skysight-inc/HackerNews huggingface dataset:
Also means any user can be selectively targeted with a compromised app signed by the correct key.

If you use pretty much anything other than Linux (and even that with care) there is a rather long list of people who effectively have root on all your stuff.

Maybe this can’t be avoided. Economies and civilizations run on division of labor and interdependency. I just think it’s important that people understand this. Most people don’t and think they have far more digital security and privacy than they do.
And many here have engineer in their job title.
I believe this is captured already – it's possible to verify that the binary was created by Google, but that it originated from the original developer.
This is the number we've been using recently, but it's been different in the past and there's no reason to keep using it, especially when we have data showing that 25 is the age your decision making faculties are generally fully developed
Public transit is public. I.e. the government controls it. They could implement a transit pass tied to identity and prevent anyone with debts owed or other poor "social credit" from obtaining one.
YouTube does it, at Google scale. And these same people do pay $20/mo for ChatGPT anyway.
This project is my foray into tech startups and developing a mobile app. A few years ago, I decided that I wanted to work on a project related to sustainability. After considering one previous idea seriously, I decided to consider a consumer carbon footprint tracker app. I looked around and did not find an app on the market that I could see myself using on a regular basis. The design that I came up with is user-friendly and one that really meets my needs for an app. The challenge is that I am not a technical person, I am just an everyday user. So, there is a lot in the user interface that needs to be adapted.

The main idea behind the app is that it tracks the users' personal carbon footprint in four areas: Home Energy, Driving, Flying, and Recycling. To keep the user engaged, the leaderboard idea is intended to allow the user to communicate with their friends and family. Plus a news feature.

Please let me know what you think!
> One advantage of that, is that malicious users cannot be served a malicious update of an app that didn't go through Play Store.

And the disadvantage of that is that it is almost impossible to patch APKs on your own without running into serious issues, even as root - particularly when the app you're trying to patch has shared permissions with other apps of the same developer.
For some details: https://help.apple.com/xcode/mac/current/#/devbbdc5ce4f
Show HN: Superpipe – optimized LLM pipelines for structured outputs
Superpipe helps you build, evaluate, and optimize LLM-powered classification and extraction pipelines across speed, cost, and accuracy.
And zero use New Relic?
There isn't really such a question. The law explicitly requires anonymous third-party age verification to be offered as an option. There are definitely concerns about how well that will work in practice, and I would definitely want to wait and see how it works in Florida before advocating for a wider rollout, but this Florida bill is actually the most reasonable of these age verification requirements rolled out to date.

I'm all for a healthy skepticism of government intervention, but my feeling is let's let Florida try this out and see what happens.
People are bad at key management. Like, this has been proven time and time again.

I do think a hybrid approach would be best here though.
https://ibb.co/BrYQhQJ

Looks like normal operations after departing container berth. Concerning is the speed ramping up.
Your last sentence is pretentious and condescending.
> I can understand that scaling out the game "work" into multiple CPUs and dedicated processors makes sense from a cost-benefit perspective

IIRC it was not that, the Saturn was the most expensive to manufacture of the big three, and the need to price match the PS made it a financial disaster for Sega.
> Perhaps this comment was meant as a joke

Nope, not a joke. As you say, this is just the application of parsing technology to a tokenized stream of input events.

its super-useful in creating state machines to do parsing---and it can be super-useful to create state machines for other things as well.

> I watched Ken Thompson write a Paxos implementation in yacc once.

In real time? dude, you gotta post video to youtube or post a "Tell HN" story about it.
Ask HN: Create a Simple Website/Blog?
I've created a neocities website but I didn't like how hard it was to program, I understand you need a Domain and DNS setup with all of that, but my question is what is the absolute basic barebones way to go about this? For reference, I want this website to be simply split into a resume/professional side and a creative/personal side with very few pictures or graphics mainly just text. Which online services or steps should I take to achieve this? My only requirements for it is to have a custom name (with a .xyz or .com) and just a few redirect pages to different areas of the website.
BBC liveblog: https://www.bbc.com/news/live/world-us-canada-68663071
True. Maybe a proof of the power of subscription based models?
What's the point of Google asking for other people's private keys? That's not how asymetric encryption scheme are supposed to be used! Google could sign packages with their own keys, I don't see what they gain from having videolans' keys, except to impersonate them (which is fishy).
Linux 6.9 Deprecates the EXT2 File-System Driver
> needing Python 3.9.7 specifically

That's indeed extremely specific. I'd imagine this pain could be self-inflicted with C-based extensions that were compiled (and can't be recompiled) with structures that don't exist in other versions.

I don't want to imagine what other eldritch horrors await developers working on this application.
From the article:

> Harborne got the WSJ to edit its story. But then he filed the suit. This means he is forcing the WSJ to fight him.

There will almost certainly be discovery on all the claims of fact in the story that are disputed in the suit, such as the details of Harborne’s account application. Much of this discovery is likely also to be made public in case filings. Former Signature employees may be called forth as witnesses.

This wil either silence the Tether nay sayers. Or bring to bear more wonky details.
I am sorry but Chedodu is subjectively better ;)
Thanks; I get it. I was thinking maybe the open source community has discussed this in some detail. I'm not actively involved in any such discussions, but I did a quick look and found that "Documentation for cargo vendor use cases" [1] is a decent starting point to jump in. In that thread a user named 'rimutaka' has a comment titled "cargo vendor-related questions asked by the community" [2] of related conversations.

[1]: https://github.com/rust-lang/cargo/issues/7520

[2]: https://github.com/rust-lang/cargo/issues/7520#issuecomment-...
> Money is a side issue people are generally a lot more productive than we where 50 years ago and the US population is 50% larger

Production per capita may have gone up, but that's (a) likely measuring productivity in financial terms and (b) heavily correlated with an increase in natural resource consumption, especially fossil fuels.

If we want to consider ourselves richer because we are able and willing to use more natural resources today could lead down a dark (and very hot) road.
Yes, especially Highs is completely unrelated because it's for (mixed integer) linear programming problems and quadratic programming problems, so it's not able to solve the types of problems described in this manuscript.

IPOPT is a bit of a stretch but I do know that there are some people in the mathematical programming space that use IPOPT's constraint satisfaction piece for solving a nonlinear system in a pinch, but it's not the main use case of IPOPT which is nonlinear optimization with nonlinear (in)equality constraints. This case has no optimization and is just nonlinear equality constraints, which you can then specialize quite a bit on. But while it is considered common knowledge in numerical circles to not use a nonlinear optimizer to solve nonlinear systems, I don't have a good canonical benchmark to point to on that, so we might as well make this it.
Thanks for the comment Ross. Folks seem to have strong opinions about integrating or separating workflows and ticketing ala alert inbox. We like integrations a lot, but of course there needs to be security specific innovations on top of "just" an inbox that will make us the no-brainer choice.
Market coverage? Now they're in the desktop app market without having to develop their own thing.
Then blame their employer (especially if it's a billion dollar medical company) if they are so easily lead a stray.
Why let someone who isn’t responsible for their own actions drive a car then, or have a checking account.
"No Nights Off." and Other Grown Up Lessons from Reading to My Kids
I work on a similar type of application (AI connected to a robot arm that sorts recycling). This looks pretty efficient for a few reasons.

- Consistent lighting is crucial for the most efficient AI. Full overhead enclosure makes this way easier

- Gantry style robot is MUCH lighter and easier to repair than both a 6-axis arm or even a delta robot. It's also likely an order of magnitude cheaper than other options

- Gantry robot also makes it pretty modular if they need to modify for different crop widths
I wish more people knew-of/promoted Krita - it's far more user friendly than GIMP and just as powerful if not more.

Fantastic for photo editing, digital art/paint and vector tools.

https://krita.org/en/features/
I personally chose and use grafana. Not commenting on whether or not people should use it.

91% of people claimed to do anything gives me pause.

The only place Datadog was mentioned was in invisible text. (Search the page)

Which seems absolutely crazy to me
There are a lot of types of engineering, and some of them are VERY far away from civil/structural engineering.
Tiles – Connecting with your music collection
Great work! I also liked reading about your journey with sonnet in the Gophers Slack :^)

Do you have any plans on proposing to upstream some of your work?
Road Map to Transform Understanding of RNA and Invest in RNA Science and Biotech
He will have to be put on trial (by a jury if he so elects) and convicted before he goes to prison; there is no automatic conviction and even if he is refuse bail he will not be in prison.

If the UK refuses to extradite him, then it's a matter of his looking over his shoulder for the rest of his life waiting for the hood and a chopper out. Besides, I have no faith in the UK court' ability to do anything here; they're the ones who have held him without trial or conviction all this time anyway.

I admit that some of my desire here is selfish -- I feel that Assange being tried and acquitted is a greater win for journalism in the US and is worth the risk. Obviously as an individual he does not agree with this (thus his opposition to extradition in the first place).

I do feel that the current status quo is the most favorable in creating the chilling effect that the US national security establishment wants to convey -- Manning and Winner both served their time and are free now; if Assange had been able to foresee what his life would look like now in 2010, he probably would have chosen to turn himself in to the US authorities in the first place, because even were he convicted he'd be free by now.
The 2008 mortgage crisis is now 16 years old, and the stock market had recovered by 2011. So presumably anyone who entered the work force afterwards might have little sense of it, which would be anyone under the age of 31 (or 35 if you count college).
Slightly tangential, controversial thought: any source based package manager that doesn't enforce a legal right for the registry to forcefully take over maintainance of published packages from their creators is doomed to have awful problems: neglect, malicious change, malicious removal, impostors...

If a package is deemed important enough for the larger community, there needs to be a way to rip the package registry entry out of the original owner's hands and to make it point to a fork. Natually, such a move will often involve a lot of drama, but it can actively protect downstream users.
> if you had trouble with bullying at school, it ended when you went home, your home was your safe zone.

I went to school just at the cusp of digital bullying. A yahoo group was set up specifically to bully one kid in my class. It was shut down by yahoo, but I think because it was hosting porn, not because it was mostly designed for bullying people.

This was in the days of shared computers, and no real notifications. Now the bully is in your pocket.

I don't know what the equitable answer is. out right banning is wrong. But we do need to significantly more to allow people to escape bullying.
Game dev: Giving personality to procedural animations using math [video]
A great cross section of math and creative expression — well worth a watch
I guess they had a porting job to do since the arcade hardware Sega Rally ran on wasn't Naomi(which was basically a souped up Dreamcast), and they figured if they used WindowsCE then they could use DirectX and get a PC port out of the same efforts.

But yeah, for a flagship title they should have went for a port with the official SDK.
Hot Docs Film Festival Programmers Resign in Mass Exodus
Disabling auto-updates is a controversial but nice way to prevent backdoors from getting added, or for software to turn becoming malicious.

For example, Chrome extensions, it's crazy that a random guy, can automatically update its piece of JS, just to steal all credentials, and there is no mechanism to disable that (or very well hidden) (like what happened with "The Great Suspender", though it was a great extension)
I know there is this big push to limit screen time for kids.

I give screen time more as a reward for hard work and getting chores done.

I use the screen time feature on Apple devices to limit my kids screen time and the type of apps they can access.
How does that work with weekends? hold it?
This is in addition to the educational content I'm going to be creating around this topic. While building DeploySolo, I spent 50% of my time reading source code and 50% in GitHub discussions.

Its a skill that engineers should develop to be comfortable with these resources.

But having tutorials and cookbooks that help achieve a user's specific goal is extremely helpful for the new engineer or the time conscious one.

I attribute a lot of Django/Laravel's popularity to these resources, that are currently missing in the Go/Pocketbase ecosystem.
In what sense does Habeas apply here? Habeas isn't a right not to face prosecution, and Assange is incarcerated because he refuses to surrender himself to (two different) courts, not because he hasn't been charged.
Right? Clearly it would be a significant national defense risk. Also allows for larger ships to get through.

That said - It also makes for a very enjoyable drive with children - probably their main design parameter right?
We did kill that top Iranian general out of the blue under Pompeo's watch, same time frame. So it's hard to say other assassination plots were just hot air and would never be acted out.
This isn't responsive to the comment I wrote.
Isn't cost typically a function of the value a product provides the purchaser, rather than a function of the inputs required to create it?
It's an over-simplification of course, and probably won't be true once proper attestations are in place. Problem: unless you're using GrapheneOS-style hardware attestations, the main attestation solution (Play Integrity) is signed by the same entity (Google) that signs the app bundles…
Even worse many apps now push "Monthly payments (payed yearly)", like some scammy car salesman.

You can try for 7 days, then don't worry we'll charge for 12 months.

Ridiculous for solo devs, full stack, creatives with lots of apps etc.

I use several apps a bit here and there throughout the year but that's seemingly not a usecase for these companies, you're either "in" 365 or won't be able to use the app.
I was referring to automating "jobs" that are not even realistic jobs without automation, because they would be too labor-intensive/unpleasant/low-paying for anyone to want to do them, like the trash-sorting example.
How can an equation that does not represent a balance of energy violate energy conservation?

With path loss equation I assume you refer to Friis equation which is just the ratio of power received at an antenna to power given to the transmitter. It is correct and does not violate conservation of energy since it says nothing about the power not received at the receiver
This! I grew up in Europe around the same time. Me and my small friend group hyped ourselves up for the Saturn. We were frustrated how Sega dropped the ball on marketing. Initially there were a few bad ads showing the mediocre Daytona USA and then nothing. Meanwhile Playstation ads were everywhere and were very well done.

As always bad console sales resulted in a vicious cycle of fewer attention from 3rd-party devs resulting in even fewer console sales.
How to Bargain Like a Kidnap Negotiator
If you think kids won’t route around this then you don’t know kids. Its a political move for desantis to rally his base, nothing more.
One case that can cause you trouble is that if you have a workspace that contains two different programs with deps that specify incompatible versions of another dep, you can't build either :)
> but such advice is why so many beginners have painful Python experience

Sample of one, but I never encountered anything even broken in MacPorts. They seem to embrace the BSD ethos of doing everything right (even if at a slower pace, as some packages lag a few releases behind Homebrew).
The key your describe, is the developer key, Google checks it. The key that VLC is talking about, is the distribution key.

Google manages the distribution key for you, one of the many reasons is because they create optimized APKs for each platform.
I don't mind paying for software, but I don't want to rent it - which is effectively what subscriptions are.
>and worked with them to help Trump become president and weaken US democracy by releasing the Clinton emails when he was ordered.

This has become such a tedious point of hate against Assange, and all the more so because it's so badly unfounded, much like the absurdly time-consuming and costly hullabaloo about Trump himself becoming president due to "collusion" with Russia.
I suppose the several dozen million people who voted for Trump in the U.S. just can't be viewed as anything more than brainless peons who couldn't have possibly had any sort of personal motive for doing so? They were all brainwashed? Unlike the enlightened voters for the other side?

That the NY Times and other socially elite media organizations couldn't get over the simple truth of so many people that they ignored in turn ignoring these media organizations' supposedly enlightened pronouncements is one thing. That so many other ordinary progressives can't stand the idea is a bit more absurd.

If you need to sink to the level of promoting conspiracy theories, supporting grotesque miscarriages of legal procedure and actively applauding the suppression of evidence inconvenient to your preferred side of the spectrum, you've lost intellectual credibility.
> However, I also think the vast majority of Rust projects out there right now are using the wrong tool.

Of course they are, same as what had happened with (to) C++. And the people that use Rust (or C++) because it's "fast" are mostly the same that write code which would be faster if it would have been written in Go, Java (Kotlin?), or C#. I guess every generation of programmers must make the same errors.
Critics fear catastrophic energy crisis as AI is outsourced to Latin America
The fact that this stat disappeared from cgroups v2 is consistent with the frustrating theme that cgroup v2 did not understand the lessons of cgroup v1, and that the maintainers/gatekeepers of these subsystems do not necessarily have the experience to perceive the tradeoffs of disabling or removing these things. In a multitenant environment with hundreds of tasks contending for CPUs on a single box, the delay stat is one of the most useful, or at least it was before it disappeared in cgroups v2.
Confluence Status Page
Probably only a vpn with ip outside Florida required, unless they start verifying the age of everyone.
Affinity targets professional users who would purchase Adobe products otherwise. Professional users are more willing to pay for products. Affinity was doing pretty well in the Mac App Store (though they moved to free download + in-app purchase or purchase through their website).
I normally use between 20 and up 50 when I want it loud. I've set my external amplifier to suit this.

I keep 50 "normal max" because sometimes I can be useful to be able to quickly go temporarily to 80-100 for really weak sources, without fiddling with the application or volume mixer.

That said, I have experienced what you mention when using an external headphone DAC/amp combo where there's been a mismatch between the output impedance of the DAC/amp and the headphones, and no option to adjust output impedance. But that's hardly Windows' fault.
Gift link: How to Bargain Like a Kidnap Negotiator https://www.nytimes.com/2024/03/22/well/live/crisis-negotiat...
> I prefer multi threaded programming

Then you had sheltered and privileged career which I am finding out applies to a lot of folks on HN, apparently. So hold on to your cushy job because if you leave it you might find out the world has moved on long ago.

Especially Rust's async/await are instrumental to services that literally saturate their network link and would go higher if the link allowed more bandwidth. Normal multi-threaded code is folding under pressure somewhere at the 50_000 requests / sec mark on an average small-ish VPS. In the meantime the async/await code is saturating a 10GbE link.

Both Golang and Rust didn't make the perfect design choices though -- that much is true, sadly. But they are a big improvement over the status quo.

I'll grant you that Golang replaced one class of problems with another -- something I dislike as well. Wish it was stricter but it's good enough for 95% of all projects everywhere, if we have to be brutally honest with ourselves.
wow, I remember hearing about the Cocktail mix problem a few years back and I thought it may be near to impossible to solve, this may not be quite there yet but AI progress is impressive.

You can try it on their website https://lamucal.ai/
When did DNS become a sophisticated supply chain?

Good OpSec teams will get an alert on a bad domain lookup. Great OpSec will be proactive and monitor these domain records and buy the "very sophisticated supply chains"

https://dnstwister.report/documentation/faq
Many. Datadog, New Relic, SigNoz, etc. Search for "grafana alternatives"
What is your point. Also all our statistics counter your point on class mobility
Most of the problems come from treating CSV fields as something other than US-ASCII text strings. They're not dates, they're not numbers, they're just freeform text. If you want fancy-pants features like "numbers" or the ability to represent all common words in use in the US (e.g. the California town Rancho Peñasquitos) and aren't a masochist, you don't want CSV.