skysight-inc/HackerNews huggingface dataset:
> Email Id with unique id leaked

What's the unique id here ? SSN number / military id,...?
Jail already deprives people of human rights. I'm still against the death penalty though.
I can't speak for the authors but I think I'd file that one under "and if you write this, ideally a small gnome exits the back of the computer and hits the developer with a mallet."

I'd be perfectly happy refactoring that so I could have an 'a or b' test (I'm assuming $something means that x(0, 0) not free-ing is correct in real code because nitpicking an illustrative example would be silly).

Though note that I'm sufficiently bad at tracking things right when writing C that I tend to spend most of my debugging time figuring out what stupid mistake I made to cause the current segfault - so I'm probably more willing than average to write code differently if it helps me avoid that ;)
The Its Reconstruction Project
Trying to find the coolest print-in-place 3d printed toys.

Last year I gave customized fidget cubes for christmas, they were so popular I ended up getting requests for them.

Looking for something similar, the tri-color filaments make me want to re-do everything to see how it appears differently.
That's my second point. Just checking for version <= 5.6.0 is not safe either and is exactly what the original article has done.

But if all you use as the basis of the vulnerability analysis is the version constraint and what we currently know about the backdoor, then, unless you are a distro building a liblzma distro package, you will not be vulnerable no matter the version (which was my point 1)
I like to think my commitment to the truth is high enough to do what Woods did and stand up for my identity, but honestly after getting out of jail and a mental institution for insisting I was Woods, I might just accept being Keirans from now on. How could it be worse than risking being sent back?
It’s the multiple layers that get me. Frequently things are triple wrapped in plastic between underlying supplier(s) and amazon

Plastics has its merits on weather proofing sure but come on
Your last paragraph is a weird take. It's a story because he was ostensibly trying to hide his identity and failed pretty miserably.
This feels like it missed some of the interesting parts, how about:

Someone spent a couple of years working as a volunteer in a post office research facitility, making helpful fixes to a machine that sorts the mail into neat bundles.

Someone using the prototype machine noticed the machine was using slightly more energy than expected and when they opened the case discovered a highly sophisticated mechanism that could intercept and replace and redirect mail undetected.

The changes were hard to spot partly because the volunteer had also made changes to the machine that boxed up the device for shipping out. Up until that point the visible modifications didn't do anything bad, but a final addition activated the full system just as it was being sent out for use.

If the person hadn't noticed the energy use, the modified machine would have been sent out to nearly every post office in the world in the next year or so.

This mechanism was so sophisticated and well hidden enough, and done with such skill and patience, that the volunteer worker is now assumed to be a spy, but no one knows who they are or who they were working for yet.
I know Apple doesn’t really do GPUs the same way other companies do, but isn’t this generally the idea behind their integrated memory SOCs?
That's just DivX backward.
We can absolutely set the market parameters to prevent this.

5 families have more wealth than 50% of Americans combined. Stock buybacks incentivize short term beahavior - and they used to be illegal!

WE set the market parameters. We don’t have to just say “this is how it works”.
Is there a reason you wouldn't have abstracted your llm calling?
> As soon as you see two of the same pictures you can get it for at least half the price buying direct.

I don't know about this. I've certainly seen a few cases where it was true, but the shipping cost always brought it back up to Amazon price levels, or the shipping time was so long that I was happier paying a bit more to get it sooner.

Maybe I'm just buying the wrong things...
Can't make them too artificially intelligent or they might draw conclusions: https://news.ycombinator.com/item?id=38362711
The article also said he created that email specifically for the book to deal with queries. So it's possible there's more to it.

> Contacted by the Guardian, an IDF spokesperson said the email address was not Sariel’s personal one, but “dedicated specifically for issues to do with the book itself”.
Deep sea mining could be worse for the climate than land ores
Like... an involuntary book club? As in one person opened up that they read something like The Scarlet Letter? I'm sorry that you experienced that.

At an old job I read a fiction series based on a suggestion from my manager but that's because we liked the same type of books, absolutely was not expected to be read to join the "in" crowd. If anything, we were the "out" crowd!
> Also. No matter how bullish you are on the potential of AI, it's horrifying and categorically unethical to use them to decide who to kill. It creates the possibility of atrocity with no accountability.

How much technology is it ethical to use in the decision-making loop for kinetic decisions? I don't think there's an easy answer here that actually engages meaningfully with the question.
The big question is: have you clearly pointed out to your team lead that the business value of you working on this project is actually negative given the opportunity cost? Or did you just accept being assigned the ticket without providing any push-back?
> Published in 2021 using a pen name composed of his initials, Brigadier General YS

Also it doesn't seem like he was REALLY trying to hide his identity
But they did bomb the shit out of everyone and everything. Over 32000 humans were killed, most of them were women and children. And they're starving the rest of the population, stopping aid from entering, and have killing aid workers.

But you consider this good, so it makes me wonder how people like you sleep at night after supporting the death and starvation of an entire population.
>"One section of the book heralds the concept of an AI-powered “targets machine”"

https://www.youtube.com/watch?v=nSQ5EsbT4cE

https://en.wikipedia.org/wiki/Brazil_(1985_film)
> Current AI's not accurate enough to replace most human work and only showing incremental improvements lately.

But I don't think that's the real risk. The real risk is people in charge of jobs that believe AI can replace their employees, regardless of its true capabilities.
M 4.7 earthquake 7 km NNE of Whitehouse Station, New Jersey
To be honest, I could see this happening. What's going on right now is absurd enough as it is. I pity The Onion.
Show HN: I made a site to create cover letters, simplifying job applications
I am recently testing the job market and have noticed that when I send a cover letter I have more responses from companies. I thought it could be automated and perhaps be helpful to more people.

I know anyone could do it with ChatGPT (I was doing it that way), but just pasting the job URL and having a perfect copy/paste ready cover letter has been very convenient and time-saving for me.

Would love to get your feedback ;)
I work as part of building an RDBMS, but most importantly, I know how people misuse RDBMS for more than +20 years.

People write terrible schemas. ORMs hide complexities and make terrible queries.

Some people refuse to use sophisticated features like DataTime types for storing DateTypes (using String instead. I'm not talking about formatting!).

Also, neither use JOINS or VIEWS or FUNCTIONS, or even adding indexes.

They build MonDB schemas on top of PostgreSQL. And then build their own query engine, that is not like the one an RDBMS is happy to deal it.

In short: "Trash-in Trash-out" but for queries, and that is something will be triggered by a system like this.

Plus:

Query engine optimizations IS the HARDEST aspect of build a DB:
Example:

https://db.in.tum.de/~radke/papers/hugejoins.pdf

> The largest real-world query that we are aware of accesses more than 4,000 relations.

And you have a lot of constraints:

- More indexes more data, less RAM, less SPACE.

- More indexes, more query optimization paths, more complex solving of query optimization

- Adding more indexes could create suboptimal access patterns.

- And that changes with time

- And that changes could be on a second
- And then you can create an unintentional delay that WILL impact the pocket of somebody

Doing this stuff "silently" is a sure way to add problems that will be very hard to solve or debug. Sure, without this some of the problems still remain, but at least will be possible to see why and to know when it get solved.

If anyone manages to create a solid implementation of this, it will deserve a noble prize, an oscar, a place in the half of fame, and will be rich.
Anecdotal data from Poland : mostly, yes, they are owned by people living in them, or by people renting them (people having small amount of apartments that they are renting). Mind you - in post-communist countries, in cities houses are not as popular as apartments, as we do not have USA-style suburbs.

There is issue on the housing (apartment?) market, but it has nothing to do with communism, mostly with capitalism - big funds are buying apartments en masse (mostly new ones) and a lot of people started buying previously cheap apartments and renting them, causing prices to skyrocket in the last years.
"I think you might be a scam" – A Lesson in Customer Discovery
If a tool blindly drops columns, that's just a bad tool! It doesn't mean the concept is flawed.

Thousands of companies successfully use declarative schema management. Google and Facebook are two examples at a large scale, but it's equally beneficial at smaller scales too. As long as the workflow has sufficient guardrails, it's safe and it speeds up development time.

Some companies use it to auto-generate migrations (which are then reviewed/edited), while others use a fully declarative flow (no "migrations", but automated guardrails and human review).

I'm the author of Skeema (https://github.com/skeema/skeema) which has provided declarative flow for MySQL and MariaDB since 2016. Hundreds of companies use it, including GitHub, SendGrid, Cash App, Wix, Etsy, and many others you have likely heard of. Safety is the primary consideration throughout all of Skeema's design: https://www.skeema.io/docs/features/safety/

Meanwhile a few declarative solutions that support Postgres include sqldef, Migra, Tusker (which builds on Migra), and Atlas.
Reminds me of someone's personal site: https://dimden.dev/.

Not many people are currently on there, but you can just open another tab and see for yourself. Also has a little live chat which gets a bridge to their discord server, where you can chat with others that are currently on the page.
The PR firm engages honestly with the journalist: "here is an article about how suits are back and calls out my client's suits as being particularly popular right now."

(i.e. it is a thinly veiled ad for their client)

If the journalist blindly publishes this, they are being dishonest with their readers who might assume (especially 20 years ago) that this was an unbiased article, based on the journalist's own research.
Stay Hydrated, Stay Healthy – Presenting TakeSip macOS App
Keeping hydrated is crucial for health and well-being, but many people do not consume enough fluids each day. Water is essential to every cell, tissue, and organ in your body. Staying hydrated helps maintain the balance of bodily fluids, supports vital functions, and can improve concentration and mood.

With TakeSip, a simple macOS app, remembering to take a water break is easier than ever. Our app reminds you to take a sip regularly, helping you maintain good hydration habits effortlessly.

This is still MVP but alive and kicking. Suddenly we are app #2 in Health & Fitness in AppStore. Just in 24 hours after the launch!

Yes, there are tons of health-tracking apps. But what if you want to get rid of that Tamagotchi (your phone) and don't look at any notifications you receive? Still, most of us work business hours in front of the computer - this is where we want our reminder to stay hydrated to be noticeable. Not like just another notification, which will be lost in the hundreds of other beeps.

Stay Hydrated, Stay Healthy!
> About non-blocking: I am asking for their tools API to not block the user from continuing the conversation while my tool works. You seem to be thinking about something else.

To be fair, that was very ambiguous (talking about API’s and non-blocking IO) and their initial assumption was the same as mine (and quite reasonable).
"Benefiting humanity" would be letting profits stay the same but giving an equal UBI salary to people who lose their jobs to this stuff.

In its current state, the main thing AI does is hollow out the middle class. Who has access to the best models, and where does the money go when i.e. an entire customer support tier is let go?
>>Also big contrast is they are defending themselves.

Yes, I'm sure Israel shooting all of those kids in Gaza is just self defense - after all, they can't grow up to become terrorists if they are dead already.

https://www.theguardian.com/commentisfree/2024/mar/23/israel...

https://www.theguardian.com/world/2024/apr/02/gaza-palestini...

Like, I know this is an extreme example, but this isn't anywhere near as black and white as you present. Israel has done a lot of shit to Gaza over many many many decades, and while it doesn't justify terrorist acts towards Israel, many people could argue that Palestinians are also defending themselves in many ways.
I was responding to the GP comment about it being "sums beings sent overseas".

I agree with you it's mostly unproductive (TBF you actually want military spending to be "unproductive" -- just enough to keep people from attacking you, plus a bit more in case they actually do, but preferably never used). As well, I strongly agree with what I think you're saying that military spending has gone well beyond that point, and money would be better spent on more common threats that people face like lack of access to health care.

But that's only one (huge) problem with the budget; it's not all that singular case, as in the case of agricultural that I mentioned.

It's also a job stabilization program, though those are less effective than they were 75 years ago (you can't retool an IBM card punch factory to make machine guns). And using the military as a jobs stabilization program is inefficient.
The last paragraph is interesting. I guess the "whatever" that PR mutated into is the influencer culture we have now.
Remote pair coding, then jumping to a shared whiteboard, then a shared diagramming tool, then back to a shared IDE
Felt tremor in Washington Heights just now, lamps was shaking
Some countries have already sort-of banned single-use plastic bags (with exceptions where it makes sense).

Where I live supermarkets now only have paper bags or sturdy multi-use bags.

There will also be some EU wide legislation pretty soon.
Hamas literally asked for investigation by independent international organizations. Israel refused. Tells all what needs to be said about that illegal terrorist rogue state that it Israel.
At this point, "aiding and abetting" seems to be "existing while inside Gaza." See the
deliberate execution of the world central kitchen workers in a three-phase strike to ensure maximum casualties as an example.
Preferences don't tend to work that way. You know how, if you use a sort function that accepts a user-defined comparator, the documentation will have dire warnings about making sure that the comparator gives consistent results?

The procedure you're suggesting here doesn't comply with those warnings. Sorting will not terminate, or will yield different results from attempt to attempt.
That's my first point though. If you only take into account what is currently known about the backdoor, unless you are a linux distro building a liblzma debian or RPM package, you are not vulnerable to the backdoor.

So I believe, given the current state of knowledge, that all the projects that are not about building liblzma packages are not vulnerable and thus their postings about them not being vulnerable is noise.
I think what GP is getting at, and is something I've hit as well in the past when auditing diffs, is that it's just not feasible. For a small project maybe, but for a medium to large Rails app for example you would need to dedicate potential multiple full time engineering to do nothing but review diffs. Things change fast, and a lot of the changes are not simple patchsets you can eyeball. Without some domain knowledge and even context such as "did they just refactor or is this a total rewrite" it can be very difficult to even understand what you're reading without a bunch of extra work. At a minimum you need to read the commit log in addition to the diffs.

Personally, this is an area where I think AI could add a huge amount of value. An AI tool that looks at your gem versions (or node or elixir, whatever) and then reads all the commits that changed and reviews them for safety/security and maybe summarizes them, could be huge.
Facebook suggests friending people that I've only texted with and are only a couple thousand miles away. Definitely still happening at least.
The Unexpected Solution to Testing WebAssembly
Perhaps less unexpected than we thought, the answer is: more WebAssembly!
Pros:

• No commute

• I can work for a company on the other side of the continent

• No one steals my lunch

• Can work from my treadmill desk

Cons:

• Lots of interruptions from family

• Always feeling like I'm at work

• Lack of human contact

• There's no "second place," let alone a third

I feel like the pros outweigh the cons, especially with regard to commuting. Driving to work is just more sitting, more fuel cost, more time lost.
The bag tax is 10p [1]. California has had a similar one since 2016 with a 10 cent fee [2].

Anecdotally, the fee seems to work well in both places, or at least single-use plastic bag use seems relatively low as most people seem to bring a reusable bag or use a backpack or similar.

[1] https://www.gov.uk/guidance/carrier-bag-charges-retailers-re...

[2] https://calrecycle.ca.gov/plastics/carryoutbags/
I wouldn't quite characterize it as "building" a trail, rather they're charting a continuous trail and encouraging locals to campaign for bike infrastructure to gradually move as much of the journey as possible onto dedicated bike paths. Here's the map of their current progress: https://map.greenway.org/
Friend of mine worked through 400 pages of specifications for a big pharma software (lots of Java, CRUD, microservices). The project started late, it took longer than expected and by middle of the project they learned the client already migrated to another software.

So the team had continue for several months to fulfill the catalogue of specifications, pass (external) QA and already knew the software will never be used.

He said it was all custom and exclusive and couldn't be reused or sold to another client.
Show HN: ChatGPT Redesign – Safarization
A characteristic of highly effective leaders is the skill to blunder, laugh authoritatively, and claim it was all part of a bigger plan.
Email account aside, he

- Published a book using his real initials

- Was one of four recipients of an IDF prize in 2018

- Did a Master’s Degree at the National Defense University in Washington when writing the book

This is either a blunder like no other or there is no Yossi Sariel. His last name being an anagram for Israel and the fact there's zero traces online for someone who's been in the IDF his entire life, this seems like the most likely explanation.

EDIT "Sariel" is actually the name of an angel from a Judaic tradition https://en.wikipedia.org/wiki/Sariel
Styrofoam is best, it's also horrible for the environment.
I have spent sixteen years working on a note keeping app that only I use.

I even took the registration page down after GDPR out of an abundance of caution.

I use it every day and really like it, but every time I have shown it to a friend they just shrug
Make one and find out. People are experimenting with all kinds of novel ideas. Nobody's restrained by tradition.
It would be - if the math added up. But it mostly ends up being lobby work to lengthen the lifespan of industry investments.
The book is published under a pseudonym made up or his rank and initials and the blurb on Amazon reads:

>[pseudonym], an expert analyst, technology director, commander of an elite intelligence unit, and winner of the prestigious Israel Defense Prize for his artificial intelligence based anti-terrorism project

The defense prize projects & unit conducting the projects are published in The Times of Israel. The person's rank & name is publicly known from other historic news articles. With that context, the google account and Amazon weren't really important to linking the General to the unit in question.
Folks here seemed to like the last eclipse dashboard, so I thought I'd post our pre-cursor blog here for the upcoming one as well. There's also a link to a new eclipse page[0] that will start filling in with data as we get closer to Monday and more forecasts become available.

Since the last eclipse in October we've done quite a bit of new engineering on the site, including a complete refresh on our charting library and a bunch of new features (custom dashboards, alerts, etc.). There's also a national nodal price map coming soon. We have a preview link in the blog post, but I'll also post it here[1] (click on it while logged in and the preview will be enabled). Happy to answer any questions or tag team in our CEO/engineering lead @kmax12

[0] https://www.gridstatus.io/total-solar-eclipse?ref=blog.grids...
[1] https://www.gridstatus.io/map?nodalMapPreview
Yes, there is “fog of war” and “collateral damage.” International law requires that combatants take steps to minimize that. And not intentionally target innocent life.
Android users spend very little on apps, iOS users spend more, that’s why iPhones get better quality software first, with better features and performance. Google’s own apps run better on iphones than on most android phones.

There are plenty of iOS only apps most people would switch for, but Android is the phone people buy if they can’t afford an iPhone.

There’s a reason iphone penetration rises with discretionary income.

case in point: there was no Epic Games Store until it was allowed on iOS. Do you honestly think tthe market cares about android at all?
Gp never said it wasn’t used colloquially, he was just stating gps does have competition. Read more carefully :)
> "higher number = cool faster" (which is actually how it works),

Nope. Simple thermostats have no effect on the rate of temperature change, as the compressor (or furnace) does not have intermediate settings. They're either on or off.

What thermostats do is keep the compressor/furnace running until the set temperature is reached (modulo hysteresis), which is a very different thing.

In other words, setting the thermostat to 90 degrees F won't make the room get warm any faster. It'll just keep the furnace running until the room is 90 degrees. Probably not what you want.
One of Parkinson's essays (of Parkinson's Law fame) is full of stories of things that are "perfected" only after they stop being used.

Although ancient, his essays are still useful in today's world...

https://archive.org/details/parkinsonslawoth0000park_f7z9

Short, funny, and inciteful
Classic warning sign of impending layoffs. Word to the wise.