skysight-inc/HackerNews huggingface dataset:
But how can it scale if it doesn’t assume that? It really has to cater to some statistical center of gravity and at some point cut off the outliers. Otherwise you need to pay for a private education because essentially you’re asking for custom tailored schooling. The fact that my parents couldn’t afford private schooling is no one’s fault - I don’t blame the public school system for things being the way things are honestly despite the level of abject misery I felt in it. In fact I’m a huge fan of it - I learned more than I would have without it and value the fact that everyone no matter how poor gets access to it.

Some public schools try to do differentiation but it’s really expensive and impractical at scale. The quality of teacher, resources, and teacher training required if very high. I think every effort to try is worth doing, but the more you try without increasing the amount of funding, training, and selectivity in teacher hiring (which is impractical given the scarcity of high quality teachers relative to the population size) the worse you do for everyone.

I don’t agree vouchers and school choice helps this fwiw. The issues don’t go away by diffusing administration of schools to more organizations, you just end up spending a lot more tax payer money on a lot more administrative staff at a lot more schools with a lot less focus on that center of mass outcome.

The reality is despite how intolerable my childhood was I found my way - and I know many who do. People are resilient and overcome adversity all the time in many shapes.
Jack Welch's Theory of Leadership: A Model for Failure in the 21st Century
I am probably sensitive because my mom passed away due to stroke prior to my wife being on Rinvoq but that was a bigger concern for me when my wife went on it. Learn to identify stroke symptoms.
I think your eight point is regrettable but mostly true - I’d soften it to professional relationships, which kind of sucks for anyone trying to get started in the field who doesn’t get a job with someone established, and adds an interesting wrinkle to the RTO discussion since you might “work” with someone for years without necessarily knowing anything about them.

It also seems like we need some careful cultural management around trust: enshrine trust-but-verify pervasively to avoid focusing only on, say, Chinese H1-Bs or recent immigrants (whoops, spent all of your time on them and it turns out you missed the Mossad and Bulgarian hackers) and really doubling down on tamper-evidence, which also has the pleasant property of reducing the degree to which targeting OSS developers makes sense.

Combining your 7th point with that one, I’ve been wondering whether you could expand what happened with OpenSSL to have some kind of general OSS infrastructure program where everyone would pay to support a team which prioritizes supporting non-marquee projects and especially stuff like modernizing tool chains, auditing, sandboxing, etc. so basically any maintainer of something in the top n dependencies would have a trusted group to ask for help and be able to know that everyone on that team has gone through background checks, etc.
Why would you expect anything of that sort to be without controversy? It's saying that we shouldn't hand our kids over to the tech company babysitters, and there are quite a few people, paid and unpaid, happy to argue against sort of thing (even on HN, arguing against constant connectivity through smartphones draws quite a bit of hostility).

However, it's a book that's squarely in the topic of "Kids and technology," and is built around research that spans through Covid. I'm aware the concept of reading books is rather outdated, but I still try to suggest long form literature on topics that matter, versus some short form articles.
The true value of having a paid-off home in America
Even worse is that their status page is total BS - there's a reason why everyone goes to Twitter to see if Render is down or not

https://twitter.com/search?q=%22render%20down%22&src=typed_q...
Perplexity Plans to Sell Ads
Umm… you get that Pascal's Wager is an example of fallacious reasoning, right? It establishes a false dichotomy where there either is a God or there isn't when in fact there is equally a possibility of the Christian God as all the other thousands of gods.

Not all organic is grown and cultivated the same nor is all conventional. Not all "natural" pest controls are harmless just as not all conventional pest controls are harmful.

Crop rotation, cover crops, and resting fields occurs in both and can be absent in both.

"Organic" is a marketing term at this point. The details are much muddier (pun intended).
I suspect the original rationale is about preserving the longevity of the backdoor. If you blow a hole wide open that anyone can enter, it’s going to be found and shut down quickly.

If this hadn’t had the performance impact that brought it quickly to the surface, it’s possible that this would have lived quietly for a long time exactly because it’s not widely exploitable.
Something like FreeArc would be used nowadays for repacks, typically - there's gains to be made by tailoring your procedure depending on the type of game asset, and some of those decisions won't apply to general compression.

FreeArc Next does actually use zstd as above but it also does a lot of tricks with compression, dictionaries, etc while taking much longer to process.

As an example, looking at FitGirl's COD:BO3 repack, 180GB->42.4GB entirely losslessly. Not sure how regular compression would fare on the original game, though.
Not the other guy, but presumably 'treatment free' means that you have hives full of diseased bees or bees infested with mites. Those sick/infested bees then spread those things to wild bees and to other apiaries. Even if the neighbors are willing to treat, that doesn't necessarily mean they'll survive being constantly reinfected by the non-treatment hives.
Stale Diffusion: Hyper-Realistic 5D Movie Generation Using Old-School Methods [pdf]
Location: Austin, TX

Remote: Flexible

Willing to relocate: Dependent on role and salary

Technologies: JavaScript/TypeScript, Python, Go, Node, Express, React, SQL & NoSQL, Docker, AWS Certified Cloud Practitioner

Resume: https://www.joshuawlindsay.dev/images/Joshua-Lindsay-Resume....

Email: joshwlindsay [at] gmail [dot] com
I have sites on both Siteground and Hostinger. Happy with both. If you're new to WP or hosting or care about website vitality, pay a little extra for "access to a human" technical support. Still cheap. If you're very particular about configs it's probably better to go with roll-you-own. I'm pretty happy to stick with what's offered -- WP appliance versus customization.

As always: download your backups regularly, though.. I have yet to be bitten in this regard (plenty of other instances across 20+ years of doing this kind of stuff). If this is really important to you, automate the download or go with a host that will backup to Google Drive or similar.
Get Deploying – Compare cloud providers
> I like to define my subroutines using a modern language like C++, which goes 47 gigaflops. This means C++ is three orders of a magnitude faster than Python. That's twenty years of progress per Moore's law.

This is great. I love the idea of measuring performance differences in “years of Moore’s law.”

Twenty years puts the delta in an easy to understand framework.
Well, not the same vulnerability, as libselinux isn't loaded by sshd. Any such request would probably have a low probability of acceptance among the openssh maintainers.

If anything, I think this shows that real world security is hard and must happen at every level. This library is likely to be included in any base OS no matter how small, and rebuilding the container world just to patch is inefficient.

This attack may have been found by luck alone, even if that luck involved having talented developers on our side, but it really showed how well the open source community responds to such attacks. Within a day of it being public, we had well mapped out what the problem was and how to best respond to it. A day that was also a holiday in large parts of the world.
That might not be difficult to do it yourself. Modus themes for example have code mappings, with a different coloration for code literals. In that file [1] for example, bg-main has the hex value of #000000, total black. If you want some part of the code to disappear, make it the same value. You could make builtins or constants #000000, and they will not be visible in the source file.

You can create different themes, like a comment theme, in which every part of the code is invisible (i.e. hex value black) except for the part you want visible, comments in that case. Then when you want everything visible again, you toggle the loaded theme.

I don't know if i will create such themes myself, my github account is on github/pramatias. I may upload something in the future, or may not.

[1]https://gitlab.com/protesilaos/modus-themes/-/blob/main/modu...
https://web.archive.org/web/20240331044416/https://www.washi...
We have been live with zstd encoding for several weeks now and last week public traffic really started to use it. We're now at 50% brotli, 40% zstd, 9% gzip. Our payload is almost exclusively JavaScript and compression rates are 73% zstd (level 6), 72% brotli (level 4) and 65% gzip (level 4). However, for 95th percentile encoding speed zstd is 4.3ms, brotli is 2.1ms, and gzip is 0.1ms. At the 75th percentile they're all essentially the same. This is a Golang application and we use a cgo brotli library but a pure-go zstd library.
do you know which gender/sex Lasse is? I don't have a clue. Got here looking for who Lasse Collin even is.
Good parenting. Just tell them that a lot of the internet is nonsense, a lot of people lie or make up stories for laughs or drama. Show them some good quality channels that are broadly appealing (my kids like hobby channels, cooking stuff, some inoffensive humor). We've never bothered with any sort of site blocking or even screen time limits. I genuinely think it's pointless if not counterproductive.
Imagine how frustrating it has to be for the attacker to meticulously plan and execute this and get foiled so late in the game, and so publicly
https://chat.openai.com/share/c8c19f42-240f-44e7-baf4-50ee5e...

https://godbolt.org/z/s9Yvnjz7K

I mean I could write the algorithm by hand pretty quickly in C++ and would follow the exact same thought pattern but also deal with the edge cases. And factoring in the loss of productivity from the context switch that is a net negative. This algorithm is also not generic over enough cases but that is just up to the prompt.

If I can't trust it to write `strip_whitespace` correctly which is like 5 lines of code, can I trust it to do more without a thorough review of the code and writing a ton of unit tests... Well I was going to do that anyway.

The argument that I just need to learn better prompt engineering to make the LLM do what I want just doesn't sit with me when instead I could just spend the time writing the code. As I said your last point is absolutely the place I can see LLMs being actually useful but then I need to spend a significant amount of time in code review for generated code from an "employee" who is known to make up interfaces or entire libraries that doesn't exist.
> very few

Indeed very few. I believe the Porsche Macan can do it, and also the monstrous Hummer EV. That's all three I know.
It might be riskier (because you'd have to identify yourself with government documents) to plant a backdoor in a similar way at a large, proprietary software vendor like Microsoft. But I don't know that it would be harder. And in the case of proprietary software there would not be nearly as much public scrutiny, and the scrutinizing public would have fewer resources for inspecting it.
Show HN: RoboFin – AI-Powered Financial Analyst for Individual Investors
Hi HN,

I've built RoboFin to address the frustration of making informed investment decisions in a noisy market for the individial investors. It's not another robo-advisor. Here's what makes it different:

Personalized Insights: RoboFin's AI considers market trends, analizes related news, and company financials.

Actiibavle information: Get clearand actionable information in the form of pros, cons, future forecast and summary. No need to follow all the news and go trough tedious company financial reports.

Built for DIY Investors: This is for those who want to be in control, but with the advantage of AI analysis of large amounts of data.

I'd love your feedback on the concept and the current feature set. Trying it out is free and would be hugely helpful.

Let me know what you think!

Tnx!
SEEKING WORK | Remote | NY

Application Developer with over a decade of experience.

* Native application development for iOS, Android, Mac and Windows

* Backend services in Go

* Creating and/or integrating APIs/SDKs

* TV/Video applications on all platforms (Apple, Android, Amazon, Roku)

Extensive experience building products and platforms from the ground up.

Email: info at squirrelpointstudios.com
The core steps to paying attention to yourself:

- notice

- fill in the picture

- use it to inform your decisions

For example, my oral health fluctuates based on what I eat. Too much sugar or sweet carbs, and my gums start feeling itchy and sore. Having that self-awareness helps, because when it starts becoming a problem, I can take corrective action, and fix my mouth before I get a cavity or lose gum tissue.

Now, this is exactly what a dentist would say - brush and avoid sugar. What self-awareness helps with is knowing how much is too much! I'm not flying blind, I know what "good mouth" and "bad mouth" feel like.
Public opinion of Stalin actually improved and are overall positive in many ex-communist states, and outside of the Western world opinion on Stalin is not terribly bad, or even positive, again depending on the country.
For real, it's almost like a state-sponsored exploit. It's crafted and executed incredibly well, the performance issue feels like pure luck it got found.
SEEKING WORK | Remote | United States / Anywhere | Full Stack Software Engineer

Linked In: https://www.linkedin.com/in/stevenirby1/

Resume: https://www.stevenirby.me/resume/

Email: <HN username at> stevenirby.me

Technologies: React, TypeScript, Next.js, Python, Django, node.js, Tailwind, etc.

I would love to help a team part-time or do some short-term freelance work.

Here is what has been keeping me busy these days:

https://randomdailyart.com

I built and shipped a Next.js / React app for artists to maintain artist profiles and submit art to my art newsletter. Using MySQL, Prima, TypeScript, Tailwind, and React. I finally sent my 2,500,000th email/piece of art.

Onboarded 100+ artists.

Landed one big customer (name you’ve probably heard of)

https://randomdailyart.ai (Launching in a ~week)

Building the AI version of the newsletter. Using Go Hugo, tailwind, lots of cool vanilla JavaScript animations, tailwind.css.

https://unfuck.email/

I’m starting to build my most ambitious project yet—a tool to fix inboxes for Gmail and Fastmail users. I built a slick landing page. Plus, enough extension code to show a demo of how it will work and what is in progress. Using vanilla class-based TypeScript, some React, tailwind.css, and my own fork of gmail.js.
Am I reading it correctly that the payload signature includes the target SSH host key? So you can't just spray it around to servers, it's fairly computationally expensive to send it to a host.
America's Legal Soap Opera
Unless you drive a car or own a gun in the US, then if you do get a bad drug test result you can easily get charged with a crime. It is not likely to get drug tested in relation to having a gun, but anywhere pushing DUI enforcement is going to be drug testing significant samples of random people and charging people who may have smoked long ago and had all side effects completely subsided but still charged with a DUI offense. You can get active THC in a blood sample up to 3 days after smoking despite the effects lasting hours at best and levels not increasing or decreasing linearly with consumption. And of course metabolites for cannabis can go back up to an entire month.
Ketogenic Diet Intervention on Metabolic and Psychiatric Health
Web scale.
Was there ever a public release of Twitter with no support for following specific users?
I dabbled in CAD to design an ergonomic keyboard (a hobby). CAD, especially parametric CAD, can be a bit challenging to learn. Even when I was away from the keyboard, I would try to prototype or solve problems in my head. One good thing about CAD is that I could quickly check whether what I visualized was correct or not. I feel it really improved my visualization skills as long as I did it regularly.

To generalize, it may be useful to find a hobby that makes you visualize things frequently and allows for a quick feedback loop.

(I also tried different games, but didn't derive any benefit from them.)
It is not just the managers. It is the price you pay for selling your time. The ICs under a bad manager have it even worse. And it is also not like non toxic work environments don’t exist. Usually companies benefit from the toxicity. A toxic place usually allows profitable organizations to siphon off more value and usually companies gravitate to a point where that siphoning is maximized while maintaining steady stream of people to employ. Of course the not so profitable will crumble. My sympathies and best wishes for you but definitely not for you as a “manager” but for facing less than fulfilling work environment.
Must be punching the air right now
I also found NextDNS to be a great overall solution and highly recommend them. I augment NextDNS with Apple's parental controls (https://support.apple.com/en-us/105121).

There's also the not-well-marketed Cloudflare 1.1.1.1 for Families, introduced 4 years ago today. I have not tried it, but it may be too simplistic for HN readers: https://blog.cloudflare.com/introducing-1-1-1-1-for-families

At one point I used Circle (since acquired by aura.com) as well. It was okay, but had a terrible app.
It's used for OS-level commands: copy (⌘-C), paste (⌘-V), select all (⌘-A), page up/down (⌘-shift-up/down), paste as plain text (⌘-shift-V), Spotlight search (⌘-space), show all windows (⌘-up), show application windows (⌘-down), search app help (⌘-?), move desktops (⌘-left/right), etc. etc. etc.
Show nearest Hetzner/UpCloud data center based on Cloudflare cf-ray header
Looking at how Jia75T got access to projects, it was vacuous sock puppets creating fake pressure. https://boehs.org/node/everything-i-know-about-the-xz-backdo...

It feels like we should have better socialized defense against this kind of thing. When I see a name pop up online, I want an immediate readout on how active this person is over time and where. We need better tools to get high level views of who we are dealing with.
As someone who graduates their degree in two days I can definitely confirm this. Even though I have sent out over 40 applications, maybe two came back to the phone-screen.. It really feels bleak to get any kind of junior role right now.
They're very young now, so in the beginning my hope is to have any type of device locked down to essentially just educational games and content. As they get older I'd expect to be less restrictive, for now I just want to make sure that their access is limited when they're young, but they do still have access to a keyboard.

My thinking was whitelisting in the beginning, but I'm not sure what I actually want to allow access to.
The second edition of The AWK Programming Language by Aho, Kernighan, and Weinberger was just released in February:

* https://awk.dev

ToC and preface of the new edition:

* https://awk.dev/pp1-13.pdf
And bonus, its a lot cheaper and easier to bribe a state legislator, with only oversight from his or her state's (likely underfunded and understaffed) regulatory bodies, than it is to bribe a US congressperson.
Trump Media plunges more than 25% after company reports net loss of $58 million
Source: https://github.com/pakastin/datacenter-test

data (locations): https://github.com/pakastin/datacenters
Show HN: prs – Stay updated on PRs without leaving the terminal
I recently picked up Go, and have been learning it by building TUIs like prs; feedback welcome :)
I support people being able to consume them but don't see much difference in the person who walks out in public reeking of cannabis than the person who is reeking of alcohol. When you walk around in public smelling of an intoxicant in places where it's not generally consumed in public don't be surprised when/if people look at you sideways.
TIL, it’s really mL… thanks :)
> using zero or minimal pesticides and herbicides

But this isn't what organic means. It means certain classes of pesticides and herbicides aren't used.
Thank God for https://kagi.com/summarizer

Interesting article, but much too long.
You’ll either need to give up GPU acceleration on the unsupported upgrade to post-Mojave, or lose the Firefox support later this year on the next LTS. I’m not happy about it.
The major who polluted your drinking water
There's many services like this that want/need access to Google search results. Another is ahrefs which is geared towards SEO.
Social media and most media these days are basically as addictive as drugs are, just in totally different ways. They are explicitly designed to bypass our decision making facilities and leave us craving for me. I'm totally aware of it, and I still catch myself scrolling or YouTube hopping.

We need legislation that bans these behaviors that companies use to hoodwink us. They're getting away with whatever they want to do.
Hardware production is wonderful/terrible and constant learning. A lot of people get tripped up not understanding that the manufacturing process is a product equal to your actual product.

Hit me up if I can help. I've brought a half-dozen devices to market; right now I'm bringing a modular data logger to production and blogging about it at https://blog.supermechanical.com
No. To Fight global warming* we must stop drilling oil and gas.

Fancy futuristic magic tech isn't going to save us.

This sounds like the flying-cars-solves-traffic BS: dark PR funded by the Fossil Fuel industry.

Dark PR talk (regarding the road lobby): https://www.youtube.com/watch?v=dP41Hsr4fMA

* climate change is term coined by Big Oil PR to make global warming sounds less scary -
https://www.servethehome.com did some reviews of various "off-lease" miniPCs that may be worth looking at (if you've not already): https://www.servethehome.com/?s=mini+pc might find some.
Yeah, we should probably expect that there are roughly 1/p(found) more of these lurking out there. Not a pleasant thought.
computer in the living room where anyone can see, no cell service, logging on your AP

The no cell service will be the most difficult, we gave-in to pressure from grandmother, it was a mistake.
> Note: successful exploitation does not generate any log entries.

Does this mean, had this exploit gone unnoticed, the attacker could have executed arbitrary commands as root without even a single sshd log entry on the compromised host regarding the 'connection'?
A Limited Floppy Edition of Cyberpunk 2077
I'm curious if you would feel the same if all products were bought and sold this way? Let's say you bought a new TV and you negotiated a price of $3. Then your friend tells you that she bought the same TV on the same day from the same store for $1k. Wouldn't you feel cheated? If so, how is that any different?
South Korea has that problem right now. 20+% of people have the surname Kim [0]. 14% have the surname Lee [1].

[0] https://en.wikipedia.org/wiki/Kim_(Korean_surname)

[1] https://simple.wikipedia.org/wiki/Lee_(Korean_surname)