriminate in this way if your company works on technology related to national security. It is illegal to discriminate on the basis of national origin, someone's birthplace, but not on the basis of nationality, their citizenship, in the case of national security. Only US citizens, including those who are naturalized, may work on technology related to national security within the US.

What is prudent is another matter besides that which is legal. That which is moral is another matter besides that which is legal. I've made my opinion known, you're welcome to form your own.
And these standards do not say "patch every time there is a CVE, even if you are not vulnerable". For example PCI-DSS says "New security vulnerabilities are identified using
industry-recognized sources for security vulnerability information, including alerts from
international and national computer emergency response teams (CERTs)", it doesn't specifically even mention CVE.

A vulnerability / bug in an upstream component may or may not end up being a vulnerability in a complex system incorporating that component. A vulnerability in upstream functionality that is disabled (or not used, with no possible path through which an attacker could trigger the upstream vulnerability) in a particular system is not a vulnerability in that system. Standards like ISO27001, SOC2, and PCI-DSS generally ask teams to have processes to discover vulnerabilities, but not necessarily to patch things that are not vulnerabilities in practice.
No Javascript:

https://cc.bingj.com/cache.aspx?d=2768652030338&w=LoMpuBD0Uk...
That was marvellous. Thank you for sharing.
I've spent a lot of time with GraphQL, in the backend, frontend, and middleware, with TypeScript and also Python. At my startup, we used Strawberry on the backend, TypeScript in the middleware for stitching multiple APIs together [0], and codegen on the frontend with graphql-code-generator. Once we got it working, this was an amazing setup and my favorite part of our stack. GraphQL was a shared cross-language type layer with end-to-end auto-generation. We could define a resolver with Strawberry in Python, and get auto-generated types all the way to the frontend. We could collaborate on new features by defining a GraphQL schema in the RFC and coding the frontend and backend in parallel.

I recognize a lot of the problems described here in the docs (the "How Grats Works" [1] page is a good read). I could see this library fulfilling a similar role to Strawberry, for a backend written in TypeScript rather than Python.

Overall, it looks like a compelling implementation of some good ideas from the author, who incidentally is on the Relay team at Facebook, so he's probably done a lot of thinking in this problem space. Next time I'm working on a project with a TypeScript backend, I'll definitely take a look at this.

[0] https://www.splitgraph.com/blog/graphql-schema-stitching

[1] https://grats.capt.dev/docs/faq/how-grats-works
I can score every time it serves by jumping in the back row and power hitting the ball to the far side. That keeps it from scoring 2 points in a row which makes the game quit winnable.
You mean "2,000 picometers"

Because, I stayed in a Holiday Inn last night and now I am a Marketing professional
Hm, why can't you restore it? AFAIK you should be able to.
Is it your contention that Google should never hire anyone born outside of USA or without USA citizenship? Do you realise how much of their workforce that would preclude?
Not to be too aloof, but if the future doesn't care about the past, why should the past care about the future?
> insecure data storage, data leakage, and exposure to network based attacks

Huh... So this is about securing data, buffer overruns, and remote code execution. Seems like kind of small potatoes for Congress to get involved.
Indeed, the only valid operation with the magic URL is exchanging the URL-based token with something else (your PDF, a session token, etc.) and then expiring the URL, so by the time the scanner gets around to it the original URL is invalid.
This approach works fine for simple projects, but you also need to provide an implementation, and the two need to line up. This is what leads people to want solutions that either generate implementation types from the .graphql schema or (as Grats does) generate the .graphql schema from the implementation.
I find that feature also interacts very nicely when editing parallel paths. E.g.:

prog/libs/foo┃/src/CMakeList.txt Start with one path
prog/libs/some┃/src/CMakeList.txt Edit the middle part
prog/libs/somelongname/src/CMakeList.txt┃ Press tab, completes middle and jumps to end

I was also thrilled when I noticed zsh contextually skipping some potential completions that I'd already had on my command line. E.g., if I have files `aaa` and `aab` in a directory, then hitting tab on

git add aaa a┃

will do the right thing and immediately complete to `aab` without further prompting. (Better yet, it also does that if I'd added `aaa` with a previous command!)
If a regular consumer can't bypass it by themselves then it's drm.

If it requires a bypass by the consumer at all then it's drm.
Scrivener is worth checking out too. It compiles to epub and is a dedicated writing ide essentially.
Putin had no intention to join NATO, and knew he wouldn't get in. The only reason he would want in is to do the exact same thing that Russia does on the UN security council as a permanent member, which is to stifle and blockade. There are some current NATO members that hold things up, largely Turkey. Coincidentally a large number of smuggled items that get around sanctions to get to Russia...go through Turkey.
This has now changed to "Signal is experiencing technical difficulties. We are working hard to restore service as quickly as possible."