skysight-inc/HackerNews huggingface dataset:
LOL the $1k stand. It wasn't until I bought a $200 stand when I realized how they can justify $1k for something that works properly.

These days I'm using a Chinese "professional 4k" monitor that covers 98% of DCI-P3 color gamut and the entire monitor costs less than the Apple stand. Can't compare this to any CRT I used in the 90s.

https://www.innocnmonitor.com/products-category/4k-professio...
Pan is not a child, but a predator who "refused to grow up" - and the whole "trying to kill him" is clearly the result of Pan cutting Hook's hand off and sadistically feeding it to a crocodile (IE, while we don't know what the battle between Hook and Pan was about, the fact that Hook celebrated his win by maiming Hook and humiliating him this way is a good datapoint into his character.)

It seems like you're on Pan's side, which I think is in line with the point the comment you're replying to makes.
I still have $20 down on "We are living in a universe inside a black hole."
List of Free and Public APIs
I wonder if the mods can change the main article link to the one you provided instead?
Yeah man I love working and never using my natural skills.
What will they do if you refuse?
Biowasm – Run C/C++ genomics tools in the browser
I think nearly all the house cleaners will be extremely surprised to hear that they earn $50 an hour. Even more, they get all their travel-related costs reimbursed! Oddly enough, that's not what they see on their payslip. And that's assuming they get a payslip at all.
Besides encrypting your user data at rest using these post-quantum cryptography algo.

What can be done from a design point of view to make it as hard as possible to deter attackers?

Would it make sense to segregate different types of data into other dbs rather than as a separate table?

“Name DB”
“Account DB”
“Address DB”

An attacker would need to have advanced knowledge of the app backend to know you have to snag both the account db and address db. Otherwise, the decrypted data is useless with only 1 db.

Drawbacks of course include “performance degradation”, “increasingly complex app”.

Ideally, if you did not need to store sensitive data or collect other user info such as address or zip code. Then not asking for it at all would be optimal. Maybe regulation is needed here.
Well, quantity has a quality all its own. Extending the sprint to wait for the person to complete their PhD as part of the "research" part of the ticket would not quite be Scrum.
*beep boop* Must moderate today
Wonder what caused it. Weather? Software malfunction? Probably wise to always wear a seatbelt even when the signs are off...
The quickest way for people who know about air-conditioners and don't know about heat pumps is to consider what would happen if you put your air-conditioner the wrong way around in the wall. Instead of lovely cold air coming in and waste hot air going outside, the waste hot air would be heating the house and the cold air would be going outside.

There is no such division of things into air-conditioners and heat-pumps. Air conditioners ARE heat pumps.

In some parts of the world dual-direction heat-pumps are (or rather were) called 'Reverse-Cycle Air Conditioners' meaning they they could be switched from cool-inside/warm-outside to warm-inside/cool-outside.

Another thing to learn is the difference between temperature and heat. It's very similar to the difference between voltage and kilowatt-hours.

And 'cold' or 'freezing' are just labels. A litre of water at 70 degrees C will give the same amount of heat going to 40 degrees C as a litre of water going from 40 degrees C to 10 degrees C.

Similarly 100 cubic metres of 'freezing' air at zero degrees C going to -10 degrees C can give as much heat as 100 cubic metres of air going from 30 degrees C to 20 degrees C.

That 'freezing' air at 0 degrees C is actually at 273 degrees Kelvin. It has A LOT of heat in it.
given that a telescope conceived while Bill Clinton was president in the 1990's got named so as to complete the name "Webb Hubble", let's please please please call the next telescope "Chelsea".

https://pagesix.com/wp-content/uploads/sites/3/2020/02/chels...

https://www.wnd.com/wp-content/uploads/2015/10/Webb-Hubbell_...

(Chelsea Clinton's resemblance to Clinton family friend Webb Hubble has prompted speculation...)
Thanks for doing that.

> par2cmdline[-turbo] encode: par2 c -r25 test

That command is rather unfair to PAR2 - you should add `-b48 -n2 -u` to make the comparison fairer.

PAR2 ain't exactly fast, particularly compared to GF8 focused formats, but the numbers you initially gave seemed wildly off, so I suspected the comparison wasn't really fair.

Ideally you should also be including the version of each tool used.
Changing terms after the fact does not change the terms that were being operated under during the time of the breach.
Hacker News is extremely strongly manipulated. What users see as popularity order is actually the order manipulated to the moderators' liking.

https://github.com/minimaxir/hacker-news-undocumented#behavi...

I believe this is a good technical article for HN concerning safety culture of engineers, but moderators didn't think so.
I'd really need to see this study reproduced several times before I take it seriously at all. Ideally there'd also be other similar but non-identical studies pointing to the same effect.
> At the time Oxcart was developed in the early 60s, civilian photo coverage was minimal. See almost certain RQ-180 photos

That's just a temporary gap in coveruppage. They will just be tagged 'Do not snap!' cybermagically, and all the locked down gadgets will comply!1!!
https://en.m.wikipedia.org/wiki/Sinaltrainal_v._Coca-Cola_Co.
"Beyond a reasonable doubt" is a very high bar to match. Certainly way higher than would be expected of even the most respectable newspaper, for example.
Each of these can be implemented on top of AICI. AICI lets you run an arbitrary (Wasm) program to determine which tokens are allowed next - this is strictly more expressible than CFGs.

In addition to constraining output, AICI also lets you fork the generation programmatically as well as dynamically edit the prompt which is important in some scenarios.

The idea is that several LLM inference systems implement AICI as an interface, and Guidance, LMQL, etc implement AICI backend and then everyone wins.
Show HN: 2D-to-3D Floorplan Editor
This project derives from an open source project but decided to make it into a Nextjs app, and feature the latest updates from Threejs
The threat estimate for a quantum computer that breaks cryptography shall be based on currently available data and the understanding that only the Schor algorithm is known to provide exponential speedup for factorisation.

Let’s give IBM credit for attempting to factor in the number 35 in 2022, although they failed there [1]. Before that, the successful factorisation happened for the number 21 in 2012 [2] and the first factorisation of 15 in 2001 [3].

Now we have three points. There is a trend that the factorised number grows by a number of 10 for every ten years. Thus, to get a quantum computer that facilitates RSA-2048, we shall wait for 2^2048 years.

[1]: https://arxiv.org/pdf/2103.13855v1.pdf

[2]: https://www.nature.com/articles/nphoton.2012.259

[3]: https://www.nature.com/articles/414883a
> Why is this something Amazon has not fixed? From the outside really seems like they could slap some B-trees on the individual buckets and call it a day.

They fixed it already, it's called DynamoDB. With some SQS and Lambda glue you can index your S3 content in any way you want for later retrieval.
They did understand but said that function no longer works. I don't know why the UI still exists. To be clear you can add name servers that were already defined to your zones in the root servers but can not create new ones. So I could for example add pdns196.ultradns.org as an authoritative NS for my zones but if I rack mount a server and expose DNS using one of my domains then people will only learn about it when they query my NS records from other DNS servers that are already defined such as ultradns, google, etc... because they already queried NS from pdns196 meaning to your point that one I just provisioned will lack glue records in the root DNS servers.
I would take the side of sanitation than taking a chance on having used sheets on the bed
> Call your congressperson.

I'm sure that after my phone call, my congressperson will drop all the things he is being paid thousands of lobbying dollars to do on behalf of his donors to get right on this. Sorry for the snark, but normal people are powerless to do anything about these shenanigans.
It's a meme. Same as "shot himself in the back of the head"
My Roku-enabled TV used to bootloop whenever I blocked it from fetching screensaver ads. Support was happy to help. First step: (re)connect to the internet. Second step: disable any network ad blocking. Hmmmmm.

People rolled their eyes when I suggested that this was intentional, but these recent revelations strongly suggest that Roku is very comfortable exploiting the hell out of dark patterns.

If we don't enact stronger consumer protections, everything will work this way.
I Asked Leading Entomologists: 'What's the Smartest Bug in the World?' (2016)
I wonder if the obviously coordinated nature of this change will come back to bite them in the ass. It seems hard to believe that it was a good-faith change on their part.

Also, the breach happened while people were receiving services under the old TOS, not the new one. I wonder if that could impact things?
normally stock is made with scraps... for example I will buy a whole rotisserie chicken and then after eating all the flesh, use the remaining carcass for the stock, and then throw it away (no vegetables!)

If I'm making chicken stock the resulting vegetables don't have to be thrown away, but they aren't super appetizing- a mushy texture and not much flavor. Typically it's less than $5 of vegetables, like celery, carrots, onion and garlic. Not clear it's even worth saving given you extracted all the goodness into the stock.
Omega Point Cosmology
GoLang as others suggested is a good pick. If you're in the "I don't like coloured functions" camp it's likely your best bet for web workloads.

If you're not a fan of GoLang's spartan syntax and are cool with async/await, C#/dotnet core is a great experience on all platforms. IMO it has the best async/await implementation (it originated there) on top of a multi-threaded event loop. ASP.NET is a great web framework and it has great library support for everything else. As someone who avoids "traditional" ORMs (Hybernate, Django) I really like Dapper.
As I understand it, if the expansion was constant, farther away stuff would still be more red shifted. Stuff twice as far away appears to be moving twice as fast. It helps me to imagine the expansion of a metal cookie sheet, where the two edges are moving apart faster relative to each other compared to the speed that they're moving away from the center.

The surprising bit is that the far away stuff seems to be even more red shifted than that, so we're not just expanding, but the rate of expansion seems to be accelerating.
And that’s how it should be - a hotel is a business in a commercial zone with professional management, pays taxes and doesn’t negatively affect home affordability
Or in my world, "We skated around the security/risk review by claiming it is a low-risk application [no PII data, not customer facing, only a PoC, etc], but now we're doing all of those things. The auditors caught on to us and are saying we have to have a review by security. It's already in production so we're not changing a thing. You guys figure out how to make the auditors happy since we won't be held accountable.". Good times.
Ahem. The base rate for a healthy person dying in the week or so leading up to their important testimony is tiny. It's reasonably likely (20%+) that this was foul play.
Why an open source Salesforce CDP alternative is needed
Nag here, along with Sujoy and Subin.

We have a background in product and engineering for Asia population-scale customer data infrastructure and applications - across Affle (3 Bn+ connected devices for consumer intelligence-based marketing), Truecaller (~400 Mn. MAU) and Razorpay (India's largest payments platform).

We built Multiwoven as an open source reverse ETL tool for data activation. After our recent repo launch, Multiwoven started being used by data teams to eliminate the complexity and tediousness of building and maintaining data pipelines to third-party biz/marketing/sales tools.

From our early users and discovery conversations, we quickly started seeing users who have a data warehouse use us like a CDP on top of their warehouse. Many of them were customers and prospects of Salesforce (CRM and/or marketing cloud).

The simple solution that worked for them -

1. Easily works with all their tools (not just Salesforce's ecosystem). We are adding roughly two new Connectors every week, and it's also easy to build or customize for someone's own needs (without going through long and expensive professional services)

2. Not being compelled to invest upwards of half a million dollars a year on Salesforce CDP. The Salesforce CDP Starter Pack is at $110K, and doesn't include Segmentation, Audiences and Ad integrations (imagine a CDP without these!)

3. Being able to easily self-host the software (that essentially has access to all their warehouse data) and not worry about jumping through Compliance/InfoSec's hoops.

Gartner recently naming Salesforce CDP a leader in their first Magic Quadrant for CDPs is certainly surprising. We're not sure that users feel the same way. We recently released a connector to Salesforce CRM, and Salesforce Marketing Cloud is on the way. We are continuing to furiously build and working to meet users' needs.

As a young project, we'd love your feedback.
https://github.com/Multiwoven/multiwoven
I use a chinois with a wooden tool that comes with the chinois.
Someone's bound to mention it in this thread (or I hope they do, because I thought it was great but can't remember the name or the details) - but there's some formula that's roughly like:

N = total applicants
1. Interview N/10, decline no matter what
2. Hire the next person who's better than everyone seen so far

As I recall it was slightly more complex than that, perhaps only to give it an impression of being rigorous theory, but that was the gist of it.
It is a very complex question. I'll note that after I paste formatted text into (say) Word, it's easy enough for me to change the font family globally while preserving the rest of the text. But that doesn't help if I need to change the font size.

My instincts want me to say that I want to preserve bold/italic/strikethrough and nothing else. I think my instincts are lying because as a human I want everything to be simple.
Weird, I have it installed but maybe it could be installed then but not now.
I don't believe in conspiracies, but killing himself in the hotel parking lot halfway into his disposition is quite noteworthy regardless of the circumstance.

It's known that whistleblowers disproportionately suffer from stress and depression [0], for what it's worth.

[0] https://www.bmartin.cc/dissent/documents/Lennane_what2.pdf
It's very easy.

The only issue is that GrapheneOS doesn't provide a built-in way to have root privileges and if you want root on your phone securely you will have to implement that yourself or use some third-party solution (e.g. building a userdebug build, using https://github.com/chriswoope/resign-android-image, using Magisk, etc.).
Aren’t you describing crime in general?
There might be a level of changers like you mean, but they're not the people I'm looking for either. That's just making the world slightly different.

The people I'm looking for are the ones who have actually had to grapple with why there is anything, rather than nothing at all. Nothing before them is taken for granted as necessarily so.

Those are creators, and most people never ask the questions.
Oh, like you don’t?

We’re among friends here.
My kids have been watching TV, they must have accepted it on my behalf. They should have required the parental control pin to accept it.
It's touched on in the article but some more background on the older and more recent history of this beast.

https://carnegiemnh.org/the-strange-saga-of-spinosaurus-the-...

It's a bit like if someone made up a controversial fossil find for a movie (found, gigantic and crazy-lookig, destroyed in war, found again, raging nerd debates for a century, etc) except real.
Oops, yeah, you are correct about the relative ages, I wrote a bit too fast there.
SaaSS Service as a Software Substitute

https://www.gnu.org/philosophy/who-does-that-server-really-s...
Feels like Michael Crichton's Airframe
Nice, an update well received by enthusiast.
The stuff I read also claimed that the children and her parents haven’t been seen either.
can't scroll on mobile kiwi browser
Irrespective of this specific case, do you honestly believe it is inconceivable one of the largest defense contractors in the world with deep connections to the military and intelligence apparatus would be capable of having an individual murdered if it were sufficiently important to their interests?
Most stock recipes have a "degreasing step" where you're splitting the lard from the stock (because fatty stock is kind of ... gross?)
I disagree. Pasting plain text removes additional attributes, an operation that forces the user to redo work (add highlighting, bold, font choice, etc). For average users who will never learn about special alternate ways to paste, they NEVER want to redo work. They will hate it. For those of us who care, we can always just paste into a plaintext editor if we want plaintext.

Defaults often become "the only available option" and in that case I (and I think most folks) would prefer the defaulting to "as much info as possible is preserved on paste".
Google Pixel 6/7/8+ silicon is based on Samsung, https://www.digitaltrends.com/mobile/google-pixel-8-tensor-g...
I tried blender video editor just the other day, and this problem was still there -to the point that I actually went out and found kdenlive the same day!
What I learned in my years as proposal manager was that it is always best to get the first slot amongst the other bidders for your presentation and the last for the negotiation.
A version of the full paper seems to be available here: https://osf.io/s2zv8/download/?format=pdf
This doesn't make sense:

- i think encryption at rest would probably just use symmeyric encryption which is unaffected by shor

- how does the attacker get into your network in this scenario. Stuff encrypted at rest by definition is not flying around the network.

- what sort of scenario would be involved where the attacker knows how to get one db but not the others? The hard part is figuring out the first db

> Drawbacks of course include “performance degradation”, “increasingly complex app”.

On the contrary, sharding is a super common performance technique.
I like it. Do you have a roadmap? There are a lot of 'coming soon' features :)

What I miss in these kind of tools is a way to 'mold' the UI into something more specific. A kind of scripting maybe. For example I would like an 'edit' button on each row to open an edit form, opening a form for editing. Similarly an 'Add record' button at the bottom. Or better, an 'Add contact' button if its the Contacts table. And how about having a view that always opens with a certain filter, for example the Purchases table showing only purchases by customer A if I click on the button 'Purchases' in the Customers table in the row of customer A.
Kdenlive is great! I just used this recently to create some transitions with transparency. I normally use DaVinci Resolve but I couldn't figure out how to export a video with a straight alpha channel, only premultiplied (it only lets you do this for individual clips, not compound clips or a whole timeline).

I think it's fair to say Kdenlive exposes much more power to the user, but I felt that I had a bit of learning to do to understand a few things which have opinionated defaults in programs like Davincei Resolve. For instance, I had to use a composition between two tracks and choose the type of compositing to use between them in order to get transparency exported, whereas in other programs this would default to add or multiply which behaves in a predictable way with less effort (but with less control).

In saying that it feels like Kdenlive is an incredible amalgamation of very powerful plugins and parts!

I wish it had a bezier curve editor for things like fades or tweaking keyframe animations.

After a while I switched to blender (since I used it to create the source footage) but it was a little glitchy, the video somehow getting out of sync with animated opacity and it confused me how you "Render Animation" in blender which is the same option as for rendering your (3D) Scene in blender, and where to find the option to turn off the video editor composition which overrides this as soon as you start adding clips to the video editor. It doesn't really compare as it's just blender, with all it's intricacies, and video editing bolted on to it, whereas Kdenlive is just about video editing.

Anyway, great work!
Goqlit might've been closer a brand-action name
> There are several alternatives to simply replacing classical signatures with quantum-safe signatures, which could address the performance issues when it comes to PKI. We are currently looking to experiment in this space to gather data for more solid recommendations, which we will share in a future blog post.

Does anyone know what those alternatives might be? Some way to collapse a chain of signatures into one? Long-term symmetric session keys? Neither of those sound like good ideas but I'm grasping at straws.
I'm sorry, after 20 years of data breach alarmism, and resulting de minimus consequences, isn't time for some of this to get a "who cares?"
If you agree to all disputes going through arbitration then all disputes go through arbitration
Medicare drug negotiations and $8 credit card late fee payments are my rebuttal. You aren’t supposed to fix it; you’re bringing it to the attention of leverage who can. Phone call is free besides your time.
You don't add it when you're making or storing the stock. You add it when you're making your sauce. In lots of cases, you're not saucing until the main dish is done and plated.

I am not sure I would use gelatin in a vegetable stock. Things I've used: arrowroot powder, cornstarch, flour, potato starch, agar. A classic veggie gravy would be veggie stock + flour/butter + maybe some tomato paste.
Would love to see this get reproduced. Until then, I'm not sold. Feels like people have been arranging themselves in sequence for hundreds of thousands of years at least; you'd think somebody would have noticed if this effect were strong enough to be measured.
This gives me flashbacks to https://en.wikipedia.org/wiki/BonziBuddy
Is there any insight why there is no PQC signature with a short signature?

Is it just us failing to find one, or something more fundamental prevents a quantum resistant short signature like?
Can anyone who understands legal stuff explain this? As a layman Roku’s popup seemed wildly insufficient verification that the account owners were the ones accepting these TOS.
My personal favourite is when copy/paste gives radically different results based on whether you copy the text just before or just after sunset ... we can all agree on that at least?
I think you're looking for the Secretary problem. And the solution is almost what you said, but instead of N/10 it's a bit over N/3.
For an idea of what's possible you might be interested in this story that was just on HN where they fine tune a quantized 70b model in 48GB VRAM: https://www.answer.ai/posts/2024-03-06-fsdp-qlora.html