skysight-inc/HackerNews huggingface dataset:
I had a similar thought, given recent news around negligent automaker security and scapegoating.

For people who don't want the Flipper Zero banned... I suspect it might be smart to leave the name of the tool out of headlines.

And when we do mention what tool we used in body of the article, that same sentence, or one next to it, should be clear that we're using such-and-such standard technology (e.g., RF or IR), and that the Flipper Zero is only one of many options for doing that.

Promoting a particular product in headlines can be nice, but counterproductive if that same visibility is getting the product banned entirely.
Production ready app for yourself (as an individual or organization) falls under self-hosting, something that's often advertised to get users.

When the procedure taken, is to just run a docker image from the web for an AGPL product, I don't really see what needs to be provided to the users.

Notifying them of which docker image and version is being run so they can access it themselves? The key thing here is no modification to the code has happened.

"Production ready app" for others outside my individuality, group, organization to others, likely for money, is probably what the AGPL is after, to not let big guys compete with and wipe out the small teams building great software.

Happy to learn otherwise, and more too :)
Nope. On general curmudgeon-y principle. Get off my lawn.
Yes. Whether or not a particular standard has been implemented is not interesting. What matters is the result.

Is BGP an attack vector that matters for the vast majority of threat models right now? I would say no. Given that: there is no need for (inevitably) poor regulation.
What could be a difference between identification and authentication? In my understanding they are completely synonymous. I frequently use an IdP (identity provider) to authenticate for web applications.
> I'm tired of not knowing whether I am actually asked for a review, so I'm withdrawing my "ownership" from the core interpreter

I am out of the loop on Python development, what do he means here?
Old isn't always better.

Also, I love how you say that everybody knows the meaning of those words yet you feel compelled to provide the meaning. Doesn't really make a good case in your favour.

I highly doubt laymen would understand the difference when using "authorize" and "authenticate" as opposed to "permission" and "login". I would bet you $100 in bitcoin that most people would understand the latter.
This article was posted on August 28, 2023. The giraffe was born 31, 2023. So presumably none of the models tested included this particular giraffe in its training data. To directly compare it to GPT-4o, which was released recently, is an invalid comparison. I wouldn't be surprised if GPT-4o does better on novel recognition tasks like this, but you'd need a new novel concept in an image to directly compare GPT-4o and the models tested in this post.
I still wonder if it would be possible for a rogue concert goer to hijack a side of the stadium to display something. All sorts of trouble you could cause.
You explained that very clearly, and I am grateful for that.
I'm not a physicist, but a massive Wikipedia article on Alpha Centauri says nothing about the system not being gravitationally bound, and at least one scholarly article says they are gravitationally bound:

https://www.aanda.org/articles/aa/abs/2017/02/aa29930-16/aa2...

> ... the question as to whether they actually form a single gravitationally bound triple system has been open since the discovery of Proxima one century ago. Owing to HARPS high-precision absolute radial velocity measurements and the recent revision of the parameters of the α Cen pair, we show that Proxima and α Cen are gravitationally bound with a high degree of confidence. The orbital period of Proxima is ≈ 550 000 yr.
WhatWeWatched.xyz – Netflix data for July-Dec 2023
Last Thursday, Netflix dropped their viewership data for July-Dec of 2023. I've updated WhatWeWatched.xyz to add the new data for your curiosity!

I've also added an option to view the charts via a graph - please let me know if there are more features I can add to make it useful. Cheers!
> or we could just use the longer words?

we could but don't expect anyone with dyslexia noticing that a text says authorization when they subconsciously expect authentication (and don't explicitly double check)

Through also if we use AuthN and AuthZ (with capitalization) it's quite clearly readable and hard to mistype and no longer the kind of words dyslexia makes it easy to misread (it never was in the category of things dyslexia makes easy to accidentally mix up when writing I think).

Using authorization and authentication also can have issues if you use a text editor with auto completion, for AuthN/AuthZ you simply could not use autocompletion.

> My guess is they ran into something like installing a package that didn't cover their desired needs,

or got into problems because they used the wrong term in technical documentation, maybe in context of a security review or a requirements document which has been legally binding singed of

> The confusion is not going to be solved with trying to relabel the concepts.

Especially given that login likely implies both AuthN and AuthZ so it's not even "just" relabeling.
They're distinct words that say exactly what they do. They're only hard to keep straight if you haven't taken a few minutes to understand the underlying concepts (and, in a field of complex and nuanced concepts, these are hardly the most difficult). Replacing widely-used terms with new not-quite-overlapping terms turns 2 things into 4 things and is not a solution to anything.
For a hobby project like this, I don't think you need utmost certainty.

And if you're building aircraft, why are you shopping on Aliexpress?
But then it mostly ended up getting used for authentication anyway, so maybe it was ok.
Nice, looks like this now has vector search thanks to FAISS. Might be an excellent DB for RAG! I'll have to try it out.
Both of these features aren't implemented yet, but definitely on the roadmap. Currently, a simple (but fast) exact match search is in place.
Easy enough. Tint the photo purple and ask it again.
Ah, I'm not social media apart from forums. I do watch a lot of coop and run builds on YouTube though. With that inspiration I bought a bunch of tools and am in the process of revamping my stuff to fit more with our house. It has the added benefit of making the chickens more a part of our little microecosystem as well since much of it is geared towards collecting their waste and pine flakes to make into compost. Even with all the tools added in I'm probably only at $2-3k.
I can empathize with this struggle, but I don't think that warrants changing terminology.
I think this was just poor wording in the article. My local power company (Dominion Energy VA) recently started a huge iron-air battery project because the technology supports 100 hours of active discharge [0]. I'm sure there's some background discharge, but it takes a lot longer than 100 hours for iron to naturally rust through.

[0]: https://www.pbs.org/wgbh/nova/article/iron-air-battery-renew...
What is it that you think open source means? Vibes?
Hey, thanks a lot for testing. Since gmail.com is legit domain, I don't think I could flag it as disposable.

But, the API does return normalised gmail address which you can use to create a unique hash column on your database to prevent any signups using that same gmail address!

For example. u.s.e.r+platform@gmail.com will be normalised to "user@gmail.com" and you can save this unique value to database and prevent signups using "u.s.e.r+platform1@gmail.com", "u.s.e.r+platform2@gmail.com" etc
It does, yes. The single word, from that source, on this topic, communicates all relevant information.
Does it at least mark the end of an era? Even if it doesn’t have any legal meaning, it could still mark a significant milestone — especially if you look at the future of the language. It’s now in the hands of the next generation of maintainers (at least as far as PRs go).

But as others have said - I’m not sure what this really changes.
I'm just interpreting the context (guessing) but it sounds like his presence in the CODEOWNERS file means that he's being added to PRs automatically, and without people clearly asking for or wanting his input on them specifically. And perhaps without waiting for his input before merging. So he may want to be tagged on PRs only if people deliberately want his input, rather than by default.
Can somebody explain what Guido van Rossum has been doing from a day to day perspective on core Python since he stepped down from BDFL? I’m asking in good faith as I don’t follow Python that closely and am curious what he has done since 2018.
Let's say that you eat n calories of junk food every day (maybe that's all you eat or a part of your diet). Replace those with n calories of healthy foods. Great - you've probably made a good change for your health long term. But you haven't made progress towards losing weight because your calories are the same.
A former student of mine (Vera Yaseneva) redesigned our old auth architecture using jwts and I’m pretty happy with how it turned out. Maybe it is overkill for our simple autograder server, but it was fun getting it to work and I’m sure it is more secure than the old architecture which had many many flaws… it was a maintenance nightmare for years. After the redesign it has been a breeze. Here is the project https://github.com/quickfeed/quickfeed

The security arch is mainly in web/auth and web/interceptor packages if anyone is interested in learning from the code. It uses connectrpc, which has a nice interceptor arch.

Happy to share Vera’s thesis report if anyone is interested…
Major props to the authors of this library. I re-built https://progscrape.com [1] on top of it last year, replacing an ancient Python2 AppEngine codebase that I had neglected for a while. It's a great library and insanely fast, as in indexing the entire library of 1M stories on a Raspberry Pi in seconds.

I'm able to host a service on a Pi at home with full-text search and a regular peak load of a few rps (not much, admittedly), with a CPU that barely spikes above a few percent. I've load tested searches on the Pi up to ~100rps and it held up. I keep thinking I should write up my experiences with it. It was pretty much a drop-in, super-useful library and the team was very responsive with bug reports, of which there were very few.

If you want to see how responsive the search is on such a small device, try clicking the labels on each story -- it's virtually instantaneous to query, and this is hitting up to 10 years * 12 months of search shards! https://progscrape.com/?search=javascript

I'd recommend looking at it over Lucene for modern projects. I am a big fan, as you might be able to tell. Given how well it scales on a tiny little ARM64, I'd wager your experiences on bigger iron will be even more fantastic.

[1] https://github.com/progscrape/progscrape
I'm not an astronomer either, but pretty sure if I generated uniformly random points on the scale of number of visible galaxys, I could find a circle in there
sort of interesting on the always part, as I don't think the failure mode of it is acceptable or desirable, where someone whose default is always to have checks/balances is ok with it because presumably they benefit.

the alternative to checks and balances is the freedom to defect, exit, repurpose, optimize, compete, reinterpret, etc. we can always invent moderation schemes. even though I think the effect of unregulated social media has been existentially bad for western societies, most of the regulatory state seems pretty happy about the outcome. who could have predicted that all most people really wanted was to deliver food and do soft peepshow sex work while they raged about their outgroups and waited for their 15mins of fame? ugly and messy, but it's what we wanted.

The one group you don't want to help are the ones who are actuated by having power over others. It's a sick kink, and the only thing that has kept them at bay so far has been the high bar of competence for math and code. AI changes that, and depriving good people of powerful tools by restricting them to the hands of regulators means only the worst people will have them. Open sourcing everything to take away any moats they may have seems more urgent than ever.
Not utmost, but if I put one in my car, it matters if one burns at 2A and the other at 4A.
Finding ~50 dots arranged in a (very loosely defined) circle, from any projection, of a dense set of 2 trillion of them is very plausible.

Actually, you would have a hard time producing this set in such way that no "circles" like that are found at all. It would have to be a very artificial distribution of points in space for you not to observe this, like all of them arranged in a single line, or a giant rectangle, idk.
Having authn stateless whether with JWTs or not is a bad idea. By extension refresh tokens are a bad idea. Doesn't mean JWTs are a bad idea, if used as a general auth token they are fine. Implementing revocation of JWTs also isn't very hard but you need somewhere to store the revocation state.
Why would it be "lethal"?

As a dev you're either building or hooking up to either or both of them. And you know what each requires you to build / hook up to.

As a user, you just care "I put my login/password/api key here, and I get the capability to do several things in that webpage/service/etc". Both auth and the other auth are handed for you.
Honest question, are articles like this propaganda to make people accept less than ideal working conditions? I feel like I am constantly inundated by posts like this. Never do I see anything to contradict it. There is no real conclusion or solution proposed in this article. I have seen Reddit posts with more substance.

The article may as well be titled, “Work hard or this could be you!” And I see it in the news feed every week, if not every day. A constant reminder of what happens if you don’t get rich by the time you’re old.
Congress only authorizes executive branch agencies to have responsibility for certain things, and tattoos are not within scope, not being a medical treatment of any sort.

BTW FDA was explicitly barred by a corrupt law* from regulating anything "natural" (a poorly defined criterion) so the same happens with all those things you see in Whole Foods: FDA can warn you of certain dangers from their web site but that's it.

They have a summary page that talks about the history of law that apply to them: https://www.fda.gov/about-fda/fda-history/milestones-us-food...

* Herbalife got their senator, Orrin Hatch, to get this law passed so they would stop getting in trouble for peddling snake oil in both their products and their MLM business model. His career was basically 100% carrying water for MLM folks and the music industry in exchange for cash.
from Figure 1 (page 5 of the PDF) https://arxiv.org/pdf/2402.07591:

> The tangent-plane distribution of Mg II absorbers in the redshift slice z =
0.802 ± 0.060.

the ring is visible in the slice, which corresponds to a distance range based on those redshift values and cosmological parameters. I think this is effectively a spherical shell of a certain thickness.
You wrote a comment upthread that misapprehended the post you were critiquing. I was motivated to offer some corrections. I'm less interested in the philosophical argument you now propose, except to say that PII segregation has only very rarely been the reason I've seen people adopt stateless tokens. It is still easier to segregate data using stateful token schemes than with JWT.

But I don't want to pretend we're still having the same conversation that started up thread. I assume you take my point, that if you think "I already have to do JWT so I don't save anything by not using them everywhere" rebuts the post, you've misread it a bit.
(Submitted title was "Guido van Rossum drops ownership of the core Python interpreter code". We've reverted it now.)
See https://news.ycombinator.com/item?id=40492264

and https://news.ycombinator.com/item?id=40492076
Of course! But we haven’t been proven it yet. And in any case, knowing something exists is quite different than actually observing it. I know every night in Vegas, so many people will hit my lucky number (7, boring I know) on a roulette wheel that it is a perfectly ordinary event with no significance, and yet I would be ecstatic if it happened to me and would certainly be feeling lucky (and so I don’t gamble!). Even if Pi is indeed normal, it would still certainly be beyond surprising to stumble across the complete works of Shakespeare. In fact, from a cultural point of view, it would be a somewhat earth-shattering event! Imagine the headlines! Maybe not, maybe no one would care. It would certainly be shocking to anyone with half a brain cell, even if they knew it had to be somewhere… to find one such particular region is just so improbable that it would be undeniably… cool?

My point is that structure emerging out of noise, even if by mere coincidence, is still deeply interesting on a human, psychological level. Another commenter described the original paper as astrology, essentially arguing that it is bad science… maybe that is the case, but I think there is still room for some form of… confusion, estrangement, awe? in observing these sorts of phenomenon, even in scientific discourse every now and then. It’s vaguely like a piece of meaningless but none-the-less captivating art emerging out of the complex technological and discursive apparatuses of science.
Mapping GPT revealed something strange [video]
This. IPV4 is a mess.....and its extremely frustrating just how unsupported ipv6 is.

IPV6 is one of those things where if isp,'s just switched over to it, I'd have so less nightmares caused by cgnat and that bullshit like how expensive static IP's are.

Many its because I'm not working at a ISP or a teir 1 backbone but forcing the transition to ipv6 seems like overall it would be less of a clusterfuck than our current ipv4 stuff. I know their is stuff going to break, anytime changes are made at this scale it often has some hickups....but dear god I really hate how static IP's are so expensive, and how expensive a small IP block is. Also IPV6 is just an excuse to get fiber everywhere.....I hate how slow many services are.
My deadly simple bash static site generator
He stepped away from being the 'BDFL' back in 2018[1] so yeah, this isn't really news worthy.

[1] https://www.mail-archive.com/python-committers@python.org/ms...
Sorry, none of this is responsive to what I just wrote. I had a particular complaint about the critique I responded to, that's all.
The point of this post is that AI is horrendously bad at anything not in its training set. Asking an AI that does have it in its training set about it totally misses the point.
Yeah I agree, but I think this post is for those cases where this design might be inappropriate, mainly monoliths with single dbs.

I disagree with the whole "you're not Google/FB"/"over arbitary RPS" logic though. If the design makes sense then it makes sense, end of story. Just understand it.. lol
All we want is a tree explorer :'(
"Legal" is not the same as "recommended".
I can’t imagine them not providing a way to turn Recall off, for reasons like the ones you describe.
While this is true, let's not forget that if there's a problem in the unsafe section, the issue can manifest itself much later in the safe code..
I'm not a Rust programmer but I remember reading about such kind of issue (an alignment error if memory serves).

So sometimes you can build a 'self contained' unsafe part made safe with the right API but not always, which is already a significant improvement over other languages which are unsafe all the time..
That would have been his 12 July, 2018 announcement.
https://devblogs.microsoft.com/python/python-311-faster-cpyt...
There is no one to return them to, everyone from the past is dead.
That’s the thing! I have recently seen pictures (in kid’s books) and even live ones at the zoo. My brain simply pattern matches the shape not the color. It appears the ML model does the same.
Introduction, paragraph 2:

>The multiple discoveries of LSSs made throughout the past few decades are well known to challenge our understanding of the Standard Cosmological Model (ΛCDM) [2, 8–12], in particular due to a possible violation of a fundamental assumption, the Cosmological Principle (CP), which states that our Universe is both homogeneous and isotropic on large scales

That gives you a couple papers and a few terms that you can get started with. Unless your goal is to argue, instead of learn, which it seems like it might be.
A growing faction of developers consider that to be a good thing.
SWE-agent turns LMs into agents that can fix issues in GitHub repositories (MIT)
> The chance of some set of galaxies among all the billions in the sky doing this is much higher.

Of course in relative terms it's much higher, but it doesn't matter—what matters is the absolute value. 10^-100 is much larger than 10^-10000, but if something with the probability of 10^-100 happens, it's still "astonishing."

The probability of a particular planet has a shape of pyramid is so low. And yes, the probability of finding any planet in the universe that has a shape of pyramid is much higher, but still very low. If one was found, scientists would freak out.
I hope this doesn't end up in the paid or API versions.
It means Github won't ping him for every pull request.
Found recently Tantivy inside of ParadeDB (Postgres extension aiming to replace Elastic)

https://github.com/paradedb/paradedb/blob/dev/pg_search/Carg...

after listening

Extending Postgres for High Performance Analytics (with Philippe Noël)
https://www.youtube.com/watch?v=NbOAEJrsbaM

And inside of the main thing - Quickwit(logs, traces, and soon metrics)
https://github.com/quickwit-oss/quickwit

Had a surprisingly good experience with combined power of Quickwit and Clickhouse for multilingual search pet project. Finally something usable for Chinese, Japanese, Korean

https://quickwit.io/docs/guides/add-full-text-search-to-your...

to_tsvector in PG never worked well for my use cases

SELECT * FROM dump WHERE to_tsvector('english'::regconfig, hh_fullname) @@ to_tsquery('english'::regconfig, 'query');

Wish them to succeed. Will automatically upvote any post with Tantivy as keyword
With tongue in cheek one could say it’s also not called Macbook 3D ;)
I'm a hobby programmer with no production requirements, so I often use projects maintained by only one developer who may not be much active if all all. Also, since I program in Lisp, code updated a few years ago may still be good.
Which we have in modern computers and mobiles (the EU identity wallet concept is built around them).
As time + heat_energy = temperature: SHOOT that one the fastest possible into the sun. ...with godspeed:

capture one member of Q, and torture it until Q moves the ship to where you want it to be.
This is the last of his “George Washington” moments - a peaceful handover of power with barely any fuss.

Over the twenty something years I have been watching python development, there has always been ”grownups in the room” - reasonable people making the best decisions they can manage. (Not always perfect, not always calm and without incident but overall, solid.

Python really has been an exemplar on how to manage an open project, and this marks a multi year long process of peaceful handover of power.

Nice one Guido.
I suspect we're approaching this situation for numerous types of communication.

If you think about it, the whole "we're going to overnight the offer letter via FedEx" thing is a well-established variant of this trick. It's less about the 48 hour service than the fact that spoofs cost $10 a pop, and would be unlikely to manifest in volume (though of course targeted attacks might occur).

Similar for regular USPS, though that hit's only $0.68 presently.