skysight-inc/HackerNews huggingface dataset:
Dalle 3 or similar are different models compare to LLM, but in the future OpenAI will probably allow generating image directly from GPT-4o without using the Dalle model (as showed in the demo page), I bet it would much better at following the prompts and generating unexpected things.
> You may find that your user account has permission to read the employee salary database. However, you may not be authorized to read that database by corporate policy because you are not a manager.

It's true that there are technical enforcement mechanisms, and corporate policies, but it is false that the former must be called permissions, and the latter must be called authorizations. The policies can easily be called either authorization or permission. It is true that we refer to e.g. Unix file permissions, and a corporate policy is more likely to use "authorization" but this is not a semantic difference--the corporate policy would be correct and binding if it used the word permission.

If a fellow employee asks you "do I have permission to do this?" you must say "no" (or alternately "you're not permitted, even though the computer will not enforce that"). Saying "yes" because there is a technical permission would be a very bad idea.
YouTube videos are skipping to the end for users with adblockers
You can always email hn@ycombinator.com if you think a headline is misleading, since the site guidelines call for changing those ("Please use the original title, unless it is misleading or linkbait; don't editorialize." - https://news.ycombinator.com/newsguidelines.html)
A god-shaped hole, or a gap where god once was? https://en.wikipedia.org/wiki/God_of_the_gaps
Is high power IR lamp safe for eyes?
> To "fill" an electric car to 100% isn't feasible in 2 hours, let alone 5 mins. Even if it took just 20 minutes to "fill" it is still shit compared to my current diesel.

It takes me 0 minutes to fill my EV. Plug in at night and full in the morning (and pre-heated / de-iced on an automatic schedule too). Going somewhere else and standing for 5 minutes once a week isn’t something I’d rush back to.

Edit: My anecdote is about my mum filling up the car with petrol instead of diesel because the handle of the pump was black. You don’t want to know how long we waited for that.
I think they mean "chemical composition", e.g. how much hydrogen / helium / other elements there are in the star, deduced from their spectra
The establishment always gets the most advanced technology, attack and defense because they have the big bucks. That's why I never believed that technological advancement promotes individualism, distributed X (whatever X is, money, power, whatever). Eventually it always points to a more centralized world because the elites are able to control more with each technological advancement.
The documentation for it is here: https://help.kagi.com/kagi/ai/assistant.html#research

I have it through Kagi Ultimate.
I agree this appears to be Musk's opinion of LLMs in particular.

However, as Musk has already got AI in his cars and was interested in the topic well before LLMs (founding investor in OpenAI when they were doing reinforcement learning), I'd be extremely disappointed if he had forgotten all of that in the current LLM-gold-rush.

(That's not a "no"; he's disappointed before).
Good perspective, thanks, this is the kind of information that is often hard to find: deciding on a tech stack is nuanced, is more than preferences. I am looking for a good source of information about approaches to application architectures that is relevant to modern times.
Back in the day smartphones with GPS became widespread, I had a more convoluted but much cheaper idea that involved no external hardware: an app that would register to a database with seat position, then refine it using GPS (in case someone is changing seat or wandering around), then it would have been just a matter of keeping the phone in sight using a phone necklace: the app would download its sequence to be played (each screen would essentially act as a big RGB pixel) then synchronize the pattern against NTP+GPS precise timing, then wait for the right moment to play it. Phone in closed spaces could not have used GPS, so they would rely on seat registration, although I was exploring the idea to use Bluetooth or ad-hoc WiFi links to synchronize with nearby devices to detect movement (that is, if I have say 5 devices very close, their seats match while mine doesn't, very likely I'm the one who moved elsewhere and my phone would update position accordingly).
Probably too complicated to gain success, but I didn't even try to develop it beyond the simple idea; laziness and other problems sucked me away from any creative work.
Ocean technology hub AltaSea blooms on San Pedro waterfront
There are many obstacles to receiving an offer from a potential employer. Some of them reflect your likelihood to be successful in the role, and some don't. Fooling an automated screening eliminates one obstacle, which might have fallen into either category.
If you forget to charge overnight you're stuck waiting. If you forget to get gas, you can just go get gas and be on your way in a few minutes
All I can say is you clearly don’t understand what moral hazard is, because my example is a textbook (literally) example of it. [https://www.merriam-webster.com/dictionary/moral%20hazard][h...

If the owner won’t lose out on the payout from insurance by committing arson, or could plausibly get away with it without getting caught, he is experiencing a moral hazard to commit arson.

It’s only insurance fraud if he lies to get a payout from insurance. Which means the insurance policy would need to have an exclusion to not pay him out if he committed the arson, so he lied about it. If it did not have that exclusion, then he doesn’t need to lie about it, hence no fraud.

Either way, that the insurance policy would pay him if he burnt his place down is literally the moral hazard. It’s called a moral hazard because it creates an incentive for him to commit an immoral act that he otherwise would not. It’s existence is a hazard to his morals.

That they would exclude if he did it himself, and would investigate it, is what the company is doing to attempt to mitigate that moral hazard. But it always exists.
It's worth noting that energy transfer rate is not the average limiting factor of pump turnover time at gas stations. A significant portion of people are also doing some combination of going to the bathroom, buying snacks, washing their windshield, etc. And I'd be willing to bet most gas stations have idle pumps the majority of the time. You'd have to do a real study of a station to determine if replacing pumps with fast chargers would serve enough cars or not.
We do backwards and forwards compatibility between v4 and v6 using NAT64+DNS64 between IPv6 -> IPv4[1] and a reverse proxy (delorean) for IPv4 -> IPv6 [2]. To ensure reachability to IPv4 endpoints without a domain, we use visibleip.com [3].

For our users, it doesn't matter if it's IPv4 or IPv6 - they can reach it, and it can reach them.

[1] https://blog.ipv6.rs/ipv4-activated-via-nat64/

[2] https://github.com/ipv6rslimited/delorean

[3] https://github.com/ipv6rslimited/legacydns
That route is possibly one of the sunniest in the entire US. And most of the land around it is barely used.

I suspect this is not a hard problem.
Gpt4, predating the image:

"This image features a young giraffe standing in a fenced enclosure. What's unusual is that the giraffe has what looks like an extra set of small horns, which are not typical for giraffes. Giraffes normally have two main horns (ossicones), but this one appears to have an additional pair above the usual two, possibly due to a genetic anomaly or variation. This feature makes the giraffe in the image quite distinctive."
Related discussion on the CNN report in Feburary:

Mexico City may be just months away from running out of water

https://news.ycombinator.com/item?id=39500283
Businesses in D.C. Blame the Government for the District's Empty Offices
This seems to be about GitHub’s annoying CODEOWNERS feature where every matching user in the CODEOWNERS file is forcefully added as a reviewer of opened PRs.

To my knowledge this “feature” can’t be toggled independently and in my experience often drastically reduces the signal-to-noise ratio of GitHub notifications for people in a CODEOWNERS file.

I wish GitHub allowed this to be configured. You either get this functionality and enforced code owner approval, or neither.
Gaúcho (Brazilian from Rio Grande do Sul) here. I drink mate (chimarrão) daily. I certainly piss a lot during the first hours.
Unfortunately, there might be too much IP in the code (it was for a team presentation at a company I contract for). I could probably scrub that out and put it up on GitHub, though.
We spent a week in Disney World last month where we used Disney Magic Bands. I thought they were a total blast, they serve as your room key, ride / park passes, then they are lighting up and buzzing all over the park when interactive things are nearby. During fireworks shows they add their own light show based on your proximity to the event.

Sure, they are also tracking our every step throughout the park but this felt like a good thing, like if our 9 year old got lost, his band would totally identify who he's supposed to be with and where we are.
I second Emacs Lisp. Call `emacs -Q` (to open it without an init) and press enter. Emacs should have started with the default splash screen open and the cursor over the link to the tutorial. Read the tutorial and understand the basics of Emacs.

Next, read An Introduction to Programming in Emacs Lisp. It's a lovely book and fun to read: https://www.gnu.org/software/emacs/manual/html_node/eintr/in...

Learn to read and work with Lisp by reading the Emacs source code and playing with it.

Check out the Evolution of Emacs Lisp. It's a neat little Lisp! https://dl.acm.org/doi/10.1145/3386324

Emacs has the best documentation and documentation system ever made. Learn C-h f, C-h v, and friends, as well as the info system and the power of indexes.

I hope you find joy and wonder exploring Emacs and Emacs Lisp like so many others have for nearly 40 years!
The "not as capable" Windows laptops still aren't gimped to only run one display.
Even with microservices, you still have the invalidation problem. I guess you could use non-Jwt for external auth and jwt between the services, but then you lose the benefit of standardization (and still don't get full zero-trust). Or you could standardize on jwt, but then, invalidation problem again.
Beware, you still cannot add/remove fields: https://github.com/quickwit-oss/tantivy/issues/470

The only way to add fields is to reindex all data into a different search index.
Thanks! I'll correct myself: lack of interactive global search, discussed here: https://github.com/helix-editor/helix/issues/196

Maybe it's kind of niche feature, but that's how I navigate my code, and that's what would work even greater with helix performance.
I love mate. It has probably saved my life as a software developer, not tolerating the strong effect of coffee on my sleep, but yerba mate, and especially freshly stored in vacuum bags, slightly dried but not smoked is my favorite.

Meta Mate (https://metamate.cc/) makes a total bomb of a mate product, can highly recommend if you are in Europe and want to try out their refreshing Meta Mate 23.

Have to order another batch from them now, I've tested many mates but theirs just tastes and works the best for me.

Was introduced to mate by a fellow software developer back in the day, happy that he did, would not have figure out it otherwise.
Not an issue for most cases but a cache of revoked tokens is going to be much smaller than a db of all users tokens.
They also don’t seem to be taking into consideration the fact that answers to those tests may already be present in the training data.
I’m surprised they didn’t do it sooner. They will consume Google. They should literally roll out email and a browser and a device and it’s game over
Why is 2024 Google so widely despised that there's such an appetite for seeing it humiliated?
Asking for a friend. how much would this hypothetical bribe to an NY Times writer cost? Or perhaps to some other high profile writer at some high profile digital paper?
How much $$ does archive.org spend on infra and such? How much does one need to endure the most damaging DDOS? I remember seeing from somewhere that Google went through some huge DDOS attack without going down.

Given its benefit to the lay persons I recommend everyone who use their services give a small amount once for a while. I already did so but if not for family issues I'd donate way more.
Are you going to make this list of resources available online or is it for personal consumption only?
Fair enough, access token/refresh token pairs all have those issues described in the article. But why hating against JWTs (pronounced 'JOT' btw) in general?
There are other stateless techniques making use of a JWT, which are very easy and secure to implement. For examples the single auth token approach, with maybe a 2 days expiry and a renew window if the user is active. For some scenarios this is perfectly fine, it is stateless and has no refresh token. User logs out by just deleting the token client side.
Small

Air is like 50V per mil. Cheap plastic is like double that?

If the voltage of a given supercapacitor isn't high, then air could work fine I suppose. At least on those two dimensions, I haven't considered anything else.

Air will have less creep than most (all?) materials, but worse voltage limits.
DDoS services are protected by CloudFlare because free speech and legal online casino are bad guys. Good.
Ooooh, okay. I was thinking of something horrible, like DisplayPort DSC… but for RAM, because in aggregate that would need less bandwidth and less pins.
I would believe those results if they had published the methods (including everything they were correcting for, etc) BEFORE starting the data collection.

Otherwise I can argue that once you have all the data it is feasible to test many different combinations of variable corrections, age groupings, tattoo sizes, etc. until you find one scenario (the one you publish) with "statistical significance".

I had a quick glance at the article and the authors do not discuss any multiple testing correction method. The lack of such discussion makes me think that they were unaware of such problem and they tested multiple hypothesis until they found one "statistically significant". This is called cherry picking. https://xkcd.com/882/

I can think of two alternatives to the cherry picking hypothesis that might make me believe their conclusion will hold:

1. They had the statistical analysis plan decided from the beginning up to the smallest detail. They followed it by the book and they found the published result without exploring anything else, so there were no other hypothesis to correct for multiple testing for. This is feasible, but seeing the significance and effect size it seems this would be a very risky study design, since the effect size they see is rather small. Since it's so risky, I find it unlikely.

2. The result holds regardless of forcing minor variations to all those corrections. This means there would probably exist a simpler analysis plan, without so many corrections, that presents compatible results with the published plan. This is unlikely in my opinion, because if that were the case I would expect a simpler story in the paper, or a larger effect size.

Maybe an independent group of researchers believes in these results and decides to reproduce the study to confirm it. If this happens I hope they follow the same statistical analysis plan published in this paper, and I hope they can publish their findings in the same journal, even if they can't get a "statistical significance".
If you played Doom, you were already in Hell.
The big bang was everywhere. Space itself was created by the big bang. It's not like a bomb going off in space somewhere even though that's more intuitive to imagine.
It's also why we use DPoP for serious stuff.
> All three stars are co-moving with similar chemistry, which implies they are bound

This is a weak assumption IMO. It is also possible that the stars "just" have a common origin and move at similar enough trajectories without being gravitationally bound.
I visited Uruguay a couple years ago and got into drinking mate. Even brought a colorful cup and bombilla [metal drinking straw] back home with me as souvenirs.
This was during the tail end of covid restrictions, so yeah I don't think there was as much sharing as there normally is.
Is it possible for archive.org to trace back the IP addresses? I assume maybe the attackers used a lot of IoT devices or VMs in cloud?
> It does look like they have boxes for you to return it at the end of the show. It doesn't seem too bad when I take it at face value. I'm sure the reality of how sustainable it is is a bit more complex.

They do - and at the Coldplay concert I went to, they tried to gamify it a bit by ranking cities by their return rates. Cardiff was unfortunately not at the top, though I did return mine!
I've bought one mobile app in my life. It was a tower defense game. The first few levels were completely free. After that, the game sends monsters that are too tough to destroy with the towers in the free content of the game. You could pay $2.50 for more towers, $2.50 for more more towers, $2.50 for more levels, $2.50 for something I don't remember, as in-app transactions.

I thought two things: "this game is fun enough to be worth $10," and "this is a really stupid way to do shareware."
The concern is that problems like Thanksgiving will decrease the demand for EVs.
Your daily travel was around half of the average American's[0], and as you said, that was near the limit of what's practical. It follows that for the average American, a normal outlet is not fine.

[0] https://www.axios.com/2024/03/24/average-commute-distance-us...
Wind energy is dispatchable. "Redispatch". Around here the wind turbines are turned off all the time when there's too much energy. The wind farm operators are compensated for that.

Solar is not as trivial which is why batteries and other storage mechanisms are important.
Or Power to X things where power can be dumped if needed.
Incorrect. Gaúcho here, born and raised - but with many many friends and relatives in the other mate-drinking countries and across our (unfortunately currently under a lot of distress) state.

Everywhere in the Pampas region - Uruguay, Paraguay, Argentina and Rio Grande do Sul -, the "roda de chimarrão" is pretty much the same. (Apparently in some part of Uruguay it's a bit less shared, more personal).

One person holds the thermos and generally owns the mate. They usually have the first drink as both a way of validating the drink and as a niceness to the rest of the group, since it's the coldest. Gourd is refilled and passed on to the next person, who drinks all of it and passes it back to the "cevador", who again refills it and passes on to the next person. So on and so forth.
"login" refers to the record of access¹, not the access itself, so it is more properly associated with audit. This dates from the early days² of time-sharing systems when you didn't need a password, you were just saying hi to the computer.

__________

[1] Derived from the signing of a ship's logbook³ when coming aboard.

[2] A few decades ago.

[3] The logbook originally⁴ recorded navigational data and is named for instruments measuring speed through water⁵, of which the simplest is literally throwing roped wooden logs off the stern and counting the knots on the line paying out per interval⁶.

[4] Doubtless some bright-eyed young hornblower with a glittering future career as an admiralty archivist realised that log-structured records could be generalised usefully to all timestamped event and measurement capture, which is why your syslog is full of crap.

[5] Consequently any vessel, maritime or otherwise, measures its speed through the medium in knots. The Enterprise NCC-1701-D, for example, tops out ca.146 megaknots under impulse engine.

[6] It follows by transitive etymology that you may use the term "knots" to edify and delight your colleagues when referring to the rate of creation of user sessions.
Sure, if it's just a few minutes. I've heard of 4 hour waits at Thanksgiving. If it's that or worse "supply and demand" will result in people buying gasoline vehicles instead of electric vehicles.
I wonder what happened in March.
Sorry I meant to say...eh...maybe something from a few decades ago so to capture tiny changes.
Taking complete systems off the shelf and using them smells a lot like money. If/when your app requires enterprise integration, you'll be fanatically happy that you chose Keycloak over having to implement okta... then ldap... then.. Saml... then.. Kerberos... then ldap again with custom mappers..
You are talking about non cancer causing chemicals to humans. The definition of a cancer causing chemicals is it will cause cancer. If it's a small dose it will not be easily detectable that doesn't mean it doesn't cause harm.
That requires you to get repeated attempts with the AI. Most people don't have the luxury of trying multiple job applications until they figure out how to get past the AI gatekeeper.
Emacs' keymap system is fully modal by design. This state machine is why it's possible to fully implement evil-mode (and many other modal editing UIs, like boon, lispy etc) quite easily on top.
Thank you! This will be very useful. Yes, for C/C++ one needs:

* ISA manual
* ELF (generic ABI, psABI (e.g. x86-64-psABI), OSABI)
* DWARF
* Floating-point
* Language standards
* Itanium C++ ABI

and probably a few other stuff.

> it seems like my failure to find the most up-to-date specification is simply because one doesn't exist.

While the up-to-date specification is unavailable, hopefully it is not too bad because all essential features have been completed as of 2001:)

RELR is a linker and loader feature, not on the compiler side.
Compressed debug sections are a pretty natural extension.
I sympathise with the author wanting to make the meaning of these more obvious, but login is not a good synonym for authentication.

Login implies the process of obtaining a session by providing some credentials; this is not the same as authenticating, which can be achieved without requiring a session (e.g. bearer token).

I do quite like permissions for authorisation though.
I’m a NetEng for a large (>1M servers, >100 POPs) network that is IPv6-only internally.

It’s not hard to remember IPv6 addresses for DNS servers assuming your addressing plan reserved the right subnets for anycasted services.

Remembering IP addresses stops being a thing pretty quickly. If anything the challenge shifts to remembering airport codes.

If you are typing them by hand that often even in IPv4 networks I'd be worried about typos and insufficient automation.

I think it’s more that small and medium organizations just don’t have any incentive to change (and plenty of incentive to not take the risk of change) leading to the numbers we see at https://ipv6-in-real.life/
It would be far easier to just add EV charging stations at unpopulated exits.
I had a tool, which extracted all FILE_ID.DIZ files from the archives (zip, rar, arj, lha, ...) in the directory and created DESCRIPT.ION files from those DIZ contents for those archives. Using 4DOS was joy when going through archives.
Yes surely any time they gimp a product it's because nobody needs the feature they removed. It's never just to save money because they know people will buy even if its inconvenient.

Every single person at my large software company uses at least 2 displays + laptop, that's the standard setup. It's just objectively better for productivity to be able to look at multiple things at once without having to cram them into a single monitor.

Terminal, Slack, IDE, and browser each deserve their own monitor ideally. Personally, 2x vertical monitors side by side is a nice to have for programming so one can be for IDE and the other for reading docs/articles.