skysight-inc/HackerNews huggingface dataset:
Most startups that aim to market a drug don't work like that. The majority just buy the rights to a molecule from academic research, perhaps the founder's research. Before any trials, they have to raise a lot of money, more than enough to pay the founders, so even if the trials fail, the people that make the decisions still get paid.

The large drug companies don't develop many new drugs anymore, and they don't fire their scientists when a trial fails. The people that make the decision on whether or not to move to clinical trials from preclinical data are not necessarily scientists either and they certainly will not be fired. Their decision on whether or not to proceed with trials is far more complicated than for an academic or an early startup such that it can make sense for a large pharma company to attempt a trial even if it is unlikely to work if the expected payoff is sufficient. They will definitely still get paid.
Observation: If you click the power button of your iPhone five times quickly, it will require a passcode on the next unlock. It’s easy to do that by accident when you’re nervous.
TLD doesn't matter, but it's best to stick to common TLDs where possible.

Naming scheme doesn't matter. Use whatever works for you.

Registrar is up to you. Namecheap is another popular option.

What is more important is you use the correct SPF, DMARC, and DKIM records. Your email host will tell you what the values should be (sans DMARC, but that's an easy search away).

Prefix your post with 'Ask HN'. [0]

[0] https://news.ycombinator.com/newsfaq.html
Are not posts where there is a potential conflict of interest explicitly called out as something that HN works to not censor?

User flags can be overridden by moderators. There are some very notable examples, usually I have been very impressed by this.

So far, this is not one of those cases.
> Many choose to uphold their intuition, even when directly
confronted with simple arithmetic that contradicts it

My experience agrees with that, both being stubborn myself and also being on the receiving end of that

I wonder if there is a benefit to sticking with our intuition even if we are wrong in the moment

For example, my intuition might lead me to start a business. I might fail and you could say my intuition was wrong, because it led me down the wrong path. But maybe I start a second business, incorporating my lessons from the first one, and now it’s successful. Was my intuition now right?
Basically, spend some time finding a domain you like and then get it. From there, pick an email service you like or self host. I got coffeefuelednerds.com because it was a fun name. And I can make it sound like a business is the need arises. Not sure I’d like getting lastname.com for email (though in my case, a distillery already owns that one hah).
If you are about to be confronted by a cop:

On iOS, click the lock button five times. The biometrics reset. A passcode is required.

If you are about to cross a border:

Power your phone off. On iOS this clears any keys stored in the Secure Enclave and it’s much harder to get a forensic image.
A fair few, yes. Don't forget that the original definition (from Peopleware) means that these engineers are 10× better than the least capable engineers who are able to maintain their career, not 10× better than the average engineer. They were also comparing engineers across companies, so it's possible (though statistically unlikely) that you and every engineer at your company are 10× engineers.
I think it's economic. The US has free texting these days, which means SMS has more usage here than in another countries. This has prevented the entire nation from coalesing around one chat app, as so many others have.
i would want to preserve everything. this is not solvable with a simple script. in docker this feature comes built in. everywhere else all i need to do is copy my homedirectory, and every upgraded application works with the data i have. smalltalks design makes this a magnitude more difficult, and in the end not worth the effort until i get an opportunity to work on a paid project.
I feel like you didn’t understand my comment in the historical content in which I intended it. Government spending is directly responsible for huge technological leaps in the 20th century, and not today. Obama’s stimulus act funded loans to clean energy companies and was pilloried when bets failed. The country that I grew up in tossed billions into cool shit and nobody ever said boo about it, and we ended up world leaders for decades. The Chinese are doing that now, while we dicker around.
At the exon 101 level, that sounds much more like a job for insurance, savings, or gov’t. (There are generally much lower deadweight losses from transfers compared to keeping people working jobs that are no longer economically net positive.) The better pro-union arguments I know are about balancing negotiating leverage due to many fewer employers than workers.
I absolutely understand, it's just not hard to make scraper traffic appear as (or be) legitimate browser traffic and/or simply distributed across numerous IPs. Other technical controls all have trivial circumvention methods. There is legal precedent (at least in the US) suggesting that scraping public information may be permissible under law (see HiQ Labs v. LinkedIn). Scrapers only ever need to succeed once.

Under these circumstances, how can a website operator feel any sense of practical control over scrapers?
How many people have ended up in prison that wouldn't have been there but for Prohibition?
Just the fact that they operate in the real physical world is a huge benefit for a LOT of people who are trying to use technology they didn’t grow up with.
It seems like an extremely convoluted way to receive what will pretty much exclusively be automated spam submissions since I’m not seeing any protection methods mentioned.

Attacks on any form on the open web have gotten absurdly bad in recent years — hope the author is using something like Cloudflare + captcha.
> I have everything encrypted and self hosted and I sometimes wonder what I would do if I was suffering from amnesia after an accident for example.

Ah! I have the exact same recurring worry, it's very unpleasant. I'd really prefer to keep home media unencrypted, but the thought of a robber seeing my tax returns or photos of my infant daughter is constantly at the back of my mind.
You call it a trick for performant animation, but I couldn't think of any other way to implement something like this. What would a naive implementation look like?
Ah, but a smart fridge has a screen and a keyboard now too, and so do car consoles :)
It's possible to write unsafe and slow code in Rust.
To each their own. Want to be reachable? Use IPv6. My privacy is more important to me than being directly reachable.
I find it ironic to read an article like this on the Bezos owned Washington Post.
I often hear about such things, I'm curious, has anyone here on HN experienced such a thing (or know of someone who did)? At borders I might imagine wanting to check your devices if you're coming back from say some place in central Asia, but how common are random police seizures? (I'm not from the US)
I got an LG UltraFine 43UN700-B 3 years ago, couldn't be happier (well, maybe with a higher refresh rate, but for dev it's enough). 43 seems big at first glance but I got used to it super fast.
> when I lost my old device and had no recourse

Well, if you used Google 2FA, the Authy app exists, and allows you to securely store 2FA in the cloud (as long as you remember your Authy credentials).

If you don't, then yes, your physical phone essentially becomes a dongle and if you lose it, you're screwed. Perhaps they don't educate users enough about this, but that's the fact
It can be a reasonable tradeoff to leave it enabled, even knowing that the state can compel you to present your finger or face. If you disable it, you'll need to enter your passphrase regularly, which means it needs to be short and easy to enter, which usually means 4 to 6 digit numeric, which means you're more vulnerable to offline bruteforce attacks if you lose physical custody of your device. If you leave it enabled, and deauthenticate any time you're about to interact with a police officer, then you can use a longer and more complex passphrase, and be more secure if it's seized from you.
“Force”? No one is forced to give in to peer pressure by buying something.

It’s one thing to want to fit in, but then we should also force clothing to not have visible brands so kids can’t compare what clothes they have, and youth sports teams so kids can’t exclude non-sports playing peers.
Even though it's well intended, I feel like pasting in responses from ChatGPT should be against HN guidelines, if it's not yet. Reason is, if I want that type of explanation, I can go and get it myself. I come here for people's personal comments, not to read them regurgitate what they had an LLM generate. And I use ChatGPT all the time so don't get me wrong, I just think it doesn't add a lot to the discussion here and takes up a lot of room.
https://archive.ph/l3CrQ
Classic comment and perfectly captures the vibe.

I don't understand why people don't understand why making users do this weird shit (and yes, mailto: is weird although not as weird as SVN/CVS vs Dropbox) isn't going to work.
Values and opinions drive human attention, which as transformers demonstrate, is relevant to reasoning.
Partnership-Driven Expansion, is it any good?
As we chart the course for expanding Quiket (https://quiket.me), a ticketing platform primarily for events, into multiple countries, I'm exploring inventive strategies to achieve this ambitious goal. Currently we are operating in country Bangladesh with all necessary legal foundations in place, I'm carefully considering our approach to penetrating other countries. Rather than adhering to the traditional path of significant upfront investments for local establishment, I'm advocating for a partnership-driven expansion model.

Quiket is a SAAS solution, meticulously tailored for a niche market segment, is ideally suited for this collaborative approach. The proposed concept involves forging alliances with local entities in each target country, wherein both parties would share profits on a mutually beneficial 50-50 basis. The initial phase would entail setting up business operations in the respective country, leveraging our robust technological infrastructure and market insights.

This approach offers a multitude of advantages. Firstly, it streamlines market entry by capitalizing on the indigenous expertise and networks of our partners. Secondly, it disperses some of the inherent risks associated with international expansion, as both financial investment and operational responsibilities are shared between Quiket and our local partners.

However, I'm keenly aware of the critical importance of meticulous planning and rigorous due diligence in partner selection. It's paramount to identify entities in country B that not only align with Quiket's core values and strategic objectives but also possess the requisite industry expertise and resources to effectively promote and distribute our product.

Moreover, crafting transparent and comprehensive partnership agreements will be pivotal in delineating roles, responsibilities, profit-sharing mechanisms, and exit strategies. Collaborating closely with legal experts to ensure full compliance with local regulations and tax statutes is essential to navigate potential challenges seamlessly.

In essence, I firmly believe that embracing a partnership-centric approach to international expansion holds immense promise for Quiket. It promises scalability, agility, and resilience while mitigating the upfront investments and risks typically associated with traditional expansion models. I am genuinely excited about the prospect of delving deeper into this strategy and welcome any insights or recommendations on its optimal execution. Also how can we find these local entities for us? And is this a good strategy?
I assume the intent (right or wrong) is that they don’t want to deputize phone staff to deal with “legal” issues. They’re not lawyers, so if you make it a law issue, they’ll move you to a law support. But a big company won’t actually have a lawyer argue over the phone - lawyers like “courts or quiet” policies.
At 6.8 mil $ per year salary (2022), could hire ~130 developers from Europe. Probably more when looking at Eastern Europe.
> Then had to like type in the CCV to retrieve the card but then it also charged my bank account 1c for the privilege of autocompleting the card each time.

I believe those transactions are never confirmed and are reverted after 7 days or something like that
Star Trek IV, right?
I read that link previously but it doesn’t really answer my question (other than pointing out that the cost of developing tech for proximity operations can be split with in-orbit servicing companies).
What Cloud Professionals Can Learn from Sam Walton (2019)
What people / HN don't understand is does the work they do really a 10 person $5Million per year value to Google or can it be done by Two really smart Python Experts.

The problem with Tech layoffs is not that they weren't doing important work, it is that there were large teams to do what essentially can be done by two-person teams.
It's all a matter of tradeoffs. Aluminum is nice but it doesn't protect the internal glass panel from shock damage and a $600 topcase replacement if you mess it up. Especially on the older Macs, that chassis adds to the weight and leaves them pretty fragile considering their tank-like exterior.

Speaking for myself, I'd rather have the plastic Thinkpad. Lenovo commits well to the OS I use (Linux) and I don't want to baby around a laptop that threatens to bankrupt me if I drop it on the Starbucks tile. In terms of longevity, I can do a hell of a lot more with a 10 year old Thinkpad than I can with a 10 year old Mac.

> Not sure what's even close in terms of performance, build quality, battery life etc. This should easily last 10 years.

Recently picked up a Lenovo Thinkbook with a Ryzen 5800u in it. Basically a Steam Deck in sheep's clothing, with a nice HDR 1440p display. I gave it to my brother, and I expect it to last just as long (if not further with community driver support).
By this token, if the majority believes that an "orderly, clean, and safe society" means not having, say, people with a certain skin color in it, do you think that is also fine?

Or taking an existing modern example of Russia. The majority of its population genuinely believes that e.g. LGBT persecution (which, to remind, these days means that two women kissing in public get arrested) is necessary for an "orderly and clean society". Is that also a good example of such a democracy?
If you think that any consequence is acceptable, sure.

Death penalty for littering, for example, can be opposed even by those who feel it should be punished in some way.
Canon Is Finally Letting Sigma and Tamron Make RF Mount Lenses
> You're seriously doubling down on your ignorance instead of just admitting that you were wrong?

From the guidelines:

> Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.

> When disagreeing, please reply to the argument instead of calling names. "That is idiotic; 1 + 1 is 2, not 3" can be shortened to "1 + 1 is 2, not 3."

> Please don't fulminate. Please don't sneer, including at the rest of the community.

https://news.ycombinator.com/newsguidelines.html
Congrats on the launch Supreet! Can you talk about how Cognita compares against competitors like RAGFlow?
What kind of companies or spaces have you encountered them in?
In a way it's not too bad but actually nice if they're okay talking about it. WaPo's youtube shorts often mention the ownership/potential conflict of interest when covering news about Amazon.
Given that you haven't fixed your problem with scrapers (given the complaints you're making right in this thread.) It's obvious you're not in a position to restrict the data-- otherwise you'd not be complaining about scrapers, and thus you don't own it.
"The Blot is paid for by Hack Club" - My reading is the machine is free if you create a piece of generative art.
The conduit would be owned by the government, sure.

All regulatory systems result in a specific market. There is no natural form. In the absence of any laws, people use violence or coercion to seize power and then start making their own rules, effectively becoming the new government and shaping the market with whatever rules they impose (or refuse to impose while excluding another government from forming).

The question is, what kind of rules have good outcomes? Lots of people propose dumb rules, like price controls, that have dumb outcomes. Some rules have okayish outcomes but are still subpar and less efficient or effective than better rules.

The best rules create a market with vigorous competition. Because then you don't need the rules to specifically create other outcomes you like, you just choose the provider who provides them, since the rules have done the most important thing and ensured that you have that choice.
Degrowth in Japan (2023)
They never developed a search engine because they were getting paid something like $18 billion a year by Google not to.
Show HN: Jf: flatten nested JSON for easy searchability
Or, most people (reasonably) do not factor arrests into their phone security threat model at all, and can happily keep using convenient biometric unlock features.
Pretty cool project! The design reminds me of the midtbot(https://github.com/bdring/midTbot_esp32).
Not my project I just posted it because it was an interesting model.

If like to see if integrating something like gitpay, which allows you to put bounties on issues could be included in giving people weight in something like world driven.

I'm interested in models of open source that are more sustainable
I think its that anyone important has significant money on the line, and hence wants or requires support contracts for their technicians and engineers. That wildly narrows the range of acceptable choices to pretty much just enterprise vendors (IMO), with the result being a greatly reduction attack surface?
I think their goal is to capture large debris before it becomes small debris.
One can also hold the power and either volume for a second or two and that will lock your phone and display SOS or shutdown screen.
Podcasts, the Universe, and Everything
To avoid the cost of copying the data from wherever it was to where it needs to be...
I did my Canadian taxes for me and my spouse on a free filing site last night, in less than two hours, for $0. Everything was prefilled; practically the only thing I had to fix was to convert an imported investment statement from USD to CAD, and double check that everything was accurate.

I welcome the Americans to the delightful convenience of hassle-free taxes!
The general answer is so that you can get the output at a program-configurable location rather than a hardware-fixed location. For instance, I want to shove out a frame of data and then get the decoded data back into a appropriately-sized static buffer. The hardware could always dump that at memory address 0x5000 and then I could copy it into my buffer, but from a programming perspective it is a lot cleaner if it just shoves the bytes directly into my buffer.

It is analogous to passing a pointer to a buffer to a library function so that the library can write the contents of the buffer directly. You rely on the library (device) operating properly and not writing outside of the designated buffer. That is the baseline.

As you state, you could add a enforcement mechanism that defines the extents of memory the external actor is allowed to store like how many language runtimes check and disallow out-of-bounds accesses. However, if you have multiple outstanding buffers, control structures, or other complex device-accessible structures then enforcing precise "bounds" checking rapidly demands very complex "bounds" definition/enforcement. Language runtimes can do this because they support arbitrary code, but enforcing in hardware that, say, every access lies within the nodes of a "user-constructed" red-black tree rapidly becomes infeasible.

You basically get one of two options at that point, either you rely on the hardware working properly and do nothing, or you design your driver to only require coarser isolation that fits within hardware-definable boundaries. Most opt for the former. If you do the latter then there are various ways of actually enforcing the isolation such as IOMMUs or you could have a DMA controller that basically functions as a IO MPU (define ranges the device can access) (I am not actually aware of any DMA controllers that actually do this as a security measure, but it is theoretically possible).

You do have to be careful that they actually enforce the isolation. For instance, I question if the x86-64 IOMMU implementation is actually safe against a malicious device due to certain supported features such as device IO TLBs, but I do not know about the actual hardware implementation to know for certain.
You could reframe that easily by saying that without Apple making the hardware and services exist, there would be nothing to run your app on. It’s a symbiotic relationship: devs need Apple and Apple needs devs.
Thank you for your detailed comment!
> people generally care less about -O0 code size.

Right. A ~5% additional increase in debug artifact size is really not a high tax.
Alameda: The Island That Almost Wasn't
Thanks! Fun fact, do you know that apparently in reflections off a mirror, the original photon is destroyed and replaced by an "identical" one apparently?
> Why is only one side “entitled to that presumption”? In most common law countries, including both the US and UK, there is a presumption of innocence when someone faces an accusation, their guilt must be proven with evidence.

In the legal system, yes.

Outside it, no. I don’t have to hold a court proceeding to ground my kid or tell people my neighbor is a dick. There isn’t any right to due process in the court of public opinion; there never has been.

In the UK, defamation law DOES NOT PROVIDE A PRESUMPTION OF INNOCENCE. That is the precise problem. It is highly unusual in that regard. The burden of proof is on the DEFENDANT.

> Even in the US, the law and precedent is clear, you cannot go around claiming someone is guilty of a crime they’re not convicted of, actively seek to prevent them from being employed, and explicitly cause their dismissal from their means of livelihood.

You absolutely can. People can call OJ a murderer. Claiming he was convicted of it might rise to libel.

Nothing in the open letter asserts he was convicted of a crime. If it were libel to assert someone committed a crime before their conviction for it, prosecutors would… be in trouble.
This article seems to assert as fact what is merely speculation. There is ample evidence to show external access to voting machines throughout the country and anomalous statistical outcomes during the 2020 election. The fact our court system is completely controlled by Bar Association members who lean 80% toward the party that "won" the election, doesn't detract from the fact evidence exists even if courts refuse to allow for actual cases due to prejudicial dismissal.

The term, "out of an abundance of caution" for me is now immediately translated into, "as a way to cover our incompetent asses". Hope people stop using this propaganda slogan that surfaced during Covid. Frankly, articles like this and the people who post them are the reason our democracy is being torn into swiss cheese at the alter of 'us vs. them'. Our infrastructure and liberty are under attack and all these folks can do is make it about Trump.
You’re going to have to be much more specific if you want to make any sense. All cell phones can already call other cell phones. All cell phones can already message other cell phones.
I wonder if the National Basketball Players Association limits Lebron’s ability to negotiate his upcoming $122mm contract.
When single bug may cost millions of dollars, then Rust is cheaper and faster than Go. Google manager is not a liar.