skysight-inc/HackerNews huggingface dataset:
If it costs e.g. $200,000/unit to create a housing as 5-story buildings then housing should not cost more than $200,000 anywhere that isn't already saturated with 5-story buildings (which includes every metropolitan area in the US), regardless of what local salaries are. Only regulatory rules that constrain construction prevent this from being the case.

There is a minimum amount that it intrinsically costs to create housing, e.g. the cost of lumber, and in some places local wages are too low to afford that, and that sucks but the reason for it is low wages rather than housing scarcity. Then there are places where housing is unaffordable, not because wages are low, but because housing costs are artificially high, and that is a different problem with a different solution.
IMO for startups - stay small, stay close, keep the talent density as high as humanly possible - high enough that hiring and firing decisions are painful. Teams of sub 20 people can get a ton done, so try to not grow beyond that until you absolutely have to.
Could you elaborate on that or maybe provide a source to read up on that approach and how it is implemented?
And when engineers accumulate enough related hacks, scientist-types may discover a pattern and find a proper, general solution. But they wouldn't get there without the pile of hacks that are effectively meta-level empirical evidence.
The Elusive Computer Monograph Number 11
Please look into the myriad scenarios in which HSTS is not honoured.

As usual, any comment stating that people should “just” do x, is wrong.
Even TFA has this sentiment:

> I told Zoraya more than once that I understood her suffering, but hoped she wouldn’t go through with her decision to kill herself.

Quite obviously the author didn’t understand or they wouldn’t have put the “but” clause there.
No, it's not laziness. It's protection.

HN is trying to be a place for thoughtful discussion, mostly about tech or tech-adjacent topics. Flame wars about political things are about the opposite of that.

Now, when tech intersects politics, then it's on a razor edge - is it going to turn into a tech discussion, or a political flame war? There is a tendency (mostly from readers rather than admins) to presume it's going to turn into a flame war and flag it to death.

Again, that's not laziness. That's trying to maintain a site where sane discussions can happen.
May I ask how?
Facebook will soon use your photos, posts and other info to train its AI
A single 18650 can do much more than 30W. My Emisar D4v2 can pull ~17A from a single 18650 on turbo mode, and it's not much bigger than the battery itself. I carry it on my belt everyday. It starts to get a little uncomfortable to hold and eventually triggers the thermal protection after about a minute of continuous turbo use, but that's more than enough for a quick prank. It runs an open source firmware too, so I could theoretically swap in some IR LEDs and program it with the appropriate modulation.
Some recent posts:

* Some Americans live in a parallel economy where everything is terrible https://news.ycombinator.com/item?id=40483750

* Americans view (of) the economy depends on whether they rent or own https://news.ycombinator.com/item?id=40484665

* Should we believe Americans when they say the economy is bad? https://news.ycombinator.com/item?id=40505611

* Majority of Americans wrongly believe US is in recession – and most blame Biden https://news.ycombinator.com/item?id=40447182
It’s part of a meteorite.
personal email failed because email is a flawed system that was initially designed to work in a trusted environment free of bad actors

I'm as worried about massive platforms playing gatekeepers as much as the next guy, but it's also fairly clear to see that any service that isn't constantly moderated will be overcome with a flood of malicious crap. it practically guarantees closed platforms will proliferate
Or you need to have enough experience with any IaC tech that setting up a bucket with proper permisioning is a breeze.

Once you get your own little pulumi/terraform library, these things really stop to be a pain.
> TFO has been difficult to deploy due to protocol ossification; in 2020, no Web browsers used it by default.[2]
San Francisco's Hot Tourist Attraction: Waymo Driverless Cars
Catherine Rampell is an opinion columnist at The Washington Post. She frequently covers economics, public policy, immigration and politics, with a special emphasis on data-driven journalism. She is also an economic and political commentator for CNN, a special correspondent for the PBS NewsHour and a contributor to Marketplace. Before joining The Post, she wrote about economics and theater for the New York Times. Rampell received the 2021 Online Journalism Award for Commentary and the 2010 Weidenbaum Center Award for Evidence-Based Journalism, and she is a six-time Gerald Loeb Award finalist.

A sample of her work:

That’s apparent in polling. Nearly three-quarters of Americans think inflation is increasing when it has definitely slowed down.

I do believe she means to rate of change of inflation.

For normies who might be...

Nearly everything Americans believe about the economy is wrong, according to a recent Harris-Guardian poll. And that’s pretty much everyone’s fault.

She might not be an economist, but she has the economists' condescension down pat.
For those unfamiliar with the acronym: medical aid in dying.

<https://www.elderlawanswers.com/what-is-maid-medical-aid-in-...>
I was scared of getting a Mac for years because of the dongles. Then I got one from work (they even gave me the dongle and I made fun of it) and turns out I never use any of it. And then I realized the USB-A port on my desktop front panel has been broken probably for years and I didn't notice.
https://archive.ph/MY3Je
I agree with you on things like CORS, but HSTS would actually solve the problem stated in this thread quite gracefully.

Client fetches http, notices the header, retries https then ... ok no, lol. But I guess it's still of some use to let clients know "this should always happen through https" and make them fail if that's not the case.

Edit: yeah I got it, client fetches http, notices the header and then explicitly fails because HSTS is there.
> LLMs are deterministic.

In theory, yes. In practice, parallelism combined with floating point math make current implementations fundamentally non-deterministic.
That one can definitely be a hobby in the meantime.
Negro Leagues statistics to be officially integrated into MLB historical record
https://archive.ph/ZcdN4
Sounds like something Sammy The Bull would be sent to do, not the sales team.
The empty cities are interesting. People don’t want to live there because there are no jobs and no services. There are no jobs or services because there are no people. Sounds like an opportunity for the government to step in and create employment, e.g. move a big military contractor there to “bootstrap” the city.
That's a good list, there's cool stuff coming with many of those! SQLite support will be official if it's not already thanks to the Playground work.

https://wordpress.org/playground/
I made an app to create your own version of Who Wants to Be a Millionaire
MirrorLog.com is not just the social media platform that helps you share experiences via text but also allows you to create your own version of Who Wants to Be a Millionaire.

Currently, creators on MirrorLog are only creating free content (More Like on YouTube), but I'm already working on a subscription-based plan for premium content (More Like Udemy and Spotify).

As a creator on MirrorLog, your audience (readers and followers) can gift you money, which serve as a thank you for creating content they love.
Yeah I have signed those before but also rejected them other times, I agree that it’s not exactly warm and fuzzy to have someone want you to sign on a line about your ability to speak freely!
Chemists building batteries might disagree with you. They have to understand which direction the electrons flow and which elements they are using have the free electrons to spare.
Long time dev/designer and part-time SEO person here.

The major implications are that a lot of what Google was telling SEO practitioners were a lie or cleverly disguised red herrings wrapped up in semantics.

The article that was posted earlier today went through a lot of the stuff they were lying about with examples of Matt Cutts and Gary Ilyes statements that are now directly contradicted with the recent release of this code.

Here is the article: https://ipullrank.com/google-algo-leak

The premise:

What I’ll do here is contextualize some of the most interesting ranking systems and features (at least, those I was able to find in the first few hours of reviewing this massive leak) based on my extensive research and things that Google has told/lied to us about over the years.

“Lied” is harsh, but it’s the only accurate word to use here. While I don’t necessarily fault Google’s public representatives for protecting their proprietary information, I do take issue with their efforts to actively discredit people in the marketing, tech, and journalism worlds who have presented reproducible discoveries.
Me too! I remember laboriously typing in the demo program from "TRS-80 Color Computer Assembly Language Programming" and watching it bubble sort the text on screen by directly accessing video memory.
I think that using JSON is rather inefficient and restrictive compared with using a binary format.
My point was that 2 is really not enough to end the world. Damn their money, it's their problem. Launching nukes should require 200, not 2.
The argument I've heard against not having HTTP at all is that potentially someone might be able to run something malicious on port 80 for that address that the admin is not aware of.

People can make up their own minds if that's a good argument or not.
gotcha I get it more now if you thought you already had something in the bag threatening to pull it based on some new requirements is rather bogus
>> Effectively instead of object.method() you have method(object)

> This reflects a very deep misunderstanding of the distinctive characteristics of each paradigm.

I think the parent made a hasty reading of the GP comment. The GP shows an awareness of multiple OO systems in R.

I believe the GP is attempting to explain to a Java programmer how R could be considered object-oriented even though `plot(item)` does not "look like" what you would see in an object oriented system.

Which is to say: there is an generic function dispatch based on the type of the first argument to the function. This can be _used_ to write in an OO style.
You can have Microsoft Linux in the form of WSL2 though and it’s a damn good piece of software; Microsoft’s saving grace on an otherwise - let’s be honest here - idiotic win 11. It’s almost worse than macOS.

My ideal device would be a MacBook Air with a 100% functioning Linux - as in, audio, external displays, usb hubs, chargers etc just work. macOS is crapware and borderline a disgrace for the excellent hardware of the MacBook.
yeah this is always my bitch with the 816. there's no way to have a "pointer" in a register as a single value.

that and the stupid mode switching

oh, and stack and zero page not being able move out of first bank

not a compelling chip.
I don't see how anything you said would refute OPs premise, that if you want proper logout [1] in your app, you can't use JWTs without constantly querying whether a particular JWT should be accepted or not, from which it follows that this query mechanism may as well be a traditional database with a "sessions" table.

How you organize your data, your services, your middleware, etc. does not change this the slightest, hence are irrelevant.

----

[1] proper logout is instant (this invalidates the "just use a JWT with short timeout!" argument), and prevents session stealing (this invalidates the "just throw away your JWT to logout" argument)
Shouldn't CogAgent be in this comparison?
How is this better in literally any way other than it makes things (in 2024, only very slightly) easier from an ops perspective, and panders to some nerdy fetish for simple ‘read it over wireshark’ protocols?

HTTPS-only should be the default. Plain-text information delivery protocols that can easily be MITMd are unsuitable for almost all uses.

This just feels like contrarianism.
> You could try to spritz them with a water bottle but I suspect they wouldn't notice. Same with the rolled up newspaper trick. It would just dissolve in the water.

Simply adapt your boats to be foul-tasting, like a normal species. Spritz them with capsaicin, denatonium benzoate, skunk secretions, etc.
> They do help though. Individuals need to realize they can’t afford to live in a place like California and have to give up that luxury if they want more affordable housing arrangements.

But this is no solution at all because everybody knows that. People want to live in California because there are jobs in California and not in Mississippi. In Mississippi you pay $100 less for a house and then make $200 less in income, so who is going to do that?

To fix this you either need to make housing cost less in California or make jobs pay more in Mississippi. But if anybody knew how to do the second one they'd be doing it already, whereas we do know how to do the first one -- build more housing.
https://archive.ph/yArVp
New Cybertruck sends owner to hospital before he can even drive it
> Don't they need to prove it's coming from you?

(US) Yes, if they want to evict you. However, they don't need proof (or even an accusation) of anything in order to opt not to offer you a lease renewal.
LANDrop – Major Update – A cross-platform AirDrop-like file transfer tool
https://news.ycombinator.com/item?id=34616256

https://news.ycombinator.com/item?id=40258584

https://arxiv.org/pdf/2005.14165.pdf

https://www.wired.com/story/battle-over-books3

https://www.washingtonpost.com/technology/interactive/2023/a...

https://www.theguardian.com/technology/2023/apr/20/fresh-con...

https://storage.courtlistener.com/recap/gov.uscourts.cand.41...

See 40-45.

https://storage.courtlistener.com/recap/gov.uscourts.nysd.60...

See 87-116.
Very apt summary, I’ve grasped at these points before but never fully articulated what to all. Great points they bring up for consideration

* the productivity/alignment trade-off
* the number of communication channels
* the time lag of keeping team members/sub-organizations in sync
There might be but I'm not aware of any tickets. But if you open chrome and navigate to 192.168.20.20 you should see it. Or any domain that resolves to a non-responsive IP, if you have one in mind.
Smart Expert System: Large Language Models as Text Classifiers
Show HN: Weightless CMS for Side Projects
It's funny because a lot of our growth has come from being one of the early CMSes to be completely W3C / XHTML compliant out of the box, security improvements including our update system give us auto-update numbers better than Android (but not as good as Chrome or iOS), and client-side performance and SEO performance are a huge reason why people choose WP! Some things are in the eye of the beholder.
Discord Community Search Engine
Interviews can be daunting. Despite having the right skills and experience, many candidates fall short due to avoidable mistakes. Are you ready to uncover these pitfalls and learn how to dodge them? With over 10 years of experience at Amazon, I have interviewed over 500 candidates. I have seen candidates with excellent work experience and technical expertise fail due to some easy-to-fix mistakes.
Next day, comment, mostly to myself as an alternate way of writing the above.

In a hydrogen fuel cell:

Storage: electricity + water -> hydrogen + oxygen. Hydrogen is stored.

Consume: hydrogen + oxygen -> water + electricity

In the iron-air cell:

Storage: (electricity + water) + rust -> oxygen + (hydrogen + rust) -> oxygen + water + iron. The iron is stored.

Consume: (iron + water) + oxygen -> rust + (hydrogen + oxygen) -> rust + water + electricity

Not as readable as I thought writing it.
IPFS is the p2p standard or it was for decentralized file storage, i'd imagine something similar
Yeah, but it very well not be data that needs random access or live insertion. A lot of data is basically just one big chunk of time-series that just needs some number crunching run over the whole lot every half a year.
Looks amazing!

Does anyone know why the "ColorShift" style doesn't animate as shown? When I run this each row cycles through colors from top to bottom, but there is no left to right / right to left color change at all. That's the only style not rendering correctly among 10 different ones I tried.

I tried with iTerm2 and Terminal app.
Make Zig Your C/C++ Build System
The number I thought I remembered sounded ridiculous in my head so I underpromised, as it were.
in the long run it was probably good for his career. Everyone knows who he is. That type of PR/media awarenes/branding is worth a ton.
The file0 package is relying on the presence of an evironment variable F0_SECRET_KEY that you can obtain from the dashboard. The example code is fully functional and secure, the authentication is happening in the background.
> • It's not a real security concern if you're on a private network.

I'm not convinced that private networks should be assumed secure by default.
He'll start his own YouTube channel and do a round of Lex Friedman, My First Million, The Diary of a CEO, Triggernometry, etc. to promote it, his book, and a course on "How Not to Get Scammed".
tit-for-tat cooperation strategies are pretty well-known in the animal world. Hell, even mycelium hold back minerals from trees that stiff them on sugars.
I didn't know Google used Elixir internally
It hides the domain too, in the literal HTTP request.

What it doesn't hide is the DNS lookup for that domain. You still have to translate a hostname into an IP address.

This might be a concern for certain uses. But at least it's on another port and protocol and not directly related to the HTTP request itself.
This is cool although it very confidently asserted that a 45 rpm 12” single was a perfect! 33 1/3 rpm.

Which suggests this is using song recognition and not discovering some underlying truth of the spinning platter.
One of the approaches mentioned in the article is to just not listen on port 80. Supposedly that’s equally good because the connection should get aborted before the client has the chance to actually send any API keys.

But is that actually true? With TCP Fast Open, a client can send initial TCP data before actually learning whether the port is open. It needs a cookie previously received from the server to do so, but the cookie is not port-specific, so – assuming the server supports Fast Open – the client could have obtained the cookie from a prior connection over HTTPS or any other valid port. That’s the impression I get from reading the RFC, anyway. The RFC does mention that clients should distinguish between different server ports when caching refusals by the server to support Fast Open, but by that point it’s too late; the data may have already been leaked.
It's not about displaying these things, it's about parsing this data from the posts and making all posts filterable by this metadata. Display vs Discovery.

I want to reduce the noise in social network posts.
I once had a couple of very excited cops pound on my door at 6AM demanding that they be allowed in to search the place. Apparently, someone reported hearing blood-curdling screams coming from my apartment.

The funny thing was that I had been up for an hour or so (covering the time period in question) and heard nothing but a peaceful morning. I never did figure out what happened.

For the record, I consented to the search, which consisted of them looking in every place that a person might be able to hide. They were polite, efficient, and got out of there quickly.
Awesome! Someone please use this in a film or TV show.
> Hypothetically, what could they do against a potential script that pre-downloads all new videos from my subscriptions

apply some robot detection tech and block robots/scripts
Hong Kong arrests six for publishing social media posts under new sedition law
I have a similar setup to yours, but end up working (for my job, or for personal enjoyment) more than half the time on a single 14" screen, wherever (kitchen table, my couch, someone else's couch, outside, ...).

For some kind of work, I find the extra screen space very useful, but for other tasks it ends up being distracting.

Having a light, quiet laptop that keeps itself cool and has a long battery life is what makes it possible.

And when it's not enough, I can plug a single usb-c cable and have it charging, and connected to a keyboard, mouse, two screens, gigabit ethernet and speakers/headphones.
Won’t be anywhere near fast enough or big enough on either count.
Why wouldn’t regulators allow it? Since the Sprint merger this industry has been a three horse race. This doesn’t meaningfully remove competition for the average American consumer. What it does accomplish is strengthening T-Mobile’s rural coverage, which is really their last remaining major weakness. Now they can hopefully compete with Verizon and AT&T on more equal footing.
Alignment is not a technical problem. It is a human issue that can be solved by leadership. Bezos is successful not because of API memo but because of his decision process and leadership.

Lex interview with Bezos.
https://www.youtube.com/watch?v=DcWqzZ3I2cY
Hmm. I think, perhaps, release versions should need this, without a flag.

For testing/prototyping, it is invaluable to turn off all the security to rule out security misconfiguration instead of application error.

If your API is non-sensitive/relies on out of band security (like large files with checksums), you may still not want https, so there should be some configuration to turn it off. And for "integrations" like jsdelivr, perhaps https libraries should follow this rule, while http ones can have the flag off...

Then, if you mix the two (http and https) perhaps they can provide an noticeable alert to the user rather than failing silently...
We really don't need an announcement for announcements. This is little more than marketing.
How about a legal commitment to open source after a delay? I think this would be a compromise that a lot of companies could accept if it would increase sales today at all.

(Ideally there'd be some way of requiring an immediate release as soon as the company loses the ability to continue maintaining or developing the software, but I'm not sure how you'd formalize that.)
The Apple Watch Noise app measures loud noises. The Health app on iOS has a section called Environmental Sound Levels that shows the measurements over time on a chart. This of course doesn't help if you can also hear the noises, but it sounds like that is not the case?
Mir (lightweight JIT) version 1.0.0
Exactly what I was thinking. Used to make ANSI animation with THEDRAW back in the day
Good answer! It's a massive societal failure that so few people are able to own a good house these days. It's 2024, we can build microchips virtually atom-by-atom, we can have plain English conversations with our computers about almost any topic, the number of billionaires has grown 20-fold since the 1980's, but the basic human need for shelter is a problem that is getting less solved by the day. It's perverse.
I’m no shill for crypto, but you can’t with a straight face claim that all non-crypto financial instruments are ‘tied to … some sort of service that people want’.

There’s a whole world of shady crap going on in the ‘legitimate’ financial space.
You can get all three if you don't let project managers take over.

Good leadership of a small skilled team gets you powerful results.