skysight-inc/HackerNews huggingface dataset:
The other day I recommended someone try out pixlr as a free image editor, as I remember it being a nice tool, and they told me "I don't want an AI tool. I hate AI."
I was confused, went to the site, and saw it is plastered with adverts for some AI image generation features. The actual editor seems buried. People do NOT like having AI stuff shoved in their face.
The investors out there pushing every company to develop an AI strategy or whatever are misguided.
Gentoo has pushed the patched version now.
> There are exceptions, for very rich dense UI, for UIs that need to be cross-platform

That’s not exceptional at all. That’s completely normal requirements that are probably in the majority.

Does Microsoft themselves build their apps this way?
Probably the best option for the author, bit surprised that this was not listed as option, especially since he considered writing HTML/CSS for Sciter.
when i search Google for "facebook", i get less than 100 webpages.

Google says it processed "About 25,270,000,000 results (0.28 seconds)"

why can't i see those 25 billion results? what are "results"?
I need coffee to catch up with my toddler’s energy. Just kidding.

I drink all black espresso first thing in the morning, with the highest or mid intensity. Drink one in the morning, one in the afternoon, a small amount in the evening. I still sleep very well at night.

Now I am almost 40 and in my country people always ask me why I look so young for my age. I always tell them, it’s just coffee. I don’t consume alcohol or smoke, it’s just caffeine. I’ve been on this caffeine binge since I was in high school.
Mexico City is one of the largest cities in the world. Five people out of 21 million is nothing. Sure, every death is tragic, but there are a lot more efficient ways to spend time and money preventing deaths than tree trimming.
It’s also toxic to talk about legal decisions only in terms of the political implications while ignoring the legal ones.

The way you are talking about law bears no resemblance to how law should work. It’s worth zooming out and looking at how constitutional law works in other countries. For the most part, in other advanced democracies, the courts stick much closer to the law and less to the politics than what you’re advocating. For example on Loper: https://balkin.blogspot.com/2023/10/chevron-viewed-from-fran... (“The first point to make here is that in European legal systems, it is the responsibility of the courts to give a definitive interpretation of the law, not the executive, and as a result any such interpretation by the administration (including administrative agencies) is subject to review by courts.”)

Likewise with Dobbs, France’s Macron criticized that decision. But French courts had never recognized some supra-legislative right to abortion, and the European Court of Human Rights had repeatedly declined to overturn Ireland’s and Poland’s abortion bans (despite having a more explicit privacy right to work with).

French courts have similarly refused to intervene to strike down hijab bans. The German high court last year rejected a challenge to Bavaria’s law requiring display of Christian crosses in public buildings. It’s not because those countries don’t have constitutional text that could be interpreted to strike down those laws. It’s because European courts aren’t lawless and for the most part, follow what the law really says instead of distorting it for political considerations.

What you’re advocating for is a departure from international standards that makes us more like a third world country.
Correct me if I'm wrong but it seems like sshd on RHEL-based systems is safe because they never call syslog.

They run sshd with the -D option already, logging everything to stdout and stderr, as their systemd already catches this output and sends it to journal for logging.

So I don't see anywhere they would be calling syslog, unless sshd does it on its own.

At most maybe add OPTIONS=-e into /etc/sysconfig/sshd.
> I do know of some game engines created and used by a (very large) game studio that uses ImGUI.

It often isn't a secret: https://github.com/ocornut/imgui/wiki/Software-using-dear-im...
> but none of their own front-end code because writing for selenium was too hard.

I've also seen plenty of tests that test if a template was rendered rather than if whatever thing it actually outputs was in the output. It is just calcifying the impementation making it hard to test.

But it is a tradeoff, and a hard one as well, because if you do all things all the time, combining all variations of database with all variations of the views, then you end up with a test suite that take forever to run. Finding the right tradeoff there has not shown itself to be very obvious, sadly.
Does it work for videos without auto generated sections like (Intro, etc..) I mean more so like for old videos without Labels or classification?
I do work for an esports company. Something a lot of devs are passionate about. In the end after a downsizing they kept the most competent developers even when they cared zilch about esports. Because your passion doesn’t make you write good code. Just makes you happy while writing bad code
Your thesis sounds interesting! Do you have a link to it by any chance?
We need both.

Anyone who thinks we don't need regulation because open-source can save us all hasn't been paying attention the past few decades. The convenience tech companies offer can't be ignored, because it's exactly why users don't opt for open-source solutions that are (arguably, at least) far superior. It is not reasonable to expect casual users to be able to - or even want to! - debug their software, or jump through hoops to get it installed, keep it updated, etc.
Announcing Polars 1.0 (Blog Post)
gpt content, don't waste your time
Think the only thing historical science fiction/Blade Runner photo inspect scene[0] didn't forsee was voically having AI assist/analyze photo to summerize list of items/objects avaliable to zoom/view. (vs. pan/zoom around). Although altavista glasses / hand gestures[3] would have been a future concept at the time, too.

----

[0] : https://scifiinterfaces.com/2020/04/29/deckards-photo-inspec...

[1] 'mirror reality' image / TERI[2] : https://www.hackster.io/news/blade-runner-s-image-enhancemen...

[2] : TERI, almost IRL blade runner move image enhancement tool : https://news.ycombinator.com/edit?id=40844595 / https://github.com/iscilab2020/TERI-3DNLOS/tree/TERI

[3] : Gest : https://news.ycombinator.com/edit?id=40844704
I think it’s funny you frame this as an information density problem.

The vast majority of people consuming YouTube need moving pictures to keep their attention engaged and sadly enough a voice to offer the illusion of social contact.
There's also TracerPid field in /proc/PID/status, which is non-zero when a process is being ptraced

> Sus tests for common indicators of compromise

There's a lot of stuff that Linux malware tends to do that almost no legitimate program does, this can be incorporated into the tool. Just off the top of my head, some botnet clients delete their executable after launch, in addition to being statically linked, which is an almost 100% guarantee that it's malware.

Check for deleted executables: ls -l /proc/*/task/*/exe 2>/dev/null | grep ' \(deleted\)$'

(not really reliable) check for statically linked running programs: wc -c $(grep -L libc /proc/*/task/*/maps 2>dev/null) 2>/dev/null | grep -v '^0 '

Although a malicious process can just mmap libc for giggles, and also theoretically libc can be named in a way that doesn't contain "libc". A more reliable method is parsing the ELF header in /proc/PID/exe to determine if there's an ELF interpreter defined.

You can also check for processes that trace themselves (TracerPid in status == process id), this is a common anti-debug tactic.

You can also hide the process by mounting a tmpfs on top of it's proc directory, tools like ps ignore empty proc directories due to the possibility that the process has terminated but it's proc directory is still around. This is obviously easily detectable by checking /proc/mounts or just listing empty directories with numeric names in /proc

Another heuristic can be checking /proc/PID/cmdline for two NUL bytes in a row, some malware tries to change it's process name and arguments by modifying the argv array, however they are unable to change the size of cmdline, hence having multiple NUL bytes is a viable detection mechanism. Legitimate programs do this too, but it's rather uncommon.

You can obviously combine these heuristics to make a decision whether the process is malicious, as by themselves they aren't very reliable
> It first build miniruby with is single selfcontained binary having all core ruby functionality.

> For basic stuff. Also, its very easy to build static ruby containing all extra stuff you care about, like Win32 API for example.

Wow, this reminds me abit of MRuby. So I could basically ship a script with the self-contained ruby executable instead of having to force users to install Ruby on their machine?
How can I get ahold of miniruby? Or is there any resource somewhere that I can dig into?
I don't understand why questions made for high-quality outlets with a very clear identity are then asked in low-paying endeavours where even founders have no clear higher-level vision and mission. I've seen the McKinsey dumberies and these questions asked even in factories and helpdesk sweatshops, for fuck's sake.
If you really want native look and feel then really your only choice is to use the native toolkits.

I'm not convinced many users care that much about this though. They spend most of their day using apps that don't use native controls and I think they're all pretty used to it by now.

I prototyped a bunch of different desktop toolkits and I think that today Flutter is by far the most polished and mature. I've had overall a very positive experience using it for my music app:

https://plastaq.com/minimoon

The threat of Google canceling it is real though. I suppose if that happens I'll switch to Tauri or just give up on Windows and Android and do SwiftUI. My experiences with SwiftUI to this point have not been very positive though.

Kotlin Multiplatform might also be an option at some point but it doesn't seem that close today. Unfortunately it seems like none of the os vendors are making their desktop APIs a priority these days.
If you don’t value your time, sure? There’s thousands of systems trying to log into publicly accessible SSH servers all the time.
> refactoring pickle

Been there. Change one tiny thing, and 20 tests fail all over the place. But hey, at least we had ~95% test coverage! /s

The more time some piece of code has survived in production, the more "trusted" it becomes, approaching but never reaching 100% "trust" (I can't think of a more precise word at the moment).

For tests it's similar; the longer they had remained unchanged while also proving useful (e.g. catching stuff before a merge), the more trusted they become.

So when any code changes, its "trust level" resets to zero at that point, whether
it's runtime code or test code. The only exception might be if the test code reads from a list of inputs and expected outputs, and the only change is adding a new input/output to that list, without modifying the test code itself.

Tests that change too frequently can't be trusted, and chances are those tests are at the wrong level of abstraction.

That's how I see it at least.
This is the standard for many cities in the northeast. Power lines are underground.
that made me want to live there lol
Supreme Court Ruling Could Put the FDA in the Cross Hairs of Its Critics
Watching "Grizzly Man" with a bear biologist
Ah, yes, of course!

I hope you're aware this says a lot more about you than it does about kernel devs :)
Thanks, duly noted :-)
Yes cross platform and the same style. I don't think this matters much to users today. They're used to it.

That said I did do a fair bit of my own theming. The Flutter Material widgets are actually pretty customizable and I'm not a big fan of vanilla Material.

https://plastaq.com/minimoon
> It's a way of finding out whether you might be promotable.

Heh, so, if I googled your company before interview, and able to quote marketing sentences about how this is the "Great people. Great challenges. Great opportunities. Groundbreaking technology." etc., only then I can expect a promotion in a future years?
Applications of Deontic Logic in Computer Science [pdf]
Bump for interest
the problem with captchas is that spammers will just pay a human in a very-low cost of living country to actually do them.
Lots of factors at play that makes your assumption not necessarily correct.

I.e.
1. Newer API such as directory access, which would let the app utilize something like swap as necessarily. And only ever loading the data it can currently handle from the filesystem (https://developer.mozilla.org/en-US/docs/Web/API/File_System...)

2. Input doesn't necessarily have to be RAW/8k. You get several h of 1080p AV1 video within 4gb.

I think it ultimately depends on how much effort the Devs wants to invest to support large video inputs. If none is invested, then your assumption would be true.

I was unable to find the source code, so I wasn't able to check for myself. We'll have to wait for the author to chime in, if they're willing.
Today it is far too late.
If it was any more than that, electric cars would not be able to drive up a mountain.
Now, how many remote exploit do we have in openbsd?
I agree with most of what you said, but most people I know didn't assume or believe that exposure automatically meant infection. At the very least, we all found this out empirically very early on. Someone would get COVID and then text everyone they'd been in proximity with (even masked, 6 feet away, etc.) for the past week or so to let them know. Only a small percentage of the people exposed ended up getting sick in most of those instances. And even in cases where a decent percentage of people got sick (say someone had an indoor gathering that wasn't well ventilated), it was never 100%.

Sure, some of that was probably due to masking and distancing sometimes being effective. But most people I know intuitively got the idea that sometimes your body can fight off certain amounts of the virus, and you never actually become infected enough to test positive or show symptoms.

And yeah, there were some people who I didn't see at all for like 3 years. While I may have thought that was a bit much, that was their comfort level, so... so be it.
It should be quite possible to target .NET 3.5 and hit all the other requirements, except native C++. They hinted at this and then started talking about C++/CLI. If there’s ever a tool of last resort, that is it.
RedHat put an 8.1 score on it: https://access.redhat.com/security/cve/cve-2024-6387
DaVinci Resolve has a very generous free version. It's enormous but also powerful.
DRF is cancer. Try doing anything simple with DRF and you got subclasses over subclasses with overrides and overrides. I hate DRF with all my heart. DRF works only, if you intend to exactly match your model. If deviate just a little bit, the complexity explodes in hour hand.

The biggest gripe I have with Django is that coupling it with modern UIs like Svelte and company is massively complex. The community has failed to deliver a clear guidance on how to handle implementation of such frameworks, including Vite and build steps. Which is the primary thing that drives me away from Django. I'm looking towards Laravel next. Very often, when researching how to implement JS Frameworks into Django I seem to find guidance on how to do this with Laravel and I want to know if it's really that comfy as it sounds.
funnily enough, ChatGPT can examine code and can say if it will halt or not, in some small cases.
I live at the boundary between city and forests and in summer the temperature drop is really 'incredible'. The amount of energy wasted by urban areas is as much so. But at the same time it's nice because we can restore more trees for shade easily
I have that book! I bought it some time ago; I don't remember why I bought exactly that book, I guess it was recommended somewhere online much like you did just now.

Unfortunately I haven't found the time/energy to start reading it.
This is true. There is a reason why Scaleform made its way to become a popular gaming UI framework even though many of its weakness. The most important focus in game UI framework should be on tools and pipelines for artists/designers and this is usually not up to engineering decisions. I won't say that using ImGUI for game is impossible, but there might be lots of tooling works ahead for production game development.
No more than before this; openbsd is not vulnerable to this exploit due to a different syslog() implementation.
Agreed, although I still don't get the fact we continually plant trees that grow taller than the overhead power lines and then the council has to continually prune them into weird shapes to prevent interference.

e.g. https://www.abc.net.au/news/2022-10-18/pruning-street-trees-...

A lesson on how not to do things. I'm all for appropriate trees though.
Seconded! Any URI to your PhD?
Thanks for sharing this, It's well written and informative. I noticed you used 'temperature=1' in the GPT test for the example in the post. Is this best practice for a task requiring structured output? Have you tested other temperature settings? My casual understanding was that a temperature of 0 is best for these types of workloads while higher temperatures would be more effective for more 'creative' workloads.
Ergonomic Self-Referential Types for Rust
that sounds like a badly home-rolled uuid4 with extra steps.

How about instead we just generate a uuid4, insert it into a sqlite file or Postgres database, and then the postzegelcode value is threefry(SECRET,uuid)?
>Normally if you get those kinds of errors you wouldn’t get any output at all

I am not sure. I disagree. If there is a pro-chatGPT user, I'm probably it.

Ive often seen it give significantly less effort to answer the question.
Hipchat was great. Native app too.
It's not quite what you mean, but a woman in Ireland has planted over 1000 trees on her 3-acre plot, which was previously overrun with rushes and thought to be barren.

Here are her before and after pictures, maybe it will inspire you too.
https://bealtainecottage.com/before-permaculture/
Some day I wish for someone to rebuild Lazarus with go and yaegi.

Then I would never use anything else ever again.

Lazarus' UI component library is beyond amazing, and growing up with it as a teenager made me realize how bad everything else is in comparison.
WebCodecs and File System Access API I believe. Both pretty essential for an app designed for editing large video files from disk.
https://www.newsweek.com/fact-check-are-thousands-bald-eagle...
Tell me you don't understand differential forms.
Show HN: Automating my Landlord job in ANSI C
He meant that rendering a clip with a short part of it elided takes about the same as the original encoding of the video did.
The Don'ts for Software Engineer
Spent last week in South California, visiting family. Flying into LAX made me feel like I was flying into a hell scape. From the air, no green was visible for miles. Compared to my home (London, originally Manchester), I thought it not just odd but barely liveable. You could almost the heat off the concrete by looking at it from the air. Driving around as far south as Orange County for the next week I was happily surprised when I saw any indication of nature at all. Perhaps it’s just me and what I’m used to, but the only spot I visited that felt really relaxing was up around Griffith Observatory.
> Link analytics is explicitly one of the stated use cases on Bitly, and you can even add UTM parameters automatically

This is against not in favour of your argument - it's a case of Bitly enabling users to still use other systems for tracking (UTM) while using a link shortener (as said by person you replied to), not evidence of tracking being the purpose of the link shortener.

Bitly does have their own basic analytics built in, so some people do use it for tracking, but that's still a secondary function for people who don't care enough to set up independent tracking. It's not a sale pitch of "if tracking is what you want, link shortening is the solution".

And the t.co example isn't actually useful for spam prevention, if Twitter decides that a certain URL is considered spam they can just as easily remove that link from any tweets trying to use it as they can disable a t.co. Meanwhile the t.co does add friction for users seeing whether the destination URL looks likely to be spam. I don't think I've ever heard anyone before argue that link shorteners are a good thing for fighting spam, only either bad or at best neutral.
I was well on my way to create a software like this [1], it started out as a flash clone, but since I didn't define any scope it started to look like after effects, on the back end I mean, never actually wrote a single line of code for the UI.

Are you planning on creating a company out of this? Are you going to monetize it?

1 - https://m.youtube.com/playlist?list=PL3pnEx5_eGm9BbCp2ZTj6LT...
OpenBSD is notably not vulnerable, because its
SIGALRM handler calls syslog_r(), an async-signal-safer version of
syslog() that was invented by OpenBSD in 2001.

Saving the day once again.
On that note: is there a good service for “here’s my dataset”, please fine tune these 9 models and give me evaluation stats?
> If only it was possible to prove nothing goes back to the server

That's an interesting question, but I think it's also equally difficult to prove for non-browser software.
Yes and no. In some industries (namely civil), licensed engineers actually deal with the weight of their licenses.

In others it seems like there isn't enough weight for licensed engineers to actually care. A bunch of engineers may work on a project but then a handful quickly go through and sign off on the drawings. You could go through your entire career as a mech E or chem E without getting a license. You still do the same job, just someone else signs off on it.

So there is unfortunately in a lot of places a culture where licensing is less about holding the actual engineers responsible and more about having a designated fall guy to throw to the wolves in the event something goes wrong.
I had a doctor Google-Image-Search some symptoms the other day in front of the patient. :-)
Sorry for the pettiness, but Harman, not Harmon ;)
Your math is off by three orders of magnitude. The scale of the Onslow pumped hydro scheme is in billions of kWh, not in millions of kWh.
Yeah slow bruteforces are running all over the net all the time. This means there's no reason not to throw this attack into the mix.
Ones own consciousness is actually one of the few things you can’t apply the scientific method to.

It will be a good practice to see how deeply terms can be applied in order to combat this gap.
TERI, almost IRL Blade Runner movie image enhancement tool
Bonus points for "double density duvet"
Center City Philadelphia has a series of squares fro green space and they are laid out in such a way that one can chart a course through the squares to navigate on foot.
And Shares are up both regular and premarket :-)
A look inside New York's historic artist lofts, the last of their kind
Integrity Real-Time Operating System
Or a nuclear plant.
Just been beaten by a bug in a production system... hidden in code silently for more than 10 years !

It just mean that for 10 years, this codepath has not been taken (The conditions for this specific error case was not met for 10 years) :-(

Actually, it would be a good monitoring information to know which path are "hot" (almost always taken since the beginning), "warm" (from time to time) or "cold" (never executed). It could help build a targetd trust. I guess that it might be possible for VM languages (like based on JVM) because the VM could monitor this... but it might be harder for machine code