skysight-inc/HackerNews huggingface dataset:
I'm quite ignorant about how international law and treaties interact with domestic policy. Could you educate me? What is the mechanism within US law by which this reclassification requires approval by that UN commission?
That "anonymous Twitter account" did the data analysis and triangulation. His work is now featured in The Economist:

https://twitter.com/shashj/status/1785374423777759330

https://www.economist.com/the-economist-explains/2024/04/30/...
I'm not a rocket scientist but I am very experienced at project management and I can say fairly certainly that an iterative engineering approach to something and complex and full of hard dependencies as Starship will achieve rapid reusability sometime between much later than promised and never. This is a project with an unknowable worst-case completion date because there are way too many issues with too many unknowable times to resolve issues, many of which can only be worked on once previous issues are resolved, and way too many issues continue to be discovered. Converging on completion is not in sight.

Some indicators are that starship's payload capacity keeps getting revised down, and the launch system still needing weeks of repairs between launches, which means even pessimistic estimates of the number of tanker launches and their cadence are probably too optimistic.
How? It's still federally illegal to sell schedule 3 to consumers without a DEA licensed rx and dea licensing. The banks would still be knowingly in conspiracy to transmit illegal drug money and a litany of felonies for recreational or purely state-licensed 'medical'.
Probably because you can more easily refer to a calendar on a wall when the clock doesn't move.
That graph doesn’t list him as a “huge” contributor at all… bought into the project. Committed after 4 months. Small contribution compared to others.

I should start listing projects I worked on at early stage as creator.

Claiming to be “creator” is disingenuous. Worked on it. Yes. Big contribution over a year before moving onto other things. Yes. Creator? No.
These aren't as related as you think. Ansible is imperative and idempotent.
It was a fine post but please only put Show HN in titles if it's your own personal work. See https://news.ycombinator.com/showhn.html.

(I've taken "Show HN" belatedly out of the title of this one now.)
Android Studio IDE launches free AI features
I assume removing long standing people on a project would greatly decrease quality. I am sure that google wont spin it that way. I wouldn’t go as far to say that cheaper labor always means less quality.
Oh man this is really cool. I have also written a Python infrastructure-as-code project (https://pages.micahrl.com/progfiguration/), I really like the idea of using a programming language rather than a text document to define infrastructure. Yours looks very polished, and the built in support for testing in Docker is a brilliant idea.
If you can't even use it without an account, then that's an issue. It's not like Kagi where using the tool requires compute credits on their side, so offering it without a login wall isn't possible.

Mozilla wants me to sign up for a Firefox account too. The difference is that it's entirely optional and the browser works just fine without it.
Yes! https://docs.pyinfra.com/en/next/performance.html
Rama is a testament to the power of Clojure
Genuine question - could someone give some insight on why the post was flagged? I found the article interesting and it wasn't my intention to divide the audience. If anything, I believe lots of the comments here contribute positively in forming a more educated and all-round view on the matter.
Is it "run-zero" or "run-oh"?
Pydantic creator here.

I understand why this might be your reaction, but let me just share my thoughts:

Can we build all the LLM things people want? Yes I think so, early feedback is that Logfire is already much more comprehensive than LLM specific solutions.

How is our solution any different? AFAIK:

* no one else offers opinionated wrapper for OTel to make it nicer to use, but with all the advantages

* no one else does auto-tracing (basically profiling) using import hooks the way we do

* no one else has dedicated instrumentation for OpenAI or Pydantic

* no one else provides metadata about python objects the way we do so we can render a semi-faithful repr of complex objects (Pydantic models, dataclasses, dataframes etc.) in the web UI

* no one else (except Sentry, who are doing something different) makes it really easy to start using it

* no one else lets you query observability data with SQL

In my mind, the obvious alternative would be to do the thing most OSS companies do, and build "Pydantic Cloud", then start adding features to that instead of the open source package. I didn't want to do that, and I don't think our users would like that either.

In the end I decided to build Logfire for two reasons:

1. I wanted it, and have wanted it for years

2. I think building a commercial product like this, then using OSS to spread the word and drive adoption is a really exciting way to incentivize us to make the open source as good as possible — good as-in permissive and good as-in well maintained. And it means that our commercial success is not in tension with the adoption of our open source, which has been a recurring issue for companies trying to capitalize on their open source brand.
If you notice, both of my examples show a repeated pattern of behavior.

You can definitely judge someone off a single action. If someone fails to put away their shopping cart once am i going to judge them? Yes. Do i think they’re a bad person? No.

But I will judge someone who chooses to make their car as loud as possible. It’s not just one decision, it’s a bunch of small decisions that lead to the car being changed, and a decision is made every time they choose to drive it that way.
There are many many ways to look at this data, but here's one: https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_pr....

Bigger companies can pay a lot more because they are more productive. And further research has shown its the same pool/type of people at each.
also https://en.wikipedia.org/wiki/Formatted_File_System

and https://en.wikipedia.org/wiki/Flash_file_system

and kind of https://en.wikipedia.org/wiki/Amiga_Fast_File_System

Four file systems named ffs; ffs is popular for file systems
The ideal business model (from a user's point of view) for successful libraries like Pydantic, Ruff, etc., is like a foundation or sponsoring. But (almost) nobody pays for them (me included), so their creators have raised VC money, citing: 'We have xxM users and yyyyyM downloads per month.' Not to blame library authors here, they are trying their thing, which is indeed admirable. It's just that open source is difficult to sustain. Wishing them all the best
Direct Preference Optimization Explained In-Depth
32-bit code uses less memory, so it makes sense for embedded systems that can't have and don't need a lot of RAM. Doesn't make sense for an application class CPU though.
> I think the idea here might be that people already know what day it is but they have to think about the date.

I don't know about you, but for myself I find the days kind of blur together (especially (during-COVID, post-COVID) WFH).

I rarely need to know day-of-month.
if the concern is build-times, exposing the data layout is harmless

Not at all! If your private member variables use any interesting types (and why shouldn't they?) you need to include all the headers for those types too. That's exactly why you get an explosion of header inclusion.
No, it hasn't.

You forget, the reason systemd was originally rationalized for its insertion into our trees was "boot times are too slow". Its chameleon-like nature and ability to solve the hastily described problem du jour seems to be its only consistently touted feature.

Bash scripts that start processes are ephemeral. If it's signal handling you want, that was your program's problem. Either that or your program didn't fork itself, which is a fish of an entirely different feather.

And now we have this sprawling mess of complexity and headache.
I guess I'm not the target customer because I don't keep tons of tabs open and I prefer to use separate browsers for my separate accounts. I haven't looked into the AI tools though.
Honestly the biggest uptick of weed use I've seen in my peer groups is in the >= 50 set for pain management, sleep, and...fun.
> maintained tools to keep thousands of third party packages constantly updated from their open source versions.

Hi Zem could you say more about how you maintained those thousands of third party packages? We are facing the same issue and would love to hear your insight!
If anyone is mislead about whether Pydantic is Logfire or visa-versa, I'll eat my hat.

Other than that, see my answer to the other comment.
That's a case of the perfect being the enemy of the good.

If you boil the lobster all at once, the huge ad industry will ensure such regulation never passes.

If you gradually increase regulation, then it stands a change of actually passing, and eventually accomplishes the same goal (even if over a longer timeframe).

Getting everyone to agree that a mandatory, regulated prompt is required is step 1.
Is this really true or just clickbait being bandied about?
DMT and mescaline too.
better remove all the Disney-based Alice in Wonderland character intellectual property from the book.
As a man who currently has 13 esims in his phone...
Ask HN: Is there a visual data mapper for JSON transformation?
For building integrations between APIs I'm often faced with stichting those apis together and transforming the data.

Situation: I have some source json, from some APIs/webhooks and some target json how I need to send it out

Complication: I need to transform it and re-map the fields. Depending on the complexity of the objects that might require some fiddling

Solution: I'd love a visual data mapper that allows me to

1. see the source and target spec
2. example values maybe even API descriptions
3. create simple transformation with Type/Javascript, JQ, JMESpath or similar
4. connect the target and source values visually
5. documentation - the visual aspect is important to help readers, as this is easier to understand/digest the integration, not only "build" it. Also it serves as a kind of todo-list. It's easy to see if something isn't mapped yet.

Any recommendations?
I think a sad part of the calculus is there are lots of bodies willing to be thrown in the grinder. The only danger is a real competitor with a different business model that lets them treat people better.

Case in point is AWS. I've been reading they are a PIP factory for the last couple of years. Doesn't seem like they have a major issue hiring (partly due to lack of a competitor who is doing better).
So my car can crash ("crash" in car terms, not in software terms) because someone wrote a tricky prompt? I try to avoid profanity, but that idea seems like it deserves some.

And, whose car is it? Mine, or Musk's? If I bought it, it better be mine. If it's Musk's, he can pay for it. But if it's mine, it better not be running some non-car-related workload on its computers without my permission.
You can, but it is not that easy and you also need to change your IMSI.

https://invisv.com/pgpp/ for IMSI (not available worldwide)

https://github.com/srlabs/blue-merle for IMEI, a nice guide written by them explaining how it works https://raw.githubusercontent.com/srlabs/blue-merle/main/Doc...

You can follow this thread for more info https://discuss.privacyguides.net/t/cell-towers-tracking-net...
I'm interested in the general thrust, but this article is sloppy at best.

> Check digit: The final digit is essentially used to validate the prior 14 digits with an algorithm. Similar digits exist in other types of identifier codes, such as the Universal Product Code (UPC) and the International Standard Book Number (ISBN). The algorithm that the mobile industry uses, the Luhn algorithm, is also used for social security numbers and credit card numbers.

No, just no. SSNs (in the US) don't have check digits.

Also:

> Then there are network identifier numbers—the MAC address bestowed upon you by your WiFi network or mobile provider

Huh? This nonsense ("bestowed upon") serves only to confuse. This is bad tech journalism: it fails to inform the masses, and is transparently worthless to experts.
He said that while high on cannabis, most definitely.
Keeping in state doesn't help. It's still interstate commerce even just picking a plant and smoking on site non-commercially. Just walking an object within 1000 ft of a school, non-commercially, is interstate commerce.
That's not how this works.

Successfully doing your job isn't a free pass on not speaking to the media about your job in an unprofessional manner.
Is xz an open source success story?
India is just like every other country. Ive worked with very bad developers in India, unbearable, and I've worked with excellent developers that I would hire again in an instant.
Yes. M1.
That’s a great fit for him since systemd appears to lift their monolithic design practices and force them on the Linux community.
Vegan cheese wins Good Food Award, dairy cheese makers have its disqualified
There are methods, but they are generally very inefficient bandwidth wise in the general case. The general approach is to add extra text (pad) so that all messages are a fixed size (or e.g. some power of 2). The higher the fixed size is, the less information is leaked and the less efficient it is. E.g. if you pad to 64mb but need to transmit a 1mb message, that is 63mb of extra data to transmit.

Part of the problem (afaik) is we lack good math tools to analyze the trade offs of different padding size vs how much extra privacy they provide. This makes it hard to reason about how much padding is "enough".

Another approach is adding a random amount of padding. This can be defeated if you can force the victim to resend messages (which you then average out the size of).

Hashing is different because you don't have to reconstruct the message from the hash. With encryption the recipient needs to decrypt the message eventually and get the original back. However there is no way to transmit (a maximally compressed) message in less space then it takes up.

There are special cases where this doesn't apply e.g. if you have a fixed transmission schedule where you send a sprcific number of bytes on a specific agreed upon schedule.
In what sense is your mind free in a world where psyotropics are prohibited? LSD and psilocybin aren't addictive or habbit-building, think about that. Don't knock it 'till you try it.
That only works if the rulemaking happens based on scientific reason rather than politics.
How to Regulate Psychedelics (2023)
No offense to Neal, but I'd love to read more of Snow Crash and Diamond Age style books.
Passkey Implementation: Misconceptions, pitfalls and unknown unknowns
Candidates:

- https://ballerina.io/learn/vs-code-extension/implement-the-c...
Data Mapper is pretty spot on, but is ballerina, a language I'm not familiar with yet. Does this exist for Javascript?

- https://www.postman.com/product/flows/ - can this do object mapping or only "steps" of the flow?

- Another one I found just now, but it's not "visual" https://jolt-demo.appspot.com/#incept
Could be someone at a company that hacks into stuff and sells it to governments too. They're always looking for backdoors and I assume would do stuff like this.
Yes, I had a therapist. I paid $200 per session each week.
From the article: "Then there’s the United States’ international treaty obligations, chief among them the 1961 Single Convention on Narcotic Drugs, which requires the criminalization of cannabis."

Ah, I see. Somehow I doubt that if the US announced it would withdraw from this treaty, to be replaced by an amended version, we'd be invaded immediately by all our (former) allies and be driven straight into the sea. Like, I'm sure there are governments even more obsessed with cannabis than we've been, but like, they'll have to get over it sometime.
They produce text, such as Golang source code.
Great question!

The biggest difference, in my opinion, is that Plasmo is a framework, which means you have to learn its abstractions and rely on specific samples tailored for these abstractions to create new extensions. There are config files and specific rules to follow that are not necessarily related to browser extensions.

On the other hand, Extension.js allows developers to create extensions using the standard extension APIs and abstracts only the configuration files, without the need to learn the tooling specifics. This way, a sample from Chrome or MDN that works with a manifest file as the source of truth requires no refactoring to work with Extension.js, making it easier to get started and prototype new projects.
You can use a brokerage account that reimburses atm fees.
> What makes you convinced it can actually be achieved in reality?

It may never be achieved, regardless of my or your personal views on the subject at hand I think reasonable people can agree if you try and do something but do it poorly, and it doesn't work, that's not necessarily a failure of the thing but more a failure of the execution.

ex: I'm bad at welding so therefore welding is not a good way to hold two pieces of metal together, is an invalid/incorrect conclusion.
Windows 11 requires significantly more advanced hardware and power to even be installed. Meanwhile, you could install Windows 10 on an WinXP-era netbook and it would be functional, if laggy on 2GB RAM.
All compilers end up with local considerations. Instruction selection or register allocation is not a consideration special to compilers that "transpilers" do not need to have, they are specific considerations for that particular compiler target. A compiler to Go must consider Go's identifier rules, which does not apply to compilers targeting a CPU. A compiler to SQL must consider valid SQL syntax and have their own optimization concerns that don't apply to Go. And so on.

The middles all look very similar, though, which is where the heart of "compiler" comes from; that process of some sort of parsing and then transforming down to some other representation. This has a distinguishing set of characteristics and problems despite what frontends and backends get slapped on them.
Same, I am also hiding on Slackware .
Major impact will also be felt at cannabis research at land grant universities. Aka all the experiments to prove obvious stuff like different cultivars affect different people differently can finally happen at scale.

See cannabisstudieslab.com as an example of the kind of non plant touching research that Cannabis Studies majors have been doing due to the Schedule I status.
HN discussion [0] (74 points, 3 days ago, 46 comments)

[0]: https://news.ycombinator.com/item?id=40183978
It's not PIMPL per se that's the problem, it's that C++ needs it but makes it very awkward to write. It feels like the language is fighting against you rather than setting you up for success. At least that's been my angle in this discussion.
The poor San Bernardino Sheriff's department is going to need a new funding source, too.

https://www.latimes.com/california/story/2022-01-28/marijuan...
Should probably just stick with the Terraform CDK or Chef if you need this level of expressibility.

This is no where near the level of readiness needed to be reliably used in a production environment.

Verbose logging is not a reason to introduce a non-standard tool into your stack.
Let's assume for a moment that it is lower risk than sudo (which is the problem is it addressing), why isn't it also called 'sudo', designed to behave the same as the thing it is replacing, so that anyone (and any scripts) that currently use sudo can carry on and be oblivious to the security benefits this new implementation offers?

I'd instead like to see a post saying something like 'on systemd based systems, a more secure implementation of sudo is provided', and all the clever whatever it is happens behind the scenes, and frankly i'll never need to know about it.
Don't forget about tobacco and opium.
Why? Drugs are fun. I drank a hot cup of coffee this morning and enjoyed the warmth, taste, and way it made me feel. Those were all pleasant sensations that would be hard to get another way. Why shouldn't I be allowed to experience them?

Roller coaster rides are fun and cause a release of adrenalin in me, which leads to feeling hyperalert, excited, and energized. That's fun! I don't want to live in a society that wouldn't let me enjoy adrenalin releases.

This morning my wife told me she loved me, and I enjoyed a nice wash of endorphins from it. What's wrong with enjoying that?

The common thread here is that there's not a clean dividing line between "bad" drugs and "good" drugs. All animals enjoy certain chemicals. We're evolved to. That's what makes us (in nature) dig into food that's healthy for us, and drives us to reproduce. A mind free from drugs is going to die of misery in relatively short order.
It depends what it is. I certainly go there for news as other news is garbage and sensationalist but it is imperialist and colonialist, depending on the topic.
I mean Python has your back with static type hints. While Python's type system isn't the most powerful in terms of expressiveness -- TypeScript is stronger, Go is weaker, it's more than capable enough for a config management system.
Mandate MFA/passkeys/crypto primitives using regulatory mechanisms.
Screw Change Healthcare. I had the misfortune of dealing with them once as a vendor years ago. Horrible DevSecOps culture due to penny pinching.
Does it actually keep cash out of the store? They might just have to keep track of it at the back of house still.
Arti: A Tor Implementation in Rust
Yeah, he's doing something that's reasonably popular among everyone. How dare he?
I've worked on long projects for a while, you can be relatively invisible for a year and let them know you're getting close (meaning a couple months) and the management will freak out and want it yesterday if it's near the end of a quarter and they think it will look good on quarterly reports. I assume the same can happen with government actors and "security companies".
How they moved laterally was likely trivial. Every place that I seen with a VPN tends to trust everything within the VPN.
Crash-only is really hard to implement if another system is involved that isn't crash-only. If you crash in the middle of a network request, you may not know what state the other system is in.

I've had to deal with buggy mainframe software whose error messages had no relation to how much an operation succeeded. (And no way to ask it after the fact...) Welcome to the special hell.
He was a self-confessed chronic user, granted, it was old-school weed so I don't know how that would scale with what's available nowadays.
yeah... or you could just implement secret ballot like all sane countries have

> blank ones if you want to write down the party of your choice

this can and does risk resulting in the vote not being counted (due to alleged illegibility, a tiny spelling error or whatever)

> You could bring your own ballot if you so choose

same thing, your own ballot could be considered illegitimate + even in the best case that you obtain a real lawful ballot, only a tiny fraction of people are willing and able to go through the trouble of doing so + again, by requesting a ballot, secrecy is out the window

> or vote pretty much anywhere else than were you live during a ~ three week long period

the suggestions just keep getting more and more ridiculous - no one should have to do any of this! everyone should be able to just rock up and vote with secrecy preserved, without having to prepare or use all these hacks
According to a really old SC decision that rests on shaky foundations at best.
One of the Sentry inconvenience is self-hosting: it relies on so many services it can be very complicated to maintain.
Why wouldn't SSH be linked to XZ? Isn't it supported as a compression method for connections?