skysight-inc/HackerNews huggingface dataset:
> I once tried hosting a web server at home by exposing ports 80 and 443 to the Internet. Hours later I reviewed the logs, thousands of attempts to hack into my lil Linux server. It spooked me to say the least, so I switched to using cloudflare tunnels instead.

Isn't this hypothetical risk mitigated or outright eliminated by using stateless apps and periodically redeploying them in the spirit of cattle?
Don't let analysis paralysis deter you from writing games. Pyscript is fine. Other stuff is fine too. Pick whatever technology you want, and make quick games with rapid prototyping. Join some game jams and keep your scope small. It's better to create and ship many small games.

About pygame in the browser: check out pygbag.
We also need to build an SDK for all platforms and languages. But we are considering Rust in place of C++. Don't know if that is the correct choice. The same kind of article for Rust will be great though.
> if you are certain the software you use is secure

The entirety of the problem is that you can't be certain the software you use is secure.
I self-host a (non-critical) mail server and a few other things and occasionally look at live firewall logs, seeing the constant flow of illegitimate traffic hitting random ports all over the place, some hitting legitimate service ports but others just probing basically anything and everything. I decided to setup a series of scripts that detect activity on ports that aren't open (and therefore there's no legitimate reason for the traffic to exist) and block those IP addresses from the service ports since the traffic source isn't to be trusted.

Something that came out of analysis of the blocked IP addresses was that I discovered a few untrustworthy /24 networks belonging to a bunch of "internet security companies" whose core business seems to depend on flooding the entire IPv4 space with daily scans. Blocking these Internet scanner networks significantly reduced the uninvited activity on my open service ports. And by significantly I mean easily over 50% of unwanted traffic is blocked.

Network lists and various scripts to achieve my setup can be found here:
https://github.com/UninvitedActivity/UninvitedActivity

Internet Scanner lists are here:
https://github.com/UninvitedActivity/UninvitedActivity/tree/...

Large networks that seem responsible for more than their fair share of uninvited activity are listed here:
https://github.com/UninvitedActivity/UninvitedActivity/tree/...

I'm semi-aware of the futility of blocking IP addresses and networks. I do believe, however, that it can significantly reduce the load on the next layers of security that require computation for pattern matching etc.

Be aware: there are footguns to be found here.
> If you want summaries from my website, go to my website.

I will. Through Perplexity. My lifespan is limited, and I have better ways to spend it than digging out information while you make a buck from making me miserable (otherwise there isn't much reason to complain, other than some anti-AI ideology stance).

> I want a way to deny any licence to any third-party user agent that will apply machine learning on my content, whether you initiated the request or not.

That's not how the Internet works. Allowing for that would mean killing user-generated content sites, optimizing proxies, corporate proxies, online viewers and editors, caches, possibly desktop software too.

Also, my browser probably already does some ML on the side anyway. You'd catch a lot of regular browsing this way.

Ultimately, the rules of the road are what they always have been: whatever your publicly accessible web server spouts out on a request is fair game for the requester to consume however they like, in part or entirely. If you want to limit access for particular tools or people, put up a goddamn paywall. All the noise about scrapping and stuff is attention economy players trying to have their cake and eat it too. As the user in - i.e. the victim of - attention economy, I don't feel much sympathy for that plight.

Also:

> LLMs — and more importantly the companies that train and operate them — should not be trusted at all, especially for so-called "summarization"

That's not your problem. That's my problem. If I use a shitty tool from questionable vendor to parse your content, that's on me. You should not care. In fact, being too interested in what I use for my Internet consumption can be seen as surveillance, which is not nice.
The comparable BotBlox SwitchBlox Nano is 25.50 x 25.50 mm, albeit with two fewer ports. This is 44.90 x 42.11 mm. How do you justify the claim of being the world's smallest?
This isn't a desktop Ethernet switch. Lots of robotic parts like industrial cameras and fancy laser sensors use Ethernet for interfacing instead of USB or RS232C. Doing so solves cable length limitations and connection stability issues of those peripheral buses. There would be penalties and overheads of (mis?)using inter-node communication protocols like Ethernet (and TCP/IP), but those tradeoffs are completely acceptable.

What is not acceptable is full sized switches inside of a robot: they're way too bulky. You may be looking into installing a switch inside a humanoid upper arm or inside pelvis. Regular switches and hubs don't fit there.

This product solves that specific robotics packaging problem. Electrically it's a switch/hub, physically it's much smaller than that, that's the point.
I fondly remember the very first Mac OS X book by Aaron Hillegass. Which was pretty much the only 3rd party book back then, else there was only the Apple docs (which to part still were the NeXT docs).

I always wanted to do the in-person course back then (early 2000s), but never got around it (living in Europe, the whole thing would have been quite expensive).

Oh well, times long gone by, also for BNR it seems.
Same here. In my opinion, it's a combination of mimicry of the pro-war western press (with its wildly optimistic faith in US military power) and an incomplete understanding of the history behind certain events like the genesis and resolution of WWII and the dissolution of the USSR.
Berkeley's pier is still closed and at least 5 more years from reopening (2021)
This is amazing, well done, no notes, would love to buy when available

I think it's been rightly pointed out that you aren't beating commodity parts on price, but you're also not a manufacturing operation with scale and there is a certain niche for which anything with open hardware that's well-documented is a killer feature
Thank you for writing everything in one file and not creating needless abstractions across many directories. More code should be written this way until abstraction is actually required. It was very easy to understand this way.
Nonsense, a complete fanfic. Growth in GDP in his first mandates was due to an historical commodities boom that surpassed his government disastrous policies and widespread corruption. Debt increased. He was imprisoned due to corruption.

Lula is extremely unpopular and barely got elected despite massive support from media and political establishment. You are in a leftist information bubble. Try asking randoms on the street what they think of Lula.
I read this book in the first few years of programming professionally, and in my naïveté I was so eager to apply the patterns therein I missed out on many opportunities to write simple, straightforward code. In some ways it really hindered my career.

I don’t blame this on the book, of course; ultimately the intuition it helped me build has been very helpful in my work. With that said, as a particular type of feisty and eager young programmer at the time, I can now say I would have benefitted at least as much from a book titled “Designing Data-Unintensive Applications” :)
The whole “parameters” thing is just a marketing term though, if they wanted to say they use a babillion parameters how would that change anything? The term is subjective and open to interpretation.
Voting Simulation Visualization: Plurality, Approval, Borda, Condorcet, Hare/IRV
Maybe opendns or nextdns?
If you're already running an unverified third-party installer, your system is gone. There's nothing Firefox addon signing can do to save you at that moment. You are already at the "running arbitrary code" stage.
Yes. And, I count in binary to stop myself speaking in bullshit meetings.
> the key worry of the management is who left who knows how to deploy the foo-banana service.

While it might be uncomfortable to be reminded of, it is in most cases true.

The company isn’t your family or your friends, and most managers adhere to the doctrine that the single important responsibility of the company is to create value for the stock holders.
Oh my, I haven't seen this one before... grinning like silly. I referenced his talk "The Art of Code" in my essay (I'm OP), a personal favourite.

Watching "Dylan Beattie's Tech Parodies" seems like a nice way to goof off this Sunday... brb.
Would like technical thoughts, not cheerleading. I’ve written many games before just not with a new shaky stack.
I wonder, what is the issue with authenticating by password. If you choose a password of lets say 64 random chars, shouldn't it be pretty safe? Or is there something in the password method itself, that is inherently weak?
The author misses the point that people who like using LaTeX like that they can focus on and write the semantic structure of document to get a good looking first pass, and then incrementally improve the looks as they see fit.

I've now used Word for some official documents and it's always extremely difficult to enforce semantic structure. Numbering across different levels. Getting word to recognize structure for Numbering of sections and subsection always feels like a hit and miss. Everything is difficult to enforce/customise. You have to continously think about both semantic and looks, rarely can you separate them.

Admittedly, LaTeX being a tech from 70s with fancy for macros and text replacement, is not ideal. But it is still better than most systems of similar nature.
Depends, If they get into the stateless app and hoist that to penetrate into other stuff in your network, they might be able to install an APT.
Making my first embedded Linux system
Exactly. And to overcome this you as a user of that software has to be aware of that specific software.

Most people doesn't give a shit, they pull down or introduce dependencies and think "wauw that was easy and fast".

Of course there is secure software, otherwise we wouldn't be able to live as we do.
Location: Bengaluru, India

Remote: Yes, Perfectly fine to work with European & East Asian time zones.

Experience: Built entire imaging pipelines - starting with optics' design & ISP algorithms to image processing, & eventually tuning camera sight to computer vision. Deployed classical ML & statistical techniques, so I weigh that option before picking a Deep Learning approach. Have architected entire imaging pipelines , hired, led & mentored teams of research engineers. Previously run small startups .

Languages & tools: Python, TensorFlow-Keras, scikit-learn, C, MATLAB, Imatest

LinkedIn: https://www.linkedin.com/in/narasimha-kaushik-n-01340815/

email: kaushik.nnarasimha@gmail.com
OK. What kind of positions can the joystick take?

I.e., is it a point on a hemisphere (equivalently, X/Y controller)?

And what kind of rotations are you talking about for the sword? Are they constrained in any way? I'm assuming it's attached to something - is that point moving too?

Finally why do you need to interpolate? Why three? What are you interpolating between?

I.e. why not simply convert the input of the joystick to a rotation - you're literally rotating a stick when you're moving a joystick in the first place.

You don't need interpolation to convert a rotation (of the joystick relative to its base) to the rotation of the sword unless you're doing something that I don't understand.

If you describe what you're doing in detail, I think we might save you a deep dive into deeper math than necessary for this (..or dive into even deeper math :).
LLMs Aren't Just "Trained on the Internet" Anymore – Allen Pike
If you click the link the original SAAS (Panel Bear) is now "a part of" cronitor.io.

Wonder if they kept it as is, and how many people manage it nowadays.
I find it hard to disagree

That only LISP Can Make a Tree

:D
Probably still cause a page fault when the memory is re-accessed though. I suspect even using io_uring will still be a lot slower than bzero if you're just zeroing out 2 pages of memory. Zeroing memory is really fast.
I'm curious: Is the Great Wave as iconic within Japan as it is to the West et al? For me it's one of the first pieces of Japanese art I think of, but I've always wondered if that's just because it's closer to the intersection of, say, American and Japanese sensibilities/artistic palate, rather than because it's actually the biggest deal in Japanese art.
Im a huge fan of iterative Quickselect and also iterative dfs.

I find especially all their slight variations to be quite poetic.
Good read. Thanks for sharing.

I feel that this article goes really well with it.

https://johnwhiles.com/posts/programming-as-theory
I'm not a fan of either side. I really really don't like how America is overlooking the literal Nazis in Ukraine they are funding while pretending that various legitimate political positions on US social policies are equivalent to "Nazism".

But I also don't think any of these things justify invading Ukraine. "Pushing NATO borders on Russia"? Why does that justify invading Ukraine? If every country next to Russia joined NATO, that still wouldn't justify it.
Decartes, for example, did actually believe that animals don't feel or experience things, that they're purely mechanism-like entities, with simplistic (I'd even say, "behaviouralistic" but that'd be a bit anachronic) stimulus-response built-in reactions — they were not able to geniunely experience pain or distress, they could merely exhibit outwards signs of it, that's all.

Fortunately, with computer-based AIs we know for sure that the analogical beliefs are actually true, and there are no future developments that could possibly change that.
I have a utility that parses ssh failed attempts and creates iptables blocklists:

https://gitlab.com/mtekman/iptables-autobanner

For those just wanting the blocklist, here is a table of malicious IP addresses, with columns of: address, number of ports tried, number of usernames tried.

https://upaste.de/bgC
I was looking for a word earlier that describes when it slowly dawns on a person how profound a thing is that’s been right in front of their eyes most of their life. The word I settled on was revelation, and one of the revelations I revisit as I grow older is the menacing terror presented by evolving lifeforms.

If you press the fast forward button as a theoretical “survivor in the game of life”, the creatures that were benign when they were static now become terrifying, constantly morphing organisms which gain and lose all manner of sharp and venomous appendages.

Like those early Deep Dream videos that always had creepy eyes and teeth everywhere on inanimate objects… that truly is what evolution looks like. It inspires instinctive fear of all the bad things, because that is exactly how it manifests.

When you release the fast forward button though and come back to the present, what was creepy and terrifying before suddenly becomes magnificent. A living representation of localized perfection.
Interesting article, sadly due to my exposure to LLMs I couldn't help but notice that the parts about "oinasf" and sakura.sh are AI-edited at least. Kind of a weird choice considering that a lot of the article was clearly human-written.
Even when you know they exist, the friction to use them while writing is significant. Unless I'm doing more than 5 pages, I'm clicking that "bold".

It also doesn't help that Google docs effectively killed styles. They're kind of there and we're semi-adjustable, but unless something changed recently I believe you can't add your own.
What is this guaranteeing of trade flows over the ocean that I keep hearing about when Houthis have effectively blockaded the Red Sea ?
Operation prosperity guardian is a failure
Especially when you're coding poems using english-lang: https://github.com/theletterf/english-lang
I should clarify. When I mean self host it’s for public facing applications that generate revenue. It involves some transaction in currency?value? between the user. Once money is involved you become a target. I don’t want anything that could be traced to my physical address. I told you I’m careless, I’ll eventually slip up on installing the patches or configuring something right.

Public facing like serving some static webpages or blog, text content. Yeah do it.
While I don't disagree with the premise that code that is better needs to get read less often, I think the problem is that by the metric of "how often will this code need to be read", pretty much no one writes code good enough to not have to worry about readability. I'd argue that both buggy code _and_ unreadable code is attributable more precisely to people overestimating how good their code is rather than not trying hard enough to make their code good.

> In conclusion, good code is rarely read. Good code is so ergonomic that you almost don’t need to read it; you just use it. It allows developers to focus on building features and solving problems rather than deciphering existing code. This is the ultimate goal of good coding practices: to create code that is so clear and intuitive that it almost disappears, allowing the functionality to shine through.

The problem I have with this formulation is that it seems highly unlikely that removing "write readable goal" as a first-class concern alongside "write good code" will produce code with more efficiency or quality; at best, you'll end up with the same amount of bugs and readability, but at worst, you'll be producing code with at least as many bugs that's less readable, which in the long run will increase the amount of work to fix the bugs that are found. Reframing the problem in terms of minimizing how much code needs to be read doesn't seem like it would end up improving the outcomes, but it does seem like it's measuring something that's so hard for people to actually estimate correctly that focusing on it will end up making the outcomes worse by the very metric it tries to use.
Your brother is wise.
What does `echo -e "\x6F\x6B"` do?
Yep. Also GDP is not a good metric for prosperity. When governments print more money and increase government expenditure like Brazil is doing right now it leads to an increase in the GDP which by no means mean that the economy is doing good and the country is more prosperous. Actually the country is facing an inflationary surge due to those policies and people are seeing their purchasing power being disintegrated.
I would be very impressed if they'll manage to do it. This so-called Level 3 "autopilot" doesn't change lanes.
Well, fair. Without an open source solution or on prem deployment, lot of companies will be hesistant to use such a tool. Thank you for this input.
Could we add [2019] to the title?

More context:

> On April 9, 2019, Finance Minister Tarō Asō announced new designs for the ¥1000, ¥5000, and ¥10,000 notes, for use beginning on July 3, 2024.

> The ¥1000 bill will feature Kitasato Shibasaburō and The Great Wave off Kanagawa, the ¥5000 bill will feature Tsuda Umeko and wisteria flowers, and the ¥10,000 bill will feature Shibusawa Eiichi and Tokyo Station.

https://en.m.wikipedia.org/wiki/Banknotes_of_the_Japanese_ye...
The Only App That Always Wins the Battle for Your Attention
a Riese and Muller is not a light bike
Not that I am trying to make you upset, but I personally find this level of sensetivity in people annoying.

Life and death metaphors are my right to enjoy and share irreverently as the mortal being I am.
For me the biggest source of noise in logs for a small site is the referrer spam. At some point like 12 years ago I enabled webalizer stats with a public link to the stats page. Soon I had to deal with massive amount of bot requests with http referrer pointing to porn and farmacy ads. That has not stopped after the public link was removed and the stats has started to use a public spam database. And the spam is still there after 12 years.
I don't know why we should resuscitate this highly opinionated piece from 2016.

Probably it resonates with someone's superficial experience using LaTeX, but the arguments it uses stem from analyzing just the beginning of a document, which is naturally full of boilerplate that you don't usually encounter in the body of your work, and perhaps from a badly chosen color scheme in the author's text editor.

The author is very quick to dismiss the whole idea of separating text and presentation showing how easier it is to just use a WYSIWYG editor. They don't hint at the hassle to eventually refactor your text, to give a uniform style to excerpts you incorporate from other sources, to adapt your formatting to different publishers' guidelines, etc.

And finally, the author decided to omit talking about maths all together. Not only how to write and display formulas, but also all the environment around it, like equations (and how to refer to them), theorems and proofs, etc.

No matter how you feel about LaTeX, this article doesn't dive into any of the features it's famous for.

My personal take about LaTeX? Don't consider it for short, simple essays. Writing a full book, several chapters, sections and subsections, non-negligible bibliography, maybe with some math in it... that's a job for LaTeX!
> full Bob-Smith style termination for all center taps

Man, that's some serious inside baseball right there.
I'm tired of reading "arbitrary terms" to try to standardize something seems to subjective.

Give me the mathematical model and that's it. No more vague, human-created terms to try to translate your own ideas, that's just a hack.
I've added a /wp-login.php and friends that firewall-blocks the IP of the requester for a week. It greatly cuts down the bot noise.
and Portland State University!

https://www.pdx.edu/psu-space#psas

Undergrads, not catching on fire in space!
No. Max is an entire compute platform designed around deploying LLMs at scale. And Mojo takes a Python syntax (it’s a superset) but reimplements the entire compiler so you (or the compiler on your behalf) can target all the new AI compute hardware that’s almost literally popped up overnight. Modular is the company that raised 130MM dollars in under 2 years to make these two plays happen. And Nvidia is on fire right now. I can assure you without a sliver of a doubt that humans are most certainly redesigning entire computing hardware and the systems atop to accommodate AI. Look at the WWDC Keynote this year if you need more evidence.
Interesting — I have used Duolingo but didn't turn on notifications, same as for pretty much every app I install. Also, I think they allow you to "freeze" your streak now in case you're going to be traveling or off-grid. That takes away some of the urgency of keeping your streak going by using the app every day.
Doing business in Brazil also ain't easy for nationals. Too much regulation, too much corruption, too much risk. As the saying goes: "For my friends, everything; for my enemies, the law." To invest in Brazil one needs to be politically connected or crazy.
> How much coal will we need to burn in order to make all of those PV cells? How many mountain tops removed to get the raw materials?

Zero.

PV pays back it's own energy cost in a matter of months to single-digit years, even in the worst cases that's still enough to support the current exponential.

And the raw material are not found only in mountains, the main component by mass being — famously — what sand is made from.
Springer Nature unveils two new AI tools to protect research integrity
Most bikes are not silent. Worse, it's getting popular to make them loud. I was looking for an e-mtb recently. Tried a Trek ($4.5k down from $7.5k), ridiculously loud hub. Sales person claimed (falsely) that the more pro the hub the louder.

Talked to another dealer who gave me the same story.