skysight-inc/HackerNews huggingface dataset:
The wide world of esp32 and bringing an IOT product to market. Espressif, the manufacturer of esp32, is a leader in the embedded category by offering a robust sdk and extensive documentation, yet there are many foot cannons and their documentation is misleading, creating a lot of friction in the process of productionizing a device. There's so much involved other than firmware development.
I actually meant quite the opposite: that contribution should be paid. Yes, it would have to be ring-fenced so that society and the ecosystem would know who contributes what. That would also mean though that someone assumes liability for a piece of code; when you do that, you add value (economic not just source-code) and thus you should / have to be paid --by whom? the hundreds of commercial companies that use your code and whose liability you are reducing.
Ok. You shit all over security experts. Now what?
Lotus123 did affect the economy and was a breakthrough.

But that was 1983, closer to WWII than to today. No AI, no internet, no cellphones . We have vastly more powerful systems and dev tools now.
While I think freedom is good, I also think there are more people destroying their lives with drugs than people who can regulate their use.

I've seen so many people waste their life on weed and alcohol that I can't be very happy about this news.
Has the word click-bait lost all its meaning now
There used to be a TRIM program you could install. Used one when I swapped out the super drive for an ssd in a 2012 MacBook Pro (I think at around the same time?)
Ask HN: Being a Freelancer vs. Starting a Company
Hello,

Just seeking for advice from others who have made similar decision.

I am running currently quite succesful software consultation (ERP software) business of one person. Basically I am a freelancer and I have couple of customers that I provide services for.

However I'm thinking of starting a proper company, hiring people, getting more customers etc.

I get interest from both customers and potential business partners from time to time but I can't make up my mind which is better.

Downsides of proper company is that I can do less hands on development and would have to manage people.

Upsides are that its more scalable, possible to take on larger clients, share responsibility etc.

Has somebody else been here and what decision have you made and how are you satisfied with this decision?
You can potentially go down those rabbit holes, then an attacker gets fixated on you for being so unusual and they come back doing only 2 attempts per ip per day with thousands of IPs. I have been on both sides of this game many times.

Better time investment in security is just do not have ssh or a shell in production in the first place, because ssh is probably not required for your production application to function.
Definitely. I don't understand why people feel they need to do that, especially here.
> no application outside the App Store (where sandboxing is mandatory) sandboxes itself.

Usually applications distributed outside the app store would simply not work (or be limited to close to useless) if sandboxed.

My pet example these days, DaisyDisk, cannot show what takes 10-30% of my space in the app store version. And can't delete protected files in Applications etc.

Which would be nice if it were a malicious free to play game, but it's an application that graphically reports what's taking space on your computer and optionally deletes stuff that you've chosen. So it simply can't work well inside the sandbox.
And there we got the problem, a papers title not sounding serious doesn't mean it isn't — and more importantly: the opposite is true as well.

The credibility problems science has is because instead of replicating the contents of a paper people have seveloped and over-reliance on other peripheral metrics like which papers it has been published in, p-values and such. Relying on the seriousness of titles is just another of those distractions.
Exactly.

Also remember this

>> odd valgrind complaint in automated testing of postgres

I would imagine compiling a list of odd complaints may yield something , or nothing at all.
While I agree generally about systemd, this line in particular is not even correct. You don’t have to link libsystemd to run as a systemd service. Using the notify feature is optional anyway, but you can do it without linking to that library.
Is there any jurisdiction where selective enforcement is not how drug laws are enforced? I'm guessing maybe somewhere like Japan, but I'm sure the vast majority of states do not enforce drug laws very consistently.
We are not talking about all of open source here; there are crucial bits of code and less crucial bits of code. LZ/OpenSSH was obviously in the first category. How do you determine which ones are more critical? same as you would for a bridge or a plane: by risk, impact, etc. That's basically liability.

And obviously a non-insured piece of code that assumes no liability whatsoever can still be free and maintained via IRC, same as it ever was. I dont see how this "kills all open source".
I used to cycle through various VIM highlighting modes for this reason, but I never stopped to think through what I was doing. I just did it. I recall one scheme lit up all the integers so I could see all the magic numbers in my code. This is a great idea. Looking forward to seeing it in VScode.
Yes, because simultaneously it's somehow true that it's a slam dunk to use automation to replace this skill, but yet industry faces some sort of irrational barriers to implement that.

Or maybe, just possibly, armchair opinions from programmers who have never done this and have no idea what the reality is beyond a youtube video have superficial understanding?

Which do you think is more likely?
Pretty cool.

I did that to a 2009 mac mini ( with an external USB-SSD) .. and it came back to life. Still use it for running some jobs.
> illegal to drive is 1 ng/mL blood serum.

I've had the opportunity to see one of the infamous German drug tests in practice (wasn't driving). The result is that if you used any canabis 4 days earlier it will show up on the pee test. It was waved off as no issue, but four young Dutch people in car got their attention a bit too much apparently. If they thought we were the type they were looking for they had cause to do whatever. We were not the ones they were after though as we were not going to the nearby festival and were just driving by.
For DOS, "FILES=nn" in CONFIG.SYS controls the number of data structures it allocates for open file handles: https://pcdosretro.github.io/config.htm#FILES

But I'm not sure if accepted sockets fall into this category.
And the Chinese steal it in 5,4,3,2..
I wouldn't mind receiving insurance coverage (and the background check required to support it) IF YOU PAID ME TO DO SO!

But we (mostly) don't even pay open source developers to write the code ... who is offering to pay them for this insurance?

Besides, this was a highly sophisticated actor. Someone willing to create several layers of loaders and invest long amounts of time into getting xz excluded from certain checks. Anyone with such sophisticated spy craft could have fooled the insurance companies also.
> Your server will be secure because it's obscure. But it's still very likely to become a target for autistic geniuses.

Ah, delving into the abyss of ancient servers, are we? Well, if there's one thing that tickles the fancy of the 'Atypical Geniuses Club,' it's a relic from the digital crypt. Count us in, presently inspecting the code armed with nothing but floppy disks and a dial-up connection!
When you report something as spam to Google they only claim they "might" cause later emails from the same sender to go to your spam folder; regardless, those emails going to one's spam folder doesn't mean they don't get them at all, it just means they have to look at their spam folder to log in.
I have been paid to write FOSS, I have paid others to do so, I have dragged cheques out of major banks to sponsor conferences. And yet I still do not know of a convincing way to get money from where it sits to the pockets of all the devs working on the stack, let alone in a fair manner, let alone in a way to allow the vibrant and high quality development processes that exist (ie “the government pays developers” will almost certainly be a dead hand on development)

Honestly the problem feels
Like it is capitalism itself … which is weird.
So, uh, who did do it?
Then you go to a Mieterschutzverein and put them in their place.
ought to be enough for anybody ... :-p

I was surprised to find out there is a TCP/IP stack for DOS, I remember still having to depend on non-MS software as late as Win 3.1 to connect to the internet [1], never heard of "LAN manager" [2] but apparently it did have (some?) support.

Btw, according to its author, "mTCP is a hobby project that I started in 2005." [3]

--

1: https://en.wikipedia.org/wiki/Trumpet_Winsock

2: https://en.wikipedia.org/wiki/LAN_Manager

3: http://brutmanlabs.org/mTCP/
Humans working on a creative team are not automatons given commands, and this is a pretty basic understanding even if you are super impressed by what large models can do.
This is just Docker being Docker. If that type of thing is interesting to you, start reading the source code.
I don't know much about my biological mother or her side of the family, but they are Polish.
Planetocopia (2010)
> The article seems to be taking about people on the verge of entering "the facility", on their slow slide into dementia

I don't know how in the world you got that from the article, but no.
I choose to post under my real name, it forces be to think harder and more often about saying some smartass thing (which still happens anyways because I grew up on 4chan or whatefer, slashdot I guess mostly but the internet used to have a rough sense of humor as the default), and to apologize earlier and more often if I get called out on it by someone who is right.

But I’m not sure it nets out in my favor anymore: it’s just a huge handicap to be totally honest and transparent in a world that will really hold past mistakes against you in a very arbitrary way with the only consistent theme being that “important” people rarely face any consequences (some might say these days, even real scrutiny).

My current solution-in-progress is a handle (b7r6) that’s a decent Unix name, has my initials in it so no secret if it matters, but kinda changes the tone to like, “I’m a real person but I kinda want to be treated like an opaque ID unless it’s damn important.”

It’s a sock on the doorknob, not a lock, but I can’t think of anything better just yet.
The land owner may legally inspect the property and see it?
> Nearly any amount of intoxication is vaguely illegal under disorderly conduct. It’s a catch all they can apply whenever. Fighting it and winning still costs time and money.

This is a weak argument. Almost nobody is getting prosecuted for "disorderly conduct" when under the influence of marijuana as a proxy for marijuana consumption. And even if they were, the connection between that and employer drug tests is extremely tenuous.
Weird to see Sovereign Citizen mentality on HN of all places.
This is all I ask. I've never had an interest in weed, but I also don't think it should be illegal. After it was legalized in my state, I started second guessing my stance out of spite. I quickly got tired of not being able to do a chore like grocery shopping without having the store stink of weed because someone couldn't open a window while they baked in their car, or whatever. The commercial culture that sprung up is also annoying, with the amount of dispensary billboards rivaled only by billboards for personal injury lawyers. It's be one thing if it died down after the first year, but that the in-your-faceness of it persists is starting to feel more like an indoctrination. At least in my state, the cannabis community has revealed itself to be the annoying children they were stereotyped as, and that is just disappointing since I voted to legalize it.
Tbf, the parent did specify smoking. However, to your point, legalisation will clearly make it more likely that alternative, less-smelly consumption methods become popular than prohibition.
> A few of my friends and I did Advent of Code in cpp2 this year and it was a (very buggy) blast.

You mean buggy ironically because you were discovering cpp2, or because cpp2 itself was buggy?
App to Help with Loneliness
I think a big problem with loneliness is tied to the fear of breaking social norms. For example the fear of asking our friends who go to the same gym if they want to train with you and asking many times in a row. But if we do happen to meet them randomly at the gym it is always a good chat.

So the idea is simple. What if you could broadcast to the friends you have who might be interested in the same hobby as you that you are planning or are interested in doing something? Climbing, gym, run, walk, take a simple stroll through the city, etc. Things that we usually do alone. Instead of you having to be pushy and send a message to all those friends they would simply get a notification saying that you are interested/planning to do that thing and they can tag along or message you instead. Think of Instagram stories but instead of people bragging about the cool things they have done, it is an invite for you to join them.

The app is simple; You have your hobbies added to your profile and people can follow you on specific hobbies. Whenever you plan to go to the gym you simply post it and the app will notify those people who follow you on the "gym hobby" that you are going and then it would be fewer social barriers to meet up.

We actually did an app like this and interviewed a lot of people about it and it seemed to be a real problem. However, we didn't have the problem clearly defined so the app grew too complex so we had to stop.

The idea has since a year back been stuck in my mind and I still think it could be a great app to help people with feelings of loneliness.

What do you guys think. Could you benefit from an app like this and how would i make it fly?
Worse than tobacco?
> It therefore cannot be used to define a universal complexity for any string.

It defines a complexity for anything which can be represented in binary. Which in practice is all we want. Who wants to define a new complexity measure for every new alphabet of symbols?
Charles Petzold
one of the proudest accomplishments I've done is that over the years I've managed to collect all of SNES PAL games, what is considered a full set. (I augmented it with some select NTSC and SFC games as well). What's interesting is the world in those cartridges and how they extend the main console. We don't get to see that in gaming hardware anymore.
So far the comments here seem to think they are introducing generic ads in the client, while the ads the article describes is to allow game studios to offer virtual rewards (aka hats) in their games when you livestream your gameplay to other Discord users, and those users (viewers) will then be seeing ads while watching that gameplay. This is somewhat similar to the Twitch Bounty Board for streamers and "drops" for viewers. Discord calls this "Sponsored Quests", and seems very unobtrusive.
Well, that's a different proposition: I think that if you were to query you'd find that people who experience strong mental imagery have done so as long as they can remember, and don't have the experience of needing to develop it as a skill. It's true that such data isn't in Galton's study; perhaps it's in others, but more simply, we can ask:

Anyone reading this who has strong mental imagery (video like): Do you remember ever not having it? consciously or unconsciously, did you ever have to work to develop it?
Yes, but I think there's something even worse: things that haven't happened.

Anxiety is kicked in to overdrive when you can vividly imagine adverse outcomes to such a degree that they are indistinguishable from things that have happened.
Congratulations for being lucky enough to have big actors accept your e-mails, this is not the case for many of us who do understand and apply SPF, DKIM and DMARC. Guess we'll just try being luckier...?
Cannot be clickbaity if the title precisely explains what the paper is about.

The problem with science dissemination is not that it's too accessible but rather the polar opposite: even experts find reading some (many? Most?) papers truly dreadful because of the terse and dryness but one does it for the knowledge; on the other hand everyone else absolutely needs to rely on "science popularisers" to even half-understand half of what a paper is about. And that's the problem: the general scientific understanding is as good as the scientific rigor of the most understandable/entertaining science populariser out there.

To clarify: if person A is extremely diligent and precise but not too enjoyable to watch, they will get X views and maybe a limited (but positive) impact, on the other hand person B is not very diligent, cuts corners or even outright lies but is very easy and fun to watch, they reach N more people than person A, having an absolute huge (albeit negative) impact.

If the authors had a way to write both for experts and, somehow, have control on how that knowledge is available to the rest, the delta between the two methods of dissemination would be minimal (or at least controlled).
So, it's not about a meaningful harm, it's about a subjective preference?
I use this exclusively in my IDE (RustRover). I've never had a recent IDEA that had a usable "problems" or whatever window. I wish there was a bacon for Go, too. I check for compile problems in Go from the terminal with AwesomeConsole or whatever it's called (in GoLand).
When you use services like Sendgrid, having a spam report will automatically prevent future emails being deliverable, third parties and intermediaries do this precisely to protect their email reputation.

Marking spam may not be immediately be a death knell within Gmail, Hotmail, etc, but because of the potential impact from being marked as spam, virtually everything treats it like a death knell.

This is fine for me, my service is entirely opt-in, and if someone hits the spam button it risks impacting other users who _want_ the email, so I am not bothered that this person effectively unsubbed themselves and killed their account.
> the Raspberry Pi

Odd how there were no Mistral 7 benchmarks for the Pi 5 in that table (I doubt anyone is seriously considering using TinyLlama for anything at all), so I went to re-test it out myself on the Pi 5 8G.

llamafile 0.7: 52 predicted, 150 cached, 430ms per token, 2.32 tokens per second

llama.cpp + OpenBLAS: 36 predicted, 124 cached, 381ms per token, 2.62 tokens per second

It does seem to inch closer to the speed you get with blas acceleration which is quite impressive, but in practical terms the Pi 5 is so heavily limited by its memory throughput bottleneck that it saturates the required compute with 3 threads already. So while fancy kernels will make it more efficient it won't really save you from that fundamental bandwidth limit. The Pi foundation messed up going with a 32 bit memory bus, simple as.
> Meat consumption is lower in all EU countries compared to the US.

Wut!?

Here are the European countries ahead of the US in 2020 numbers on pork consumption per capita in kg:

Poland 54.95
Spain 52.56
Lithuania 50.69
Croatia 49.63
Hungary 48.30
Austria 45.03
Czech Republic 44.54
Germany 44.01
Montenegro 43.24
Belarus 39.18
Slovakia 38.82
Latvia 38.44
Portugal 38.09
Estonia 37.73
Serbia 37.33
Cyprus 36.78
Romania 34.50
Luxembourg 33.14
Italy 32.88
Belgium 32.80
Ireland 31.11
France 30.97
Finland 30.80
United States 30.64

Just pork.
among other things what's inspiring is the fact that if they had let the iron wall be built, maybe the lawn would be still there today
I've seen that ambit claim too, but I'm not even sure what distro(s) it is referring to since I'm unable to confirm it on any host where I have ldd casually to hand. Ref however https://seclists.org/oss-sec/2024/q1/356
Legolize it 8)
Especially now that the consumer SSD market has entirely moved on to TLC and QLC, there isn't a new SLC drive you can buy for a reasonable price anymore. Even if a TLC drive would wear out more quickly in an old SSD-unaware system, they are so cheap at this point that it's not really worth worrying about.
It becoming a Facebook group on steroids is my biggest issue with Discord. So much knowledge, information and documentation is lost in an unindexed proprietary black hole. It‘s a chat that people started to abuse for all kinds of things just because it can be done. Often time normal forums would be more beneficial for everyone involved.

Also I host my own TS server since 2019 and never had to deal with any real problems.
But every piece of software is legally held warrentless - no warranty is the heart of Microsoft, Oracle and the GPL licenses.

Yes I know the stories of “insurance made steam boilers safer”. And it’s true. But it also stopped innovation in the space before Charles Parsons came along and ignored the whole thing (military industrial aristocracy)

I think the answer sits somewhere in “have less stuff”.

We have millions of lines of code in all walks of life and Inswear we are orders of magnitude over engineered in almost all cases.

If you work for a large company try counting how many different ETL solutions exist, CSV uploaders, data lakes, warehouses and so on

Then imagine having one library to do it.

Somehow we need to get there for … everything
What are you suggesting a better response would have been?
> But AI will take away all coding.

I feel like the time frame for this is 20+ years out. It feels premature to mourn the end of coding, although we can sense it coming in the medium future.

It’s not too soon to start planning how society should handle the radical changes in employment due to AI. It seems like that is where our focus should be.
"What home users are motivated to buy enough ink to print a bunch of pictures every 2-3 weeks just to prevent clogging?"

School age children and their parents.

I bought an (inkjet) printer because the kids asked and asked! They needed a lot of prints for their school and activities. We use it constantly now that we have it, for many home and family usages where color is often needed (but not always). We have an ink subscription because it’s much easier.

When I was younger I had advanced inkjet printers for creative uses, arts, etc., but then entirely stop using one for years, until… kids.

Color printers are niche now, but for some segments of the population still very much needed.
The funniest error was [Music] every time it was just a grinding noise.
Oh yeah, comparing 2024 to 1981 was a hoot.
For the majority of readers who probably won’t know what that is, ReBirth was a soft synthesiser that was the precursor to Propellerheads Reason, one of the most famous DAWs.
Yes, things must provide utility to be worth anything.
The whole AI space seems to suffer from this. Remember in the late 90s, big tech companies (particularly Microsoft and IBM) confidently declaring that conversing naturally with a computer via voice recognition would be the primary way people use computers within years? Meanwhile, 25 years later, voice recognition is finally getting into the realm of being good enough for unimportant things where accuracy doesn’t matter.

The only mainstream AI-adjacent thing that I can think of which ever actually became “good enough” is OCR, and that took about 50 years.

I’m somewhat surprised that people aren’t more cautious, honestly. We’ve had _two_ “this time it’s different” moments in a little over a decade, now (self-driving cars and generative AI); while self-driving cars are at this point squarely in the “okay, maybe it’s not so different” bucket, I think people underestimate the risk that generative AI will, ultimately, also underwhelm.
They have to formally inform you about that in advance and have valid reason to do so in Germany.
I am interested in learning how the data guzzlers manage their databases and analytics.