skysight-inc/HackerNews huggingface dataset:
So, you've just hit on a weakness of the legal "reasonable person principle" and, possibly, the reason Google decided to settle this case.

By settling, they've left the legal question of what a "reasonable person" should expect here open. If someone else wants to sue later over this term or some related term maybe having a different layperson meaning, they can but they're back to square one: new case, new facts, no precedent.

Had Google dragged this out, and the Court concluded that a "reasonable person" believed "incognito" meant something other than what every tech-head has understood it to mean for the past sixteen years... The industry would have been in for a world of hurt.
I think there’s more to it than that. Ketosis clearly has a strong effect on the brain as evidenced by its effectiveness in treating epilepsy.
Eliminate the Chassis Requirement to Free Manufactured Home Development
I like the SQL course at https://www.hackerrank.com/ see also books by https://en.wikipedia.org/wiki/Joe_Celko to learn how to write really advanced queries.
> Mass transit absolutely, positively does not work in the US if you have at least one child.

Kind of a confusing statement. Sure the current state doesn't work in the US, which is because it isn't designed to work and there is little to no investment or money spent on public transit. You can know that this is factually true by looking at your state department of highways budgets and examining how funds are allocated.

It does work in other countries, including countries that have parents with children. There is no logistical or cost-based reason it won't or couldn't work in the US. Nothing special about "spread out" - which is another choice we intentionally make or the size of the country. It's also mostly untrue since most of the population in the US lives in urban areas. Suburban areas can just continue to grow as is and become more dense while preserving SFHs.
Waist to height ratio is a better measure for individuals that better measures the real problem of excess visceral fat.

Should optimally be <0.5.
I mean, I'd say that this fiasco showcased the significant benefits of passionate volunteers doing great work in the open. And yeah, someone at MS may have made a faux pas on the ffmpeg forum but also someone at MS was the one who discovered and responsibly reported the xz vulnerability. Corporations aren't monolithic.

If this had happened and someone's livelihood or next promotion was on the line, the amount of forensics and publicity would likely have been so much less open than it has been in a product driven by community and done in the open.
I believe that your summary misunderstands how we will handle versioning. The pyodide /package versions will be controlled by the compatibility date, and we will be able to support multiple in production at once. For packages like langchain (or numpy as you mentioned) the plan is to update quite frequently.

Could you expand on why you believe V8 will be a limiting factor? It is quite a powerful Wasm runtime, and most of the optimizations we have planned don’t really depend on the underlying engine.

Edit: Also just want to clarify that this is not a POC, it is a Beta that we will continue improving on and eventually GA.
https://github.com/denoland/deno/issues is the ideal place -- we try to triage all incoming issues, the more specific the repro the easier it is to address but we will take a look at everything that comes in.
What's gonna happen now ? a team of foss sec chaos monkey trying to run checks on a core set of libs ?
Jonas Hietala: The T-34 keyboard layout
Kinda scary but maybe true. It reminds me of the place I worked at for a while that had built database-backed web sites for 10 years but I was the first person they hired who understood joins.
> you are pretty much information-theoretically optimal

base36 with alphanumeric mode encoding has around 6.38% overhead compared to base10's 0.34% overhead in numeric mode. So numeric mode gets you closer to optimal.
More specifically, Slack’s payment model makes it impossible to use for communities.

With Discord if you want premium stuff you pay for it at an individual level, and having the free tier doesn’t limit important functionality like message history.

With Slack your workspace’s cost is based on how many people are members in the workspace. You can’t have one member decide to buy a premium subscription and another one decide not to. You’re either all in on paying money for every user or you’re stuck on a gimped free version that hides message history and has other limitations.
My point in the quote from GP was that it should be easy to debug any binary, whether it was built in CI or locally, as a formal release or not, and whether it did or didn't include uncommitted changes. Refix will make your binaries easily debuggable in all these cases regardless of how your build system and version control (or several build and version control systems) works.
I worked for a company under a big corporate. Or they thought they were. Lots of Big Business Talk, earnest Reports (not sure if they were TPS but they might as well have been) and lots of Management Structuring, no actual products except for things already made by acquisitions. It reminded me strongly of the Mattel boardroom in Barbie.
Indeed. Would you rather have somebody in charge of your main competitor who makes aggressive sounding noises while steadily destroying its core capabilities or someone who speaks quietly and actually does stuff to make it stronger?

https://www.nytimes.com/2024/03/28/opinion/biden-trump-china...

The Russians and Chinese supported Big Orange in 2016 because they fear democracy, honest industry, and individual rights - all three of which threaten their kleptocracies. They support him in 2024 for the same reasons.
As a hiring manager in the data science/ml world in healthcare, I generally think of degree programs in "data science", "machine learning", "artificial intelligence", "deep learning", etc as being less valuable than degree programs in the corresponding fields that aren't as buzz wordy. I tend to prefer candidates from backgrounds like computer science, math, applied math, statistics, or something domain specific (coming from healthcare) like epidemiology (or variation like computational epi) or bio- or biomedical informatics.

Those programs tend to show me that you're interested in and have done the more boring but foundational coursework that is often cut to make the sexy degree programs. That means that hopefully you won't be upset that 100% of your job isn't deep learning, and that you'll be better suited to pick the right tool for the job.

At one of my last jobs, there was a machine learning engineering team (all boys) and a data science team (all girls and gays) who had the same ML chops. The DS team ended up getting more models into production and more research published than the ML team because they had more "soft" skills to navigate the problems the org was facing. When someone in leadership would say "we're having issues booking appointments", the ML team would set off building some fancy deep learning model while the DS team would generate hypotheses with stakeholders, do some exploratory analysis, run a few prospective studies, and then use those results to inform some regression models that would end up in production. It wasn't as sexy as some deep learning model, but the leadership team wanted full interpretability of their model so deep learning was never going to be acceptable. I generally think of these kinds of skills being taught more the stats, applied math, or epi programs than in the designer ML programs. ymmv
Section 7 Conclusion and Future Work

We show that ReaLM outperforms previous approaches, and performs roughly as well as the state of-the-art LLM today, GPT-4, despite consisting of
far fewer parameters, even for onscreen references
despite being purely in the textual domain. It also
outperforms GPT-4 for domain-specific user utterances, thus making ReaLM an ideal choice for a practical reference resolution system that can exist
*on-device without compromising on performance.*

-----------------------------

Emphasis mine.

As far as I can tell, the model isn't exactly on-device yet.
It’s not an announcement, and the headline is a lie that has nothing to do with Apple.

Apple published an academic paper, as they have been doing for years, showing a model that objectively outperforms GPT-4 on one narrow test. Nowhere do they claim to outperform GPT-4 in general.

Assuming that this is somehow intended to manipulate the stock price is not a rational analysis of what is going on.

Also, Apple has operated on a predicable release schedule for a decade now. They have already said that they will be announcing their AI work at WWDC. It’s unclear what anyone is expecting them to do differently or why it would make any sense.

As for the stock price - the explanations as to why it’s depressed are twofold - one is regulatory action, and the other is frenzied investors who want to jump on the AI bandwagon.

Dropping sales in China is a headline like a stopped clock. Usually wrong, sometimes right, and we only find out which at earnings time.

Note that nobody’s AI product is doing great yet, so for the most part it’s all performative, something that Apple doesn’t engage in.
Digicomp DR-70 Astrology Minicomputer
> how much attention is Tesla and its problems/opportunities getting

Judging by the fragmented and meandering Highland/Juniper roll-out, none.

The company seems to be running on autopilot (or should I say, full self-driving), where local management is making local decisions out of sync with the rest of the company to try and save another quarter. Which is clearly not working anymore.
Julia Child's kitchen was famously functional with a peg board wall for quick access to hanging supplies. I could see her doing that!
I slightly mis-read the headline. Here's what's going on:

>Canoo reimburses Aquila Family Ventures, an entity owned by the CEO, for use of an aircraft. In 2023, Canoo spent $1.7 million on this reimbursement.

CEO owns a plane. CEO uses the plane (for business, one presumes). Business reimburses CEO for plane. That looks like a poor use of funds, but not necessarily self-dealing?

I mean, in their position he should probably be flying coach - maybe he's so good that he's totally worth spending seven figures for his travel (though I doubt it) - but it's technically no different than reimbursing any other travel expense.

Better system: they could reimburse the minimum airfare, and he could cover the difference himself. Everyone has that figured out for us peons, when we request a more convenient flight. (Want to bet they imposed that on their employees?)
Searching [0] gets you halfway there: its about a compelling drama which takes place mostly in real life, but is portrayed entirely on a computer monitor.

[0] https://en.wikipedia.org/wiki/Searching_(film)
Ack, I ran into a similar issue when writing a github webhook. It might be related to JWT handling if it's the same issue.

If you recall that exact issue, definitely feel free to file an issue.
The spammy headline is the point of the article, for what it's worth.

> It’s weird because the correct answer to the query “what is the best printer” has not changed, but an entire ecosystem of content farms seems motivated to constantly update articles about printers in response to the incentive structure created by that robot’s obvious preferences
Metal thought to be International Space Station trash rips through Florida home
It is only fair.

Everyone gets to profit from Qt, to the extent they are willing to give money to upstream, while being paid themselves.

Anyone that feels entitled to be paid, and not give anything upstream is free to look for alternatives, and hope that after a decade they are still relevant.
This one wasn't really a Google issue.

Browsing Amazon in private mode with Firefox, or, hell, Hacker News in Edge's InPrivate mode, you'd have the same issue. None of those modulate what Hacker News knows about you.
Don’t worry, you can always be inspired by them and make something of your own.
I wouldn't be surprised if there are others but this specific one seems special. It was caught because on connection it does an extra decryption operation and I'd assume there is no way around this extra work. They'd have to re-architect this to not require that decryption.

I'm not a security expert though.
Johnny 5

So basically “Johnny 5”.

https://youtu.be/lv9owSY015w?feature=shared
I just thought of television as something much more fragmented and localised compared to the billion and more poepie flowing through the same Facebook funnel. I'll grant you that some things in the past did transcend boundaries and gain global reach but those I counted amongst the referenced "few things."
Code Navigation with Hx
The xz incident was handled far better, faster, and more open than the Solarwinds incident. If anything, this proves that more eyes do help.
If you're all so smart, why are your cars on fire sale and still
selling like dogshit?

I feel that there's a large mismatch between the parent post and your reply? It feels like you both think that Tesla's facing some major problems and is not on a good trajectory?
jwz has a rant (not linked here because he presents a special page for hacker-news referral links) about people sending him screenshots of errors instead of typing the error text into an email. I kind of understood where he was coming from (why encode text as an image, that requires more congnitive load to decode than the original text) but I actually frequently see error screenshots that contain more contextual detail (the OS, what extra software is on the machine, etc) that can help in understanding a bug.

To me, having systems that can do developer-level triage from screen contexts would be pretty valuable although in principle, it shouldn't be needed.
Tony Aquila is the CEO of both companies - Canoo and Aquila Family Ventures. I'll never understand why it's okay for CEOs to have multiple concurrent jobs, while one of the biggest fervors of the pandemic was when employees were found to have... multiple concurrent jobs.
They probably think they can get away with this shit, in part, because of the personality cult that has formed around SEALs. The Navy should disband them, and if people like them are still necessary, reform the unit with a different name and prohibit the new guys from ever getting book/movie/podcast deals.

Edit: thread flagged by said cult.
64GB is not common on these small machines, but clustering them is very easy. I run a cluster of 4 RPi Zero W's with Docker Swarm. Certainly good enough for playing with mini and mainframe emulation. I also have a stack of HP thin clients that will be turned into a beefier cluster.
Make friends with your DBA (assuming you have one)
Java's Maven is an interesting case study, as it tried to be this:. A standard project layout, a standard dependency mechanism, pom.xml as standard metadata file, and a standard workflow with standard target(clean/compile/test/deploy). Plugins for what's left.

There might have been a time where it worked, but people started to use plugins for all kinds of reasons, quite good ones in most cases. Findbugs, code coverage, source code generation,...

Today, a maven project without plugins is rare. Maven brought us 95%, but there is a long tail left to cover.
"Leadership" is a hell of a drug.
Chrome working to combat cookie theft with new web standard
If the reimbursements were solely for corporate travel, it might not be a concern.

The CEO here sold his previous company for $6.5 billion [1], so he already owned the jet before starting Canoo. The company reimburses him for corporate travel on it.

What's concerning is that Canoo is stacking big losses and living on the edge...it seems like excessive spending for a company that hasn't even made a dime of profit.

But hold on, this same CEO has spent over $230 million(!) buying Canoo stock from his personal funds [2], so he is significantly in the red no matter how much he gets reimbursed for air travel.

Always dig into the details and avoid getting suckered by clickbait...

1- https://www.reuters.com/article/idUSL1N11J0PS/

2- https://www.secform4.com/insider-trading/1399053.htm
also the average include trucks with tend to be super super expensive.

Funny how things change.

My first new car was a truck, for the very reason that pick-up trucks were generally much cheaper than cars because they were mostly empty space and didn't have so many creature comforts.

Now, trucks are like rolling vacation spas. When my wife's car was side-swiped, the insurance company gave her a huge new truck as a loaner. It had more electronics, more comfortable seating, and more luxury appointments than our living room.
There's a lot of value in "just write a python thing in 5 minutes".

People tend to hem and haw about performance and "doing it right." But it's often a misplaced argument of "python vs ["right" thing]", it's "python vs not having anything." Often, a shitty python thing is worth a ton and fixes the problem, and then if performance becomes enough of an issue you can evaluate whether you want to prioritize fixing it. And I find that once something that works is in place, and just quietly doing its job, people suddenly find it a lot less objectionable to their sensibilities.

And even if we do replace it, having the python thing taking the heat off the "right" way's timetable lets you actually do it right because you can take your time.
super cool. Debugging locally across multiple microservices can be a huge pain.

A small feature request/idea - packaging this as a helm chart to make local development on something like Minkikube easier.
I've done similar projects in the past (robot arms pushing performance limits in the few thousand $ range), and I found pretty good results with stepper motors, and gearboxes with sufficiently low backlash. For reference, these designs got to approx 1mm repeatability with 2.5kg payload at ~80cm reach, meant to model a human arm somewhat.

Here's some specifics if you're interested. Depending on the end effector payload requirements, a mix of NEMA34,24,17 can do this (bigger ones for earlier joints). You can go cycloidal/harmonic gears if you have the budget, otherwise each actuator (motor + driver + gearbox + shaft coupling) would run you something like $100-$200 depending heavily on supplier and exact requirements (+$50 or so for closed-loop systems). So not terrible on the price front. Then for the base joint you'd want some wider cylindrical gearbox that distributes the load across better.

If you're able to work with a machine shop I think you can put together something really high quality. Here's some example design inspirations, some of them even better than what I described I was able to put together as a hobbyist:

https://www.youtube.com/watch?v=7z6rZdYHYfc (this one is fantastic; a smaller and lighter version operated more slowly would have even less wiggle from the base)
https://www.youtube.com/shorts/II8gdIXPgaE (this is more comparable to the OP)
https://www.youtube.com/shorts/_x7P9eZCkVM
https://www.youtube.com/watch?v=g9AfhqOd-_I (most professional one I've seen, and almost certainly this BOM would be under $3k, probably under $1k in China. In fact I'll go ahead and email these guys since this is so cool and I wonder if they sell smaller models)
https://www.youtube.com/watch?v=iB2NAgfVjIs (definitely check out Chris Annin, American roboticist who imo makes some of the best open source low cost stepper motor robots)
It's hard to take anyone who uses the term "alt-right" seriously and without irony as a legitimate label in 2024.

2016 called—they want their guilt-by-association blanket branding for any and all thought outside of what the established media corporations and entrenched political class consider to be acceptable political thought back.

The term "alt-right" contains the more or less the same legitimacy and valence as the term "libtard"—except, you see pundits use it in headlines in mainstream publications, so you think it's more acceptable and less of a nonsense blanket term designed to conveniently silo anything that exists outside of a general sphere of acceptable thought together so as to encourage political tribalism and prevent critical thinking.
> You become a technical co-founder to trade in your technical skills, learn about a new domain, figure out where the pain points are, and eventually jump ship and become a captain of your own vessel.

Is this what people commonly think about technical co-founder?

Or are you recommending a less-common way to think about it?
I think that reducing the functionality of Discord to “ephemeral chat” is vastly selling short the functionality on offer.
I agress this album is brilliant, but not that everything after it was terrible.

I probably listen to A Grand Don't Come for Free more then OPM, the impact of Empty Cans in the context of listening to the whole album is huge. Fit But You Know It and Dry Your Eyes are great too, maybe too commercial for some tastes.

Saw The Streets last year at Alexandra Palace! Banging gig..
Nokia was and is a massive company. Their cellphone operation was an offshot that grew wild, sort of like AWS for amazon (at least until it crashed).
Also, unlike most other companies, Apple is really pushing for ML/AI on device. And while there are serious limitations for that, I really don't like to be beholden to opaque profit-at-all-costs companies like Google or OpenAI or...
> If you read my full sentence in the context it stands, I argue that authorizing access to your openssh instance is done by sending an authentication code in cleartext.

I did read your full post. Your claim that port knocking adds no security benefit is just simply incorrect. Even if you take for granted the scenario of an attacker who can recover the port knock sequence, there is still the benefit of shielding the SSH daemon from other attackers who cannot do so. Which is…a “security benefit.”

Describing the port knocking sequence as an extension of someone’s authentication key is where this goes off into not even wrong territory. A dynamically controlled firewall rule (port knocking) is not fungible with bits from an authentication token for the reasons I’ve already outlined - the benefit is limiting network access to the daemon at all.

> Yes a vpn that has no known reliably attack vector is definitely better than a protocol with a known working attack vector

You talk about recovering someone’s port knocking sequence as if that is trivial to do or in any way reliable. It is, in fact, neither of those things. An attacker would have to either:

1) sniff network traffic in front of the server

2) sniff network traffic in front of the client

3) compromise the server

4) compromise the client

5) brute force the port knocking sequence without getting locked out.

Most attackers are going to be in a position to try brute forcing — that’s it.

Meanwhile, you may not have noticed, but commercial VPNs have suffered a steady stream of high-impact CVEs for the last few years.

Wireguard is certainly better in this regard than any commercial VPN I know of, but it does have challenges with regard to key distribution/device enrollment, and thus from a practical standpoint limits access to pre-enrolled endpoints, which is a limitation someone using port knocking does not have.
Disappointed to read that this is an April fools. I honestly believe that practical application of software freedom is held back by tooling, and that through the use of their monorepo and build system Google can actually benefit more than normal users from software freedom.

https://blog.williammanley.net/2020/05/25/unlock-software-fr...
But there were paid "volunteers" who didn't do their job either (/cough lgtm). If anything, this incident shows a large amount of complacency with pull request reviews and contributions in general.
We all know what is the outcome of that temporary script that was written in 5 minutes.