skysight-inc/HackerNews huggingface dataset:
If someone votes 1 while the others votes 8, he’s either too optimistic or an expert on that subject. The points themselves don’t matter, because things are either hard or easy, and that usually depends on the person doing it. No committee can decide that. And they will either get done or cancelled any way. The only things that really matter is their current priority. And that’s the business decision (influenced by several factors, including the advices of the devs). The points assignments are thus useless and you’re spending 1 hour every two weeks on it. But if it makes everyone happy…

And as for talking as a team, we can just do it without any other excuse than discussing the project and the methodologies.
It's still too early to see whether "ahead of his time" here means extreme prescience, or first in a long line of fear mongering.
TLS client certs
You don't have to be a cinephile to not want movies to look like soap operas
Lots of recent discussion here: https://news.ycombinator.com/item?id=40725329
It used to be easy: Check blog roles; see comments, links by commentors.

Now we have static site generators as caching was too hard we don't have that.
You might need a company to sponsor the job in the US, depending on your visa, but you don't need them to help you deal with basic contracts and services like renting an apartment or opening a bank account. That's just comparing to the US. People move all around Europe without needing a company to help them get an apartment and setup basic accounts for utilities and bank accounts.
The RTGs on the Voyager spacecraft weigh 38kg. They initially produced 160 Watts. That sounds like a no-go to me.
also a bit late, but you've seen anyhow & miette right? noticed the color_eyre usage and was just wondering
The IO Rosetta Stone
How does WebSage verify semantic fidelity and avoid hallucinatory confabulations?
Patriot Act and FISA courts have been ruled by the Supreme Court to be constitutional.

And the independent judiciary is an integral part of them i.e. they decide if cases can be tried in them.
Imagine a clocked-down Turing computer, whose operating speed us is so slow that we can see its operations. Now imagine the programs which cannot, in principle be run on this computer. You can't because there aren't any.

Now imagine we are that computer.

Humans are capable of abstract thought and reasoning, which is sufficient to understand even the most complex software programs, to such an extent as they are understandable. The comparison to the worm is bogus.
The president was already immune while in office anyway so this wouldn’t change anything about your scenario.
If I recall the precision is limited to by the wavelength of the light being used. If they are using X-Rays in the 0.01 nm to 10 nm range wouldn't that give them more precision then optical light in the 380 nm to 700 nm range?
As far as I can tell, aircraft and space nuclear propulsion still hasn't actually be used in flight, right?
Moral Luck
I mean this is absolutely true but the goal of this flow is to take very little dev time to enable the project managers to asynchronously (meaning not bothering the devs because the report can be derived entirely from the board state) give project status updates
and updated milestone estimates to the higher ups, and get out ahead of potential issues and blockers (like dependencies on external teams like design).

No company is going to give a project to a team of devs with a deadline and then let them fuck about with no observability into the team's work until the deadline. This is the "team" deciding how to get work done, the person conducting the ceremony should be the direct people/work manager for the team.
it does not. i did look into it though [1] and at the time didn't find a good client side vector search lib. i wanted to avoid in-memory vector search since the size of the data can be significant depending on browsing habits. It is definitely possible though. I got a proof of concept working with victor [2] and client-side embeddings but it wasn't good enough IMO to ship.

[1]: https://github.com/iansinnott/full-text-tabs-forever/issues/...
[2]: https://github.com/not-pizza/victor
There is a small inherent bias in TOTP (and HOTP) codes. The algorithm extracts 31 consecutive bits from a SHA-1 hash (
https://en.wikipedia.org/wiki/HMAC-based_one-time_password#A... ). Let's assume that SHA-1 produces uniformly random bits.

The 31-bit number is modulo'd by 10^6 to generate a 6-digit base-10 number. But 2^31 isn't a multiple of 10^6, so some remainders will be slightly more likely than others. Namely:

• 000000 to 483647: 2148/2147483648 ≈ 1.000240e-6 chance.

• 483648 to 999999: 2147/2147483648 ≈ 0.999774e-6 chance.

This kind of bias always happens when changing the range of random numbers and the number of possible outcomes is not a divisor of the number of incomes, and rejection sampling isn't used.

This is why, for example, java.util.Random.nextInt(int n) (which generates an integer in the range [0, n)) carefully uses rejection sampling in its algorithm: https://docs.oracle.com/javase/8/docs/api/java/util/Random.h...
Hey, we are announcing a Cash Bounty Program to build out some high-priority features for Mutahunter More details here: https://github.com/codeintegrity-ai/mutahunter#cash-bounty-p...
You could try hamsterbase.
All functions are offline and data is stored locally.

If you need to save all the pages you've seen, you can use singlefile, an open source plugin that works directly with hamsterbase.
Yes.

This is military, not Blues Clues.
It might not have great power density but boy does that thing keep going for decades
My reason to break up with Perl was the lack of garbage collection and then later the lack of types and then later 6.

I don’t think investing in it is wise when you can invest in something more relevant. Although there’s barely anything that covers the subj as much as Perl, which is a shame on us all. A programming language that requires an import or two to dig through a file is degenerate. Old languages understood well what a programmer needs.
That's one part of it, yes. A browser API providing a few GBs of persistent storage with proper isolation and user management, obviously with some kind of compression/decompression going on to save both download times and loading times.

As an example, consider Infinity Blade, the poster child of mobile gaming: released in 2010, 595 MB download, 948 MB installed. Even the first version of WebGL is capable of providing this kind of experience, we just cannot get it to the user via browser.
And I still can’t solve it
It’s actually for state actors, not federal. I think it would have been problematic if giving your public school teacher a gift lands them in jail for 15 years.
I got nerd sniped by this and asked GPT some questions.

Given a 45kg RTG plus the weight of the drone itself, you’d need to be able to lift, say, 60kg.

Energy required to hover 60kg using a 4-rotor drone at 70% efficiency is about 10kW - according to GPT. I don’t know enough to say if this is true or not.

Assuming it’s correct, and that a 45kg RTG generates about 300 watts, give or take, the answer is:

no.
The effect of this on the min-entropy is basically nil.

Added: to be pedantic, the difference in min-entropy from a uniform distribution is about 0.000347 bits if my calculation is right (log2(2148*1e6/2**31)). Really, this is not of practical significance given how TOTP is used.
Awesome story! I love hearing about surprising and interesting solutions.
My concern would be draining the fuel reserves in a vehicle to power my home reduces my mobility. It seems like mixing objectives and in an emergency, I want to keep my super spare backup if I needed to flee.
Is that not the point of a README? This one seems very reasonable, and a few sponsor ads seems fine for a very actively maintained free passion project.
Digital doesn't mean binary. A digital system must simply occupy a fixed number of levels, rather than the contiguous values of an analogue system. Binary systems, with 1 and 0, just happen to be one example of that.

There's plenty of non-binary schemes used in modern digital systems though. Modern NAND flash is one instance, for example QLC SSD drives store 16 distinct levels per storage cell (allowing each to encode the equivalent of 4-bits of data). Another example is 64-QAM, a modulation scheme used in a variety of places, including 802.11n Wi-Fi and Digital Terrestrial television (among others), which forms symbols out of two out of phase sinusoids, each of which can take up to 8 amplitude levels.

And even electronic computers haven't always been binary, one of the early Soviet computers was ternary, relying on 3 digits rather than the more familiar 2, to do all of its core computing functions.
Alexander Abian
> How random are TOTP codes?

Nitpicking: They are not supposed to be random as that would defeat the purpose. We should be able to deterministically generate the same number on both the client and server side from the same 2 seeds (secret key and the timestamp).

They should be ideally uniformly distributed, though.
I mean even Washington had a SC nominee rejected. It goes back pretty far.
That sounds awesome. A great excuse for adults to play with dolls!
“Technical” Skills
I understand what this law is meant to do because China is the bad guy here, I get it. I'm merely pointing out that the U.S. does not have a leg to stand on when they'll turn around do the exact same thing.

I find all the hypocrisy and posturing very tiring.
As an aside: does anyone with a local dimming-based HDR display occasionally get dimming with the embedded videos?
But it’s the Senate that is the limiting factor and there is no gerrymandering involved there. Gerrymandering has a lot more effect on state legislatures in general.
Collaboration vs. Teamwork: Which is better？
You can also break from a loop from a subroutine.

sub test() {last unless $_}
for (1, 2, 0, 3) {
print "$_\n";
test;
}
// 1 2 0

I miss it :(
You can't pick and choose "Not a real scotsman"
since 99% of users will be on bigcorp 2FA
that does it in most ass-backwards way possible.
2FA as mobile apps locked to hardware is not
going to go away without 2FA being replaced by something else.
I still wish Samsung hadn't killed Linux on Dex.
Doesn’t even have to be manipulated just incorrect. I share a rather uncommon name with at least two others within five years of my age. I get emails intended for either of them almost daily. One holds political views completely opposite my own. The other is rebuilding his life after a couple years in prison.

I would rather not have my own life intertwined with either of them but undoubtedly it already is to some degree.
Another thing to improve this, is to ask posters to add GLOBAL_REMOTE, COUNTRY_REMOTE or something that indicates is not local remote only (within the same country).
You've joined a startup as their growth lead and you don't know the answer to this?
“jlo” as in Jennifer Lopez or how does that mnemonic work?
That’s so cool that people are making projects like this, making money off it.

A far cry from the world of the GUI, but a welcome world
Conductor – open-source event driven orchestration platform
Cool thing is I don’t care about the temperature of the solid mass inside of where I am, just the air really.

I know when I turn on the A/C in my office, it’s not going to cool the concrete wall/floors/ceiling much in the 8h I’m there before I shut it off for the day. And that’s fine.
The entire use case for Authy is the cloud backup and syncing across devices. If you don’t want that, use any of the other free and more open 2FA apps.
A Field Experiment on Labor Market Discrimination [pdf]
If you read footnote 3 it says the prosecutor may reference official records of the act. They simply may not reference the president’s personal records. So you are not really correct.
One major problem I see with this hack is that the phone numbers exposed in the leak is the single factor of authentication needed to get access to an Authy account, including all the MFA tokens that the account has saved.

If there are any high-profile victims in this list SIM Swapping those phone numbers should be a very attractive approach.

I think security cautious companies should consider turning off multi-device support and start planning for a migration. This leak feels way riskier to me than what media reports it to be.
If I were to really invest in dbms, and only able to read-only the data (analyze, query, etc) something like Metabase is my go to choice (https://www.metabase.com).

If I also need update the data itself, internal tools builder like Retool (https://retool.com) probably good enough.

But, it all depends on the use case.
> Except NTFS does not have "extended attributes" in Linux/Irix/HPFS sense.

Except actually NTFS does have "extended attributes" in the HPFS sense, which were added to support the OS/2 subsystem in Windows NT. And went on to be used by other stuff as well, including the POSIX subsystem (and its successors Interix/SFU/SUA) and more recently WSL (at least WSL1, not sure about WSL2), for storage of POSIX file metadata.

In NTFS, the streams of a regular file are actually attributes of `$DATA` type; the primary stream is an unnamed `$DATA` type attribute, and any alternate data stream (ADS) is a named `$DATA` type attribute. By contrast, extended attributes are not stored in `$DATA` type attributes, they are stored in the file's `$EA` and `$EA_INFORMATION` attributes. I believe `$EA` contains the actual extended attribute data, whereas `$EA_INFORMATION` is an index to speed up access.

Alternate data streams are accessed using ordinary file APIs, suffixing the file name with `:` then the stream name. Actually, in its fullest form, an NTFS file or directory name includes the attribute type, so the primary stream of a file `foo.txt` is called `foo.txt::$DATA` and an ADS named bar's full name is `foo.txt:bar:$DATA`. For a directory, the default stream is called `$I30` and its type is `$INDEX_ALLOCATION`, so the full name of `C:\Users` is actually `C:\Users:$I30:$INDEX_ALLOCATION`. You will note in `CMD.EXE`, `dir C:\Users:$I30:$INDEX_ALLOCATION` actually works, and returns identical results to `C:\Users`, while other suffixes (e.g. `:$I31` or `:$I30:$DATA`) give you an error instead. Windows will let you created named `:$DATA` streams on a directory, but not a named one.

By contrast, extended attributes are accessed using dedicated Windows NT APIs, namely `NtQueryEaFile` and `NtSetEaFile`.

I'm not sure why Windows POSIX went with EAs instead of ADS; I speculate it is because if you only have a small quantity of data to store, but want to store it on a huge number of files and directories, EAs end up being faster and using less storage than ADS do.
Trackmania Nightmares
https://archive.is/m2O0Y
I used to make the joke, "Roku is the worst thing to happen to TVs since motion smoothing." Now it needs a rewrite.
They can reference the action. They just can’t examine the presidents motivation. But they could present evidence like “President X received $500,000 in cash from Mr Y as recorded on this video. Two days later President X pardoned Mr Y’s brother.”
Room for new ideas and values and ways to understand the world.
> you will find more interesting details than any person could possibly invent.

Than any non-Tolkien person could invent.
Given how powerful the three letter agencies are (especially the CIA), I'm not surprised the judiciary branch of the U.S. government agrees its constitutional. The ACLU and many legal professionals think FISA is unconstitutional.

There are roadblocks when trying to challenge FISA because of the secrecy, see: https://www.npr.org/2013/02/26/172998760/supreme-court-makes...
My post was not meant to trivialize the problems you are facing or that there are easy fix solutions. Dont know how I can help as an anonymous stranger on the net, but just in case you want to talk to someone, you can always send an email.

FWIW, my point was that in many cases suicidal feelings can be relieved and the abuses (that you point correctly say exist already) can become more dangerous when directed towards getting rid of vulnerable people. But, that doesn't mean that chronic, hard-to-cure situations don't exist.

Best.
Can you change state in a const function in C++? Why? How?
The verbosity was inspired by VAX or so I’ve heard. Dave Cutler was the big mind at the time so it made sense to me.

Edit: maybe it was VMS, not sure.
As someone who is interested in getting some kind of back up battery at some point, ty for making a recommendation. But could you clarify what you mean by the kWH unit you used on 7 and 21? Seems like those should just be kW, a unit of power rather than kWh, a unit of energy.
Have you used retool? What was your experience?
How does the audiobook handle endnotes?
Depends on how scrupulous Average Person is being. There's codes for electrical and solar installations that can be followed, and it's best to stick to the letter, even if you're certain it doesn't apply. And after that, you should get it certified by a licensed professional, but would also need a licensed professional to hook it up to the grid
It's high time that we religiously switch to exclusively quantum-safe public-key cryptography. Listening to NIST, however, is a recipe for being deceived into getting exploited by the NSA.
Ask HN: What RAG setup gets me 95% of the way there?
Alternatively what is your RAG set up?
yep - color_eyre is a better anyhow (and there's plans afoot to merge them into just one at some point[1]). Miette occupies a space that I generally don't need (except when processing data), while color-eyre is in the goldilocks zone.

[1]: https://github.com/eyre-rs/eyre/issues/177
Maybe countries that are completely outside the US sphere of influence (e.g. China or Russia) but anything that legitimately threatens the intelligence apparatus will not be allowed. See the ousting of Australias prime minister (first ever in history) by their governor general influenced by the CIA:

https://en.m.wikipedia.org/wiki/Alleged_CIA_involvement_in_t...
> does a successful test mean successful code

A successful test implies that the documentation is true. That is, after all, why you are writing tests: Documentation – To explain to future developers the intent and usage behind the code you wrote. You could just as well write the documentation in Word instead, but then you'd lose the ability to perform machine verification of the documentation, which is a huge boon to moving codebases where the documentation and code are likely to fall out of sync if one is not incredibly careful (although perhaps LLMs will some day bridge that gap?).

The documentation being true does not imply that the documentation is useful, of course. Writing useful documentation is still an art.
As if having a big human conttolled robot could never trigger the dreams of many mecha addicts, right?

Lol
I've read some heretic economists that say that instead what orthodox economists claim that energy contributes 10% to GDP it's much higher closer to 100%. You get outside economics into accounting and as you chase the supply costs down you run into energy and scarce resources as the driver of cost.

Maybe 20 years ago I had the thought that ever never was enough supply of fossil fuels to lift the remaining 2/3rds of humanity out of poverty[1]. But there is enough solar and wind to give people a low energy middle class life. And the cost reduction since I think can do better than that.

[1] China I think burned half it's coal reserves in last 40 years. Modern China is basically built on coal. And much of the world doesn't have anything like that.
Die Quelle von Naroth: Won (With Summary and Rating)
Back when I worked on WebGPU in Firefox, GPU debugging was pretty straightforward. You’d use a setting that enables API traces of WebGPU, give it a path, and it would produce a trace. Then you’d replay it in a standalone application that is easily ran from NSight/RenderDoc/PIX/whatever.
Moreover, you could replay it on a different platform with a different API! It was a breeze. I bet it still works.

http://kvark.github.io/wgpu/debug/test/ron/2020/07/18/wgpu-a...
Prompt Injections in the Wild. Exploiting LLM Agents – Hitcon 2023 [video]
That was often a thing. You’d get estimated bills based on your history, but could phone in/mail in your reading if you wanted a bill correction.
Yep. I loved clojure’s spec as it was really easy to build around and then I moved to elixir and found that I have to… drop down to an old erlang library (propEr) to write tests like that. Pretty disappointing.
The role of the project manager is to provide the observability. I strongly believe there’s no metrics collected at the team level that maters in terms of the business objectives other than progression. Something may be classified at hard, but once it’s got done once, replicating it is easy (assuming resources are available).

Inside the team, it’s another world and that would simply depends on the teams. Maybe it’s a senior with a few juniors and the former is just handing down detailed tasks to the latter leaving the toughest issues for himself. Maybe it’s a collection of experts and it’s a chaotic collection of tiny tasks that everyone takes at random. The project manager just needs to interact with them, measure “progression”, ensuring communication across teams, and updating everyone about priorities.

Handing down the process from high has a high chance of harming the teams.
it doesn't sound like hypothesis that unable to handles large data sets in this case, though that is indeed not its forte; it sounds like you were rejecting a large proportion of the shrunk instances, so hypothesis would try shrinking by setting a generated integer to zero, in order to see if the bug still existed for zero, and your test would reject it because it had a zero in it. not fail, but reject. for small instances this was just inefficient, but for larger ones it got to the point that hypothesis gave up

someone in that thread suggested that you use a different instance generation strategy that can't generate zeroes, instead of rejecting the instances hypothesis's shrinker most loves to generate, once they are generated. did you try that?

how does clojure.spec.alpha handle this differently?

in mjaniczek's comment at https://news.ycombinator.com/item?id=40876437, they call out your case as a disadvantage of hypothesis's approach:

> The disadvantage is that the generators are now parsers from the lists of bytes that can fail (introducing some inefficiency) and user can make a crazy generator that the internal shrinker will not be able to shrink perfectly. Nevertheless, it's the best DX of the three approaches, ...

though presumably you wouldn't agree that your test was written in a 'crazy' way
My 10g copper SFPs are far hotter than my 10g fibre ones
Got any recommendations MAGMA users can take a run at?

https://mathematical-research-institute.sydney.edu.au/news/q...
Great comparison of RTOS choices.

Personally I find microPython to be an easier path. async/await based cooperative multi-tasking works well for me. Latest project driving 6 stepper motors and a variety of LEDS and scanning buttons - all in what appears to be real-time to the user.