skysight-inc/HackerNews huggingface dataset:
But I do worry ... that I may not get an audit notice. I thought that as an American, I was entitled to one, since people go one about this all the time. In 35 years, I've never received one.

Oh wait ... the audit rate is 0.38%

Oh and wait again ..

> Of the more than 164 million individual income tax returns filed with the IRS last year, only 626,204 were audited—down from 659,003 during fiscal year 2021. Of those 626,204 audits, 93,595 were regular audits while the remainder (532,609) were correspondence audits, which are usually done for simple mistakes on a tax return and can be easily corrected through mail correspondence with the IRS.

https://gallerosrobinson.com/insight-inside/irs-audit-rates-...

Hmm. I guess I'll have to keep waiting for my dedicated agent and terrifying audit process.
https://bmsir.ytmnd.com/
Trash from the International Space Station may have hit a house in Florida
Couldn't read the article. Of all fields though, I wouldn't expect banks to be big climate affectors in the first place. Is this maybe related to compute costs for trading? Or investing in climate-positive ventures?
Do you have any recommendations for extraction from Powerpoint documents? Those seem like the worst since each of the layouts tend to be unique (unlike the AMEX Statements in the example)
> He repeats the typical line of “Delete code that’s not used instead of commenting it out, because you can always recover it from VCS.” (That’s a view that I’ve [controversially] started to turn against, for the same reason that “you can recover it from backups” is not a compelling reason to delete files currently not in use.)

That's an interesting take. I've usually encouraged removing commented code because every line of code is a liability, even if commented out.
Well said. Empathy is not a prerequisite of being brilliant.

Sometimes the two coexist, allowing an expert to communicate material to the mind of a beginner, and those are the amazing teachers.
What Would Society Look Like If Extreme Wealth Were Impossible?
Again, what's the point in the first place?

Fraud of this sort is incredibly rare.

> Existing research and evidence shows that voter impersonation is extremely rare. Between 2000 and 2014, there were only 31 documented instances of voter impersonation.[3][4][5] There is no evidence that it has changed the result of any election. In April 2020, a voter fraud study covering 20 years by the Massachusetts Institute of Technology found the level of mail-in ballot fraud "exceedingly rare" since it occurs only in "0.00006 percent" of individual votes nationally, and, in one state, "0.000004 percent — about five times less likely than getting hit by lightning in the United States." - https://en.wikipedia.org/wiki/Voter_impersonation_in_the_Uni...

Mail-in ballots don't require id, and still have a low rate of fraud.

We can easily find cases of people unable to vote because they did not have id and were unable to get id.
Of the European countries currently looking to join, Bosnia & Herzegovina will probably be the last one to actually make it. Which is pretty surprising considering that Kosovo has a is-this-actually-a-country dispute within the EU (which also blocks Serbia's accession), and Moldova, Georgia, and Ukraine have not-so-minor problems of not being able to control portions of their territory thanks to Russian occupation.

The Russo-Ukrainian war reignited a desire in the EU to actually enlarge towards the Balkans and Eastern Europe. But the countries that haven't joined aren't in great shape (the healthier bits of Yugoslavia joined earlier), and it's not clear to me that any of the current batch countries (especially Bosnia) will be able to join before such desires cool again.
Have McKinsey and its consulting rivals got too big?
I remember that discussion about the original order, but I'm in the same boat as OP—this is the first I'm hearing about an RFC about open weights. It looks like it was discussed once, about a month ago [0], but I hadn't seen any of the public comments show up on HN until today, even though they date back weeks.

[0] NTIA Solicits Comments on Open-Weight AI Models (57 points, 11 comments) https://news.ycombinator.com/item?id=39494760
nextjs and vercel is fucking cancer.
Volume warning...
Like watching myself in the mirror.
I wonder if anyone has packet logs from the past few weeks that show attempts at sshd - might be some incriminating IP addresses to start hunting with
This reminds me of the anti pattern to delete a facebook account quicker, than even if you find the delete button

Just post porn instead
Seems to be as a result of a glitch related to it being embedded in the Discord app, tho.

This is kind of like when Wii Play was the best selling game in the world, because it was bundled with a controller for only 10$ more. Yeah, it's technically true, but it's pretty meaningless.
I printed a robotic arm for school. Unfortunately, we weren't using a high quality enough printer, so the tolerances were off and things didn't slot together well. I'd recommend people to know the precision of their printer before setting off to build this.
Signals are a bit better because they only propagate when computed values actually changed. This is an implicit fixed point/stopping condition that doesn't intrinsically exist with events.
I have an air fryer. I use it regularly. I assure you it's not a hoax, me and millions of other people have verified this first hand.
Oh wow, what a read! Great story, thanks for sharing :)
It's more like highway built on fundamentally unstable coastal geology[1] falls into the ocean here and there.

[1] California is basically schmutz scraped off a subducting plate over the last 100 million years. Friend worked on a job where they excavated into a hillside behind a house and found a 10 inch wide crack filled with wet clay.
The key enabler of market share is running unmodified software. Few can be bothered to recompile their software for a unikernel, or switch to a unikernel-specific runtime provided by a third party (compatibility, CVE reaction time, etc).

I suspect large cloud providers may be running their custom internal stuff using unikernels and reaping resource economy and security benefits, without us knowing much about that.
Unless it is not the first version that targets any x86, then there is no nit to pick.
Just google the phone number to confirm it's correct, takes about 5 seconds.
Happens every year.

2023: https://www.latimes.com/california/story/2023-11-18/we-had-a...

2022: https://www.sandiegouniontribune.com/news/california/story/2...

2021: https://www.sanluisobispo.com/news/weather-news/article24885...
Shit. Laughed at this.
I was quite curious about the .bunx file format. I think this could be a quite a useful thing, a universal binary format. Then I see the shim DLL:

https://github.com/oven-sh/bun/blob/801e475c72b3573a91e0fb4c...

Even before this past week's XZ backdoor revelation, checking binaries into source control rather than building from source seems quite questionable. In fairness to the Bun developer's, they have a comment in their build.zig file acknowledging that this shim should be built more normally rather than being checked in.

Then I look into the source for it:

https://github.com/oven-sh/bun/blob/801e475c72b3573a91e0fb4c...

For no discernible reason, it is using a bunch of undocumented Windows APIs. The source cites this Zig issue as one reason for why they think it is OK to use undocumented APIs:

https://github.com/ziglang/zig/issues/1840

I don't see any good reasons here cited for using undocumented, unstable interfaces. For Zig's part, there seems to be some poorly-explained interest in linking against "lower level" libraries without any motivating use case (just some hand waving about security and drivers, neither of which makes much sense. Onecore.lib is a thing if you wanted a documented way of linking an executable that run on a diverse set of Windows form factors. And compiling drivers may as well be treated as a seperate target, since function names are different). For Bun, I assume they are trying to have low binary size. But targeting NTDLL vs. Kernel32 should not make a big difference, especially when the shim is just doing basic file IO. For an example of making small executable with standard API, you can make hello world 4kb using MSVC just by using /NODEFAULTLIB and /ENTRY:main with link.exe and this program :

#include <Windows.h>
#define MY_MSG "Hello World!\n"
int main() {
WriteFile(GetStdHandle(STD_OUTPUT_HANDLE), MY_MSG, sizeof(MY_MSG), nullptr, nullptr);
return 0;
}

So it should be possible to make a .bunx shim of small size without having to resort to undocumented API. (Current exe is 12kb). But even if the shim exe was 100kb, that would be still be an acceptable tradeoff for me than having to debug any problem that results from using non-standard APIs.
I feel like this story started off seeming way more mysterious than it actually was because it took so long to get to mentioning the crucial bit (the long distance WiFi bridge).
This is a good point. A manifesto is when you write more than a few paragraphs. The Cheesecake Factory menu is a manifesto, for example, and it is a baffling failure of diction that they do not call it that.
Containers are dependency isolation, not security isolation %)
Furtim Modus | Multiple: Java Developer; Data Engineer; DevOps | ONSITE/Hybrid Preferred (NYC) & Remote Considered (Americas/Europe) | Part-Time | https://furtimmodus.com

This is an exciting opportunity to contribute your skills and expertise to a electronic trading fintech venture based out of New York and receive equity in exchange for your contributions. Additionally, we’ll provide you the opportunity to convert full-time with base comp $150k–$250, full benefits, cash bonus, and more equity.

- Java Developer: https://www.furtimmodus.com/java-developer

- Data Engineer: https://www.furtimmodus.com/data-engineer

- DevOps Engineer: https://www.furtimmodus.com/devops-engineer

If you are passionate about your craft and interested in joining a electronic trading fintech venture part-time to start on an equity basis with the goal to convert to a full-time paid position, we would love to hear from you. Please submit your resume to agency@furtimmodus.com if interested in this opportunity.

-----

Furtim Modus | Sr. Java Developer | ONSITE/Hybrid (NYC) Preferred & Remote Considered (Americas/Europe) | Full-Time | https://furtimmodus.com

We are currently seeking a talented and driven Senior Java Developer with high performance trading systems experience to join our team full-time. This is an exciting opportunity to contribute your skills and expertise to a electronic trading fintech venture based out of New York and in exchange we’ll provide you with base comp $250k, full benefits, cash bonus, and equity.

- Sr. Java Developer: https://www.furtimmodus.com/senior-java-developer

Requirements:

- Server-side software development & electronic trading experience

- Experience in Aeron Open Source such as Aeron Transport, Aeron Cluster, Aeron Archive, Artio High Performance FIX Gateway

- Experience with Adaptive Hydra Trading Platform (HydraX / Hydra X)

If you are passionate about Java development and interested in joining a electronic trading fintech venture, we would love to hear from you. Please submit your resume if interested to agency@furtimmodus.com in this opportunity.
Anyone know how the accuracy of this compares to the similar-cost adamb314/ServoProject arm? [1] It utilizes a servo mod adding dual encoders to compensate for backlash and achieves accuracy of +/- 0.05mm (enough to thread a mechanical pencil lead in and out of the tip of a pencil). [2] He's been working on the project for 5 years, with significant improvements still in the last year. [3][4]

[1]: https://github.com/adamb314/ServoProject
[2]: https://www.youtube.com/watch?v=SioCwvR_PYY
[3]: https://www.youtube.com/watch?v=_4mrb2T706s
[4]: https://www.youtube.com/watch?v=Ctb4s6fqnqo
Is there any way to comment past the date? This seems like a horrible idea.
To me it implicitly means: “I am selling you my distilled copy of the book at nearly the price of the book. That lets me recoup my investment, and after a few days I will take it offline, so I don’t get a law suit from O’Reilley for copyright infringement.”
Location: Mumbai, India
Remote: Preferred
Willing to relocate: Yes, within India
Technologies: Java, Golang, Python, WebAssembly, Linux, SQL, Kubernetes, AWS, GCP, Ruby on Rails
Résumé/CV: https://www.linkedin.com/in/raunak1/
Email: raunak1001 (at) outlook (dot) com

- Principal Software Engineer with 11 years experience.

- Have predominantly worked in scaling out backend services with a focus on building search, analytics and recommendation systems, refactoring monoliths, optimizing cloud costs.

- Have done minimal downtime migrations of infrastructure for AWS and GCP.

As a side project, I have been building a WebAssembly interpreter from scratch at https://github.com/rrampage/wart . It can run Doom and boot Linux!
"What is there for the rest of us to do?"

In a winner-takes-all-no-social-net economy, nothing.
Devil's advocate: Deno and Bun are not yet fully backwards compatible with Node. I myself have run into a _ton_ of pain trying to introduce Bun for my team.

This can become a big time sink on bigger teams. That time could be saved by just not allowing it until a full team initiative is agreed on.
Users that need special clients (accessibility, hardware, etc.). Users blocked by US sanctions. Users that have been moderated off the platform for something not in your community (account bans even happen accidentally). Users with privacy/anonymity concerns about the data collection (& now ads)—especially the chat rooms that require a SIM card. Users that take their FOSS or otherwise ethical software views or anti-corporate views to heart & want something built on those principle—from wanting to use free software to make free software, to wanting to outright avoid what some now call enshitification where a free (gratis) account clashes with the idea of freedoms, etc.
The person i was replying to claimed that countries like usa rely on hardware modification while countries like israel rely on back-doors. This does not seem to be the case. Israel doesn't (or at least hasn't been caught) making backdoors, while the usa actually has (e.g. Dual_EG).

RCE is a broad category and includes many things. That said, while technically the liblzma thing is an RCE, supply chain attacks aren't really what most people mean when they talk about an RCE vulnerability.
I hadn't seen that before, so thanks for posting it. What a great story!
Location: Vietnam

Remote: Yes, or temporary onsite

Willing to relocate: No

Technologies: Web app / Android / iOS / thick client / internal and external infrastructure / IoT / SDLC

Résumé/CV: https://www.linkedin.com/in/wstuart/

Email: 'sw' || '<at>' || 'redpenetration.com'

Over 10 years experience in penetration testing and SSDLC in the UK but now freelancing in Vietnam and looking for additional contracts. I could help strengthen your team, give someone more time to get something done, provide security advice to a dev team or provide pre-audit security review work at a fraction of the cost of paying for a project at a major security consultancy.
Silicon wafers come from a large single crystal that has to be grown. It's not a trivial engineering challenge, as you would suggest. There's a supply shortage for the entire semiconductor industry that is driving up prices.
Location: Tokyo, Japan

Remote: Yes

Willing to relocate: no

Technologies: Svelte, React, Python/Django, AWS, Docker, Terraform (and devops generally)

Resume/CV: https://www.linkedin.com/in/philisaac/ [or] https://philisaac.com

Email: isaac.phil [at] gmail [dot] com

Sr. full stack engineer and manager, 8+ years experience. Former co-founder and head of engineering at a successful startup (>1M MRR). Lately have been doing freelance work leveraging technology like Svelte and Supabase to make quick to build and easy to maintain web apps for clients.

I believe in excessive communication and using the latest tech to get productivity gains.

Open for contract work, or full time work with small companies working on exciting products.
There's only so much money you can make off of banner ads and at a certain point native advertisements are way more lucrative. I wonder how they get around disclosure requirements but I guess it's probably because the articles are never directly funded but there's some other form of compensation in the backend.

Tom Scott made an interesting video about internet advertising regulations a while back. [1]

[1]: https://www.youtube.com/watch?v=L-x8DYTOv7w
Location: India

Remote: Yes

Willing to relocate: Yes

Technologies: python, pytorch, transformers, mlflow, docker, fastapi, flask

Résumé/CV: https://www.linkedin.com/in/rohan-winsor/

Email: rohan.w.charles[at] gmail
Air fryer really works. Gets your food crispy with very little oil. Great for heating up stuff that needs to be crispy too.
I wonder what's the benefit of TS if there's no type-checking? If types are not checked that means the TS type-declarations could be totally wrong and nobody would know. In other words they could be misleading.

Why incur the type-declaration overhead if they are not used after all?
It's much easier to worry about locking down the few server-side modules which allow access to the underlying OS, than it is to have to worry about securing V8's JIT compiler. Node's module-based permission system literally just bans certain standard library modules from being imported (Deno's is more fine grained thankfully). That's a much smaller attack surface area to worry about compared to securing the underlying JS engine.
> there is actually a supersonic jet startup. A16Z hasn't invested in Boom, though, near as I can tell.

A quick review of their website and some cursory googling reveals that while boom is not in their portfolio they have invested in a company developing a super sonic jet engine technology (Astro Mechanica) [1] as well as a company producing precision machine parts for aerospace (Hadrian) [1] and various other companies that intersect with the area. [3] Perhaps they wanted to invest in Boom but the deal wasn’t right or they are skeptical of that particular company or they simply never got the chance but clearly they are putting their money into this area and it’s worth researching before judging them.

1. https://www.notboring.co/p/astro-mechanica

2. https://www.hadrian.co/

3. https://a16z.com/portfolio/ (Look under American dynamism)
https://timetraveler.ytmnd.com/
Not quite certain about your meaning. Could you be more specific? RAGFlow does not have its own LLM model or souce code. RAGFlow supports API calling from third-party large language model providers, as well as local deployment of these large models. RAGFlow has open-sourced these two parts of codes already.
> Sure, it requires a bit of discipline

I strongly suspect that in ages past you would have been an ASM programmer shaking your fist at those crazy portable C programmers, and then a C programmer shaking his fist angrily at those crazy memory safe Java programmers.

Progress in programming can be marked by eliminating the need for ceremonial kinds of strict discipline needed to achieve good results.

Which isn't to say React is some kind of next evolution, but signals certainly are a step in the right direction.
Sorry for not being clear. It is a plugin with VS code.
> It's actually pretty effective unlike most other PC DRM schemes.

I wonder how much that has to do with the actual technical merits of this DRM scheme compared to older DRM schems. Piracy as a service problem has mostly been solved on PC by now, so there's not a lot of incentive to crack games anymore.

Most of what Denuvo does has been done by other DRM schemes before, VMProtect has been used by DRM schemes before Denuvo. It just seems that Denuvo is more aggressive with online verification than previous schemes.
Hi, buddy, I'm sorry to make you feel like we don't take women's voices into account. We came up with this name because RAG is already a consensus, as an acronym for retrieval augmented generation, RAG is used in many places, and we think it would actually be a standard for LLM oriented B-side scenarios, so that's why we adopted this name.
pnpm is 3x slower or even more

https://miro.medium.com/v2/resize:fit:832/1*noWyIXw-yeNZq5Db...

https://kinsta.com/wp-content/uploads/2023/12/bun-benchmark....

And for running scripts, it's not even close

https://miro.medium.com/v2/resize:fit:1400/1*oyPEXsFfZsTg4mO...
That must have driven you crazy. The loop bit makes it so counterintuitive since interference from the pallet was actually helpful.
Didn't Jagadish Chandra Bose prove this a 100+ years ago?

> The more responses Bose got from his plants, the more encouraged he became, and the more detailed his efforts became. Bose discovered that an electric death spasm occurs in plants when they die ... Bose calculated that a half-pea, for instance, could discharge up to half a volt. Thus, if 500 pairs of boiling half-peas were arranged in series, the electric pressure would be 500 volts, enough to electrocute unsuspecting victims. The average cook does not know the danger she runs in preparing peas, Bose wrote. “It is fortunate for her that the peas are not arranged in series!”

> ... His 1902 paper “Responses in the Living and Non-Living” contains a whole chapter comparing the electrical impulse response of frog, lizard, and tortoise skins to the skins of tomatoes and grapes. He found little difference. Bose would write that plants grew more quickly when exposed to nice music and gentle whispers, and poorly when exposed to harsh music and loud speech.

> ... Yet, it is not surprising to learn that Bose — whose scientific inventions and work in radio waves were highly esteemed — struggled to gain proper respect in Western scientific circles for his work in plant biophysics.

> ... Bose believed in the fundamental unity of all life, the fundamental unity of everything — “a uniform and continuous march of law.” But it wasn’t just a belief. Bose had scientific proof ... When he talked about the great connectedness of life, he wasn’t kidding around. Bose was also the first scientist to study inorganic matter in the same way a biologist examines a muscle or a nerve. Bose performed his plant experiments on rocks and metals, too. He found that, just like plants, the “non-living” responded when subjected to mechanical, thermal, and electrical stimuli. Even rocks and metals became numbed by cold, shocked by electrical currents, stupefied by anesthetics. He once invited Sir Michael Foster, a veteran physiologist at Cambridge, to witness the electrical response of a poisoned piece of tin (as written by Patrick Geddes):

> “Come now, Bose, (said Foster) what is the novelty in this curve? We have known it for at least the last half-century.”

> “What do you think it is?” asked Bose.

> “Why, a curve of muscle response, of course.”

> “Pardon me; it is the response of metallic tin.”

> “What!” said Foster, jumping up. “Tin! Did you say tin?”

> If he were just a biologist, maybe Bose would have felt more constrained by the conventions of the field: What biologist would think of poisoning a piece of tin?

Source: https://ecologise.in/2018/11/13/j-c-bose-response-living-non...
As a native Korean, I'm sure that both A and B will notice the confusion and switch to full names at around the fifth or sixth line. Korean full names tend to be short so it isn't cumbersome, in fact full names are often used in the first place exactly for that reason.

The real problem by the way starts with multiple persons with the same or almost identically sounding names. My own name (Kang Seonghoon) for example is shared with at least 100s of other Korean people, including one famous singer who got arrested later ;-)
Lol. Fooled ya did she.