skysight-inc/HackerNews huggingface dataset:
I'm professionally mostly in Django and my front end skills have been left to rot for a decade - your comments about Webpack, Vite etc. ring very true. I recently looked into replacing Webpack on a project with something less painfully slow, failed to get Vite working so tried Parcel which is supposed to be idiot proof. I guess I'm more even more idiotic than that.

As for HTMX, I've been playing with that on an evening / weekend project and absolutely love it. Getting it working with Django was maybe very slightly harder than with other backend frameworks as Django doesn't have great support for template fragments. Once I'd sorted that though, I had a decent interactive UI on top of my app very quickly, all while being completely new to HTMX. I can imagine being incredibly productive with it with a bit more learning / use.
I felt really bad for the original maintainer getting dog-piled by people who berated him for not doing his (unpaid) job and basically just bring shame and discredit to himself and the community. Definitely cruel.

Though… do we know that the maintainer at that point was the same individual as the one who started the project? Goes deep, man.
Surprised to see such a cynical and negative comment from such a well known account. CTO at early stage startup is often the most important person in the company, technical delivery/execution, hiring, early decisions on which frameworks, integrations, helping with sales, etc.
PySpark instead of spark, but I had a job a couple years back using it in glue to generate financial reports. No longer on the project, but I'm pretty sure they're using it.

Honestly wasn't that bad of a model. But, then again, the job didn't actually need spark, someone just sold it that way before I was on the project. Fun to work with though
advertising has enshittified the internet
> Try to be more disingenuous.

Try to be more objective and less blinded by hate.

> Porn and bots (most of which are porn related) were some of the stated reasons for Elon to back out of purchasing Twitter.

And? Since he wasn't able to do that, he's now taking steps to isolate them.

> This basically proves that Elon has given up on mainstream advertisement (or rather mainstream ads gave up on him).

Musk could literally burn the entire company down, bulldoze the remains, and sow the ground with salt, and he'd still be the richest person in the world. I think you're wildly overestimating just how desperate he is, and wildly underestimating just how much he simply does not GAF.

But sure, continue crying Twitter doom just like you and your cohorts been doing since before the deal even settled.

Company's still there, mang, and while it may not be profitable, it's not bleeding money nearly as fast as it was before he bought it.

"Disingenous" indeed.

Objectivity. Look into it.
Honestly one of the worst things over the years is feeling like more and more companies don't like their best performers.

High performance people are difficult. High performers have high taste & drive. They believe in themselves & their capabilities. If there's dysfunction at the workplace or corporate politics or hiccups or whatever impeding things, the high performer is the most likely to not be easy, most likely to react.

The people doing the best are often the people who don't particularly fit in well with the bell curve of your organization, with being managed down to. Letting good people go, alas, is often good protection for the corporate status quo, with other workers saddled with picking up the boulder someone else put down & figuring out a new how to trudge forwards. But the corp will be glad there's less vocal people, less standout behavior, more normalized predictable & routine life.
Distributed SQL backends such as BigQuery and Spanner basically use MapReduce underneath anyway. As do most other distributed backends, SQL or not, capable of aggregation between shards.
It’s pretty funny how a bunch of people come piling reaction emojis onto the comments in the PR, after it has all become publicly known.

I’m like.. bro, adding reaction emojis after the fact as if that makes any sort of difference to anything.
> why you view incandescent light-bulbs as being superior to LEDs. Is it solely because they are simpler? They certainly don't last as long and cost more to operate.

I've gotten in the habit of writing down the in-service date on all of my LED bulbs, because I don't think I've gotten more than two years out of any of them. Granted, still longer than incandescent bulbs, but I feel like the 10+ year lifespan I've been sold is a lie. Supposedly LED bulbs are a lot more sensitive to fluctuations in power quality (and it's not like I've been buying AliExpress bulbs, either).

In either case, why a federal ban on incandescent bulbs? If LED bulbs are superior, the market will sort itself out. If it's really a market failure (which I don't think it is in this case), put an excise tax on incandescent bulbs to tip the scale in LED's favor. To ban it outright is just rude.
> What if they have clean beaches but no need for your services?

Dump on their beaches, offer cleanup services?
People use foorbar in different ways, but when I moved (foorbar works well in Wine btw), I discovered that Quodlibet is actually a better version of what I was using foobar for.
As an eng manager, I always make it super clear (many times) when new engineers onboard they're always welcome to say "this doesn't make sense" ask for more details. Sometimes (maybe even often) they're right. I also enourage them to "assume good intent" from other devs and managers. Fundamentally no one manager knows everyone and no one engineer is right about everything.
> P.S. I think you meant "death knell" but it's all good, we all understood. :)

You are correct, I garbled it with "[death] bell toll" (specifically thinking of "for whom the bell tolls.")
This is not my lane, but I was looking to fast text search some time ago. I looked into Elastic but it seemed to me it was designed for a scale that I didn't need.

Then I found projects like Meilisearch and TypeSense (which are in the same class of search software as Algolia) and they're so much faster than a standalone Elastic instance.

Again, different space from Elastic, but I'm not sure if most people truly need Elastic's scale.

https://github.com/meilisearch/meilisearch

https://typesense.org/
They're doing it via Wine.
Otoh, maybe they just wanted to create a cryptomining farm. Lol.

Don't underestimate the drive some people have to make a buck.
Windows RDP is what I need to use, but I also need a lightweight web bastion. Guacamole works, but is too heavy for the kind of proxy/router/equipment I’m targeting.
My take is that we are in this situation because most hiring is done by managers and/or recruiters who have very little knowledge, or are completely clueless about programming. This leads to checkmark based recruiting where the client wants tech x, candidate has tech x on his CV,
That's why I roll my VPN locally. One less party to worry about.
FTX/Alameda also had unpaid AWS bill of ~single digit millions.
They may have AWS CloudFront CDN in front of it for IPv6.
If you're doing that, you're terminating TLS at CloudFront. I don't believe that's optional.
If it's for non-commercial use, you might find this a spritual equivalent, cross-platform:

https://www.xnview.com/en/xnviewmp/
Wow, all comments removed as spam or hidden by default, update posted saying "We are targeting to land support for IPv6 towards the beginning of next year." Well, Q1 2024 has come and gone. Where's IPv6 support or the communication about what is happening? Good reason to never use Vercel if you ask me.
Explicit is better than implicit.

But I can see the value of inference if the type is defined by a constant. If the rule is "Variables are the type of the constant that you assign in the definition, anything else is manual" it's pretty obvious.
Not sure why this is getting downvoted, its a real experience.
> The whole purpose is just to destroy cities. It has no legitimate military value.

Well, destroying cities was also the military purpose of the first two atomic bombs.
Wikipedia kinda has this already:

https://en.wikipedia.org/wiki/Taylor_Swift?action=render

https://en.wikipedia.org/wiki/Taylor_Swift?action=raw
Actually you have a point. A collection of shell scripts (like the classical init systems) have obviously a smaller attack surface. In this case the attacker used some integration code with systemd to attack the ssh daemon. So sshd without systemd integration is safe against this specific attack.

In general, I’m not convinced that systemd makes things less secure. I have the suspicion that the attacker would just have used a different vector, if there was no systemd integration. After all it looks like the attacker was also trying to integrate exploits in owner libraries, like zstd.

Still I would appreciate it, if systemd developers would find a better protection against supply chain attacks.
Again, the users installed this app on their own devices. You don't need permission from Youtube to install that kind of thing on your phone. Many, many companies install software like this on company-owned computers and phones so they can tap all internet communications on the internal network and watch for malware or data leaks. It's very common.
so many websites don't actually have full HTML. Instead, its just JS that dynamically create elements after fully being downloaded. Not acknowledging this just shows how much of a not good/realistic/practical idea this is. Pie in the sky idealistic concepts are fun sitting in a pub having a few pints or while sitting in the circle, but they are not productive suggestions in making things better.
You love it that they socially signaled to you their awareness of the old “AI is everywhere but it’s integrated so well you can’t see it” phrase? Thats basically how these names are conjured up.
Does this mean they aren't accepting external contributions any more?

If I put in a commit, what is redis going to pay me for executing my code?
Collateral damage yes, but it seems like he is currently away from the internet for an extended time. So it could be that Github needed to suspend his account in order to bypass things that he would otherwise have to do/approve? Or to preempt the possibility that his account was also compromised and we don't know yet.
Anyone else keep seeing articles about Mamba and thinking it's about Python/Conda? It's annoying when the new cool thing picks the same name as something else you like that deserves attention.
That's nice.

I hope you enjoy your cockroach burgers.

Assuming anyone in your country ever gets around to selling them.
I'd be interested to know if Amazon has a client risk group, because I've seen a few of such large monthly bills, and I sure hope they don't settle these in arrears at such a low frequency as monthly payments.
I'm a sucker for use case variants of simple problems that you don't necessarily need to be aware of in the day to day (or necessarily even are the best answers). Consistent hashing, Bezier curves, the Floyd-Warshall algorithm, that kind of thing. Each from well known categories of problems but a subset of conditions where the answer really shines in either its relative simplicity or approach.
>...Apparently the man was a half-wit who disliked reading and easily mesmerized by video; a typical TV-watching zombie.

Your source says:

>...While Reagan found the videos helpful and asked for more, the original idea for the televised briefings was the CIA’s. The president still received regular written and in-person briefings, Dujmovic writes.
Presumably "make enough money to buy a private beach or private island."
Part of the problem is the potential loss of public value in the form of the undigitized archive, and archive.org provides no solution for that.

Now, is it the responsibility of organization X or person Y to preserve this value? I’m not sure, but that seems to be a separate (albeit also interesting) question.
Typst Symbol Classifier
Typst symbol classifier

Static website: works offline.
Tiny model: 1.1 MiB (ONNX), fast to load and run.
Decent symbol set: recognizes 300+ symbols.
> but it’ll get harder for me now I’m in my mid-40s.

Only bad thing about age is that in many organisations you will deal with people that don't have that much experience as yourself and they are not aware when they are making a mistake doing something, because they read about solution on some happy clappy blog or something. Less experience people tend to go into arguments more easily to defend their position and you have all seen this many times over. Unfortunately there is no easy way to get around this. Typically you get to explain things over and over and it may get really boring, as new cohorts come in. In most places the problems to solve are all the same. Take data from one place, transform it and put in another. Progression to management in that sense is where you get people to do all the boring stuff, that is still fun for them and you keep an eye so they don't screw things too much while yourself taking care of the big picture.

Probably best way is at that point to start own business. More fun and reward.
*we reserve the right to ban your circumstance if we think we can make money from it
What are people using so much AI for? The only time I've ever gotten a useful result with a text model (I've never tried a paid model so maybe I don't get it) is asking ChatGPT to translate bash to python.

Everything else is content free business speak.

Images and video models are usable but somewhat niche, it's not like they replace photography unless you're a serious AI bro.

Do they expect every video to be fully made by AI?
My understanding is that they need more air flow for good operation, and lots of ways you can socket them won't provide that, especially recessed lights. The 10 year lifespan is in more ideal circumstances, I guess.
Yea, the problem is that bad managers likely end up being bad because they don't have this humility.
> In either case, why a federal ban on incandescent bulbs? If LED bulbs are superior, the market will sort itself out.

Because part of the cost of the use of the incandescent bulb is externalized and therefore not subject to market pressure. Specifically, it uses (way) more energy, and the harnessing of that energy involves emission of greenhouse gases and depletion of non-renewable fuels.
Yup, I should have worded that a bit more carefully. It would appear to me that they could be rebuilt, but still need the key ingredients of a trading house.
Embarrassingly, not catastrophically. US proved they will do everything in their power to not risk even the slightest provocation of weak russia (because nukes). Even the prepared response to russia nuking Ukraine was supposed to be sinking of Black Sea Fleet - something Ukrainians managed on their own in ~70% by now despite not having operational navy of their own. Do you really think there will be US response to full on Chinese invasion? I can already predict strongly worded letters and condemnation. US doesnt even have nor want to have a base there.
Fraudulent studies are undermining the reliability of systematic reviews
I think it has become unusable to everyone though?

If redis thinks you're making too much money using redis, they'll relicense it so you have to pay them to do whatever you are doing
The credit freeze portion is permanently free for all 3 sites. I use it myself.

At the same time, these companies all offer other paid ‘monitoring services’ that they use heaps of dark patterns to push new users into paying for and confuse users to prevent people from finding the free ‘just security freeze’ service
Debugging SIMD in LLDB
Literally, a death knell is a bell rung (esp by a church) to indicate someone has died. Figuratively it's an event that signals an end to something.
feh is very fast as well. But it is only a viewer and does not edit. But under Linux it is my go-to viewer, also for cases like the one you describe.
Why would that be an issue, unless your name didn't match across documents you have?

Or are you trying to make some big deal about undocumented immigrants being able to get a driver's license?

Fun fact: Some state governments, and many of their residents agree, believe that it is not the state governments responsibility to handle federal immigration law, and that being able to meet the requirements to drive a car has nothing to do with residency status.
IrfanView shouldn’t be seen as a relic just because it’s “old”. Software like IV, Opus/Far just highlight how inadequate the OS provided tools for common navigation/viewing patterns are. Anyone who breaks through the “the computer is a magical box and I don’t understand any of it” barrier needs to have a manual tossed at them that covers this software right away. Nevermind gdb/WinDbg.
I was thinking of doing something like this for visually impaired users.
The next step is to pipe it into the JavaScript web speech synthesis API.

https://mdn.github.io/dom-examples/web-speech-api/speak-easy...
I'd agree that OpenAI was a tarpit project for many years.
Never heard of this, but it looks great! I'm going to spin up a server tonight, see what my friends who've played Minecraft with me think :)
Five Business Ideas
I use mostly LED bulbs, but isn’t it true that LED bulbs all have a lot more blue in their spectrum than incandescent, even the warm ones?[1] I understand why people prefer incandescents but I really prefer my lights to be as white and bright as possible and so I’ve always bought LED bulbs.

[1]: https://electronics.stackexchange.com/questions/20757/led-li...
I’m not as “lucky” as her, but I can’t stay “retired” for more than 9 months. I’ve tried twice. It’s not even money, financially I have more than enough to retire now, I kind of just have to be doing something that I think isn’t bullshit, and I’m not ever going to get good enough at my hobbies to pursue them full time
My parents' "landline" has 5G backhaul now. Landlines are like X11: vanishingly few people know how to maintain them, and nobody wants to anymore.
While we should absolutely invest in grid level batteries, right now we use so much power that very large battery installations can only really hope to cover a few hours of usage for a portion of supply. It's great for helping peak solar and peak wind power production to be stored and then re released in times of demand. And definitely can help with grid resiliency.

But I'm not sure we have the battery technology to be able to distribute batteries everywhere with enough capacity to stop most power outages. That's quite a different deployment than centralized batteries on the grid. I hope we get there but the energy densities & costs probably are not be good enough - yet.

And if we do manage that, the outages that do happen will only be more severe. Are we going to have power outage drills? If not tons of people will be caught unprepared.
I see a conversation from Berger (1972) with preceding generations:

(Ep 1 18:40) > ...as soon as the meaning of the painting becomes transmittable, this meaning is liable to be manipulated and transformed.

Hesse's The Glass Bead Game is from 1943, and I believe the "game" played in Castalia was meant to be exactly this sort of manipulation and transformation; creating new work by combining and transforming old, kind of like https://en.wikipedia.org/wiki/Millefiori , but for all sorts of work, not just glass.

EDIT: heh, at 19:44 Berger gets around to the https://en.wikipedia.org/wiki/Kuleshov_effect (without, however, mentioning Кулешов) ... and at the close of the programme he even cites a reference*! (on broadcast TV? what kind of marvel is this?)

* https://en.wikipedia.org/wiki/The_Work_of_Art_in_the_Age_of_...
Do we even need "mutual authentication of DTLS certificates", though? I would think it should be sufficient for either the server's certificate to be CA-signed or -- even easier and even better as far as I am concerned (as to me the CA system is itself bowing to an authoritative system I would rather avoid) -- for the client to just already know the certificate hash of the server (as part of its address).

The only problem I am seeing is that I want to be able to leave the peer certificate hash null and just authenticate with anyone on the other side. Like, I actively don't want "mutual authentication of DTLS certificates" for when a user first connects. For later re-connections it might be useful for the client to leave the network a certificate hash, but for that initial connection I want one side to not have a certificate, same as using TLS to connect to any known HTTPS server.
I'm not sure it is fair to claim that the Gov is behind the white paper, in that paying for a study is different than a program to develop malicious code.
You want to open a picture, FAST, no matter the format or resolution ?

You want to open a picture and then move from one picture to the next in the same folder with arrow keys or mouse scroll, again fast and without loading or menus fonctions or whatever ?

You want to batch process a folder to convert all files to png with the larger side limited to 2000px, keep the location data but reset the orientation data, and remove the original file only if conversion succeeded ?

You want to scan something, rotate it and lossy pixelize an area ?

You want to resize, convert, re-encode a picture from one format to another with tonnes of option without resorting to command line because you're on windows and you would like to just do it in the same app you use for every photo thing ?

You want to cut a part of a picture, or identify the pixel color on a picture, or dozens or other every day operations like that ?

You want all of that to be absurdly fast, aka instant, without any complex menu or dozens of clicks to get where you need ?

I've been using irfanview since the beginning too, and it's not for lack of trying other stuff, it's just so much better. It's for me one of those tools, like Everything or Ditto or SumatraPDF or 7zip or NAPS2 or ... That just get what they are and what they should provide, and do just that, and do it right.
As an American I've never heard of such a ridiculous thing.
Wow, mad jelly their CI/CD and monitoring proceses are robust enough to trust a major rollout in December. That's a pretty badass eng culture

That being said, still some unanswered questions:

- If the issue was ipv6 configuration breaking automated cert renewals for ipv4, wouldn't they have hit this like.. a long time ago? Did I miss something here?

- Why did this take 90 minutes to resolve? I know it's like a blog post and not a real post-mortem, but some kind of timeline would have been nice to include in the post.

- Why not move to DNS provider that natively supports ipv6s?

Also I'm curious if it's worth the overhead to have a dedicated domain for scripts/packages? Do other folks do this? (excluding third-parties like package repositories).
Sometimes I think it would be a really fun challenge building a "matrix" of sorts to evaluate requirements and mitigations for large, real-world identity systems across various jurisdictions and with various merchants, something broadly similar to MITRE's ATT&CK Framework.
Honestly, it's harrasment at this point.
xz maintainer just pushed this "CMake: Fix sabotaged Landlock sandbox check." commit
https://git.tukaani.org/?p=xz.git;a=commitdiff;h=f9cf4c05edd...
> The only major one hit by this was homebrew, but they have never understood security anyway.

MacOS doesn't ship with sshd running out of the box, and vanishingly few people ever enable it.
> good chunk of our High Speed rail projects are being executed by Indian contractors. They are really learning

I know one of these families. Their learning consists of a profit margin five time greater than the foreign competition.
And remind me where that works again?
"if the IDE autocompletes the type declaration for me somehow".

Then you will need type inference to some extend. :D
I've tried a few and so far it worked for all of them.