skysight-inc/HackerNews huggingface dataset:
I was very excited about this but I must say I lost a lot of that excitement when I found out it's written in a non-memory-safe language (C++). Browsers are one of the few things we use every day that really need to be as safe and secure as possible so it was a huge disappointment.

The past 20 years of seemingly endless browser vulnerabilities due to memory management issues has left me... Skeptical. We're still seeing vulnerabilities based on memory management bugs in Chrome and the non-Rust parts of Firefox!

The sooner we stop making stuff like browsers in unsafe languages the better.
So integer factoring is a discrete deconvolution? I wonder if juxtaposing the FFT representation (inverse pointwise multiplication) and the tableax (regular long multiplication / carry add) could break the symmetry and get enough information for a fast algorithm?
Can you say more? I find jj to be easier to reason about, but that’s not the same thing.
In Australia power companies will butcher any tree that gets close to overhead powerlines. Understandable, but result is an ugly streetscape and very little opportunity for green spaces outside parks.
The Newton's 3rd law explanation and the Bernoulli explanation are both reasonable approaches and both work, very similar to the way that one can explain the path of a thrown ball both by Newton's laws and by the principle of least action.

NASA has a good explanation here [1]. Here's a brief summary.

The gas flow has to simultaneously conserve mass, momentum, and energy.

If you analyze lift by considering conservation of momentum you get that there are velocity differences in the flow at different parts of the wing. Integrate those around the whole wing and you find a net turn of the flow downward. Conservation of momentum (Newton's 3rd) requires an opposite upward force on the wing.

If you analyze lift by considering conservation of energy you also get velocity differences which lead to pressure differences. Integrate pressure over the whole wing and you get a net upward force on the wing.

[1] https://www1.grc.nasa.gov/beginners-guide-to-aeronautics/ber...
Recurrent neural networks can be used for arbitrary computations, the equivalence to Turing machines has been proven. However, they are utterly impractical for the task.

This seems to be a state machine that is somehow learned. The article could benefit from a longer synopsis and "Python" does not appear to be relevant at all. Learning real Python semantics would prove quite difficult due to the nature of the language (no standard, just do as CPython does).
Imagine: Instead of three radio stations all playing the same song, you could have 100 stations all playing the same song!
Using ChatGPT to Visualize Ransomware Leak Site Data
There is a UI framework which is fast, functional, cheap, and (depending on your personality) pleasant: the web browser.

HTML and CSS are go-to strategies not just because the web is the target platform for probably most if not almost all user interfacing software these days, but because HTML and CSS are very forgiving. Native UI frameworks are written by software engineers who demand type safety and XAML-like features which convert declarative syntax into imperative/object-oriented C#. The truth is that the vast majority of people who work on user interfaces are not the kinds of software engineers who enjoy this; HTML's model of creating arbitrary blobs of flexible dom nodes (and then using javascript to handle user interactions) is a lot more pleasant than getting compilation error after compilation error in XAML and having to google how the hell you display a set of items in a ListBox, only to have to filter through 4 or 5 different slight variations in the proper types between WinUI 3, WPF, UWP, and Maui.

Native desktop software will never beat web browsers as long as you're forced into using the framework's model for structuring your data and code. 13 year olds learn HTML, CSS, and Javascript, that should be the target for usability with native UI frameworks
I love the duck idea conceptually, but worry a bit about them ending up as litter[1]. I recently purchased a couple thousand compressed (just add water) washcloths that are about that price and the size of a large candy. I think I'll start including a couple of those.

Thanks!

[1] Speaking of litter, there are a couple of small streams in my part of town, and when I started giving these out, I also started finding mylar blankets in the streams. Fishing them out is no fun. Mylar blankets are particularly bad for the wildlife.

I mentioned this in my letter in further packages, and that if I keep finding mylar blankets improperly disposed of, I'll have to stop including them. Within a week, I stopped seeing them. I think word spread and the community became self-policing about it. That was pretty wonderful to see.
My GitHub repository has 100k contributors
What would it take to support AE plugins? Nail that and you have something to make Adobe nervous.
1942 German Scho-Ka-Kola Chocolate MRE Taste Testing [video]
Probably the same features that computers have had since the 1960s, but nobody writes native applications anymore. Guess I'll have to pass on this one. I wish Chrome weren't the only operating system people chose to write software for.
> which means their stock will be in the gutter for years to come

You're missing the point of my reply. The person was acting like accepting billions of dollars in $BA stock was an unconscionable thing. It's a highly liquid and relatively stable stock. Even if they have a 6-month lockup, the price won't likely materially change. Will Airbus continue to take market share from Boeing? Sure. But Boeing isn't going anywhere in any of our lifetimes.
I was just looking at this last week when I needed to bash a cache together for something. It's an easier problem than SIEVE's use case, because I don't mind setting a value for "how many things this cache will hold", letting it balloon up to 2x that size, then just purging it back down to the limit when it gets hit. (Which isn't entirely algorithmically dissimilar from SIEVE in some sense, not entirely unlike batching up the entire eviction process rather than running it continuously.) A neat thing about the observations in SIEVE is that you can use the observation that just a single bit "was this used since last time?" flag is very, very simple to implement in almost any cache implementation, way easier than pulling in a tree or something, but gets you a lot of the effectiveness of those algorithms. It's a real time saver when you have to build your own cache and you want something better than FIFO but don't want to implement something complicated and hard-to-test.
Jj also supports worktrees, though they call them workspaces.
I hope it works, we need something like that, not just a new wrapper around chromium.
From the GP: mock data being manually manipulated by the test gave the result of test expected.

These tests are easy to write - your mock returns something, and then you verify that the API does nothing (thus the test fails), then returns whatever the mock does and the test passes. These tests are easy to write and they do fail until code is written. However they are of negative value - you cannot refactor anything as the code only calls a mock, and returns some data from the mock.
Not to get too bogged down in semantics, but in my mind, there’s a pretty big difference between an alpha and a prototype. A prototype just has to prove out your basic approach, and you don’t put it in the hands of end users, early adopter or not. An alpha is a lot more work, and while it’s expected to be buggy and missing some features, it should be substantially representative of the final product.
That's fair. In the post I did mention disk redundancy (and I guess I only implied recovery) as one additional level for safety. Which I think is what you're getting at too.
Same. Looks like the "numeric" JS library is no longer hosted at the URL they link to in their dependency list— I had to replace it with "https://unpkg.com/numeric", which seems to have fixed it for me.
It's a real engineer's way of looking at UI, as a necessary evil to have the user use the "real" part of the software
Show HN: Hackable uptime monitor & status page in 110 LOC
Author here :)

You're correct that very few of them are native. That being said, when comparing to a city with no trees vs a city with non-native trees, I think the latter is still superior.
The explanation based on Newton's laws of motion is more to the effect that the wing interacts with the air in such a way as to accelerate some of the air towards the ground. The reaction force is upwards.

The Navier-Stokes equations merely model fluid flows. Understanding them provides no understanding of the behaviour of such flows. That behaviour is emergent from the interaction of a great many particles.
> We offer free credits, which you can use to experience our services. If you are not satisfied with the results, you do not need to pay for our services.

This has nothing to do with the point of missing a privacy policy since one still need to sign up to get free credits, paying or not.
AM only has lower fidelity because of the low broadcast power and shitty receivers. 80 years it was much higher quality with the huge transmitters and high quality tube radio.
I drink around a litre of black coffee a day now. It's the other way around for me: I sleep better (i.e. I feel better / less groggy the next morning) if I drink coffee at the evening. Sometimes I even drink coffee at 11pm. ¯\_(ツ)_/¯

Honestly, I'm not sure if coffee even helps to "stimulate" me at all. It certainly lowers the feeling of stress and helps me keep a clear train of thought, though, even if that may be placebo effect. And it's something else than water to drink.
This only works on Google's OS, Chrome.
Also, Elon Musk regularly buys massive amounts of Tesla call options to force the market to cover. That jacks the price. Blatant manipulation of the stock.
> However, now that Ladybird has forked and become its own independent project, all constraints previously imposed by SerenityOS are no longer in effect. We are actively evaluating a number of alternatives and will be adding a mature successor language to the project in the near future. This process is already quite far along, and prototypes exist in multiple languages.
The fun really starts if you have a CPU using big endian and a bus using little endian..

Back in the late 1990s, we moved from Motorola 68k / sbus to Power/PCI. To make the transition easy, we kept using big endian for the CPU. However, all available networking chips only supported PCI / little endian at this point. For DMA descriptor addresses and chip registers, one had to remember to use little endian.
As someone who does unspeakable, but safe, things in signal handlers, I can confirm that it is easy to stray off the path of async-signal-safety.
> I mean useful, though through the lens of my usecases

Better to stick to standard definitions in the future so you won't have to explain your personal definitions later on.

> No, I think your examples were excellent for illustrating the differences in systems; you can get a more secure system by severely limiting how much it can do

So you not only missed the point but decided to take away an entirely different message. Interesting.

Yes, limiting attack surface is a basic security principle. The examples I gave were not to demonstrate this basic principle, but to show that trying to gauge security by amount of vulnerabilities is foolish.

> seL4 is a good choice for embedded systems, but in itself currently useless as a server OS

Plan 9 then. Or any of other numerous OS projects that have less vulns than OpenBSD and can meet your arbitrary definition of 'useful'. The point is that trying to measure security by vuln disclosures is a terrible, terrible method and only something someone with no clue about security would use.

> but OpenBSD is a weirdly good ratio of high utility for low security exposure.

OpenBSD is just niche, that's it. Creating OpenSSH brought a lot of good marketing, but if you really look at the OS from a security perspective and look at features, it's lacking.

> Well no, that's the point - they'll be better than "fat" distros, but they absolutely will not match OpenBSD.

They absolutely will be better than OpenBSD, because they have capabilities to limit what an attacker can do in the event they get access, as opposed to putting all the eggs in the 'find all the bugs before they get exploited' basket. OpenBSD isn't anything special when it comes to security. That, really, is the point. Anything otherwise is marketing or people who have fell for marketing IMO.

> I don't really do youtube

There's a lot of good content only on that platform. Surely you can use yt-dlp or freetube or something.

> is it the one that handwaves at allegedly bad design without ever actually showing a single exploit?

That summary isn't remotely accurate, so I'd have to say no.

> Because I've gotten really tired of people loudly proclaiming that this thing is so easy to exploit but they just don't have time to actually do it just now but trust them it's definitely easy and a real thing that they could do even though somehow it never seems to actually happen.

They have remote holes listed on their homepage. Both those cases led to remote root and this supposedly secure OS had nothing to offer, while most Linux distros did. Let's make this simple. Linux allows you to contain a remote root exploit with tools like RBAC and MAC extensions. OpenBSD offers nothing. In the event both systems have the same vulnerability (of which this titular instance is not an example of) allowing remote root, Linux will be the safer system if set up correctly.

But honestly, I've gotten really tired of OpenBSD stans regurgitating that it's supposedly secure and thinking that being able to point to a lack of vulnerabilities in a barebones default install is some kind of proof of that.
> It would allow you to drastically increase the game speed.

A lot of the value of these games is the human interaction of several people working closely around the same table, not sat at separate screens interacting via the systems rather than each other. These sorts of games have real value for training senior decision makers whose day job is all about personal interactions, e.g. gold or silver commanders in a blue light emergency response scenario. They need to get into the syndicate room and immediately start to discuss how to respond to a crisis, not learn a new game interface.
Hi, I'm the founder of this platform, Val Town, where you can create and share runnable snippets of JavaScript. We noticed that one of our most popular uses was a simple uptime monitor cron, so I added historical data tracking and a status page. Hope it's useful for other folks :)
Is it though? Modern web browsers have gotten very complex and, to me at least, it doesn't seem that insane.
Gave it a try. Seems to be very lacking for any type of bulk operations, and little things like saving your edits requires too many steps. For instance, I wanted to modify the coloration of a set of photos that I'd shot in one session. Yes, I can apply the adjustments, then copy and paste those to another photo, but I can't do that in-bulk, so you need to apply it to each individual photo. Then the save workflow requires that you popup the save modal, then choose what type of save you wish to perform.

Unfortunately too clunky for my use-case.
Show HN: A text editor that works on terminals
A text editor that does not take up your whole terminal screen. At the moment, each invocation can only edit one file. It supports Emacs style key bindings.
The artist sees. The 99% doesn't. Of course popular culture is utterly dominated by the 99%. Of course.

There's more to do with this great seeing than to create art and rage that apes won't give you the respect you deserve. The seeing can free you too. You don't need them.
Think “illegitimate” access to www-data. It’s very common on linux pentests to need to privesc from some lower-privileged foothold (like a command injection in an httpd cgi script). Most linux servers run openssh. So yes I would expect this turns out to be a useful privesc in practice.
In what way? Good luck using this thing if the network is down, or if the website is down, or if DNS is down, or if the domain expires, or if the author disappears. A program you download and run is yours forever, a website can disappear tomorrow, or get acquired and get enshittified. It happens every single time, and then there's a thousand-comment thread here, until the next web app that everyone loves, and the cycle repeats itself. Do we never learn? Am I taking crazy pills?

Break the cycle.
The bug is a race condition which is triggered by code which runs when the timeout expires and the SIGALRM handler is run. If there is no time limit, then the SIGALRM handler will never run, and the race doesn't happen.

(As the advisory notes, you do then have to deal with the DoS which the timeout setting is intended to avoid, where N clients all connect and then never disconnect, and they aren't timed-out and forcibly disconnected on the server end any more.)
In most real world cases N is small and so a linear search for data beats a binary search - the binary search is going to stall the pipeline with cache misses all the time, while the linear search will prefetch everything into the cache before you need it thus resulting in not pipeline stalls.

Of course different computers (CPU, memory configuration... they all matter) have different characteristics so where N is large enough is different for each. However in general linear search is fast enough these days. Where it isn't you can look at a profile to verify you hotspot.
I am one of the people who see fail2ban as a nuisance for the average administrator. Average means that they know things on average and sooner or later fail2ban will block unexpectedly. Usually when you are away canoeing in the wilderness.

This is all a matter of threat and risk management. If you know what you are doing then fail2ban or portknocking is another layer on your security.

Security theater in my opinion is something else: nonsense password policies, hiding your SSID, whitelisting MACs, ...
Why would anybody doing TDD have tests highly coupled with the implementation? They shouldn't have this problem at all.

The GP diagnostic isn't good here. Those are bad tests, not tests written too early. What doesn't mean you shouldn't wait for your functionality to be accepted before testing it; some times you should; but this happens for completely different reasons.
If everyone has fancy things then there will be even less environment to go around.
Thanks. I would consider buying this, but on second thoughts I can emulate the psx version and that comes with saves states. But gog releases are usually so good, I'll end up buying it.
What's the advantage of this relatively obscure tool compared to something standard like wireguard or stunnel?
AFAIK, the only thing that can even be stretched in a motion direction is Blender, but an AE alternative it is not.
> the comments to the commits were several hundred MiB

I did't even thought about it. In fact, those are hundreds of lines that no one would read, as the commits are lost and you can't do anything with them...
What about programs that run on your computer so you don't even need the Internet for them?
Vike – June Releases
Hi, I'm brillout the creator of Vike.

Questions welcome!
Say what you will about their chances of succeeding, but the Windows phone is the best phone I ever owned
Thanks for the kind sentiment. I do this because I feel I owe a debt to my community. I have been blessed with success in my life, and that wouldn't have been possible without the direct and indirect support of my neighbors. This is one of the ways that I'm sharing the fruits of that.

It started when outside of my workplace one winter, a man was leaning against a street sign. After him literally not moving for a couple of hours, we checked and he had died of hypothermia sometime in the night. I started giving out winter packages with just the blanket, hot hands, and a first aid kit and it ballooned from there.

I can't do much about the huge issues we face as a society, but I can do this much.

"Whatever you do in life will be insignificant but it is very important that you do it because you can't know. You can't ever really know the meaning of your life. And you don't need to." -- Ghandi
This worldly life is no more than play and amusement. But the Hereafter is indeed the real life, if only they knew. [1]

Know that this worldly life is no more than play, amusement, luxury, mutual boasting, and competition in wealth and children. This is like rain that causes plants to grow, to the delight of the planters. But later the plants dry up and you see them wither, then they are reduced to chaff. And in the Hereafter there will be either severe punishment or forgiveness and pleasure of Allah, whereas the life of this world is no more than the delusion of enjoyment. [2]

[1] https://quran.com/29:64

[2] https://quran.com/57:20
> it has a doc on how to make a proper search pipeline, and a doc on the correct model for each type of search, but not a doc saying "hey use this"
Mildly disappointing, though understandable, that this is C++. (Would have been interesting to see a from-scratch Rust or even Zig implementation.)

Repo here: https://github.com/LadybirdBrowser/ladybird

Edit: From the FAQ...

> Ladybird started as a component of the SerenityOS hobby project, which only allows C++. The choice of language was not so much a technical decision, but more one of personal convenience. Andreas was most comfortable with C++ when creating SerenityOS, and now we have almost half a million lines of modern C++ to maintain.

> However, now that Ladybird has forked and become its own independent project, all constraints previously imposed by SerenityOS are no longer in effect. We are actively evaluating a number of alternatives and will be adding a mature successor language to the project in the near future. This process is already quite far along, and prototypes exist in multiple languages.
Very impressive, and very needed. Current open source video editors uniformly suck.

Glad to see browser technology being put to use. Browser is by far the best API for desktop applications too, despite the very common ignorant complaints on HN.

Kudos!
My favorite example of this was in the air-data computer I was working on for a fighter trainer. I was just on the software side rather than the aerodynamics, but it was notable that the corrections to angle-of-attack and angle-of-sideslip measured by the multifunction probes (which are way up at the nose of the plane) included terms related to the position of the flaps (which are way back at the trailing edges of the wings).
EU says Apple's decision to pull AI from EU shows anticompetitive behavior
Andreas Kling has been making videos about its development for some time now: https://www.youtube.com/@awesomekling
Have you considered talking to people instead of imagining their response? Because regular people seem kind of fed up, and we're still over here cramming insecure computers into everything.
I'm currently recovering from some foot and knee injuries that seriously limited my mobility for the past few weeks, the fact that I can adjust my thermostat from my phone has been a Godsend.
Show HN: Craft fine-tuning datasets for GPT in 10 minutes
prompteasy allows you to craft a fine-tuning dataset by simply chatting with an AI model. You just tell our AI what do you need the final fine-tuned model to do, and it will generate the whole dataset on which you can later fine-tune any model you want.
The page linked to buy the product say 10 pieces in stock, and 'not recomended for new designs'.

Following the link in that page to manufacturer and then to 'microcontroller units' shows 14 products, all 'not recomended for new designs', except for the ones with zero stock.
I'd like to see a cost vs precision/recall comparison of using a RNN vs an LLM (local or API) for a problem like this.
The cheaper alternative is a regular mattress.