skysight-inc/HackerNews huggingface dataset:
These servers are like enterprise iPads. We would be better off if solutions like it were vital. Instead we have the Microsoft ecosystem, and the scourge of malware and ransomware.
Why is ‘no ports’ still a fucking trend?
To stop ethanol production?
That's why for example fan-made Star Wars movies are totally OK, and Disney has no issue with them, right? In such cases not even the plot is based on anything Disney "owns".

Also, it's OK to make a movie out of a plot summary someone who read some book gave you, right?

You really think such things become legal if you have some ML algos in the loop?

https://web.archive.org/web/20220307083651/https://fairuseif...
Maybe I can explain it differently?

---

Basically, lossy compression codecs store groups of frames, or groups of samples. You just can't "cut" at any frame or sample that you want. If you do, you have to re-encode the whole thing.

If you want to understand why, the "delta encoded" thing means that only the difference between frames (or samples) is stored. It usually takes less bits to store the difference between frames, or samples, than it does to store each frame / sample separately.

The reason why "groups" exist is so that you can jump around in a video / audio file. The beginning of each group stores a complete frame / sample. (This also helps if the file is corrupted.)

As long as you cut a compressed audio / video file at the groups / jumps, you can cut it losslessly.

---

(Note: Techniques like companding can use less bits when each frame / sample are stored separately. Some people don't even call this lossless. The technique is basically a digital version of the old "Dolby B" button on tape decks from the 1980s and 1990s.)
People who smoke a lot of weed call this taking a "T break" (t for tolerance). I do the same (with coffee) if I know a period is coming up where I could use bit of a boost.
With respect to the stock, you have to keep events in perspective of a company with 100+ billions of revenue. The public engages with the topic because it resonates with anticorporate emotional sentiment, but that obviously doesn't mean as much about fundamentals. In all honestly, it is probably a good time to buy.

The whole whistleblower murder thing is pretty deep in delusional conspiracy territory.
That’s one scenario.

Around COVID times, my then employer got stuck with about 40,000 devices, 30% of which had undetectable, counterfeit memory that would eventually cause a complete failure. Replacement was a $80M lesson for that vendor.
Cofounder of Reclaim. AMA ;)
Just randomly searched for a term and the article data appears full of typos and OCR mistakes in the sample I used.

Makes me wonder if this is a bigger problem.
As a linux/production support engineer, I am definitely going to make them learn linux some day. Because it's an invaluable skill.
If Boeing is so vital they can nationalize it and place actual officials in charge. There's no legitimate reason not to yank the current suits out and throw them in a neglected muddy pit.
Having worked at an IBM shop, referring to ibm's x, p, i and z series by letter was pretty common, to the point of standard, and same with "our regular ibm customers". ( even if we only dealt with x and p, most folks were at least aware of i and z )
Outside of the IBM ecosystem sure, although once your outside that lots people wouldn't know what an as/400 was if you dropped it on their head so it probably doesn't matter what you call it. ( "expensively fatal" in that specific example, but that's unlikely to be a good marketing term )

I used to get irritated by IBM's naming, and to an extent still do, but it's more things like calling the motherboard the planar and things like that. A lot of the heat went out of that when it occurred to me their usage probably predates "motherboard", but even then keeping it still feels like an attempt to differentiate their stuff to justify higher prices. ( which sometimes is justified, depending on generation and timing, but that'd be true regardless of the nomenclature )
Almost none of this is intuitive without hundreds of years of hindsight. The more subtle aspects of stability, such as avoiding oscillation mostly had to be determined experimentally. Then there is also the matter of actually constructing a plane, if you want it to be useful, it's going to need to be a lot more then some folded paper.

Thrust was definitely also a problem, a glider is not particularly useful unless it has a huge lift-to-drag ratio, which is only possible with modern materials and a solid understanding of airfoil design, which is a whole other can of worms.

Even things that seem so basic that we don't even think about them, like high were not at all obvious: just look at Sir George Cayley's gliders.
I wrote a wall of text earlier. Some of my opinion was misinformed. The dev patched this bug when it was disclosed in 2022.

The chief complaint was him getting tons of issues/PRs about _old_ versions of the library that still contained the bug.

Knowing this now, I can understand why they decided to archive the thing.

I still stand by package management being a huge problem within Node that just encourages shit like this to happen.

---

OLD POST: From one of the sources [0] of the CVE:

> Root Cause:

> The root cause of this vulnerability is the ip.isPublic function's inability to correctly interpret and classify certain IP address representations.

> Specifically, the function fails to recognize 0x7f.1 as a private IP address, which is actually a hexadecimal and shorthand notation for 127.0.0.1, a well-known loopback address.

> This misinterpretation leads to the function erroneously categorizing a private IP as public, thereby opening up the potential for Server-Side Request Forgery (SSRF) attacks. The core issue lies in the inadequate handling of non-standard IP address formats by the IP address validation mechanism.

It then goes on to demonstrate that "ip.isPublic" would classify "0xf.1" as "globally-routable" 127.0.0.1.

So instead of patching this very obviously huge security vulnerability in a package that has been downloaded 17 MILLION TIMES, the maintainer decides "screw it" and abandons the repo.

(The PortSwigger academy has a course on SSRF, and their labs let you fool around with some exfiltration/remote code execution scenarios triggered by a PHP module doing essentially the same thing this CVE is warning about.)

While someone will, of course, fork this project and provide a fix that others can reference in their "package.json" manifests, hoards of projects will probably see downtime due to security forcing them to scale down and fix this.

While this can, for sure, happen with other languages (like how the requests module in Python had a serious vulnerability some time back), this risk is exponentially worse with Node since JavaScript doesn't really have a stdlib and every little thing (like a timer [1]) is just painful enough to make downloading some arbitrary library attractive.

[0] https://cosmosofcyberspace.github.io/npm_ip_cve/npm_ip_cve.h...

[1] https://stackoverflow.com/questions/29971898/how-to-create-a...
Ok apologized.
I don't think you need the certs but there are some books, and studies you should undertake.

1. Database Design for Mere Mortals ... Probably one of the bests books on the how's and why's of the RDBMS. In Cod we Trust!

2. CCNA. I don't think you need the cert, but you should understand networking.

3. LDAP, DNS, SSL... These three things are kissing cousins but few people know the history or understand the tooling here. Setting up OpenLdap, Bind and your own SSL server is something you should do ONCE...

4. Containers and Hypervisors... There is more to life than Docker. I would make the argument that docker as its used is harmful to software development. Spend some time with VM's and LCX... Learn why you would want to use each, and where Docker can be a source of collisions.

5. Hardware: Find something that interests you and go deep. Have a clean switch/network setup at home. Build something with microcontrollers or at least write software for them (esp32). Pick up 3da printing as a hobby. Revive legacy hardware. There's a million things you can do here... The important thing is that your hands are on things other than the keyboard to get it done!

6. BSD: Do you need to run a pure BSD install and work with it, no. But there are plenty of NAS, ROUTER and other apliance systems that use it where you can dabble. OpnSense is an amazing product and you can stick your toe in with that, and hone those networking skills!

If you're not the self directed learning type then all of the above might not get you going... Find a non profit that needs a nerd and do a project involving any of the above for them. As a bonus, if you ask nicely they will write off your time as an unkind donation that has tax advantages (at least in the US).
The Vintage Computer Festival, Ebay, craigslist.
> Now consider an algorithm that predicts whether loan applicants are likely to make all their payments. It’s not good enough to have an algorithm that predicts the correct general rate — the 40% chance of rain in our example above. It needs to predict the rate for specific individuals across different population groups in a way that’s both accurate and fair.

It's not clear to me what is meant by the term "fair" in this context. I would make the claim that an accurate prediction is fair by any reasonable definition.

If you're too strict with it you will immediately run into the problem that, say, someone with a well paying career is more likely to pay their loan back than someone who works behind a checkout, but that's "unfair" because it's correlated with family wealth, intelligence, lack of genetic disease, etc. Your algorithm can't be fair in the 'equality for all' sense because if it were it would have close to zero predictive value.
The artificial force is almost always VC funding
Also in addition to not being your job.
I left a place that had interesting work, great management, great coworkers and excellent pay/benefits/growth. A place I once considered a dream job.

Why did I leave? Because I grew a little bored of it and wanted to try something different. I wanted to try and build my own company. Which is going good so far. (It's been about 14 months since)

I am not my job and thus it gives me freedom to pursue things because I want too.
> How many know how to algorithmically modify a pattern to suit their body type?

I would assume most do. Most knitting patterns I see are parametric over a range of sizes and the author assumes the reader can apply the parameters correctly for the size they want. It usually looks something like:

"This hat can be knit small (medium, large). Cast on 84 (96, 104) stitches..."

So the "small (medium, large)" part tells you the pattern is parameterized over size which can be one of three values. Then whenever you see a value like "84 (96, 104)", you pick the first if you want small, the second for medium, or the third for large.

(As a language designer, I confess I don't like the syntax for this, but it seems pretty standard.)
"Who would store $10,000 US in the wall between the bathroom and kitchen? Silly goose should know banks exist!"
Sure, perhaps they are not your gods and artifacts that are hundreds of years old as I don’t know anything about your faith. I think a billion other Hindus would disagree with you.

There are 79000 temples in TamilNadu alone. Most of the churches and mosques are built upon temples destroyed by the invading hordes and conversion mafias. Many of the existing temples are hundreds of years old and are heritage buildings.

The rest of the abrahamic monotheistic faiths do not have idol worship and are barely two thousand years old compared to ancient Vedic Hinduism. Their wealth is looted wealth while ancient India is millennia old.

Christies and Sothebys and the British museum is full of looted treasures.
I have to ask, why did you block atheism?
Neon actually solved a bunch of problems here. Sure, 80MB might not seem huge, but in a git repo? Also, 80MB is actually large enough to impact git performance according to Github(https://docs.github.com/en/repositories/working-with-files/m...). That can be a pain, especially if you're updating it often. Neon let them ditch the whole 'DB-in-git' approach. No more slowing down the repo or worrying about it ballooning with every update. Plus, it probably made deployment and scaling way smoother. Sometimes the 'clever' solution isn't the best long-term, you know? Kudos to them for recognizing that and making the switch.
As if AML/KYC actually prevented anything...
80MB is actually large enough to impact git performance according to Github. Imagine every single developer on the team having repo performance impacts bc of the db and how that compounds over time

https://docs.github.com/en/repositories/working-with-files/m...
Last Blade 2 is also a standout. Samurai Showdown 3 and 4 are nicely animated too.
You've created a monster. You're MITM'ing children.
You're giving children's data to {whomever}.

You've cherry picked your own beliefs and inserted / removed them along the way.

This is disgusting
AI Steve – Your Independent Candidate for Brighton Pavilion
It was a unanimous decision. It's ridiculous to blame one justice for it.
What would be a comparable early computer with the same computational power? Amazing to think how a machine the size of a room is now only a penny!
Open Source community lessons from 30 years of FreeDOS
Is this going to beat both gpt4t and gpt4o in benchmarks?
This reminds me of the premise in the movie, "Law Abiding Citizen".
Insta-hire to the candidate that realizes the number of requests is so small that a plain-text file would suffice.
Great explanation! It also decreases the stall speed too; which allows a plane to switch to ‘low speed mode’
The government's goal is to use the population growth to prop up real estate while suppressing real wages. They were never ignorant. They were intentional.

What you are suggesting is the opposite what they are trying to do
The fact that one chap's decade-old freeware[0] is 100x better search than the current native tool of a trillion-dollar technology corp is my proof that there is a god, and their name is Loki.

[0]https://www.voidtools.com/support/everything/
what was bizarre in this article. I found it's a simple customer success story about Neon but I see the improvement came from caching and connection pooling but Neon looks promising because of its database branching feature, which made testing and development faster looks like

Neon(https://github.com/neondatabase/neon) seems to have helped them with testing and development. Being able to iterate and validate changes is a great benefit.
> The hot takes on HN on the day of were exhausting—all of a sudden it turned out that this tech forum was chock full of lawyers, most of whom knew for a fact that this ruling was the bringer of the end times for rule of law in the US.

I rather enjoy people trying to understand & interpret collaboratively.

I effing hate stuffy neck people berating the hoi poi for daring to communicate. Effing hate this elitist shit smearing attempt to silence people.

I can agree that on second reflection it seems slightly less alarming than Loper initially appeared. But hardly. There are now myriad courts where folks can go judge shop to get the laws spun as they want, which feels like a certain level of chaos, and one to be arbitrated ultimately by politically appointed for life extremist theocratic.

And it's unlikely as hell congress is going to get around to doing shit. There is a full swing de-governance project afoot & the madness-by-design & just sheer incompenent thrashings of a party sure make it seem like nothing can get done. What few institutions congress did have now seem at risk: House Intelligence Committee being filled with far right radicals, Perry & Jackson. I agree dysfunction elsewhere isn't a solid enough motive for shifting power as such, but it just seems so unlikely that courts are at all equipped capable or competent, and much much less able to be impartial or fair, as politically appointed lifelong sole-arbiters of how every agency can act. It seems likely to greatly constrain us.
Its not obvious (to me) that they need to rest. They're small enough not to need it.

The energy to fly those distances, however...
None of this solves the simple visual of "I'm running out of cash in my wallet, better slow spending down"

I could log in to my bank online and check, I could keep a mental tally of "I spent this here and that much there, I should have this much...", but both of those are decidely more work.

Furthermore, every time I switch back to cash (and my fiancee has independantly noticed), budgeting and saving gets easier. Once again, likely because of the visual and tactile nature of cash

Most damning of all, guess how well credit and debit worked during the multi-day Rogers outage a few years ago. You say "That was a once in a lifetime fuck-up", I'll say "That's not the only reason or time stores haven't been able to process cards"

I'm under 30, and I remember grocery stores around holiday time being unable to accept anything but cash.

Electronic systems aren't actually a solution here. We have a solution, it's called cash; it does not rely on what is essentially a duopoly (Visa/MC), it does not rely on asking permission from a handful of gatekeepers (for-profit banks you'd like to transfer to/from)

Credit unions aren't the solution to the latter either - you can use one, but anyone you're trying to pay is almost certainly with a bank.
>drivers and law makers began realizing that with car wear and tear they were getting less than minimum wage.

Source? At least according to this study[1] 92% of uber/lyft drivers in seattle made above minimum wage. True, this isn't exactly the same as for delivery workers, but given how fungible the two jobs are I think it's fair to treat them as approximately the same. Much more interesting is how much your earnings vary depending on your assumptions. The study calculated $17.40/hr by using pessimistic assumptions, and $23.25/hr using optimistic assumptions.

[1] https://ecommons.cornell.edu/items/161915a8-b0b8-4dc4-b5ff-d...
No, I mean the older paper with the VAE for SMILES https://arxiv.org/abs/1610.02415 which we ended up implementing here: https://github.com/maxhodak/keras-molecules

SELFIES is just a pip install away; I think the team learned from their previous papers to be more open about the limits, as well as releasing code and weights for reproducibility.

I don't follow this area closely enough to really have any comments about SELFIES other than "well, at least the problems we identified were addressed in later work". Specifically, my goal was to start with two SMILES strings, encode them to vectors, then sample points along the path between the two vectors, and decode them back to valid molecules. Presumably, SELFIES does this far better (see the examples in the repo).
No, changing your gender identity doesn't affect your selective service registration
lazarus is great, but the GUI library it comes with has the same issues that the author is concerned about... try changing the theme colors to a dark theme... you end up with something looking like crap with all the other controls using standard colors.
Why would it matter? Its not food.
disagree- It's 100% a happy customer success story and Neon seems to be fit for them.
lol according to github 80 MB is not small - https://docs.github.com/en/repositories/working-with-files/m...
The TigerBeetle project has changed my view on development.

Their "style guide" is here: https://github.com/tigerbeetle/tigerbeetle/blob/main/docs/TI...

I have been a fan of E2E (and stand alone) testing for a long time. So many mocks in unit tests are just "extra code" that does not need to be (especially at the DB level). The E2E above simulation, gives a solid reason to have "mocks" again. For testing hard failures in code, for looking at the very unhappy paths.
Yeah, but that's exactly the problem. While the maintainer waits for that one real-world use case, others are hoarding the vuln or using it stealthily enough to not raise alarms.
Awww. All those grumpy people who now cannot spend money they were going to steal from others. Am I the only one who feels these (or any) tolls go against the right to freely travel?
The umbilical cord for a 500-700 pad BGA would be...impressive.
Effective YouTube Kids: Quality Content in Small Doses
i see. visual basic did that too; while i'm sympathetic to complaints of cultural imperialism, i'm not sure that having your keywords in a foreign language such as english is actually worse than being cut off from the international community of other programmers in your language so that you can't find answers with a full-text search engine. but there's an enormous space of possible programming language designs that haven't really been tried
Exactly^ It’s honestly incredible. I find it hard to switch languages _because_ the tools are so good.
A couple good cigs used to make me crap when I smoked. A coffee and a smoke was a sure fire thing, we used to have ashtrays by the toilet. I know this sounds gross and younger folks wouldn’t understand but … it was gosh darn amazing .
= a great time
The problem is that many view the problem as a good problem to have
Airbus has big backlogs too. So even if a major carrier wanted to drop a bunch of Boeing orders and switch they can’t get planes any faster. They’ll go at the end of the line and wait even longer. And that ignores new training for maintenance teams and pilots and everyone else who would need it.

It’s a duopoly with reservations far into the future. Airlines don’t have much choice.

Maybe they’ll switch future orders from a 787-Z to the 797-Q because they don’t trust the former, but to switch to Airbus would be a very long process.
>>> my daily driver is a Frankenpad made from a T480 with the 7-row keyboard from a T25

you can't just say this without giving us more details... MOAR!
it won't. at least not with the color theme requirements. and if you don't care about those, you might as well use win32 controls.
let's ipl from the dasd
"I didn't know existed" is clearly editorial.

You could just make it: "Google Arts and Culture site"
I think you mean State Religion and if you are looking up wiki, here it is: https://en.m.wikipedia.org/wiki/State_religion
Rimac Unveils Verne Robotaxi Concept
The 48 bytes of sram are enough to encode several state machines. It has pwm and dedicated IR signalling output, but no ADC for input.

It's generally designed to be a very simple controller-of-things. Push an up button, increase the pwm output up to some limit, etc. remote controls, fans, etc.,
First look at the data: https://pastila.nl/?05ee30a0/be7f1715c7de106b95cccd9385a6c2e...

TLDR: it makes sense :)
>The butterflies were lucky. There must be many others that didn't make it.

"Nature is prolific. There are many more creatures that are born than can possibly survive." -- Carl Sagan

It's a feature, not a bug! (pardon the pun)
And South Florida
Dev Proxy is a CLI tool for simulating APIs, including of errors/failure rate
> The thing about broken organizations is that they take forever to fire anyone, so use that to your advantage while you look for other jobs.

My last place was horrendously broken in many aspects, and fired people at the drop of a hat.
Subject-object-verb, or– how we use AI
Anyone got a TL;DR on this?