skysight-inc/HackerNews huggingface dataset:
Hypothetically speaking, plain HTTP transport even for "read only" content, can be a problem if it can be manipulated in transit.

Let's take a weather service. Seems like weather information is a read-only immutable fact and should not be something that needs protection from MITM attacks. You want to reach the largest audience possible and your authoritative weather information is used throughout the world.

One day, an intermediary system is hijacked which carries your traffic, and your weather information can be rewritten in transit. Your credibility for providing outstanding data is compromised when you start serving up weather information that predicts sunny skies when a tornado watch is in effect.

Additionally, you have now leaked information related to the traffic of your users. Even if the request is just vanilla HTTP-only, an adversary can see that your users from one region are interested in the weather and can start building a map of that traffic. They also inject a javascript payload into your traffic that starts computing bitcoin hashes and you are blamed for spreading malware.

In general, HTTPS protects both your interests and those of your users, even for benign data that doesn't necessarily need to sit behind "an account" or a "web login".
How do you know he isn’t hedged?

NOT keeping it in Bitcoin is some next-level stupidity, by the simple analysis of trends over the time he’s held it.

And the inflation produced by the creation of broad money over the last 3 years hasn’t even come home to roost, yet.

I’d say he’s being ruthlessly analytical, not greedy.
When all you have is people, all problems look like they need some people thrown at them.
Productivity Versus Alignment
Show HN: Autospec – open-source agent that generates E2E tests for your web app
Hi HN,

I'm excited to share some early tinkering on a project, autospec, an open-source QA agent for web applications.

Right now it's not fully packaged for use, but I wanted to get the idea out early and am looking for design feedback, suggestions, and open source collaborators to join in. I wrote it over memorial weekend :)

autospec uses vision and text language models to explore and generate commonsense e2e tests for web applications.

The goal is human-like evaluation: assessing the entire UI as a user would, making decisions based on the actual state of the application at each step, with zero initial configuration, and the ability to immediately adapt to new features.

Why I Built It:

I've experienced the difficulty in building the right amount of automated tests and at the right layer of abstraction to both provide good coverage, avoid flakiness, and avoid constant rewrites when implementation changes.

This is the first AI-driven application I've built. I was inspired by a couple of things:

* SWE-agent's [1] focus on agentic performance

* backend-GPT's README rant [2]: "The proper format for business logic is human intelligence."

* zerostep [3], autogpt [4], and other browser-controlled AI projects

Potential Next Steps:

* Save passing specs as playwright code and only fallback on spec failure to the AI agent, to see if the test can be self-healed according to the original spec.

* Create a curated benchmark of both common open source web apps that should pass, and versions with introduced bugs

* NPM package to run like `npx autospec --url https://example.com`

* Github action and Vercel checks API integration to run on preview deployments

* Handling app auth securely+easily

* Continue exploring the balance between vision UI interpretation and DOM analysis

[1]: https://github.com/princeton-nlp/SWE-agent

[2]: https://github.com/RootbeerComputer/backend-GPT

[3]: https://github.com/zerostep-ai/zerostep

[4]: https://github.com/Significant-Gravitas/AutoGPT

Thanks!

Zach
Standardization for saddles is very high. The overwhelming majority of saddles attach to the seatpost using two metal rods of standard distance and diameter. So there is no need to suffer if your nether parts hurt after weeks of using the bike! Go to a local bike shop and check out the options.
And the saddle type is available from many vendors, not just Specialized.
Maintaining houses cost time (aka money) and money.
> Fdroid still has the privileged extension

Not on modern versions of Android.
Emacs users spend 100% of their time in a web browser?
After your reco after the GP's reco, I would have to agree. This is well done. However, coming from a coding/dev background, it was easy to follow and it all makes sense.

However, it goes to show why hacking will never be made interesting in movies without a bunch of fake nonsense like hacking the Gibson's 3D virtual environment.
R u going to list on Product Hunt? or somewhere else?
In my experience trying to find more alternatives to Flutter (due to "Flutter is going to die" rumors recently), I must say that Compose Multiplatform is quite far behind Flutter and it will take years for them to even catch up to Flutter as it is now, much less surpass it. Their iOS version just entered beta from the experimental phase a few weeks ago, and only Android and desktop (which is pretty niche as most developers aren't making desktop apps) really work, with web working just okay (and is still in the "experimental" phase) but doesn't have the optimizations that Flutter does today via WASM and Impeller (they still use Skia and will quickly realize why Flutter devs abandoned it in favor of writing a more performant engine).

This is not even to add that you can only create Compose Multiplatform apps on JetBrains IDEs and even their free (for now) Fleet editor is very buggy such that it was a struggle to get it even running properly on my MacBook. In fact, only Fleet currently has the view where you can see the UI change as you type code (and not even fully, it only renders the UI, not the logic, while in VSCode with Flutter, it will literally run the entire emulator view right inside the editor as a side panel).

So what's even the point? I might as well just use native frameworks or use Flutter, which has a better DX via hot reload that preserves state, as well as being able to be worked on in any editor you choose, not the one the creator of the framework locks you down to.
TLDR: High cosmic ray events cause uptick in atmospheric carbon-14. This is deposited in yearly growth rings of trees and can be used as global alignment points for tree ring dating.
Relevant xkcd

https://xkcd.com/2929/
Electromagnetic Waves and Antennas (2016)
Net metering was always a subsidy to kick start the solar PV industry. It feels kinda kick started.

Myself I'd be interested in a map of the cost per customer for PG&E. Because I suspect customers in dense to medium density area's are heavily subsidizing Potemkin rural customers. Meaning very low density pretend rural suburbs where the cost per connection is high, the power delivered is low and the risks are high enough they bankrupted PG&E twice.
> RAND estimated 890 MWh per key to be broken

Can you give a reference? Also, how is heat generated within the quantum processor as operations are unitary?
TCP handshake failure prevents the client from being able to send any data, no?
Bit subjective. I thought it was a great article. Lot's of new properties I've never heard of.
I wonder how native iOS and Android solve it, wouldn't they also have a similar performance problem? I haven't delved too deep into the problem however so not sure myself.
Postgres's FTS is actually quite solid! You can get very far with just the built-in tsvector. The ranking could be improved, though, which was one of the reasons for creating pg_search in the first place: https://github.com/paradedb/paradedb/tree/dev/pg_search (disclaimer: I work on pg_search @ ParadeDB)
But Jolt is pretty much a drop-in replacement right now, no?
Chrome's version of trying https first sure is annoying though.

If a site is down entirely, when chrome can't connect to port 443 it confidently declares that "the connection is not secure because this site does not support https" and gives a "continue" button. Then when you click "continue" nothing happens for a while before it finally admits there's nothing responding at all.

So it gives a misleading error and takes longer to figure out if a site is actually down.
I shouldn’t have to explain a joke[1] but yes: https://www.gnu.org/software/emacs/manual/html_mono/eww.html

[1] This phrase is a self-deprecating remark about my own joke making abilities, not a slight at parent.
Your statements about what you know about me and my lived experiences, and my level of knowledge of those experiences, is bizarrely cruel. Please do not do this. Please don't try to silence me just because those things don't match up with your own experiences.

I don't know where you are getting the notion that I am saying that mania is rational or controllable. I was speculating based on personal experience around high stress situations. I do not understand why you are choosing to attack the notion that there could be evolutionarily advantageous benefits conferred upon the group.

Edit: we agree that I am speculating. I disagree with you that I have no right to speculate
Kustomize Deployments with Reliza Hub
I haven't heard anything about Gary Wang and Caroline Ellison's criminal cases in a while. Anyone know the status of cases of these two? What kind of sentences are they expected to receive?
Crypto doesn’t change the game. Products that generate passwords should do so securely.

You may be using it to protect extremely sensitive information that could have people killed - that’s more important than a few million dollars in imaginary money
Maybe shttp would have been better than https to reduce typo errors or maybe even something completely different from http.
It's amazing how slapping "healthcare" on something magically makes it immune to scrutiny.

Need to restart eugenics? Sell it as a free pass to oblivion and prey on the less fortunate to fuel the fire.

What ever happened to "Do No Harm"? Killing someone certainly qualifies as harm. You cannot heal through death.

Harm
/härm/
noun
1. Physical or psychological damage or injury.
2.Immoral or unjust effects.
If that's your threat model then CA TLS is going to make things even worse for you because now the nation state pressure can be centralized and directed through the CA.

There are trade-offs but HTTP has it's place. HTTP is far easier to set up, more robust, far more decentralized, supports far more other software, and has a longer lifetime. For humans who aren't dealing with nation state threat models those attributes make it very attractive and useful.

We should not cargo cult the requirements for a multi-national business that does monetary transactions and sends private information with a website run by a human person for recreation and other humans. There is more to the web than commerce and we should design for human persons as well as corporate persons.
Like all traffic infrastructure, there's variants that work for such situation.

Roundabouts can have bypass lanes, a protected (right) turn that allievates that issue.

In the UK you see these, and also designs where the through traffic bypasses the roundabout
As a salaried person one has a responsibility of putting and upwards pressure on the salary (with the help from unions) - companies have the responsibility of making their ventures profitable.

Anecdotally, Tesla Berlin pays in the range 50-60k/year in Berlin (for SWE roles) - I am quite sure they are able to pay muuuch more.

So either are workers in Berlin less than half as effective as Tesla's other offices or Berliners accepts a much lower pay.

GDP is a number - If the Berliner kebab was priced at 12 EUR instead of 6 EUR, then they could afford paying double the salary - The rest of the world is about to add zeroes to everything. Why wouldn't Berlin?

My thinking is that this is Europeans focussing on "budget rather than profitting".
Inflation adjusted costs are more challenging when you measure dev time in decades.
We covered this in the other thread but to give a simple summary:

It is not purely a reduction in lift causing the aircraft to begin free falling.

Different air masses can move in different directions, including downwards or in a circular motion. When the velocity of the air is high enough it can easily push the airplane down faster than free-fall otherwise would.
And all of them had to change because guess what, they had hardcoded v4 assumptions including "4 octets"
Nice article!

This part got me thinking: "Chlewicki is [...] experimenting with some new "mutations" of the diverging diamond, as he puts it, combining them with roundabouts and other innovative traffic design."

Shoreline, WA (just north of Seattle, WA) is using exactly this to revise a highway overpass. They're putting in a roundabout ( coughrotarycough ) on either side of I-5 [1]

[1] https://engage.shorelinewa.gov/145corridor - scroll down to the first image in the article.

I was kinda wondering where they got the idea from :)

[2] Direct link to image: https://s3-us-west-1.amazonaws.com/ehq-production-us-califor...
It's just not a good fit for my lap.
Salesforce is a case study in how rich dark patterns can make you.
Curious how one starts doing this. Don't we need several generations of Neuralink to even start?
Thank you for such an overwhelming reception, we truly appreciate your comments and been sharing your feedback back and forth on our Slack channels today.

If you have a strong enterprise use case, I would be super happy to schedule a quick Openkoda demo for you, including all the bells and whistles. Just share a short description and ping me at: mglomba@openkoda.com

We are still actively watching this thread and will try to address as many questions as possible.
I'm actually in the middle of doing something kind of similar with wireless, but Bluetooth/BLE doesn't have the range to handle a stadium like this.

Since the hardware that I'm using has high power LEDs and optical sensors, I'm now thinking of incorporating a similar mode to my project.

I really like this post, it gave me a lot of ideas :-)
Amazing, does this type of thing exist for like my website that i can use in a css or something i can import? What a cool style... or if it doesn't exist how might we make something like that?
> Effectively instead of object.method() you have method(object)

This reflects a very deep misunderstanding of the distinctive characteristics of each paradigm. It's so far off that it's "not even wrong".

Functional programming is much more about things like purity and referential transparency, about composing functions and/or combinators, about a particular way of managing or modelling effects, about a way of thinking, about using certain kinds of data structures and algorithms.

It's not a syntactical difference.
I just tested it. Can't replicate.

Went to https://example.com, checked that it's cached in the inspector, clicked on the More information link which leads to https://www.iana.org/domains/example, unplugged my connection (went offline), clicked back. It showed the cached https://example.com. I clicked forward. It showed the cached https://www.iana.org/domains/example page. Clicked back/forward like a maniac, the pages switched seamlessly.

Repeated the same process on a non-cacheable page, it showed a dud when disconnected as expected.

Tested on Firefox and Chromium.
> Why write in CUDA and not just use PyTorch etc?

“LLM training in simple, pure C/CUDA. There is no need for 245MB of PyTorch or 107MB of cPython. […] A few more words on what I want this repo to be: First, I want llm.c to be a place for education.”
I haven't had the (dis)pleasure of working with leaded solder myself so I'm going by anecdotes but lead-free solder seems to have a higher melting point so presumably it's easier to damage components through overheating when working with lead-free solder than leaded solder.

Either way, my point is that regardless of whether there are benefits, they're not worth dying for (or suffering from lead poisoning).
Did you mean for this to be as condescending or off-putting as it comes across? I'm really trying to be generous in my interpretation but I'm not sure how else to read it.
probably because java owns the enterprise space.
Well shucks... Ordered.
PTC heating elements might be the safest, they'll just draw less current if they get too hot
Yes disabling HTTP would prevent keys being sent if the remote end isn't listening, unless TCP Fast Open is in use, which it is not by default.
They look designed for reuse. The major tell is that the case is snap-closed and not an ultrasonic weld or adhesive.
A few years ago, a submarine cable was knocked out, between our startup's MVP servers in Singapore AWS, and our networked factory stations in Asia.

In lieu of the submarine cable, something closer to a wet string was being routed over. It had such high latency and packet loss, that a watchdog timer I'd implemented on the stations was timing out.

Fortunately, the remote access we'd built into our stations (SSH and OpenVPN) still worked, albeit at slow speeds, like a 300 baud dialup, and crazy-high latency.

Having occasionally dealt with performance a bit like that as a kid, and knowing my way around Linux, it was like "I've been training my whole life for this moment."

So I just flexed the old command-line-and-editor-when-you-feel-every-byte-transmitted skill, and got the stations working, before the factory even knew about the submarine cable, saving our infinite-9s uptime.

It was nothing compared to what NASA does, but terminal animation effects would've ended both of our missions.
Wonder when they will get around to Sam Trabucco, the CEO at the time of the crime.
Since you're on a throwaway account, I'm assuming you've already started this machiavellian endevour. ;-)
There is a diverging diamond interchange across I25 in Cheyenne, WY, and the next exit just a couple miles south is a double roundabout. It's almost like WYDOT is conducting intersection a/b testing.
Ah... you know, that idea sounds not too shtty to me.
This makes sense. It could be worth dual booting, and seeing how it goes - it may swing back to Linux.

I totally agree with not trying UTM, it really isn't ready yet - I made the mistake of trying to use it on a work laptop for work, and ate a lot of time with various freezes... maybe in a few years it will be fine - dual boot is probably a better option, even more so once USBC display and intermal mics work.
I never said it was easy, that's your projection and prejudice.

Diversification is an essential business principle. In this industry, it requires enterprise hustling to engage other customers with a professional sales pipeline over multiple years.
ifconfig got deprecated because it didn't match how networking worked in the kernel.

If you're using ifconfig on linux[1] for the last 10 years, I'm going to negatively look on your claimed expertise

As for point-to-point links, that's what simple link-local addresses are, added in ipv6. And why IP-IP is superior to OSPF, both because it doesn't hardcode address sizes and because it runs on Layer 2.

[1] ifconfig on other systems might be the right command
So a super complicated work around instead of just doing sql queries or using a query builder ???
Condescending towards Emacs users? No.

There’s a general theme in Emacs users’ testimonials that you end up doing everything in Emacs. For many that includes web browsing. Hence the joke.

It doesn’t include web browsing for me but no condescension intended. If you don’t like my joke, that’s okay. I’m sorry.

Edit: Also not intended to be condescending towards your grandparent commenter. Apologies again.
Yes, because it's feed forward. It must have loops to be a Turing machine.
I've never used arch, but I do love how nixos never breaks, so I can't really let go of that anymore. i do use docker/conda when something is only available that way.
Video Demo: https://www.youtube.com/watch?v=dcjkezf1ARY
There were ISPs who modified requests and responses contrary to the expectations of both website and user.

Are there actually CDNs who modify requests/responses contrary to website expectations, or is this a theoretical concern?
Third-polarizing-filter experiment demystified – how it works
According to Locklin, even factoring 15 requires precompilation where you have to calculate the factors in advance before sending to the QC in order to minimize the number of required gates.
FWIW I deleted it two weeks ago. I do browse Instagram sometimes as a way to keep tabs on artists I like, but I do feel like Facebook itself has run its course. Don't know what that means for Meta as a whole.
You said you're in the EU right ? SEPA works. The only moment I need to confirm identity with my bank is when I buy frivolities, not for my bills.
East Palo Alto is not the same as Palo Alto at all. I can definitely believe that is at least feasible then, although they do not list a residency requirement on their website. The only requirement is:

Must have a referral from a San Mateo County, or Santa Clara County Partner Organization to receive shelter.
As a domestic p.v. owner, I do consider p.v. ONLY for self-consumption, simply because on scale current grid can't sustain it. Harmonic perturbation and quick output variations are too big issues for today, while for self-consumption p.v. is a very good match:

- I use my energy when I can, pushing me to shifting loads as much as I can, I spend less, witch at today grid rates, at least here in France, it's already sufficient to pay back the investment (with an important note, below);

- the grid get less loads in peak moments, at least in the current state of things, where most loads happen during the day most of the time.

Now the important note: I self-made my p.v. because here it's legal to do so and I spent 11.500€ for a 5kWp/8kWh (and I regret not to have choose 10kWp) while the cheapest offer from a local p.v. company was ~30.000 and the highest ~50.000€. This is simply RIDICULOUS. If we price p.v. at reasonable rates and impose self-consumption current state of things makes p.v. viable and contemporary solve the "issue" of p.v. plant in agriculture and in nature in general, if you can't self-consume you do not install them.

The energy "model" is done just for speculation and does not work for a green transition. We need to push cheap p.v. for self-consumption and focus on load shifting (for instance with serious design of most home appliances) and storage. This or there will be no green new deal in general.
Total rubbish. 7% was the floor for 30-year mortgages from 1970 to the mid-2000's[0], and people were buying houses just fine. This is a submarine story trying to use the heartstring-pulling framing of "the American dream is dead!" to try and coax policymakers into any course of action other than the "build. more. friggin. housing." which is the only actual way out of this.

[0]: https://fred.stlouisfed.org/series/MORTGAGE30US
more specifically - people are unwilling to pay for high quality media
• It allows retro computers to connect.

• It allows very low power embedded devices to connect without extra overhead.

• It's not a real security concern if you're on a private network.
The chain of blame can be pushed further. Peripheral manufacturers laergely targrt desktop users, of which almost no motherboards support USB-C.
Just to think that a multi $million chain of zero days courtesy of NSO Group is probably being used against you as I type.
There typically isn't any parole for federal sentences.
Aaron Francis made some very cool MySQL videos for PlanetScale before he was let go: https://www.youtube.com/playlist?list=PLQiYtJSQdSEDH7TCBxm6t...
This deal makes a lot more sense from a business perspective. They simultaneously improve coverage and acquire customers. Building out is much more time consuming with uncertain return on investment.
https://archive.ph/odt5O
You were enjoying IPv4 as it should be deployed.

Remember, NAT breaks IPv4. A NAT-ed network is not fully compliant IPv4 network.
I got to say adding type variables to C would be super duper. And to me actually feels rather C like as well.