skysight-inc/HackerNews huggingface dataset:
The following sources are not the most reliable, but I guess they will not be an order of magnitude off. If you think about it, the numbers make sense. How many people have heard of Linus Torvalds versus Bruce Springsteen? I'm not saying the one person is better than the other, I'm just saying one receives more money than the other.

Linus Torvalds: about $10 million per year [1].

Taylor Swift: about $185 million in 2019 [2].

Bruce Springsteen: about $435 million in 2021 [2].

Cristiano Ronaldo: about $260 in 2023 [3].

[1]: https://www.quora.com/Did-Linus-Torvalds-make-money-from-Lin...

[2]: https://en.wikipedia.org/wiki/Forbes_list_of_the_world%27s_h...

[3]: https://eu.usatoday.com/story/sports/soccer/2023/10/14/highe...
Why is that a problem? If you cut off the country, at least you know that there was a flag. If you cut off the entire grapheme, then you know nothing!
~5W TDP full tilt - that so deserves finding its way onto Raspberry Pi style SBCs.

That said, on the mini-ITX dev board: PCIe slots. Nice...

And: pricing?
I've seen a few similar ads for hypermusic.ai there and they're all equally bad. I guess it can be used as a joke or to have some fun with kids but that's basically it.

The older I get, the more I feel everything that makes music (and probably art in general) is very personal. And something very subjective is missing here.
And I guess my Google One subscription will keep costing the same?
Thank you for your insightful commentary on someone who has passed away at too young an age.

This is a great talk of his from 2023 https://www.youtube.com/watch?v=XSziyKlG1ws

That he passed on his way back from a BSD conference was bitter-sweet.
Develop a Serverless TypeScript API on AWS ECS with Fargate
Given that the government policies in Europe are intentionally anti-productivity and instead pro-happiness index. I literally don't see them catching up. They have thrown the hat in the rink as it were.

One can look to Ireland and Portugal for how well that's going though, I'm guessing they'll reconsider this in the near future.
I think C will "be around" like COBOL in 50 years given its footguns despite its ubiquity today.

Not sure about SQL and Javascript though; successor options are way less clear.
What do you mean by unprivileged namespaces being buried by the big-name distros?
Quoting the late Charlie Munger:

Envy and jealousy kills rationality. I've heard Warren say a half a dozen times, 'It's not greed that drives the world, but envy.
Be that as it may, in Norway, which sure ain't tropical, EVs make up >91% of new vehicles sold. An amazing statistic.

> https://alternative-fuels-observatory.ec.europa.eu/general-i...

So they're finding a way to make it work. Granted, Norway doesn't get as cold as parts of the upper Midwest...
Even if you only support scripts for which Unicode has composed codepoints, these days you likely can’t get away without properly handling emoji, and there are no precomposed versions of all the numerous emojis that are made of multiple code points (eg. skin color and gender variants as well as flags).
CPUs have had an enormous performance boost over the last few years and I do indeed think it's happened without many realizing.

For a big part of the 2010s CPUs were kind of stagnant since Intel didn't really have much competition and was happy resting on their laurels and dropping slow incremental upgrades (like a 2012 CPU and a 2016 CPU were basically the same), and AMD were floundering and playing catch up, but when they did catch up and really blow past Intel, it really lit a fire under Intel's ass and now there's real competition for x86 CPUs again.

I think it's a pretty favorable description of cloud providers that they will sell you 2015 performance for 2024 dollars.
I predict

- a steady increment of GPT-n+1 every 6 months for marketing purposes.

- each will improve on the last by smaller and smaller margins.

- hallucinations won't be fixed anytime soon.

- We will hit a bit of a winter, as the hype was so big but like self driving cars the devil is in the details. The general public realizes these things are just essentially giving us averages.

- A big market will emerge around "authenticity" and "verified texts" as the internet continues to get flooded with AI generated content.
The Senior Product Engineer role says "Lithuania, Estonia, Ireland". Does that mean that only candidates residing/living in these countries can work remotely for Modash?
It seems to be more common now than it used to be. Many pieces of media, whether written or televised, seem to use it as an excuse to avoid committing to a narrative. It's as if they expect people will simply make up whatever headcanon is most entertaining and therefore the media will appeal to a greater number of people than it would otherwise. Or they've written themselves into a corner and rather than rework the plot to make sense, they simply go "Well what do youuuu think happened?" I hate it.
Falco from A to Y
How does it work for sleeping or anesthetic drugs ? At some point you also know you sleep
Show HN: Assertion-Free API Testing with Tesmon Chrome Extension
Check out our new Tesmon Chrome Extension! It simplifies backend API testing by capturing network requests from your web apps and automatically creating assertion-free tests. We’ve just released a quick demo on how it works in just seconds per API: https://www.youtube.com/watch?v=JgpJR4xjmkM
Free Text-to-Speech Tool with 800 Voices and 50 Languages: Texttospeech.im
Automated landmine detection and marking. Aquafarming fish health monitoring. Insect detection and mitigation in horticulture.
Ooh interesting. It looks like I have either misinterpreted or found a source that misinterpreted (it was a few years back, unsure if I came to the conclusion or found it). I'll have to update my notes, cheers!

Apologies for the wetbrain hallucination, HN!
All the political stuff was way above my paygrade I only suffered from it.

Home Hub launched with a perfectly good HTML-based UI that ran great, and shipped to millions of devices. And then they immediately set about rewriting the whole thing in Flutter and then they had to pretend that Flutter existed for the thing, which it didn't and so that had to get written, too.
Been vehemently against surrogates my whole life, glad to find a kindred soul.
Hard disagree. You create tables for them to be queried by applications. For the Restaurants example the application clearly wasn't designed to handle Restaurant entries whose only field differs is rank. Consequently, you shouldn't allow data the application can't handle. Whenever the time comes and you think "ah, wouldn't it be great if multiple people could review the same restaurant in the same year?" you change the natural keys. You can always relax the rules. Tightening the rules is much harder because garbage data may already be present.

Keys are about the integrity of your application(s) and preventing corner cases by making them impossible.
Sorry but I've to agree with the other flippant response to this post. The whole idea of SQL is to avoid such imperative thinking, and SQL optimizers are incredibly good in most prominent DB engines. There are ways to hint and influence a certain query plan; but that's not to take away from the incredible convenience that SQL affords for writing adhoc queries.
Clang introduces timing leak into KYBER post quantum crypto implementation
Location: Alicante, Spain

Remote: Yes, my current timezone is UTC+2 (CEST), also open for hybrid and on-site

Willing to relocate: Yes

Technologies: Java, Spring Boot, Microservices, React,
TypeScript, Docker, SQL, PostgreSQL, MySQL, Linux, Bash, Apache, Nginx, Git

Résumé/CV: https://drive.google.com/file/d/1l-08zDEGHo4oD_SwP-s91NbgOhK...

Email: egor.markin@gmail.com

LinkedIn: https://www.linkedin.com/in/egor-markin

GitHub: https://github.com/egor-markin

I'm an experienced developer with a diverse skillset, which includes 20 years of Java, microservices and various databases. My experience also includes team management, conducting code reviews, and ensuring successful project outcomes. I am comfortable taking on multiple roles as needed and am adaptable to working with different technology stacks.
you meet very different tesla owners than I do
Hey everyone. As AI gets better and better and multimodal I believe one of the most common use cases will extracting structured data from unstructured files. So things like shipping labels, bank statements, invoices, patents, etc.

I plan to release workflows soon which will simply take any file via email or form and save the structured content on a spreadsheet/csv or a new PDF.

Let me know if you would be interested in trying the workflows and if you have a use case to extract/organize different files.
Block devices and their drivers are free to reorder writes in absence of explicit synchronisation. The filesystem level is supposed to take care of keeping things from breaking. I would suspect that tmpfs itself prevents any reordering... but I wouldn't bet on it. Non-memory devices will happily reorder.
Same here, but I do love fresh air in my home.
Anything that needs to be read over the phone should probably be written out using something like the NATO phonetic alphabet, split into smaller chunks if needed: "The code? It's kilo eight niner; one three mike; delta echo lima."
I assume 100% of people on social media are doing for other than altruistic reasons.

100%
For the most part I find people are tired of linkedin. Ive never seen anyone use for dating. You'll have to sift through the hundreds of fake women certification sales people.

This might make a ton of sense. Linkedin could rebrand into this.

One of the problems facing society is that women who have gone to become the lawyer or doctor. They don't want to date some loser, they want to date someone as successful as they are. Therefore, these women can use linkedin to better judge the employment of the men.
Here's my opinion. The gaming industry had a period of overreliance on certain genres from around 2007-2014 but has since diversified noticeably. That overreliance began because of the financial crash of 2008 and a bifurcation between indie and AAA, with the middle segment of the market crashing out.

The barrier to entry to make a game lowered since then. During this period Japanese games lost popularity due to a failure to achieve AAA scale, but now they're able to comfortably occupy that sub-AAA space again.
Downstream natural gas composition: Indoor methane leaks
You can use a UUID as a primary key and still enforce uniqueness on a combined index of city and name.
> The US has a treaty to defend Taiwan against foreign aggression.

The US does not have any such treaty. First off, the US doesn't have any treaties with Taiwan, because the US does not recognize Taiwan as a country. What the US has is its own national law, the Taiwan Relations Act, which is deliberately ambiguous as to whether the US would actually intervene to defend Taiwan.
Sounds like another item in this list https://elonmusk.today
I was AFK so couldn't check, but yeah you're right.

Just made two files named ä.txt which happily sat next to each other, one being NFC and other NFD.

So yeah, don't mess with the normalization of filenames.
Adaptive Horizon Actor-Critic for Contact-Rich Policy Learning
>Talk amongst the memesters. This is a meme.

Those memesters invented and deployed the current systems, are currently training the next, and raising funds for the next after.

Some scientific breakthroughs were memes at first, but some people believed in them and proved everyone else wrong. Majority were memes and are still memes. I don't think whether this is a fad or not is that interesting, what's interesting is these 'memesters' who are optimistic about these systems have all the capital, determination and brain. Unlike in other times in history where public needed some convincing, whether through President on Manhattan or with Apollo project, memesters are using their own funds so don't need to convince anyone else.
Moronic editing by OP is moronic.

The sentence "Bad weather, hills, and dark deter cyclists, particularly women. What can we do?" fits in the HN title field with 0 characters left. It's even got an Oxford comma.
“Sold my soul to Irving oil”
“Pawned my soul to pay Irving oil”

And the like …
Or, just use cuid2 [1] + prefix.

[1] https://github.com/paralleldrive/cuid2
For those curious, keep in mind that the use case for open cv has been almost exclusively indoor, close range, or otherwise loose constraints. Graph models for localization famously make use of quite primitive features but tons of observations over time to produce excellent estimates and loop closures.

There are applications that require pulling almost magical levels of signal from very small numbers of pixels, and for those extremely accurate results you really need to drill down on the camera model in particular. Even modelling the environment or atmosphere to get accurate results.

For those types of applications opencv is absolutely not the right choice. It just so happens that dima has an accessible software kit that is more for the latter case. But all the better because it's perfectly fine to use this tool to calibrate any camera and then go use it with any other CV pipeline. His pain your gain.
Hyperthreading is turned off on m7a/c7a/r7a.

"One of the major differences between M7a instances and the previous generations of instances, such as M6a instances, is their vCPU to physical processor core mapping. Every vCPU on a M7a instance is a physical CPU core. This means there is no Simultaneous Multi-Threading (SMT). By contrast, every vCPU on prior generations such as M6a instances is a thread of a CPU core."

https://aws.amazon.com/ec2/instance-types/m7a/
Airbus defence unit to display 'Wingman' concept at ILA Berlin air show
Analysts join the call for Microsoft to recall Recall
Why the anger? It created controversy, as any political donation can. That's a fact, and one of the things he's most known for by the average person - not a criticism of him.

Further, even if it was a criticism, it's not somehow wrong by definition to criticise somebody for a donation, since you can donate to anybody. People can be immoral - political leaders and advertisers included. If the body he donated too was overtly engaged in behavior one finds immoral, one may reasonably criticize him for it. One may also reasonably disagree with the determination of immorality. But you should do that - disagree - rather than pretend there's no given reason for a criticism.
i, L and o are left out of the alphabet in the snippet, so there's not really any ambiguity.
That's an area of TOCTOU issues. You can either hash the file and then replace it before running, or replace the code which was supposed to do the hashing with a constant value you want, or just run in a VM, freeze it, and replace the hash in memory at the time you want. Unless you perfectly control everything: drive, system, application - you can't validate anything.

That is unless you want to run in a signed trusted computing enclave, but those have at least one security failure a year in practice.
Likely no, there are currencies without an ISO 4217 code, i.e.: https://en.wikipedia.org/wiki/Faroese_kr%C3%B3na
This is awesome! Thank you so much for sharing
It's too embedded in the culture.

Even IntelliJ right now will tell you off for using an Optional field instead of a nullable one.
Putin's Limited Tactical Nuclear Warfare Options
Show HN: Cijail – protect your CI/CD pipelines from supply chain attacks
Hello!

I already posted a longer version of this post on r/rust, however, I thought it would be useful not only for Rust community, but for anyone who uses developers' build tools (cargo, npm, pip etc.), since the problem that cijail solves is common for all of them.

I wanted to make a tool to protect CI/CD pipelines from supply chain attacks (see https://wildwolf.name/secure-way-run-npm-ci/ and https://internals.rust-lang.org/t/about-supply-chain-attacks... for the examples of such attacks). My first attempt was too naive to have any practical use, and I was suggested (https://www.reddit.com/r/rust/comments/163ngog/comment/jy3yx...) to use Linux Seccomp as a more robust alternative.

After a while I wrote cijail tool that whitelists HTTPS URLs, Linux socket endpoints (ip + port, netlink, unix) and DNS names. The tool works inside Docker container and does not require any privileges (although in some cases you need to specify CAP_SYS_PTRACE which is immediately dropped before running the actual command). As far as I can tell it is really difficult to circumvent Seccomp, as it is kernel-level technology. However, I had to block a few namespace-related system calls as well as calls that allow one to write other process's memory to be on the safe side.

I tested the tool with cargo, npm and pip and wrote an article about my findings (https://staex.io/blog/cijail-how-to-protect-your-ci-cd-pipel...).

To be completely honest with you, I think protection from supply chain attacks is much easier to implement on the build tool level (cargo, npm, pip etc.) than writing another process jail. Similar maintainers' tools (Nix, Guix, RPM, DEB build systems) split the build into "download" and "build" phases. In the first phase the dependencies are downloaded, but the scripts are not executed. In the second phase the scripts are executed, but network access is prohibited. This removes possibility to exfiltrate any valuable data.

There are a few problems that I see in implementing such phases for cargo, npm and pip. These tools already have "download" and "build" commands in some form, but the network access is not prohibited by default during "build" phase. Adding "unshare -rn" will block network access, but in a Docker container unshare system call is blacklisted. Prohibiting network access might break some packages that download dependencies in their scripts.

Despite all of these problems implementing two build phases would completely remove the possibility of data exfiltration via side channels (e.g. DNS), and it has already been done this way in maintainers' tools.

So, what do you think: do developers' build tools (cargo, npm, pip etc.) need to prohibit network access during build phase by default to protect us from supply chain attacks?
I believe that gpt-4o was really gpt-5, just renamed, and the multimodal stuff they demoed will actually be released within a month.
I'd say front and center
Go take a look at Frontiers.
Taking things to the extreme is rarely that useful in nuanced discussion though (it ignores that the optimal approach is rarely at the extremes).
I was wondering this too, haha. Does someone believe this, and if so, who are you quoting?
Hybrid Bonding: 3D Chip Tech to Save Moore's Law
Such a long article, no convincing examples. Why did he waste so long on the stupid restaurant case that clearly makes no sense? Natural keys are good as long as you think one minute before deciding to use them.
Funny you should say that...

I've been very slooowly degoogling myself, and that includes changing all logins that have a gmail address to a different non google email.

I'd say only like 1/3 of the sites I made logins for have the option of changing the email.
I agree, we all stooped to this point because all we did was laugh at them as they outsmarted us and played for keeps.
Sounds like it's should be legal to pirats theb since you already paid for it.
Interesting that it has a battery, that works as a nice "UPS". And monitor mount useful too

How does it support TB3 graphics? only example I can see is extended PCI. Or just for the thinkpad?

Also how can the tinypc support the USB-c screen?
My grammar has no left recursion, there is a terminal string before the recursive nonterminal.
Show HN: PG Ferret – All-in-one tracing toolkit for Postgres
Hi everyone. Sharing my weekend side project. Hoping that it has potential!
Every system that uses SSN as the primary key is fully testable by itself without third party cooperation. And yet every one of these systems has required workarounds because what the designers thought to be invariants, weren't.

And this is ALWAYS the case with identifiers that you don't control. You don't make policy decisions about them, but SOMEBODY does. And that somebody isn't aware of - and wouldn't even care - about the invariants that you ASSUMED they followed (and maybe they really did follow them, but they sure don't anymore! Oops...)

Fixing broken invariants after the fact is always a nightmare, because it only comes up once you get stuck - either you can't enter something into the database that you absolutely MUST by the weekend, or you can't change something in the database that you absolutely MUST by the weekend. So you do some last minute hacks to get things kind of working, and then it works for awhile until the next problem (usually involving your hack).

It's hardly any extra work or complexity to just use an ID generator for the primary key. You'll still have the same indices, the same foreign key linkages etc. You have no reason not to do this.

And yet somehow people always seem to fall for the "Oh cool! This existing ID does everything we want! Let's just use that instead of adding one more field to the table! I'm so clever!"
You can’t change primary keys, that’s the point, because you don’t know where they are.

For example if an old key is in a URL, and that URL is in a browser bookmark, now you need redirects, so you need to keep all the old keys around forever. Keys should be random or sequential, never contain information.

If you want to enforce uniqueness then use a unique index/constraint.
Russian cosmonaut becomes the first person to spend 1000 days in space
Having come from a military background where using that is second nature, I'm constantly surprised how rarely I meet civilians who understand it effortlessly. When picking up a package I say "the code is Oscar Foxtrot three-fife" and you see the person processing for a long time to extract the first letter of the word. I've started saying "OF, that's Oscar Foxtrot, 3-5" to help them out.

In other words, asking a customer/consumer to be able to recite something in phonetics is not realistic in most cases.

Fortunately the code already takes this into consideration and removes ambiguous characters.
indeed, thank you for explaining it clearer than me!
What's Different and New on Starship Flight 4? [video]
It’s actually not that mysterious. Deep learning is curve-fitting. The whole premise of it is to approximate data and provide a function to interpolate between the sampled points. This is a very static end product, nothing like the dynamism of actual intelligence.

If your input is sufficiently similar to enough training data, then your output is going to be good. If it isn’t, then it’s a crap shoot.
It's been years since I worked on systems with CPR numbers, but I seem to recall that there is also a policy in place, stating that you are not allowed to use the CPR number as a "primary key". Many companies did anyway, because they never actually bothered to read the guidelines and regulations.

All the systems I've seen always had the CPR as a lookup for a UUID, which as you say is the the "address" of the actual person object.
If they conflict and are user facing identifiers aren't you then forced to add uniqueness to the city and name, ala /chicago/chipotle_s4, potentially bleeding some business details?

I don't love uuids as public identifiers for a number of reasons but not hinting details about your data is one nice thing about them.
It's not just him though. His views are very common in AI labs, who actually build these systems and have better visibility than the rest of us on what's going on.
Weird that the mars rover has a coin embedded as a scale reference instead of a printed ruler scale?
Renault Twingo 2026: Chinese know-how to help Europe make a sub €20K EV car