skysight-inc/HackerNews huggingface dataset:
for those increasingly rare times you want to print an image it's great too.
Global AI based prediction of extreme floods in ungauged watersheds
seems like Ollama with GUI? MindMac with Ollama offers more functionality tbh!
Wouldn't this make it harder to see everything, since it would also cut the light transmission of your own headlights as well?
Even? What did you expect when you are under the control of a psychotic, socialist, incompetent megalomaniac? Have you not been paying attention?
Multi-tenant design is a huge win in terms of reducing developer toil and expense.

Many customers will have a tiny amount of data. For those customers a dedicated database is huge amount of overhead. There may not be any single customer who it makes sense to allocate dedicated "hardware" for.

Sure you have to deal with a one-time pain to shard your thingy, but you don't need to pay for tens-of-thousands of individual database servers, write interesting tools to keep their schemas in sync, wrangle their backups, etc.
Yes. We're lamentably probably going to have to move it (the install script), even though it has a nice URL today.

When we picked that URL, the marketing site was created and run by the same people who built the rest of the product, so it didn't seem like a concern at the time.
I hope you aren’t in control of any customer data.
Some phones have limiters to keep the battery at 60%-80%.

I believe most can do this with the right software.

It's not a fix, but it should extend the life considerably.
There are some cases where that's true, but people connect with actors too, which is why a AAA star will get paid 20+ million dollars to just associate their name with a project.

I think the truth will be in the middle. Nobody's choosing AI over Brad Pitt or Henry Cavill, and in the various niches I think the highest performing humans will still do very well. Overwatch is a good example of that, see https://blizzardwatch.com/2018/01/24/rolling-stone-calls-ove.... AI is going to destroy the bottom of the barrel though, stuff like Fiverr and a lot of mediocre trained voice actors are going to have to get better or change careers.
Almost every library that exists will have commercial usage.

Usage will likely be skewed to small companies and agencies though. Just like every framework that optimises for less complexity, the disadvantages start to outweigh the advantages when you have so many engineers you can afford to have backend/frontend specialisation and/or you need to support non-browser clients so you need to build services that transport JSON anyway.

Side note/rant: As professionals, we should understand the limitations of different approaches, communicate them to stakeholders and select something that is appropriate for the task.

The problem is, we seem to end up with evangelism where everything thinks their square peg fits in every hole at massive cost to the people they work with/for. Train yourself to recognise this and avoid becoming “that person” that isn’t able to pick the right tool for the task.

See also:

- RDBMS vs NoSQL for everything

- ORMs vs Raw SQL

- Everything is better in rust people

- anti-GC people

- functional programming zealots

- Citizens of the Kingdom of Nouns thumping GoF design patterns at every turn

- LLMs as a solution to everything

- the many flavours of anti JavaScript camp (including, vanilla JS only, HTML over wire, PyScript/ClojureScript)

- writing a SPA for your blog folks

- micro-services vs monolith

- the anti-cloud just give me a VM/cpanel traditionalists

- cloud maximalists provisioning masses of AWS services for a low traffic CRUD site
Performance can be bought with better hardware. It gets cheaper and cheaper every year. Trustworthiness cannot be purchased in the same way. I do not understand why performance would ever trumph clean code, especially for for code that processes user provided input.
I still prefer paint shop pro from the 1990's (some of the versions from back then are 32 bit and mostly run in windows)

it runs extremely fast on any modern windows box
The difference between "pets" and "cattle" are that pets have state and need to be taken care of, you can't recreate them from scratch trivially. Cattle are stateless and can be created and destroyed easily.

The whole point of a database is to contain the state - as a pet - so the rest of your application can be stateless - as cattle.

To really get cattle database systems, you need a self-managing cluster architecture that puts things on autopilot like Neon where you've got >=2 copies of each row and can tolerate losing any single box without unavailability.
you can do that using ODBC
Interview: The creator of the "mind blowing" Distant Horizons Minecraft mod
> At core, it is about prioritization of strategies to facilitate mental health.

I don’t think I’d simplify it to this. I think the workplace is one way people have been filling a mental health need.

In another comment [0], I described some of the other reasons I think time in the office is valuable. More broadly, my position is that there are numerous aspects of time in the office that need to be explored and understood, and that a better argument against blind mandates is to identify and work towards suitable alternatives.

> In office work makes it easy to not explicitly or skip prioritizing socialization because its already there, for the most part. Without that prioritization, it can be easy to become undisciplined in maintaining those strategies for mental health

I think it goes beyond this, and I’d reframe it slightly. I don’t think it’s so much about becoming undisciplined, but about the erosion/collapse of long standing social structures without obvious replacements.

The end result may indeed be that we each have to start being disciplined about getting social time. But for a fundamentally social species that launched society to today’s technological heights on a foundation of social systems undermined by that progress, we’re now flailing about in the clouds unsure what to do about it because we’ve largely forgotten how to build IRL communities at a time when we need them most.

I agree that blind RTO mandates are no good. I agree that there are tradeoffs involved like commuting. I’m mostly advocating for a position that doesn’t throw out the baby with the bathwater while society catches up to our new reality. Realistically, this probably involves some hybrid model. Blind mandates are no good, but I think there’s a failure mode at the opposite end of the spectrum as well.

- [0] https://news.ycombinator.com/item?id=39875309
Along with ImageJ, that is open-source and has found use by researchers among many different disciplines, they're great examples of longstanding projects done right.
I don't disagree with any of that...? My argument was that as a frontender, the added complexity is worth it because the ecosystem is so huge that it enables a lot of code re-use. I don't see the same "easy to build on top"-ness in other frameworks, whether it's HTMX or even other JS frameworks.

For simpler projects, I absolutely don't think it's necessary to learn a JS framework or (or even just React). But for apps of medium complexity and up, it's been a super productive system to work in, full-time, with other React devs and open-source contributions. The reusable component model is SUPER important in my day-to-day work and outweighs a lot of other factors (like technical complexity). The complexity you have to learn once (or every year or two), whereas the code re-use/NPM drop-ins is like multiple times a day.

Edit: Really it comes down to this: https://survey.stackoverflow.co/2023/#section-most-popular-t... (under "Professional developers"). It's just a lot easier to use what everyone else is using. HTMX sadly doesn't even make the list, as far as I can tell :(
I don’t stalk all of your social media posts, so from my perspective I don’t see any of the solutions you’ve posted elsewhere — which brings up a good point to keep in mind: none of us see the complete picture (or can read minds to know what someone else really thinks).

The possibility can be kept in mind and considered even if it isn’t being actively discussed. I think in this case, most people think he is not malicious — and feel that unless new compelling evidence to show otherwise appears, potentially starting a harmful rumor based on speculation is counterproductive.
In the mad, wild world of 2015, SourceForge, once the high priest of open-source sanctuaries, turned to the dark arts, conjuring a storm of controversy that would rattle its sacred halls. This wasn’t your grandma's repository anymore; it became a bizarre bazaar, peddling adware and malware alongside its trove of treasures, much to the horror of its loyal acolytes. They were slipping digital demons into downloads, especially those forsaken projects left to gather dust in the corners of the internet, turning a once-hallowed ground into a haunted house.

Enter the DevShare program, a Faustian bargain if there ever was one. It whispered sweet nothings into the ears of developers, promising them a slice of the pie if they let these third-party gremlins hitch a ride with their creations. But here’s the twist – SourceForge, in a move that would make Machiavelli blush, didn’t always wait for a nod of approval. They shadow-copied projects, dolled them up with their unwanted baggage, and pushed them onto the unsuspecting masses as the real deal.

Who masterminded this descent into madness? The suits at SourceForge under the banner of Dice Holdings, who else? Names weren’t named, but the open-source warriors and keyboard knights didn’t need a who to channel their fury at the sacrilege committed against their digital Eden.

But as the adage goes, "It's always darkest before the dawn," and so it was for SourceForge. By 2016, under the new flag of BIZX, LLC, a wind of change blew through its realm. The DevShare program, that deal with the devil, was slain, laid to rest in the hopes of resurrecting the platform's lost glory. The new overlords vowed a return to the old ways, a purge of the parasitic practices, aiming to restore faith in the digital congregation and bring back the prodigal programmers.

SourceForge’s saga is a testament to the eternal battle for the soul of the internet, a reminder that even in the digital age, the pen (or the code) is mightier than the sword (or the adware).
Subsidies was already possible via Jordbruksverket.

There's a fear that putting this in the hands of the medical establishment could make it harder than necessary to get the required permits.
Thunderbird has access to all the mail locally in my case. POP3.

But I think this is on point, Google has the infrastructure to index that massive amount of data while my thunderbird still deals with mbox (I think) and can only index when it's running (and god forbids that indexing hogs up my celeron and my 3gb of RAM !).
That's my first memory of a program with keyboard shortcuts not being the typical ones, but still usable and thought through.

Enter/return to go full screen (or exit from full screen?).
Where are the measurements comparing throughput of tracing GCs and manual memory management? I'm aware of how incredibly hard this area is to measure, but it's a shame that the state of mainstream discussion is "most people just assume GC implies slow, but then again a handful of people say it's not."
really cool ! I remember when these were first demoed and wouldn't have guessed they'd be available at what seems like a reasonable price to me, even without having a need for one. Would like to see an image of what the person standing behind it can see through it. Is it opaque, transparent, or distorted in the other direction ?
The nsa isnt a boogeyman you can just ascribe action. I mean you can, it's just wrong.

Choosing to fill a void with a boogeyman because it's less uncomfortable than not knowing is exactly the conspiratorial thinking that gets us to chem trails and flat earth
Uptime Kuma[1] has a certificate expiry notification feature.

[1] https://github.com/louislam/uptime-kuma
Mirror: https://archive.is/latest/https://www.bloomberg.com/news/art...
If this is the book I have, the image reproductions (very grainy, small, black-and-white) are so bad that the book is nearly worthless. It's a book that is supposed to be about interpreting images - and the image reproductions are horrendous. It's a shame because otherwise it is thought-provoking.

The images are better on this website (at least they are mostly in color), but still pretty low resolution.
The State of WordPress Security 2024
From what I read, it looks it was not really social engineering per se but the good old way of earning trust, just like any ordinary engineer: the intruder joined the project three years ago and started to contributed patches. He also made good suggestions on design changes. Eventually he became a committer because he consistently made value contributions to the project.

P.S., this does not look like an individual behavior. It's hard to imagine that an individual would spend three years just to plant a backdoor in sshd.
Betcha it won’t take long for the birds to realize the robot is no threat.
When I search for "digital masquerade" on Google, the first result is a book with this title from the author Jia Tan. I assume that is how the attackers got their fake name. Or they think using this author's name is a joke.
Disabling a sandbox check in xz
It couldn't hurt to try a different editing paradigm but as a daily Helix user but I wouldn't switch over just for that. It's different, not better or worse than Vim's.
This seems to be a problem (among others in this story) which Google could answer to.

One thought that comes to mind is that no site's reputation should automatically survive transfer of ownership of that site.

If a site's new owners share the mission and custodial mission of the original owners, fine. If not, the site starts from zilch. Or better: negative assertion value given the long history of link-farming and its exceedingly well-understood common weal costs.
I have the Classic Wolfram app on iOS. I asked it, “When is the next partial Solar eclipse in New Hampshire?” It missed the 2024 one and started giving details about a 2026 eclipse in Spain.
Attack-Resilient Message Propagation in the Filecoin and ETH2.0 Networks (2020)
or just the batch mode ... very helpful and fast.
Paid people get burnt out as well and they are just as likely to accept free help as an unpaid person.
Related, list of filesystems and their rollover dates:

https://github.com/y2038/y2038-list?tab=readme-ov-file#file-...

Note that the earliest date on the list is 2028 with isofs (used on CDs).
Exposing your users to a known (and easily exploited) vulnerability is a sick behavior, regardless of what you think of the authors of said behavior.
I much prefer this to the typical path of the celebrated founder:

1) Be young
2) Go to Stanford / MIT / Harvard
3) Drop out after freshman autumn
4) Get ludicrous funding via family connections
5) Crash & burn because you're about as knowledgeable as one would expect a kid fresh out of high school to be
They are definitely executive inventions. The problem is that Obama didn’t invent those, he inherited a mess from the last guy. Yes this could have all been avoided by simply not keeping people in Guantanamo. But yes, if Obama couldn’t untangle the least messy part of Bush, he didn’t have much hope of untangling the messier parts of bush, which didn’t happen either. The whole Bush legacy is just one train wreck after another that are still haunting us. I shudder to think what damage Trump could have done if he was as competent in his execution as Bush.

We are (mostly) computer scientists, and should realize that reversing something isn’t always feasible with the same amount of energy, or even any amount of energy. Some things are just broken and are going to stay that way (well, the prisoners will eventually age out).
Ask HN: Functional Programming Hype
Well I have been learning OOP and been having fun with it. The idea of seperating the code and seeing code as parts that interminglee with each other.
I came across this other post where they were stating something about functional programming being better it is just that most schools teach most CS students OOP and not functional programming. I think that that the programming paradigm fits the problem but would love to hear your thoughts?
I'm actually with traviswingo. Just launch. Chances are, no one will care about your website for quite a while. Unless you're building a product with a lot of hype around it, there's likely going to be a huge gap between launching and seeing any traffic at all. This gives you plenty of time to implement some of the great recommendations given here. But don't delay the launch for it.
Are you on one of those (usually small) teams? No? Then it’s probably not a good choice for you.
They, and the deer, will tend to be in the runway area to avoid the “dog”, which will stay off the runways.
We do! We have a free tier if you want to try it out. This was our launch:
https://news.ycombinator.com/item?id=36973400

Hope it helps with your Dutch :)
> In contrast, countries that earn large amounts of revenue from exporting fossil fuels will be much less interested in developing a technology that will end up making their exports worthless if optimized

Usually, when your product is about to be replaced by something different, you want to be the one who makes that new different thing. Everybody who isn't depending on selling the old one has a little less incentive to be the one supplying the replacement. For all others, not investing in the new thing has lower opportunity cost than for exporters of the old thing. So from a game theory perspective, the incumbents can and will outspend others in investment in the new thing. Unless they don't try.
> This is the case where you need to be in the field

> Hamas is a serial liar without independent media while Israel has an independent media that search throughfully

This feels like an unnecessary statement intended to gatekeep meaningful journalism. We know that Gazans and Israelites both by-and-large have political agendas to push in the area; and you're suggesting we ignore one in lieu of another?

Both sides need to be taken with a hearty grain of salt, and the citizen journalism that both sides attempt to suppress cannot be discounted. Simply stating that a list of information is unreliable isn't an argument against an identified pattern, either. The journalists "in the field" are being decimated right now, and I wouldn't trust the think tanks in Tel Aviv to furnish a superior explanation.
Or D, available as official fronted language on GCC and LLVM projects, :)
Why is billions of request per month so exciting to the authors? That’s only ~100 QPS, which a single-core application should be able to handle easily.

Wake me up when you have hundreds of millions of QPS of DOS load.
> That's easily fixed. You just delete the games.

I get your point, but this is like telling Odysseus not to pay attention to that siren song...
Unlocking the NES (For Former Dawn) (2022)
I saw a tweet about this new NES game in development that looks amazing. Seeing video of it, I thought it was a SNES game. This blog talks about how they are able to achieve these results on the NES.
Both can be true at the same time.

Companies both treat senior engineers as expendable and will fire them on a whim - while paying them whatever they dictate and rehiring them few months after the layoffs for 1.5x compensation.

I'm happy being expendable. It means I can just pick up my things and go somewhere else whenever I please - any place I go has some spot for me and will pay me many multiples of the national average wage.
Am I out of the loop, or is it really uncommon for a company to proactively reset passwords after a breach?

Maybe I'm being paranoid but after the whole T Mobile plaintext password fiasco a couple years back I worry that AT&T may have done something equally stupid, perhaps un-salted hashes if not plaintext passwords.

Edit: my bad, I didn't read this article first (and stupidly relied on another article I read earlier, which didn't have as much detail)... Does anyone have more detail on the new research? If the "passwords" are really short numeric pins, it sounds like they _are_ unsalted if they're so vulnerable.
I absolutely don't mind the plugin system being a Scheme. It's a plugin for a text editor, and Steel(https://github.com/mattwparas/steel) seems to be a lot less of a maintenance burden than WASM plugins(besides that I find the WASM tooling to be extremely complex).

But besides all that, Helix learned be that I don't need fancy plugins or endless finicking with config files and toolchains. Using a combination of other tools, like yazi and lazygit, helps me not only inside my editor but outside of it as well. And Kakoune does this even better. In that regard it has been a real eye-opener and refreshing. The downside is, it's hard to go back to other editors!
I previously posted on another topic that when a corporation commits C crimes that each carry Y years in confinement (prison time or jail time,) the total years in confinement (C * Y) should be divided by the share of the corporation someone owns and that stockholder should be sentenced to that amount of time. So if a stockholder owns 1/S of a company, that stockholder should be sentenced to CY/S years.

If Facebook committed 100 billion felonies (where each intercepted message is a felony,) and each would carry 5 years in prison if I did it, then there are 500 billion years in confinement to divide between the stock holders. If someone owns $1,024 of Facebook stock (which is one-one-billionth of the total) then that stick holder would be sentenced to 500 years in confinement in a just system.

We do not have a just system, but there are those if us who will fight for one.

Perhaps the boys and girls at fed.gov can move 0.0001% of the way towards justice by seizing Facebook, liquidating the company, and handing out any money that is left to the people whose accounts were spied on.

Of course all if this assumes that each and every employee or former employee or contractor at Facebook who knew about this never, ever gets out of confinement.
Sure, the backdoor could have e.g. injected an libav exploit into a video file to re-backdoor my system when I watch it... that's too paranoid for me.

I don't backup the whole system, just a specific list of things in /home.
It doesn't take very much to permanently scare a bird away from a nest they're in the process of building. They're much more sensitive to threats when establishing a nest.
Looks like you can’t think of a good reason to stay on RDS in this case, is that correct?