skysight-inc/HackerNews huggingface dataset:
Yeah you addressed the elephant in the room.

Obviously it's a brand new product, with 0 reputation. As with every new product at the begining I expect bugs and disruptions, but IMO the product is simple enough to get it right quickly. FILE0 a simple layer on top of R2, so for reliability and HA is majorly dependant of their system.

You can trust me as much as any random guy on the internet.

For a big cloud provider you will be just a number, they don't particularly care if you're happy or not, but what I can tell you that for me you're my #1 priority. If you're happy, FILE0 survives. If not all the effort building it goes to the bin.

What's missing from the product is the ability to share apps (aka buckets) with your co-workers. If thats a feature you can live without momentarily, businesses can ask for a custom offer if 100GB is not enough. But they won't be billed after seats or any of that crap. Just for usage.

That all being said, I would love to setup a call and have a personal connection, and I'm here to help with anything you might need. I'll enrich the page with more obvious contact details, because it's a legit concern I'd also have.
It also means something else in finance
In the US, HIPAA grants you the right to access your own health information [0]. I recommend asking providers to burn the DICOMs to a DVD (or send your images to you via an online portal, if they and you prefer) whenever you have medical imaging done.

[0] https://www.hhs.gov/hipaa/for-individuals/right-to-access/in...
This is adjacent to "why would I need EC2 when I can serve from my laptop?"

In terms of maturity of solution and diversity of downstream applications you'll go much further with BigQuery/Athena (at comically low cost) for this amount of data than some cobbled together "local" solution.

I thoroughly agree with the author but the comments in this thread are an indication of people who haven't actually had to do meaningful ongoing work with modest amounts of data if they're suggesting just storing it as plain text on personal devices.

I'm not advocating for complicated or expensive solutions here, BigQuery and Athena are very low complexity compared to any of the Hadoop et-al tooling (yes Athena is Trino is in the family, but it is managed and dirt cheap).
This is key and it’s something engineers constantly miss. My best guess is because it involves a lot of the stuff that engineers don’t find interesting or require outside help with from the business side of the company.

But I’d say almost all of the interesting and challenging parts of engineering happen here. The rest is just manufacturing and maintenance. (Though I find those fun too!)
> a big flashlight sized control rod

"Disclaimer: Use in nuclear reactors not recommended." ;)
Nothing after the # will be sent over HTTPs but doesn't use of URL means its lost if you loose the URL - wouldn't local web storage be more 'secure' and also possibly syncable to other devices?
Actually I think this is pretty smart. This will deter people who disagree with those values to even participating in the community.
My two gripes: it‘s not E2E encrypted, so don‘t put very private information there, and some keyboard shortcuts don‘t work on Windows (and never will, unless they let us configure custom shortcuts someday).
"Kaspersky believes the attackers compromised the bank's account at Registro.br"

I don't think DNSSEC would have helped there either. That's an interesting case study, thanks for posting it.
Not unlike the change from Docker Compose v1 to v2:

https://docs.docker.com/compose/migrate/#service-container-n...

(generated container names went from using underscores to using hyphens)
I see that this sentence was a bit vague. What was meant that Wasmi as a Rust library mirrors the Wasmtime API that can be found here: https://docs.rs/wasmtime/21.0.1/wasmtime/

But yes, Wasmi also supports WASI preview1 and can execute Wasm applications that have been compiled in compliance to WASI preview1.
Valuable feedback. Cheers!
Reminds me of a similar IE issue, I can't recall whether you were capped to 2 or 4 parallel requests max while on the intranet and using a VPN (or some similar nonsense, the memory escapes me), but those were not fun performance issues to debug.
Serious or not (sounded like sarcasm but one can never be too sure!), I'll elaborate on this point.

I think it's both parties' responsibility. Well, "responsibility" may be a strong word, but it depends what you want to achieve.

It's okay to return 429 if you receive more than one request per day. But if the goal is to not get those requests in the first place, you can make it way easier with that Cache-Control header.

A client might not support the Retry-After header; after all, it's not widely supported by web browsers, so I can see how some libraries might not even bother with adding that maintenance burden.

But Cache-Control is more widely supported, so it's more likely to be already implemented in client libraries (or even caching proxies).

If someone doesn't support Retry-After, and also ignores Cache-Control, by all means, return an error. It's probably a misconfiguration of their client library at best, or a broken client at worst.

I'm not saying one should bend backwards and put unrealistic effort into stuff like this; what I'm saying is, if the HTTP 429 thingy was an acceptable amount of effort, then the Cache-Control thing should be similar (actually way less) effort and time and should slightly reduce the amount of requests received.
“Green” is the noun that describes the property being referenced by the adjective.
This is a fair position to take, but assuming good faith all round, one that I think will typically be a minority. If you ask a user if they're willing to share crash reports only to improve the reliability of the software, I'd bet most people would be ok with this. In fact it's sufficiently reasonable that I believe GDPR allows this to be opt-out, something I broadly agree with. I do think opt-outs should be available, I do think there should be configuration available for those who do not wish to share anything, but if the laws are being met, in the right spirit, then I would hope it would provide little actual benefit.
The problem with revolution is that when it comes, you won’t be in charge. The person who is willing to be the most violent and ruthless will be.
It was the OSCAR protocol: https://en.wikipedia.org/wiki/OSCAR_protocol
you will find that not allowing Nazis and the likes into your community generally ties it together, rather than cuts it apart.
The path towards Universal Acceptance is a bumpy one.
According to my family and nurses I was shouting "I am a fly! I can fly!" all while trying to reach the ceiling (by piling tables & chairs). That was until they could stop laughing long enough to restrain me (30 years ago things were different). So I just wouldn't put too much thought on these things. I have absolutely no memory of the event.
I refute thee. My nickname of choice has underscore in it, or at least a minus/hyphen. At the very worst, I'll settle on a period or a space, but some punctuation mark has to be there.
Here is a recent attack showing the lack of resilience in the CA ecosystem: https://freedom-to-tinker.com/2022/03/09/attackers-exploit-f...

With password resets your own mail server is not involved. STARTTLS or not. In the absence of DANE, mail servers will not require or validate certificates. So the reset link will get to the attacker in the vast majority of cases.
So? Gov space contracts are a rather small % of launches in SpaceX's market (roughly, the world minus China & Russia & their close friends). SpaceX does have a monopoly on crewed launch within that market. And - outside of a few low-volume, low-payload providers - a monopoly on reliable launch capability. (Vs. "if you could wait a few years, maybe BO will give us a couple engines, so we can build a rocket for your payload..." crap.)
Wow this is indeed cool. Figma has been tightening up our usage. What other options or alternatives would there be?
Creating the universe in 100 lines of code is the ultimate code golf and we have all been nerd sniped.
I was thinking recently about the inverse of this attack. I have many thieves coming to my warehouse, and was thinking I could broadcast bunch of local ssids to try to see which ones their phones try to autoconnect to.

I could then use that info to figure out where they are likely to hang out, and either give it to police or take matters into my own hands.
I'm jumping in the Gleam wagon as soon as something like Elixir's Phoenix LiveView is available.
I think extensive orchestration leads to the orchestrator becoming a single point of failure. If the orchestrator starts converting events to commands then soon it starts storing state and becomes a big ball of mud.

My preferred form of orchestrator is a gatekeeper. A gatekeeper does three things only:

- maintains a table of which service consumes which events and why
- copies events from the outgoing queues to the dedicated incoming queues according to the routing table (or controls access to the incoming queues via RBAC)
- logs the metadata about the messages it has seen

It doesn't inspect the messages in any way, store them or maintain any runtime state at all.
The RFC claims underscores are removed to promote interoperability. I suspect that clause harms interoperability more than it helps.
Someone should make a programming language called ‘ever’ with a reeeally slow interpreter, so that everyone else can now legit claim that their language is faster than ever.
You’ve never had an ad on a webpage serve you malware via a browser exploit that does not require JavaScript, I see. Nor ever used a compromised supply chain. You think that luck will hold out forever? It won’t.

Turing off JavaScript and using 2FA everywhere are good steps, but like using a firewall and saying “I have a firewall, I’m completely safe” is myopic, saying “disabling JavaScript and using 2FA make me secure” is just as myopic.

You must apply security fixes. Sticking to Windows XP because you prefer it over newer operating systems is absolutely foolish if you connect it to the Internet in any way.

If Steve Gibson were a security expert, Windows XP would simply not have been an option the instant it went out of support.
He’s not the only one with a problematic name: https://www.wired.com/2015/11/null/
How did you end up doing key management?
30 SQL queries are basically normally functioning WordPress, it's a bit more unusual when it gets to 150+ queries zone :)
For startup performance Wasmi and Wasm3 are both the fastest engines according to the benchmarks.
For execution performance you are right that generally JIT engines are expected to be faster than interpreter based Wasm engines.

Also, as stated in the article, on Apple silicon Wasmi currently performs kinda poorly but this will be improved in the future.
On AMD server chips Wasmi is the fastest Wasm interpreter.
Not doing market researvh for a competitor but more like want to get into the mind of these enterprise buyers and what they are thinking in general
How about just getting the work done?
Cheers. The long-term plan of pricing is to only bill after storage-tiers.
The only reason there is no tiers, is because there are no customers with that need yet. But I hear you. I'm also sick of seat-based/bandwidth and a many other metrics providers charge us for.

Public API documentation is something many pointed out, so I consider adding some form of it. Appriciated.

Npm package is meant to be portable. It has 0 dependencies, and only utilizing API's that is widely available in any runtime.

And yes. you nailed it. It's backed by R2 and CF workers.
Yeah. My first thought was "have fun smuggling any kind of bulky electrical equipment into a Taylor Swift concert, let alone a stage light. Security will not even be mad."

But on second thought, I think there might be an actual scenario to worry about: Activists hijacking the system to show political messages.

For that they'd "only" have to beam the IR to a small spot of the room (but with much higher "resolution" than the normal effects). As long as the symbol/text/whatever is still legible enough that people recognize it and can take pictures of it, they'd have achieved their objective.

Something like this might be possible with a much weaker, purpose-built emitter that could be hidden under clothing. Too much risk and effort for some dumb dick joke, but thinkable if people have some kind of political motivation.

As a "bonus", the first blame would probably fall on the unfortunate people whose wristbands lighted up with the message, while the real perpetrators - the ones with the emitter - remained hidden.

There is an easy fix as well though: As the system "paints" with digital signals and not light, the old lighting rule that colors mix only additively doesn't hold anymore - so you could add a "don't light up for the next 10 seconds" command to the wristbands and just have the stage beam that command continously whenever no effect is wanted.
何？
Oh man, software development will be so boring when we get to that point.
When you have highly granular controls, you need to create intermediary common sets or “profiles” of those sets at decreasing levels of granularity for the more common use cases, at least some of the most common sets where I can simply choose a single setting to effect everything with sane defaults.

Consumer cameras remind me of this when they started mimicking more and more sophisticated feature sets of professional cameras. Sure I want that fantastic sensor, great lens setup and ability to take both narrow and wide depth of field photos but I don’t know or rather want to be bothered dealing with adjusting all my f-stops, focal point etc. I need automation where possible for these cases to give me sane results.

In that case it’s a bit more complex because you have engineering problems for those intermediary steps (e.g. autofocus and making sure the image results meet criteria) whereas for software profiles you can often get away with just choosing option sets. Some options still can’t be hand waived away though and require some degree of looking at other things to inform them or being manually set even for pure software controls.
Freenode wipes old database and starts over (2021)
The lead architect of the SWIFT payments system.
It boggles my mind that Apple don't release an iPad that runs macOS. It would sell like hotcakes. And with the M series chips they have already developed the technology to have multiple securely segregated OS's on the same device (so they could have it run iPad OS too if they wanted to).
Meanwhile I'm over here using Claude 3 Opus to do trig and calculus problems as well as generate the LaTex representation of the equations. It's not necessary to be 100% in my case (purely for fun) but I follow its reasoning and it's pretty consistent at least enough for "orders of magnitude" and first order effects. I was gonna post some of the chats about physics but probably nobody cares.
"And the like" including people who see that BLM has accomplished not even nothing, but destroyed the small chance of taking the issue of police brutality seriously. It's not a black vs white thing. It's a police vs civilian thing, and a problem of police being under trained.

People who want to stop people from dying by taking the problem seriously: "nazis". :(
Kotlin Mobile Monorepo Migration
What are good ways to capture auroras with smartphone cameras? During the recent big aurora I've found sideloaded GCam's Night Sight on my half a decade old phone to be acceptable while my gf with a newer handset couldn't get any good photos even with manual mode, what other alternatives are there?
It seems sub-word tokenization vs using character inputs is just a trade off to gain computational efficiency, and obviously isn't how our brain works. We're not born with a fixed visual tokenization scheme - we learn to create our own groupings and object representations.

However, transformers seem to struggle a bit with accurately manipulating sequences, so going to character inputs and hoping for those to be aggregated into words/numbers/etc might cause more problems than it solves?

I have to wonder if these models would not be better off learning whole-word embeddings rather than tokens. You'd have thought they would learn embeddings that encode any useful relatedness (e.g. corresponding to common prefixes) between words. Perhaps numbers would be better off input as a sequence of individual digit embeddings.
Exactly, we need a much more granular approach to evaluating intelligence and generality. Our current conception of intelligence largely works because humans share evolutionary history and partake in the same 10+ years of standardized training. As such, many dimensions of our intelligence correlate quite a bit, and you can likely infer a person's "general" proficiency or education by checking only a subset of those dimensions. If someone can't do arithmetic then it's very unlikely that they'll be able to compute integrals.

LLMs don't share that property, though. Their distribution of proficiency over various dimensions and subfields is highly variable and only slightly correlated. Therefore, it makes no sense to infer the ability or inability to perform some magically global type of reasoning or generalization from just a subset of tasks, the way we do for humans.
> everything should stay in one SQL database.

At least on different schemas.

That and don't let one concern access data from another, or you'll have to coordinate schema changes between those different concerns.
Ask HN: AdGuard for Android or another alternative
Currently, I have a PiHole server running on my machine, but I can't keep it running 100% of the time as a DNS server for my internal network. Therefore, I looked for an Android alternative and found AdGuard Blocker. It seems to work by creating an internal VPN and routing data through it, applying the filters. However, I'm concerned about data security since I don't have access to the code.

Do you know if this tool is safe, or if there is any other open-source project that offers the same functionality?

Any help would be appreciated.
There is a middle ground, however, between Amazon's "let's pile on more stuff until it's incomprehensible" and Google's "ah let's just kill the whole thing".

The latter will really get your customers torqued, the former is going to make some customers not get exactly what they want.

Maybe in the early days this would have made sense, but the cloud vendor lock in is so strong that I seriously doubt most customers even have the leverage. "Add this feature or we are walking to Linode"?

I don't think so. It just seems like a broken product design culture, where the managers need to add features non-stop, so they can make some slides and get their raises. Big company problems, to be sure, but still disfunctional.
Completely agree. I think they were just excited to make progress but it's not out for anyone to use. I was definitely confused by the comms.
Y Combinator: Avoid These Tempting Startup Ideas – Tarpit Ideas
Anything can be made illegal. I agree it's tricky to create a general rule here. My suggestion would be to require bootloaders to be unlocked such that custom operating systems can be installed on it (and yes this could apply to smart TVs, games consoles, etc too).

That wouldn't get it us macOS, but it would get us Linux and incentivise Apple to provide macOS too.
Yes they can. But the ergonomics of that aren't great. Also ollama takes up a sigificant amount of memory. I'm trying this with a cheap model like phi-3 hosted on my server.
Relationship Between Wedding Expenses and Marriage Duration [pdf]
wouldnt presenting numbers in reverse order, with the least significant digit on the left and most significant on the right help with the reasoning?
Fourth Estate
Well, rental as another profit-driven thing, that has multiple consequences - it removes property away from people, it prevents people from getting their own place, it creates concentration of wealth, it drives policies that favour landlords, etc - i.e. big real estate corporations, and landlords generally have a lot more lobbying power than poor renters.
Amazon prides itself on it's amazing software engineering practices.

Why is it that every single input in AWS has some arbitrary character limitations?

Can't do uppercase letters here. No dashes there. Underscores forbidden there.

Even some AWS passwords have forbidden characters in them.

Makes you wonder what is stored as a file on some old NFS volume :).
Awesome poduct! Let me know if u need help.
AGI is like consciousness, 75% of the people in any given conversation are talking about different things.

Truthfully we're going to see that improving language models towards AGI works out the same way self driving cars did - we're going to feel like we're 85% of the way there out of the gate, then we're going to keep tripping over things for the next 15 years.

At least with AGI, we can just throw up our hands, use an easier definition and take the W.
In case you didn’t recognize the trope: It’s a reference to the seminal article ‘Smashing the stack for fun and profit’ by Aleph One. Published in Phrack #49, 1996. IIUC that was the article that introduced the concept of buffer overflow exploits to a wider audience. People have been writing ‘X for fun and profit’ headlines ever since.

http://phrack.org/issues/49/1.html
I don't think any capitalist would like to fund that service. In my opinion AI movement is going to migrate in easier fields then Math, such as k*ing people with a drone swarm. It can not grow into something more than one guy's farm of videocards.
Hey there, I maintain a library a called lustre [0] that does similar things to liveview. The linked docs are the API reference, but there's not currently a guide or a robust example on how to put things together (there's a bare minimum one in the repo you can find) – that'll be changing soon, I was just giving a talk about this at Lambda Days ^.^

In the interest of fairness, there's also sprocket [1] which leans much heavier into thing that you might also what a check out.

[0]: https://hexdocs.pm/lustre/lustre/server_component.html
[1]: https://sprocket.live
Lego have won a lawsuit against a Lego fan who makes and sells custom sets in The Netherlands. He has two days to stop selling and hand over all of his sales data to Lego.

His site : https://habricks.com/
> You cannot just tell your solar panel or wind farm to stop producing energy if you have too much

You absolutely can, this is called "curtailment". The turbine is disconnected from the generator and the generator from the grid, while the blades can be turned to not generate lift ("feathering"). Meanwhile in a solar panel the electron-hole pairs made at the junction just harmlessly recombine.

The issue is that often the subsidy payment structure is set up such that, if the renewables are curtailed, they still have to be paid for.

See "California duck curve": using batteries to bridge mid-day energy into the evening.
Mystery of 'slow' solar wind unveiled by Solar Orbiter mission
I didn't miss it. Read the entire (tiny) subthread...

Logically I agree that this is a "distribution" or "social" problem, not solely "the fault" of urbanization (that is, the "correct" social policies ought to be able to mitigate the natural downsides).

Unfortunately, however, we have thousands of years of data in which no society has managed to discover what these correct policies are (or at the very least, they've been unable to be deployed at scale). This observation gives me some pause and causes me to re-evaluate some of my prior assumptions.

A poor reason to oppose urbanization, perhaps. But not a poor reason to oppose kneejerk urbanization without critical thought (a prevailing trend as of late).

Whatever the case, this force is a powerful one and should not be casually dismissed, even by those who believe workable solutions are (finally) imminent.