skysight-inc/HackerNews huggingface dataset:
For anyone like me who wondered what "TCO" is: In this context "TCO" stands for "time-cost optimization," basically the idea that time is money and so you shouldn't be scared of weighing:

- an alternative that costs a small amount of money over a long span of time, against one that costs a large amount of money for just a short span of time

- an alternative that costs money (or time) up front, against one that costs a money (or time) later on

I'm still not 100% sure what "_the_ TCO _problem_" is, specifically; but it definitely has nothing to do with tail-call optimization. :)
> The thing is, there is an extremely small number of people who have the privilege and power to change things, because they're in the room and we're not.

Which rooms? In a lot of cases the situation is that you didn't bother to show up. Not always, but probably more often than you realise.

The IETF Working Group where TLS 1.3 was designed for example is just an IETF activity. You can literally just do that, it's actually probably harder to participate in Hacker News.

The "Root Trust Stores" are notionally controlled by a handful of tech businesses. Google, Apple, Microsoft. But, wait, Mozilla also controls one of these "Root Trust Stores" for Firefox and in practice for the Free Unix systems and most Free Software, and what do you know, since they decide behind closed doors we don't know how Google, Apple and Microsoft decide what to do - maybe they each have a thousand smart people deciding - but it sure does seem like they watch what Mozilla does and largely do the same thing. And how does Mozilla decide? An entirely public discussion m.d.s.policy. You could participate in that discussion today.
Key point is that the cloud provider version should not be your "main" version, it should be used for backup only. If it's not on your physical computer that you have direct access to, it's not -your- data anymore.
That _is_ dangerous for their patients. Quarter of a million deaths per year in the US are attributed to medical mistakes. Why they keep doing this IDK.
Out with the Old, in with the Cold
This only works on Linux of course since the Linux kernel and libc are not tightly coupled, on any other OS dynamically linking against libc is a necessity. Also, I've never seen anyone statically linking against glibc? Is that even something people do? I'd consider your system provided libc being broken is a similar situation to an unbootable kernel: you just need a rescue stick/partition to fix it, or reinstall your OS.
>What is the point of a State owned broadcaster if it operates like a private equity firm?

Who knows? In my country most of the money given to public broadcasters is spent making absurd low quality entertainment and documentaries which YouTubers do easily better while having a millionth of the budget.

For some reason they feel the need to compete with the rest of the industry, when the sole reason they exist is such that they don't have to do that.
> Client races GETs to all 3 regions and cancels the request to the slowest to respond

Dropbox does this internally in magic pocket (see their eng blog)
A year ago, HN didnt think he was going to jail:

https://news.ycombinator.com/item?id=33908850
The history of discipline in public education shows that the engagement of parents of teachers has changed drastically over time. Some kids doing bad things sometimes throughout history doesn't indicate otherwise.
This. If my bank contacts me I want it to be legitimate and honest. If I started getting phishing attempts I'd start ignoring my banks contact attempts completely. So when someone skims my card, makes some purchases and they try to ask me about it, I'll ignore them. Not good.
Ask HN: What are your to-go web framework and uncommon why so?
Right now I work with Go, Django, Bottlepy and they both have their pros and cons

Django, best admin interface and std structure. Pain to deploy

Go, super simple and fast. Easy to deploy and just a binary. But a lot more productivity hit.

Bottlepy a good middleway, but Go have kinda replaced Bottlepy usage.

What are your to-go web frameworks, and why?
Yeah I also think that the impact of better hardware generates a visible lead in quality in the models that are released, for example: companies like OpenAI have had access to large quantities of H100 for a few months now and Sora is being presented, something I would not have believed a year ago, I would also believe that Claude 3 models were trained on H100, DBRX was trained on 12T tokens, a big difference compared to the 300B for the original GPT-3, the new NovelAI image generation was trained on H100 and compared to the previous model is like day and night. It seems to create a generational jump.
Trump's DJT stock creates a unique new ethical nightmare
If this and the Doritos likker and similar weren't mentioned in Revelations; they should have been.
I take it you don't have kids.
No. Banks reminding customers about the dangers but I expect my bank to not send me deceptive sht even if supposedly for a good cause.

At work I’m ok with it though. Certain roles move millions on cash regularly so fire drills are just part of life
AI PhDs are flocking to Big Tech – that could be bad news for open innovation
> Nevertheless, Hamas’s devastating attack on October 7 caught Shin Bet and the rest of Israel’s multibillion-dollar defense system entirely by surprise.

Somebody high up in the Israeli military was probably like, "After very careful consideration, sir, I've come to the conclusion that your new defense system sucks."

https://www.youtube.com/watch?v=fyFB2p1yrQI
https://news.ycombinator.com/item?id=33908850
The US prison sentence lengths are insane.
Yes, I was one of those doubters.
>isn't the "memory palace" memory technique, an example of human brains embedding facts into a linear function for easier retrieval?

I'm not sure I see how that's a linear function.
Won't that mean that we just change the quest from higher and higher density of digital elements to higher and higher density of analog elements?

Like people weren't trying to make computers out of bigger and bigger tubes before the transistor, they were trying to make them out of smaller and smaller ones.
Computers are going to increase in size as they consume more and more power, requiring increasingly elaborate cooling systems.

Like how the transistor made the big and hot vacuum tubes obsolete, maybe we’ll see some analog breakthrough do the same thing to transistors, at least for AI.

I doubt there is a world where we use analog for general purpose computing, but it seems perfect for messy, probabilistic processes like thinking.
I don't really care if the conversation is original, if it means we live in a world where girls are granted the opportunity to grow in knowledge and experience before sacrificing their bodies and lives to childbearing and childrearing.
Duplicate story also on the front page: https://news.ycombinator.com/item?id=39852953
Mark Zuckerberg Hails Nvidia CEO Jensen Huang as the 'Taylor Swift of Tech'
Though, I have seen on more than one occasion someone promoted again and again after reaching their level of incompetance. This seems to be more driven by the incompetance of the person/people doing the promoting to cover their tracks though. They can't be seen as incompetant themselves, so they move the original incompetant employee up the ladder again, but to the side so they're less able to cause problems, but still look good.
Yeah, it's been a bit funny to watch the goalposts move. He won't be arrested, he won't be charged, he won't go to trial, he won't be convicted, he'll get a light sentence, his political donations will get him off, etc.
Not as severe but that's sort of my point. For a brief year or two some companies were offering senior talent insane/unsustainable money and salaries are coming back down.

People still think that they're worth the insane money that FAANGs were paying during the lockdowns that they have since mostly laid off.

It's fairly normal in NY for senior IC hires to be offered 180k-230k plus some equity. I'm seeing candidates who agree to interview being told this range and then come offer time they won't budge below 280k cash and expect big equity.

Sure, Facebook was paying people that two years ago but they are aggressively lowballing people right now and we aren't.
LlamaIndex is a data framework for your LLM applications
Sam Bankman-Fried Sentenced to 25 Years in Prison
>However I'm a bit perplexed with the solution to remove lifetimes [0]. Isn't it a poor's-man GC?

This is essentially just ARC: https://en.wikipedia.org/wiki/Automatic_Reference_Counting
I think we're using different definitions. A "strategic investment for national security" only has "net negative value" is the overall expected outcome is negative. War is pretty expensive so it's worth spending a bit of money to avoid it, or at least sway the outcome.

The government doesn't want a dollar ROI in the sense of increased revenues because it defines the dollar. What happens to the local currency is just one factor in the overall considerations.
Three suicides related to the theft.
Bankman-Fried Is Sentenced to 25 Years in Prison over FTX Collapse
OP here. If you're interested, Pagecord was built using Ruby on Rails and uses the marvellous Postmark for receiving email. https://pagecord.com/pagecord/5f5e121
America's Great Poet of Darkness: A Reconsideration of Robert Frost at 150
I'd say leptos and dioxus are the bigger ones now i feel like many people moved from ywe to those 2
> Number of Posts with negative sentiment, grouped by Topic

> # 1 Result: Python Packaging

Checks out
25 years for stealing billions, life for running a website where people broke the law.

Justice inc.
In addition:

- WYSIWYG editors are bad about making small unintended changes that can easily slip by undetected (Interface Builder in Xcode for example often changes XIBs/storyboards just by viewing them)

- WYSIWYG editors bury bits of configuration in inspectors that are only visible in certain conditions, e.g. a control being selected, making them less evident and more difficult to find

There are circumstances where I think they still work alright — for instance I still enjoy building Mac apps with XIBs in Cocoa, but there’s a reason for that: traditional desktop UI has much less of a need for flexibility and generally speaking, has far fewer moving parts since it doesn’t have to hide things as a result of limited screen real estate. Additionally, these apps will only ever run on Macs which further reduces need for flexibility/adaptivity.

For mobile and multiplatform on the other hand, I strongly prefer code. It just works better.
It puts him in between Madoff and Holmes.
I am 34,583 years old.
How so. Do you think it's too long, too short, too ...?
Should your homeowners insurance red team your house?
The Unreasonable Effectiveness of Inlining CSS
The number of "phishing looking" URLs that are completely valid sent from banks (often pretty good, sometimes bad) and especially healthcare in the US (phenomenally horrible, things like securebillpay.net and mydocbill.com and even worse things with hyphens!) is way too damn high.
Quite a short sentence for the magnitude of the crime. Financial crimes like these do kill people and destroy countless lives. They deserve maximum pentalties.
To be fair, even Microsoft isn't consistent on what people feel like native should look like. I'm primary a linux/mac user as home, but at work I have to use Windows 11. It is surprising that Microsoft gets paid the Windows given that the control panel has a new updated UI that meshes with Windows 11 fairly well, but then you open up something in control panel and need to access more advanced features and your greeted by a UI that I am pretty sure is from Vista or 7. A standard winforms UI looks totally different from a WinUI. Yes, technically they are all native, but they all look completely different.
25 years is a long time. Not saying he doesn't deserve more but his parents will probably be dead by the time he gets out, and he wont have a family.

Also, he was addicted to the internet (supposedly), he wont have access to that either.
He will have to serve 21 years before early release. There is no parole in federal prison. I heard 5 years are concurrent making it 20 actual years. If that’s the case he can get out in 17 years.

He wasted a good part of his life.
Zoom is terrible for this, but it's also sometimes the fault of the meeting organiser. There's a setting in the Zoom admin panel which allows admins to enable/disable the option of joining from the browser (or there used to be, at least).

If you don't see the join from browser link even after jumping through Zoom's dark pattern hoops, ask the meeting admin to enable it.
You've heard about a pedestrian who you don't even know had an accident and determine its too unsafe.

Meanwhile I personally know multiple people who died, mangled in a car after an accident. I know multiple people who have survived but were in bad accidents where at least one person was injured. I know multiple people who were pedestrians and cyclists who were properly using the streets and were hit by cars requiring hospital visits, and indirectly know of several people who have died being legally in the right cycling on the streets.

You're way more likely to be seriously harmed or killed even just being around a car than you are riding a train or subway.
Interesting. Do you have a specific link ? I didn't find anything. My main interrogations are how the private key and command are stored.
Some deets:

~ "6.5 billion male chicks killed each year, or around 200 each second."

Male chicks are "usually shredded alive in industrial grinders"

"The technology [to determine sex] would add a few cents per egg"
Honestly 25 years seems like way too long to me.
You think so? 25 years seems quite reasonable to me. He stole billions of dollars.
Speak for yourself, I built the architecture that enabled a business to go from 50 mil to 3 billion revenue in the last 4 years and I have zero equity and a midwest salary. Really need to think about my life choices.
> The ICJ has accepted but not gotten to the point of trial on the accusations against Israel. They also ordered a number of preliminary measures designed to prevent irreparable harm in the interim on the initial application for such measures. The only thing they have ruled against that was brought to them was a request to order additional interim measures against Israel in response to what was characterized as noncompliance with the initial set of interim measures.

And, as an update, they have, just now, on a new application from South Africa, ordered additional provisional measures in the genocide case against Israel.

https://www.icj-cij.org/sites/default/files/case-related/192...
> stellar

I'm not sure enough to know if that's sarcastic, but the circumstances make me wonder if this was to promote local competitors or score political points.
From the README

The Wizard of Oz: The "Great and Powerful Oz", or also known as the "man behind the curtain."

"Oz RBAC Controller" is a Kubernetes operator that provides short-term elevated RBAC privileges to end-users through the native Kubernetes RBAC system. It aims to be the "man behind the curtain" - carefully creating Roles, RoleBindings and Pods on-demand that enable developers to quickly get their jobs done, and administrators to ensure that the principal of least privilege is honored.

Oz primarily works with two resource constructs - Access Requests and Access Templates.

Access Templates are defined by the cluster operators or application owners to create a "template" for how a particular type of short-term access can be granted. For example, the ExecAccessTemplate defines a particular target (DaemonSet for example) that a user can request access to, the Groups that are allowed to have that access, and rules around the maximum duration that the request can remain active.

Access Requests are created by end-users when they need access to a resource. RBAC privileges must be granted to users to even create the resource - but once that is done, actual access to the final target pod is controlled natively through the Kubernetes RBAC system, ensuring that we are not bypassing any standard internal RBAC controls.
None of these works nearly as well as angioplasty
Egress controls and other network boundaries are doing the work there, not MITM. If I can connect to a remote server, I can encrypt my payload before sending it, too. This is a really hard battle to win - you need to store tons of data, have robust analysis systems, rooms full of analysts, etc. before you’re going to be able to tell that, say, the random looking cookie sent to an ad server-like hostname is actually encrypted data, that my Zoom video stream wasn’t company data, or that the “ad” was a control message.

That last is one of the reasons why I think enterprise ad blocking is an important security measure, and a likely outcome for sensitive jobs will be separating sessions - e.g. if you have general purpose browsing happening on a separate computer, some kind of remote session, etc. you will have a much easier time being able to restrict the network connectivity of the system with more sensitive data.
What’s with the sudden turn to “haha everyone was wrong in the past” on here?

There’s nothing wrong with being wrong. What’s the point?
Plenty of us did think he'd go to jail. There are even examples in the linked thread.
I’m not a Rust programmer, but I’m curious, and I’m wondering if someone could explain how their generational-box crate works? [1]

I understand that it’s some kind of arena allocation, but I don’t understand how they support copying without copying, or how this is safe:

> Internally, generational-box creates an arena of generational RefCell's that are recycled when the owner is dropped. You can think of the cells as something like &'static RefCell<Box<dyn Any>> with a generational check to make recycling a cell easier to debug. Then GenerationalBox's are Copy because the &'static pointer is Copy

Like okay, you can create a pointer to static data, but what if it’s something that doesn’t have a static lifetime?

[1] https://crates.io/crates/generational-box
Usually something similar (in scope if not in cooking) but under a different name.

I had a half-semester that was called "economics" but was basically an old dude ranting about of bunch of this kind of shit, very informative, not sure it was really from the text book.
It’s not about justice. It’s all about who you know.
If he’s eligible for parole at 1/3 of a 25 year sentence, he will spend anywhere from between 8 years, 4 months in prison or 25 years. That would make him somewhere between 40 and 57 when he gets out.
Ask HN: Biggest misconceptions about using generative AI in programming?
You can’t throw a broken slipstick without reading another article about the ways software engineers use (or should use) generative AI to write their applications. Most of them promise better developer productivity. And plenty of people are adopting it: according to a StackOverflow 2023 developer survey, 70% of developers are using or are planning to use AI tools in their development process.

But “Yeah, let’s jump on board!” doesn’t mean that every developer should dive right in, or do it in the same way. Despite its value, generative AI isn’t ideal in all situations – particularly when programmers make wrong assumptions about its use. So I’m writing a blog post that aims to debunk the mistaken beliefs so that you can use generative AI the right way.

So:

* What is the biggest misconception you have encountered regarding using generative AI to improve programming productivity?

* What's the issue with it? Why is it a problem, and (if appropriate) what should the right path be?
I had my doubts, but I'm glad to see they were unfounded. He's getting what he deserves.
Technically it is ticketable, but they don’t really have a choice. The traffic often moves at a crawl so they might enter the intersection at the beginning of a light cycle and not get further than the crosswalk. If they decide not to move until there is a car length of free space on the other side, cars behind them will honk up a storm. Ticketing them would effectively just be a stochastic congestion tax anyway.
If someone isn't a violent threat to society, there isn't much social benefit to keeping folks locked up longer then 20-ish years. 20-25 (assuming he gets the 15% off for good behavior the feds allow) is plenty.
One person was cynical. Everyone else chimed in to correct that person: SBF was "new money" which carries no social status to protect against jail time.
Ooos sorry! I meant https://en.wikipedia.org/wiki/Total_cost_of_ownership
Ask HN: Are cookie consent banners meaningless?
A large portion of websites I visit for the first time all show a cookie consent banner. I was curious what accepting or rejecting in that banner actually does. After all, as a web developer, I'm used to seeing most cookies sent with the initial page load.

So I've started using the browser dev tools to just look over the list of cookies that are sent and stored to my browser even after selecting "Reject All" or whatever the closest option is, in the cookie consent banner.

Turns out I usually still see a flood of marketing and ad related cookies. A few sites I've reported as a bug back to the site owner, with a reponse of "thanks for surfacing this, we'll work on it.."

Curious what other people are noticing. And in general, is cookie consent a real thing, or are these consent banners just part of normal UX now and people include them without really implementing the corresponding app behaviors?
FTX Founder Sam Bankman-Fried Sentenced to 25 Years
Why does the title on Hacker News have "SBF" while the article title has his full name?
I always wanted "wireless wires" that would look like two usb/ethernet/hdmi/etc dongles and just provide one or more connection types at a desired bandwidth, regardless of protocol. They'd be encrypted by a private key set by touching them together, or installing one file of random bytes and arbitrary size to each as a usb drive (either as a separate usb plug or a physical switch that enables storage mode).

So users could plug one into their computer and the other into a drive/router/television/etc and it would "just work" without having to fiddle with 802.11 setup friction. I wonder if DECT-2020 New Radio (NR) could be used for this?

I wanted to invent this in the early 2000s when I first saw wireless usb over wifi and thought "well that's terrible", akin to the disbelief I felt in the '90s when I saw that usb connectors were flat instead of circular and couldn't believe that someone would come up with something so ridiculously annoying. But after 20 years of something so obvious not being invented (probably due to monopoly/regulatory effects), along with the hundreds of other things I wanted to invent in another life, I can comfortably release this idea into the public domain.
Why would a bank accept responsibility when a customer becomes a victim of fraud? How would the bank discern between customers that are actually victims, and customers using this responsibility to make the bank the fraud victim?
I’m struggling to understand what’s “free” here, did he design his own board and IC? Or just the software side?
I am honestly baffled Amazon hasn't found a way to compete with Allegro. I am happy about it, but also baffled. Allegro's customer experience is just stellar, whereas Amazon's interface continues to give the impression that it's still a bunch of widgets rendered by a hundred microservices and glued together without any elegant cohesion in mind. It's as if little has changed since the famous Steve Yegge's letter.
upload an encrypted version?
Xiaomi Enters Cutthroat EV Race with $29,900 SU7 Series
I don't get it, what's the difference between parole and early release? Also how do you get to 21 and 17 from 25 and 20?
It seems unlikely he will serve that full time though I don’t know the specific parole eligibility constraints for these charges.