skysight-inc/HackerNews huggingface dataset:
This article is working backwards to solving a problem that most development teams shouldn't have. I will first walk along with the article and try out their backwards solution before getting to my point:

If you're using Kubernetes managed by a cloud provider, e.g., Amazon EKS, authentication is already handled through IAM. This is a service that's designed to be exposed to Internet traffic and that AWS is essentially managing for you. If you're able to get past AWS IAM then the fact that your cluster API is public is moot because gaining access to an AWS account that has significant kubectl privileges is likely going to also expose a number of other privileges to make changes in AWS.

Okay, perhaps that's not enough for your liking. We want more defense in depth. AWS already tells us how to use a private API endpoint via their documentation: https://docs.aws.amazon.com/eks/latest/userguide/cluster-end...

But of course, those suggestions bring us here to this article: Amazon suggests using a bastion or a cloud IDE, but we might find that too clunky.

This is where the article offers "a better alternative: Tailscale is basically one of those fancy easy-to-use VPN replacements that promises to get rid of VPNs and bastion hosts in favor of protocol-aware proxying. And, that's fine, but it's not cheap compared to a traditional open source VPN if you're using it for a company: https://tailscale.com/pricing

Besides not being very cost-effective, we're still working backwards to the actual issue here. Who needs kubectl access and why are they using it so much in production that a bastion or VPN is annoying? Why don't we just make it so that developers don't have to use kubectl in production anymore? Isn't their code being deployed with an automated pipeline?
Now they tell me.

I just had this done yesterday, and the prep is hell.

It two factors. The first is the diet. It may as well be a fast. I had a couple things of chicken broth for breakfast and lunch, with some clear soda for a boost of sugar. All told, I probably had 300 calories and my blood sugar was not happy.

Then, of course, is the part at the end. 96 ounces of liquid (mixed with a laxative). 64 oz, the day before. 32 oz the day of ("Start at 5am...").

I simply can't drink a half gallon of liquid. Drink it until you choke and gag on it. Ya know, I actually used to like Gatorade. Not any more. Not ever.

When I told the nurse, no, I didn't consume all 96oz of stuff, she gave me a skeptical eye. They have to write the instructions in big letters and crayon. At least they gave the expected result "If you see xxx (I won't share it) then you're good to go". I was doing that long before I hit 96ozs. But, yea, the look from the nurse. Sheesh.

But especially during the day before. I'm, like, why can't I have a protein drink, like Ensure or something, or just plain milk! Something with some substance, even if it's liquid.

Hopefully they'll have this all figured out when I go back in 10 years.

But, yea, it's not a pleasant experience.
It's totally infeasible for a small startup without significant funding to build a competitive LLM from scratch.

What is possible is fine tuning an existing LLM.

I suspect that this will become popular. One can imagine open source platforms with built-in plugin registries for easily installable agents. Each agent may come with it's own knowledgebase and vectors or keyword for selecting them. It may be a quantized fine tuned LoRA that can be loaded on the fly.
It is indeed true. Windows had only just been released at this point, and was still limited by running MS-DOS in something of a pseudo-multitasking mode. The Macintosh platform, however, was slightly more mature, having already been publicly available for a little over a year.

The majority of Microsoft's software was being written to target non-Microsoft platforms at this point, which started to change with their increasingly anti-competitive marketing techniques (such as the so-called 'AARD code'[1] in 1991).

[1]: https://en.wikipedia.org/wiki/AARD_code
With a multimodal llm watching a stream of these objects, should be able answer the question -

"where are my keys?"

It should be able to respond -

"Here on the dining room table" with an astar path drawn to them in the headset.

It's a stream of tokens that you can almost just reverse search on to find the last instance of "keys" in it (thats a simplification but...).
> The current system also seems to be more of a riff on the old imperial system

From a distance it seems like government policy is, in many ways, also the imperial system returned, almost like the CCP is the new dynasty (though not hereditary). The focus on corruption (not among political allies, of course), which the imperial system saw as its eventual downfall - IIRC Chinese history at least traditionally taught there were three repeating phases to a dynastic cycle: ascendency, corruption, chaos, then ascendency again .... The perspective on other countries as inevitably inferior. The attempt, post-Opium Wars, to hold onto power by adopting Western technology without adopting Western culture, such as political, intellectual, and economic freedom (it never went well, as you might expect). Even the nine dashed line geographical claims are, IIRC, from the Qing dynasty.
Its amazing how many products have little moats like this. Things that are days to at most weeks away from adding to any product, but that no other product seems to care enough about to build.
> Phone numbers help tracking people

That's the conspiracy. They don't need phone numbers for that.

It's mainly security with a sprinkling of spam/bot reduction.

Do you really think NPM and PyPI are doing it to improve their targeted advertising?
Yes. Excel for Mac was actually released before Windows.

https://en.m.wikipedia.org/wiki/Microsoft_Windows

https://en.m.wikipedia.org/wiki/Microsoft_Excel
I can't speak to the "is it any good" part, but (after a bit of research) I can share what I've found. I'll try to represent things as best as I understand, but I may have some finer details mixed up.

ntex is written by the same person that started actix-web, Nikolay Kim (fafhrd91 on GitHub). There was a bunch of drama a while back due to actix-web using (what many reasoned to be) avoidable unsafe code, which was later found to be buggy. Nikolay was pilloried online, resulting in him transferring leadership of actix-web to someone else. ntex is, as I understand it, essentially Nikolay picking back up on his ideals for what could have been actix-web, if people hadn't pushed him out of his own project.

How ntex compares to the pre-/post-leadership change of actix-web, I don't know.

Here are some jumping points if you want more of the backstory.

https://www.theregister.com/2020/01/21/rust_actix_web_framew...

https://steveklabnik.com/writing/a-sad-day-for-rust

https://github.com/actix/actix-web/issues/1289

https://github.com/fafhrd91/actix-web-postmortem
There are a lot of 'old school' edm records in online stores that were redigitized from vinyl, and you can tell just looking at the wave forms the difference in how they were mastered, and they sound noticeably _worse_ than modern EDM records, with much less powerful bass. It's actually sort of interesting how they worked around that with more dynamics in older records to make the bass pop more, but I'm not sure that it's better over all, it's just different.
Main current main pain point with devcontainers is to run a gui app remote, wathever I do, the gui opens only on the server. I'm wondering if this solution can export gui remotely?
Also the digestive process is necessarily destructive to whatever is being eaten, and may kill many would-be infectious organisms that haven't evolved to resist or exploit that route.
Not only that but cloud providers put their managed Kubernetes behind IAM.

If you've managed to breach that and you've got Amazon or Microsoft convinced that you are a privileged account owner, it would be trivial to modify the infrastructure to make a private API endpoint public or create a bastion host with access.
That final boss, Trimming the Herbs, has definitely turned out to be a hacked (TAS) level, so The Last Dance was the last, already beaten level. This article is fairly outdated for a developing story.
They tried to ponder to the open source CEO’s but as much as open source is an ideal, it’s a pretty sure way to failure for the most part. The only way open source works is if a rich company open sources parts of their non revenue forming items.
I think something doesn't quite add up in OP's claim. Having full access to the control plane effectively let's you do anything you want with the cluster. If there were really millions of completely unsecured Kubernetes instances lying around, we should see all kinds of worms and botnets already taking advantage of them - and we should also see lots of attempted probes/attacks to infect new instances as soon as they come online (dark forest, etc). Yet I haven't heard about anything like this so far. This leads me to believe that the "public" instances actually are protected in some way, just not by a private network.

Not a Kubernetes expert, but doesn't the Kubeconfig contain some sort of secret that the client needs for authentication? You might be able to get some basic health check without that, but I'd be very surprised if you could do much more without authentication.

At least if that's how it works, this would be an example of "zero-trust" networking, where you just assume anything can be reached from the internet anyway and secure your services based on that premise. If done well, it shouldn't matter whether or not your services are actually exposed on the internet or not.

Of course in the interest of defense-in-depth, I'd still try to make sure my services are not actually exposed - bugs happen all the time and additional security layer can't do harm.
How I (Re)Acquired DudeRanch.com
If I am walking towards someone in a rocking chair, they may be moving towards me or away from me at any point, but overall I will get closer. Similarly, if solar cycle causes a variation of .2C back and forth, it doesn’t eliminate a non-oscillating trend.

When weighing what is likely to happen, fringe beliefs don’t matter much. I would not bet on a Maunder minimum to save us, because A) it is not a big enough effect even if it happens, and B) it is probably not going to happen.

You've edited your comment-- I'm glad you've reconsidered including the below which violate the site guidelines:

> Oh please, spare me the polemics.

> Do you stand to benefit financially, directly or indirectly, from climate change?

But: I think most of us stand to lose significantly from climate change.
> if you move big amounts of money

Most privacy enhanced coins hide the amounts with so-called confidential transactions, so only the parties involved know the amount being transferred.
Huge amounts are no harder to hide than small ones.
Somehow, our ancestors built a free democratic world without having all our advantages. As what we've taken for granted as been assaulted and damaged, it would be good to remember what they acheived, and how they did it, from much worse positions - without even a prior example or history to build on.

They created democracy, women's rights, etc. despite almost an entire human history of doing otherwise. We only have to look back 10 years.
Beat me to it! See https://www.nintendolife.com/news/2024/03/random-its-done-ev... for more.
The csv importer of Libre Office is fine. Excel gets the staying power because it's already in the contracts for all things Microsoft. I think Teams is the new powerhouse that makes the office suite indispensable in large offices.

At home environment Google Sheets works just fine.
I think it’s basically already there.

Inspired by the robot video, I tried an experiment today.

While on a long walk to a store I had a voice chat with a ChatGPT app. I did a back and forth taco party planning conversation.

ChatGPT suggested taco themes based on the locally available ingredients. I’ve asked it to refine and replace some ingredients. We went back and forth on it for a few minutes.

Then I asked it to produce a shopping list. It did an imperial units list, I requested it to replace with metric.

Then I asked it to reformat the list to a markdown format with markdown check marks (- [ ]) so I could simply copy paste it into the note taking Bear app for the shopping process.

I was very impressed by everything and really felt like I was “in the future”!

Then I wanted to test it further. I’ve asked it if it knew another language that I’m fluent in. It accepted and I asked it to respond in that language. It obliged. Slight accent but not distracting.

I asked to play a game.

It asked for game rules.

I explained the game. I will provide clues and it should figure out what city I was talking about.

We went back and forth on the clues. It suggested correctly other cities than I was thinking of but they definitely matched the clues too. In the third attempt it guessed correctly.

Asked me for another round of game. :)

It was awesome!!

When I got back home I was googling how to replace Siri with ChatGPT.

Siri is just so bad it’s frustrating and feels like it’s just a waste of space.

For example I asked it today “hey siri when is the full moon?” It’s a frigging basic lookup question. It replied with “Here’s what I found on the web”. What???
I think the problem is that this conversation is lacking in precision of language. Amongst doctors the word cancer carries minimal value. Describing a mass as (in simple terms) a locally invasive carcinoma or an encapsulated adenoma gives a much better idea of expectations and a basis for factual claims. In fact the entire point of a histopath report is to give descriptive language that sufficiently grounds the findings in a usable level of detail for treatment/prognosis/etc.

Saying "cancers are X" will just invite anecdotal comments that refer to completely dissimilar processes.
I may be crazy but I just pay to rent movies on my Apple TV. $5 or so for a movie once it’s available to rent, watch it, and I’m done. Essentially every movie is available this way… if its on blu-ray, it’s on the Apple TV. If we know we’re really going to like a movie we sometimes buy it. I know we don’t really “own” the movies because they’re DRM’d, but I feel like Apple will keep them available for quite a long time, essentially “forever”, and if they ever lose the rights or shut the service down I’ll feel a lot more justified in pirating any movies I lost access to.

Decades ago my wife and I would go to blockbuster every Friday night and pick the movie we wanted to watch for the weekend. Now we do the same thing, just by streaming it instead of getting a physical copy and having to take it back. I have no complaints.
You could totally put together a corporate financial statement if your life depended on it.
One of the largest eruptions in Earth's history could have wiped out humans
It would help if people could use it to change their diet and exercise habits. A lot of people stress eat.
Based on what I read in the annotations mentioned above, I didn't see any implication of software support for his special markup beyond using search etc basic text editing features.
Start off with SELECT * then once the joins are working, filter * down to the essentials.
>but vinyl and CD differences have nothing to do with it

The kind of do. With vinyl if you master like this you're making the grooves (the paths where the needle runs in) more pronounced, meaning less space for music (which is a premium in CDs compared to streaming, and even more so to vinyl compared to CDs: many vinyl "double albums" could have beeen a single CD). And it can make the needle jump around or have issues too.

So vinyl kind of forces you to master with actual dynamics, as opposed to squashing everything.
Visicalc would have been the first. In the early years of the PC, Visicorp was bigger than Microsoft -- mostly from their sales on the Apple II. They never had much success on the PC platform, which is where Lotus ate their lunch.
I should have said "dentists and optometrists", rather than " .. and opthamologists". Sorry to catch this so late.
Since code-is-data, you can put that exact if statement into several functions.

Since code-is-data, you can swap the if and else clauses around. This applies to all the functions where you've inserted the if statement.

This kind of thing makes it difficult to compile a function to a fast set of machine instructions with the same effect. Not impossible, but difficult.
I see your point, but I don't think those are the same thing. People don't go out seeking specific races of people to begin lives with them. We all go out seeking someone of our preferred sex. Pairing is a fundamental part of human behavior.

Also he didn't generalize all women, he disparaged the local culture. It's not like he told the dude to turn gay because women suck or something like that.
LINQ runs with FROM being first. Definitely trivial difference but a bit easier.
You can bypass this by ripping the Blu-Ray.
There's also https://pyodide.org/en/stable/
This is true, but doesn't answer the question of why not use another spreadsheet program? It's a minor learning curve to move to googles offering, and while it may not be as useful, "less useful alternatives exist" is not a viable monopoly case, is it?
I was just pointing out that the idea that one could go for “hours” without seeing a car is essentially impossible in Manhattan, even during Covid.
The median income in my city is 70k.
You've been breaking the site guidelines repeatedly and egregiously lately—not just here but in plenty of other places as well:

https://news.ycombinator.com/item?id=39796900

https://news.ycombinator.com/item?id=39796860

https://news.ycombinator.com/item?id=39795221

We have to ban accounts that post like this. Moreover we've had to warn you many times before (see e.g. https://news.ycombinator.com/item?id=31851409). I need to ask you to review https://news.ycombinator.com/newsguidelines.html and properly stop this.
Do they use separate tanks or does the water go into empty fuel tanks?
“When action grows unprofitable, gather information. When information grows unprofitable, sleep.”
The Audacity waveform rendering is a bit misleading because each pixel is reflecting the peak of nearly 10,000 samples. Here's a higher-resolution look ("Open Image in New Tab" and click to zoom for detail) at one segment of the track:

https://imgur.com/a/7mncY77

From the waveform analysis, you can see that the LRA of the selected segment is fairly narrow at 2.1 LU, but the dynamic range is quite high at 38.59 dB. The effect is minimal variation in music intensity, but a substantial difference between the quietest and loudest sounds in that segment.

I'd guess that the degree to which this causes ear sparkles is probably not achievable when mastering to plastic.
Its list of supported platforms lists 32 bit but not 64 bit. And it refers to C++0x not C++11. I presume the article is old. Is this software still developed?
Reminds me of false vacuum decay.
The first thing I do for anything like that is click the pricing tab. Then I see subscription only options, close the tab, and never think about it again.

Maybe I’ll go for it in 10 years once MS forces Excel to subscription only licenses and all the current perpetual options are EoL, but until then I’d rather own my data and tools.
Addons are one part of it. At my current job at a financial services company, there are plugins to access the firm's internal analytics library, the risk system, as well as to integrate with the front end trading systems and external vendors such as Bloomberg.
I learned more from YouTube videos on database normal forms and useful problems they solve than I did in grad school.
We're not in that discussion.
Presumably "the oldest desert on Earth" means the oldest one that still exists. Otherwise it wouldn't be on Earth, after all; it would have been gone already.
You still do on occasion. Some years ago I’ve tried to write a precisely timed bitbanging loop on a STM8 microcontroller (a 650x/680x-alike with an allegedly 3-stage pipeline and a small prefetch buffer; cents per chip pre-Covid), and the instruction prefetch completely screwed me up. (At least I think it was the instruction prefetch? The thing depended on branch target alignment, whatever it was.) The one relevant question on Stack Overflow that hasn’t received any answers in years; the manufacturer documentation mentions its instruction timings are “simplified”, aka a lie, and gives a more elaborate model of the pipeline that it admits is also a lie and can’t reproduce the timings I’m seeing.

Many things are immeasurably easier than what I remember as a middle-schooler with an utterly anachronistic 286 in post-Soviet early 2000s Moscow, so that’s nice. It doesn’t make the blasted loop work, though.

(Many others are also worse. Today’s me could work the motherboard design of the 286 by looking at it, even without the manuals; my current laptop’s manufacturer’s refusal to release the schematics annoys me enough that I’ve half a mind to ask some physicists if they have a CT machine they could run the board through.)
How many times are you recharging 500 MBs per year for the fleet? Also, what protocol and serialization technologies are you using the transmit the GPS data? For example, JSON, Protocol Buffers, etc?
what's your approach to using kodi on ATV?

do you have a paid $99/year dev account?
Url changed from https://www.msn.com/en-us/news/technology/nuclear-fusion-for..., which points to this.

Submitters: "Please submit the original source. If a post reports on something found on another site, submit the latter." - https://news.ycombinator.com/newsguidelines.html
Mecca for 3D Printing
It worked out well for NeXT. But it took a long time, NeXTSTEP was released at the end of the 80s. So it took them more than a decade and reverse take-over of Apple, together with the much more affordable Apple hardware.
Of course that's how it works, there are various authentication methods that must be completed [2] to do anything. The author's claim is that similarly like you shouldn't expose RDP to the public internet, you shouldn't expose your k8s API.

In practice the difference is that while RDP (or database or WordPress) credentials are vulnerable to bruteforce, in almost all cases k8s clusters are secured by either mtls or jwt tokens - both utterly non bruteforcable. You're not completely right though, unsecured k8s clusters do happen[1]. And there is some defense in depth component, as you've mentioned.

And yeah, we're one RCE away from the cloud melting disaster. But then, the same is true for nginx or openssh.

[1] http://redhuntlabs.com/blog/unsecured-kubernetes-clusters-ex...

[2] Fun but meaningless fact: kube-api defaults for both authentication and authorization are to allow anonymous users and allow everything to everyone (AlwaysAllow)[3]. This is meaningless because every k8s distribution in existence changes authorization default with appropriate flags.

[3] https://kubernetes.io/docs/reference/access-authn-authz/kube...
If you pay $5 or $2 to watch a film and I choose to pick the no money ad version what IS the distinction.

Nothing really if we both enjoy the content. If it sucks however we both have choices. I move on to the next thing and enjoy it. IF you move on, then you're paying again, if you stay your funding shitty content and wasting time.
Same experience. If your main language has a decimal comma instead of decimal point, and you CSVs must use alternative delimiters, in my experience LibreOffice CSV importer is better.
I’ve looked up minimal wages in Arkansas. It’s $11/h, which seems ridiculously high, but I’m not an American. I think that in a depressed town, it shouldn’t be hard to find someone for, say, $35 per 12-hour night shift, just to patrol the property with a torch, so that it wouldn’t look abandoned? Which amounts to about $13k per year.
> If I didn't invent the thing, then we shouldn't use the thing.

What about Linux? Or... the internet?
good, keep providing these pdfs