skysight-inc/HackerNews huggingface dataset:
I'm a big fan of Firebase. The local emulators make working with it really productive since you can iterate locally against the full stack very quickly. SSO and auth are easy to use; way easier than Cognito. For most clients, it will be virtually free to operate until they reach significant traffic. For your static front-ends, Firebase hosting is fully integrated into Google Cloud CDN with no extra setup. You can extend it to full Google Cloud if you need to (e.g. connect endpoints to Cloud Run if you have container workloads). The Firebase Functions integration is really, really nice and allows for strongly typed invocations if you are using TypeScript. Real time with Firestore is easy and, again, free for most small customers. You can use any FE engine with it - React, Vue, vanilla. The Web Frameworks integration with Functions lets you deploy dynamic backends as well into Cloud Functions.

If I need SEO, I'll build using a framework like Nuxt.js or Astro.js and statically generate the output and host in Firebase Hosting. If I don't need SEO, I'll build regular SPAs using React or Vue.

The overall DX is really good compared to Amplify (closest alternative).

Supabase is also promising if you want to work with a relational DB.
You'll say that even after the USG breaks one up.
Thank you for letting me know it was possible on an M1. I'll try all this now.
https://www.currentaffairs.org/2016/04/if-you-want-solid-evi...

Not the "nothingburger" establishment Dems like to claim.
Python Is Now the Most Popular Intro Language at Top U.S. ­­Universities (2014)
Most autoplays seems user hostile. And it is futile to execute hostile code and try to make it behave. (Kudos for UBlock Origin etc for trying anyway, though!)

But at least there should be an easy way to make a website not have access to your speakers unless you opt in. 99% of the times, it's ads anyway, so the default should be to block sound. But that does not solve the bandwidth waste problem.

Fundamentally, the problem is Javascript. It makes it really hard for the user to be in control.
Show HN: Unprofitable.ai
I really appreciate you making and sharing your game! I want to try this at home with Scrabble tiles.

I'm interested in games easily played with common bits and pieces. While waiting around one day my spouse and I came up with a game (that had already been come up with in the 1970s, according to Wikipedia when I went looking for games played with Scrabble tiles) we call Scramble; all tiles facedown, take turns flipping a tile, anyone can call out a word longer than three tiles that can be formed with the visible letters, including stealing others' words by inserting a letter(s) to form a new word, as read in either direction (no anagramming).

Example: EAT could become EATS, TASE, or STARE but not TEAS or STEAK.

If a person says an invalid word they have to be silent for one flip.

When the facedown letters got fewer and it became clear from multiple attempts and subsequent ties (at least two players saying a valud word) that a certain tile is an s, we made a rule that "one does not simply add an s to the end of a word" and that it needs to be added with another letter, thus avoiding what felt like Ko battles from Go.

Additionally, if you want thinkier games, increase the minimum length for new words every time a Q, X, or Z is revealed.
Joystick: https://cheatcode.co/joystick.
Some of the tools offer a path to doing tool use (fetching URLs and doing things with them) or RAG (searching your documents). I think Oobabooga https://github.com/oobabooga/text-generation-webui offers the latter through plugins.

Our tool, https://github.com/transformerlab/transformerlab-app also supports the latter (document search) using local llms.
Food contact effects of S Typhimurium: tile/wood/carpet. 5-sec rule test (2007)
but which model to tokenize with? is there a leaderboard for models that are good for RAG?
Just a couple of warnings.

/s
The reason everyone loves oobabooga is that it’s made with a maximalist design paradigm.

Everyone in the VC world misunderstands why oobabooga is successful and tries to embrace not maximalism.

Your example product to benchmark yourself against is blender, if you want to serious compete against oobabooga. You need maximalism
Merging Fields, Mathematicians Go the Distance on Old Problem
At least for Ulcerative Colitis, there are safe drugs that are much less effective (mesalamine) but the strong effective drugs all come with long-term cancer risks (prednisone, remicaid, entyvio, etc), as you say. The newer drugs like entyvio are generally less risky than the older ones, mostly on account of being more targeted, but the risk is still significant. I imagine the situation is similar for CD.
This is a beautiful conceptualisation of the modern-day incentives
Anyone that maintains a critical piece of code could get compromised by threats and blackmail, regardless of how clean they were.
Friendly nitpick, because I had a double-take when reading the second paragraph: Be careful to differentiate between "install base" and "base install". In both cases, you are referring to "installed size of the database in its base configuration". But "install base" commonly means "number of installations". So I was very confused when the second paragraph was implying (using the standard meaning for "install base") that the number of Postgres installations had not grown over the years.
> I'm sure Edward Snowden also met up with colleagues in the office at least a few times. May have even passed a security clearance.

And that's why we know who Edward Snowden is. That's more than we can say about Jia Tan.

Say what you will about what he did and why, it is going to be very, very hard for someone to explain to a contract's security auditor why, in the year 2024, a commit from an account known to belong to Edward Snowden is in the source code of security-critical software.

And that's what FOSS-based companies and orgs need to start doing after this. If I'm working for Debian/Mozilla/Apache/wherever, I'm going to start asking project maintainers more about who they are. "Hey man, we've got an all-expenses-paid trip to one of the major conferences this year, which one can we put you down for?" needs to come out of someone's mouth at some point, and excluding some very good reasons and evidence for why they can't appear at one of these events in-person (think health or long-term family obligation reasons, confirmed by multiple people who know the maintainer), they need to be at one or more meetings within a reasonable amount of time. Randomly-timed remote video meetings could work in a pinch.

If they can't after a couple of years, then these projects need to inform the maintainers that they'll be forking the project and putting it under a maintainer who can be verified as a living, breathing, single person.

Repeat until there's at least some idea of who's working on most of these projects that make up critical systems that society is built upon.
He‘s German, and murderer is Mörder in our language, and pronounced like murder.

It‘s a mistake I make every now and then, as well.
What was pro-China about the comment you responded to exactly? It was anti-multinational-corporation, for sure. But it literally put China in the same category as those corporations.

I’m not that your post is suspicious; I’m saying outright that you are either a CIA/corporate spook or being manipulated by them. Any criticism of the companies that have dismantled American unions, healthcare, education, childcare, elder care, and more, for the sake of shareholder profits, seems to be unjustifiably labeled “pro-China” or “terrorist” or some other label by some anonymous person who hasn’t really contributed anything to the community otherwise.
Unions in the US donate hundreds of millions of dollars a year to political candidates.
Product security: barking up the wrong tree
They weren't called the dark ages until some humanists came along and decided to call themselves the enlightenment. It's not so much about feelings as facts.
> The grandparent comment was about how the issue was actually systemd.

It's not my view that "the issue was actually systemd". The issue was a complex, sophisticated attack by someone taking a long view. But the attacker injected his code into the system by manipulating part of systemd into loading a fairly obscure compression library that he had hacked. Systemd is of course more-or-less omnipresent these days.

Why does an init system need to load libraries at all? Well, it doesn't, unless it has arrogated to itself much more functionality than PID1 should ever have.
Thanks! I think it's because you can't visualize it.

Here's my super basic attempt at an explanation: https://gist.github.com/barbinbrad/11c651fbf412ec00506fce153...
the link to xz was in systemd that then loaded sshd with the exploit in the shared libraries.
Show HN: Screenploy – Write two-column scripts for the screen
Hi,

I wanted to share my MVP for Screenploy, a cloud-based editor for generating two-column audio/video scripts.

You can format all of the text in your shots, organize them in scenes, and drag-and-drop it all until your story is perfect.

Then you just click a button to generate a PDF.

The homepage has a demo you can try (sans PDF generation) without signing up.

I'd love to hear what you think. Thanks for your time.

Note: it's pretty new software. It could be buggy.
This isn't a change. SPF has always broken forwarders that don't touch the envelope from address, and that is right and proper. You can still forward mail, but your forwarder must rewrite the return path.
I kind of just assumed people were still using wordpress… especially for projects that require SEO.

Aren’t you having problems with clients wanting to update content on their own?
I moved to rural New Mexico to report on the aftermath of a wildfire
They are already trying to copy CUDA API with rocm and HIP. If this is lawsuit worthy, they may already be hit with a lawsuit at any moment.
Now I remember the last time I checked my "battery cycle log" on macOS before I did the win/ubuntu installation it was about ~70 cycles so probably much lower than most users. This was in February 2024.

The laptop was always a backup so that may explain why the battery lasted so long. Still I was impressed as in recent years I procrastinated on the battery maintenance and didnt charge it in a couple years.
Starting with the most abstract explanation may work for mathematicians, but most other people prefer starting with concrete examples.
There was an upstream OpenSSL bug there: they depended on reading from uninitialized memory to add entropy and thus increase startup speed of their RNG. But reading from uninitialized memory is undefined behavior, it's not guaranteed to add any entropy and should always be treated as a security bug. The Debian maintainers tried to fix the bug, but screwed up the fix. They should have reported the bug upstream, not just made their own fork.
> pulled in libsystemd to provide startup notification

This seems sort of fine (although...why can't said notification be done by writing simple text to a pipe/file/socket?), but the library shouldn't be some kitchen-sink thing that links to the universe of attack surface.
Well this is, at least, better than Gartner Driven Development which has been observed at several startups. Whereby a startup begins to care about their placement on the Magic Quadrant, and start adding very poor imitations of features merely to get a check on a form and move their company more towards the top-right "Leaders" category.
The competition to coded websites is Webflow agencies. Webflow has made websites somewhat predictable to build, enabling agencies to offer flat-rate pricing.

I think a questions you should ask is "What are the client needs that no-code doesn't serve", and explore that. Or, "What are the technical needs for deploying an hybrid coded+low-code stack", e.g. setting up reverse proxies that combine multiple backends.
Altough not freelance, but I operate almost 10 websites atm. I use Remix on pretty much all of them since the dx is great and goes fast to develop more complex things. I host every site on one dedicated server from Hetzner with the Caddy webserver as a reverse proxy in front. I have super fast load times and a cheap monthly bill. I could 10x the traffic and it wouldn't be near hitting the limit of the server and it's like €18/month.
Given the level of age discrimination in software engineering, maybe we should add a stipend to the pension plans of retired developers who work on open-source projects.

Yes, the devil is in the details, but I think the basic concept is worth exploring
Not just that, but they get to abuse their near monopoly to strongarm many companies into using Cuda. Can't say more unfortunately...
In Asakusa and other tourist places I typically go to 7-11. Hit the toilet immediately and buy a drink and snack and sit down to rest my sore feet. Has that changed?
If so then they are a lesson in how misleading statistics can be.
Surely all the traffic was HTTPS?

Can someone explain how they technically would have been able to do this?

Doesn’t VPN happen after HTTPS in the network stack?
Yes. As I said repeatedly, the one thing that tracing sacrifices is memory footprint. It effectively turns RAM into performance. If you want a smaller footprint you either have to sacrifice performance or pay with more development effort.
I've lived in California, now Amsterdam. Both places where weed has been legal for a while, but because it's legal there's an incredible economic pressure to grow the most potent weed possible. I'm like a 2 joint a year kind of guy, and it's nearly impossible to find "ditch weed" that doesn't put me on the floor for 4 hours.
> then went on to describe things as if your defintion would exclude some of the most shining examples of functional programming

Maybe those examples are "most shining" from your perspective or definition but not mine. Mind to mention the specific languages?

That being said, to be precise, functional programming is a technique or style, it's not a property of a language anyhow. However, some languages make it very hard or even impossible to apply the style, either fully or partially. So practically speaking, that is how I classify a language as more or less functional.

> Functional does not mean just pure functional.

Yes, that's exactly what I said in my first sentence no?

Originally "functional programming" had the meaning of what we nowadays often call "pure functional programming" though. Language and definitions change over time. I was ranting a bit that the term "functional" is nowadays so unclear that there is little benefit in knowing that a language is "functional".

> And a purely pure functional language would literally be worthless as it wouldn't be able to do anything useful.

This is wrong. You haven't understand what functional programming is. In a nutshell it means that you are not directly executing effects, but rather that you build up a datastructure that describes the effect-execution. You then pass around an modify that datastructure to the point where you return it as the last thing that your does in the main-method (or whatever your language/runtime calls that). From that point on, this datastructure is being processed and the effects (like writing to a file, showing something on the screen) are (most likely) executed by the runtime.

In other words, there is no restrictions on what you can do with a pure functional language. You can try it out with Idris, which is a 100% pure functional language without any escape hatches. And still you can make it do all kinds of effectful things like processing files, sending emails, ...
Time to do everything to keep the memories and learnings of WWII alive. 79 years ~ 2.6 generations
Indeed, you fill it up even quicker nowadays.
I haven't got any since I switched to Android. Same with spam calls. Their crowdsourcing really works.
> 1a. As a consequence of (1) autogenerated artifacts should always be committed.

Why don't object files and binaries count as autogenerated artifacts? Should we commit those to the repo too? Where is the line between an artifact that should be committed, and one that shouldn't be?

> 4. Libsystemd is a problem for the ecosystem.

libc will dynamically load libnss-* on a lot of platforms, some of which can link to a bunch of other helper libraries. What if the attack had come via one of those 2-or-3-dependencies-removed libraries? libc is big and complicated and most programs only use a tiny fraction of it. Is libc a problem for the ecosystem?
no - it is a PostgreSQL PGDG engineer hired by MSFT.. I cannot stand this spin
This is/was a joke for April Fools Day, FWIW.
Just imagine if harm and healthiness were actually the determining factor for what is and is not legal. Your comment made me imagine what the political parties might look like in the US. Would conservative and liberals move towards meats vs carbs vs veg?

I wonder if big-Keto would push for harsh penalties to illegal bakers? Maybe a 3 (bread) slices law would rise?
Dog Duty
Try this:
time tar -cf /usr/share/doc |gzip |wc -c
vs.
time tar -cf /usr/share/doc |zstd |wc -c

repeat a few times to warm up your disk cache if needed. On mine host (with an nvme disk), zstd was about slightly better compression ratio than gzip, but took 1 second instead of 9 seconds to compress. Compare against something like lzop, which is about the same speed, but produces much worse compression.

Of course, with gzip if you have multiple cores you have the option of using pigz which bring the wall-clock time of gzip down to comparable to zstd and lzop.
It's getting harder to find very small dosage weed in places where it's legal. There's an arms race to produce the most potent weed because it can be sold to the top 10% of weed buyers.
The problem is that a bunch of companies who hate each other ‘competing’ doesn’t result in platform innovation. It results in stasis. Anyone who has spent any time in industry consortium meetings knows this, and it’s the reason Apple does everything themselves.

The EU should do things the way they want to, of course, but the rest of the world should wait to see what the outcome is. I can’t see anything good coming for consumers, not for smaller developers. A few larger players such as Epic might be able make a bit of money as an alternative middle-man, and a lot more people will stop being able to share their photos with their grandparents because they aren’t using the same app anymore.
It’s not so much about IO rate but access times.

If compression and decompression speed are critical, lz4. Zstd for pretty much everything else.

There are edge cases where compression time doesn’t matter but decompression time does. This used to be the case for game torrents back in the old days, and UHARC was used for that to great effect. Not sure what the current king is for that purpose.
Deleting is easy to restore. There have been cases where reddit restored deleted posts. Edits are a bit harder to filter for so they probably won't bother.
Only for distros that took a specific openssh patch (not merged in upstream openssh). Arch didn't afaik.
Everything 1.5 beta does this.
San Jose is training AI to spot homeless encampments
Smart developers both know SQL well, AND use ORM's.

Sure ORM's are not going to write the most optimized code by default, and they're not going to build indexes for you, etc. But they are a huge productivity enhancer and work well enough for a lot of the queries you're going to need. Most ORM's these days have advanced options too which enable the more fine-tuned use cases without having to drop into raw SQL.
Interesting.

Turn off the "overflow: hidden;" on the <body> element and the "overflow-y: scrol;" on the <div class="insides"> element and the whole page will now scroll with your mouse anywhere. Of course this loses the "scroll within the small window" effect and instead everything now scrolls (except the toolbar, which can be fixed by turning off "position: fixed;" on the <div class="horizontal"> element).
Wrencher 2: A Bold New Direction for Hackaday
The idea of building a bespoke robot to retrieve your trashcan lids is so silly. Happy April Fools Day.
What I have gleaned from the HN discourse over the years is that the people who are mad about this topic actually are spammers. They want to spam you and they are super pissed off that their little scammy idea isn't working.
It remains illegal for youth consumption.
What Does It Mean to Be an RCU Implementation? (2023)
Couldn’t you just smoke less?
I've been going through Wikiepdia's list of countries by GDP and trying to think about what the poorest country is that could pull it off in the normal course of business, and the poorest country that could pull this off if the leader decided it was important and was willing to push a little. I think there are at least a hundred countries in the later category.

https://en.wikipedia.org/wiki/List_of_countries_by_GDP_(nomi...
I guess they were trying for an IgNobel Prize? However, they don't report anything on the stability of the catalyst under reaction conditions, that is how many reaction cycles it goes through before losing catalytic effect.

If they don't report the lifetime, it's usually because the lifetime is crap, and all they have is a laboratory curiousity - which might, with futher diligent effort (and please, another research grant!), become industrially useful... maybe.
Real Analysis. I know Baby Rudin is probably the gold standard, but Jay Cummings' Proofs and Real Analysis have been great for people like me delving deeper into mathematics.
Bear in mind that you might see such parallels as unthinkable in the same way that someone of the time might have simply seen Debs as a 'anti-government insurrectionist who would later turn to outright sedition.' Debs led strikes that turned into violent riots that resulted in dozens of people being killed and millions of dollars in damage, only finally being shut down by the Army. [1] And he was indeed also arrested for sedition after speaking out loudly against US participation in WW1, which at the time was being framed as the most noble of all wars imaginable - it was literally called "The War to End All Wars." Propaganda, like always.

A quote from Stalin was that, "I know that after my death a pile of rubbish will be heaped on my grave, but the winds of history will sooner or later sweep it away without mercy." And I think that's probably true of many people. How we see things in one era often looks very different in the future -- you're left with just the big picture, less muddied by the liminalities and biases of the day.

[1] - https://en.wikipedia.org/wiki/Pullman_Strike
AI Web Scraping?
I'm seeing a lot of YC-backed companies in the last 2-3 batches doing some sort of ai-augmented web scraping (from Talent sourcing, to CRM enrichment, to M&A Due Diligence, etc..).

I'm curious what's the underlying tech behind them. This can't just be regular web scraping or browser search ?

Example of companies:
https://octolane.com
https://openmart.ai
https://watto.ai
https://topo.io
Good call linking to Use The Index Luke. A great resource.

https://use-the-index-luke.com/
... having them talk about events from sci fi stories in response to questions about the real world. Having them confidently lie about pretty much everything. Etc.
> This presents proprietary software as offering superior assurances against backdoors

In the image below that remark the author makes clear that proprietary software is often subverted.
I see your pidgin and raise you an "interoperability." Pidgin was a thing because the chat protocols/servers were open interfaces. Gone are those days. I miss being able to use different clients for chat.