skysight-inc/HackerNews huggingface dataset:
In the movies, the good guy casually fires a shot - one handed. He experiences almost no kickback.

But then the bullet hits the villain’s 300lb henchman, who is lifted off his feet and goes flying.

This is why people think bullets are magical momentum machines when in reality, due to air resistance, the momentum transfered to the target is even lower than at the moment of firing.
Apple's Vision Pro: five months later
Bigfoot Field Researchers Organization
Passing this on from Dave, since he doesn't have a HN account:

He recommends trying NNUE on a CPU: https://www.chessprogramming.org/NNUE

Mostly because he hasn't seen anyone try it on the personal computer scale and would be interested to see how it pans out
You should according to... well, yourself. But for teams who are co-located and meet up in the office 1-2 days a week, your never being around physically might be a distraction. We're not all the same.
Location: Chennai, India
Remote: Yes
Willing to relocate: No (possible in a year)
Technologies: Backend: java, django, phoenix, postgresql, node Frontend: CSS/Bootstrap, Angular
Résumé/CV: please contact for a conventional CV, but if you
want a quick look at the projects I have done - please
visit https://alles-tools.com/
Email: suvarnanarayanan2g (at) gmail.com

Looking for junior backend roles that are open for fresh graduates. I have around 10 months of experience in
a django based startup :)
"Do real things" is great advice. Not only do you improve your health by moving your body, the things get done, too.

"I can't clean the garage right now, I have to go to the gym!"
Is that true also of LSTMs?
Ansel Adams, Photographer (1958) Narrated by Beaumont Newhall
I haven't used it much. (don't use it for work)
But I'll say its different. Very "backend first", so there's a bit of setup required server-side, setting up end-points and such.
But not having to manage state or unpack json in the frontend is probably the best thing about HTMX.

You send a request to a server from frontend, the backend responds with html and places it on the page where specified. Its much more intuitive and lower mental load than something like react or vue.
Security Risk Advisors | REMOTE (US) | DevOps Engineer III
SRA’s mission is to level up every day to protect our clients and their customers.
The DevOps Engineer III position will be part of Security Risk Advisors’ Software Development Team. We team with SRA’s Advisory Services, CyberSOC, and Research & Innovation teams to enhance our information security consulting practice in addition to building and deploying tools that serve our employees and our clients.
We are rapidly improving our flagship product, VECTR (http://vectr.io/), an industry recognized Purple Team management and reporting platform. We’re looking for new team members to help us grow VECTR and build additional information security tools. This is an outstanding opportunity to work in a growing niche and interact with well-known client organizations.

- 5+ years previous professional operations or DevOps experience working with cloud or virtualized installations of custom software.
- Containerization Experience: Deep understanding of Docker and other containerization technology and orchestration.
- Cloud Platforms: Demonstrated experience with cloud service providers such as AWS, GCP, or Azure, particularly their Kubernetes offerings such as Amazon EKS, Google Kubernetes Engine, and Azure Kubernetes Service.
- Strong in CI/CD Pipelines: Knowledge of continuous integration and continuous deployment/delivery methodologies and tools like Jenkins, GitLab, CircleCI, and ArgoCD.
- Programming and Scripting: Proficiency in a scripting language such as Python, Go, or Bash and a strong understanding of infrastructure as code (IaC) tools like Terraform, Ansible and Helm.
- (Preferred) Proficient in Kubernetes: Must be able to deploy, configure, and manage Kubernetes clusters along with services and pods.

Visit https://apply.workable.com/securityriskadvisors/j/83039E7215... to learn more and apply.
Detection of bacteria from commercial tattoo and permanent makeup inks
Recent big thread https://news.ycombinator.com/item?id=40825146
Location: EU ( North Europe)
Remote: preferred

Willing to relocate: I could take it into consideration based on the location

Technologies: Modern C++, Python, Bash, CUDA, Linux / Unix backends / QT frontends, Embedded, MCs: Arduino, RP2040, ESP32, ESP8266, Networking, etc

Résumé/CV: contact requests using following email address

Email: infomycv <<AT>>> proton.me

I've experience in building Linux / Unix backend and related tooling / clients / etc for a variety of custom project for etherogeneus customers. I worked both as consultant or employee.
That's a fair point -- a reverse proxy setup may be outside the scope of the jellyfin project, but as others have pointed out they also provide an official docker image with a docker compose and other container management solutions. It just seems like a logical next step would be to outline instructions for a more secure setup using something "standard" like nginx instead of leaving it as an exercise to the user -- who may not be so tech savvy.
Why not start your own startup based on your experience working with startups.

Delegate your work so you be stress free, plus you move towards growth
2024 Q1

In the first quarter, we produced over 433,000 vehicles and delivered approximately 387,000 vehicles.

2023 Q4

In the fourth quarter, we produced approximately 495,000 vehicles and delivered over 484,000 vehicles.

2023 Q3

In the third quarter, we produced over 430,000 vehicles and delivered over 435,000 vehicles.

2023 Q2

In the second quarter, we produced nearly 480,000 vehicles and delivered over 466,000 vehicles.

2023 Q1

In the first quarter, we produced over 440,000 vehicles and delivered over 422,000 vehicles.

2022 Q4

In the fourth quarter, we produced over 439,000 vehicles and delivered over 405,000 vehicles.
I Will Never Have a Girlfriend (1999)
With no ties, direct AND indirect, that does make Ladybird uncommon, like Pale Moon.

Our own approach to privacy is as radical as it gets in search: "No Tracking, Just Search". As we often say: tracking, not ads, is the fundamental problem. Contextual ads do not need necessarily to have tracking. Though the duopoly of search ad networks makes that a hard road too.

Good luck. Excited to see how Ladybird progresses.
I'll go off topic to documentaries where the hustlers did themselves -

"Fyre: The Greatest Party That Never Happened" was made by the Fyre Fest people.

Similarly the hilarious tech failure "Riot On!" was made by themselves. The director was a pseudonym.

A bit more on topic but meta it's interesting the US military has sent historians to current engagements since WW2 - https://en.wikipedia.org/wiki/Military_history_detachment
Kinda depressing if that is commonly accepted as competitive.
'hacky feeling techniques' - as opposed to the rest of DNN research??! More seriously, I wonder if some kind of hybrid approach could be possible/beneficial (e.g. KANs for some layers?)
It looks like they're using a third number to signify dev builds (which I think git has built-in support for), so also having a third number signify patches could get confusing.

> All subsequent dev builds after a release will be numbers added on to it. For example, 144 commits after 2409 would result in dev build 2409-144.

Also, I don't think leading with the year follows semantic versioning either (?)
We don't have to imagine, because it didn't happen, because it's not and was not and won't be a real problem.

Okay, but now that hypothetical problem is solved, we have the opposite hypothetical problem. Let's see if it turns out to be more of an actual problem compared to your imaginary one, which never materialized in 250 years of the presidency.

My guess is it's going to be an actual problem almost immediately, as soon as someone with low moral character is elected. Wonder how long that will take.
back when I was writing my final paper I faced a similar issue, needed to de-duplicate a bunch of PDF's, so I came up with a simple solution

https://github.com/victorqribeiro/dtf
Often it's more subtle than just "this is clearly going to take down production in X way at some point." The issue is more like feeling that the logic is too entangled and it's going to be hard to maintain later on, or that a library should or should not have been used, or something done with threads should have been async.

So yeah, not as cut and dried as "I said it would happen and it did" but more like "I had a feeling this was going to turn out to be a pain and sure enough here I am reviewing code that represents that pain."
SEEKING WORK | Central Europe | REMOTE

Ex product manager & business developer for a web&mobile development agency, connected with a wide network of freelancers, decided to start own company. Expert in finding part or full-time mid/senior developers & designers for growing teams. Can also help you as part time PM. Currently working with three US clients.

Tech stack:

-----------------------------------------------------------
Frontend: HTML5, CSS3 (SASS), JavaScript (Vue.js, Node.js, Nuxt.js, React.js, TypeScript, AngularJS, jQuery)
Backend: PHP, Java, Python (Django), C++, C#, Ruby, .NET, Go (Golang)
Mobile: React Native, Swift, Kotlin, Xamarin, Flutter
Databases: MySQL, NoSQL, PostgreSQL, MongoDB, Redis, Microsoft SQL Server
Cloud: AWS, Azure, Oracle, Google
UX/UI: Figma, Sketch, Adobe XD, Photoshop, Illustrator
-----------------------------------------------------------

Let me know what your needs are and I'll get back to you ASAP. Email: jakeblumberg3@gmail.com
Yeah the risk here is very low unless they start hosting more complicated content later on. But it is not hosted on S3 and is actually hosted by AWS CloudFront with a S3 origin which now has a built in feature to set security headers for your static site in only a few clicks so you can get that sweet sweet A rating ;)
I'm disappointed they didn't mention the chicken chasing scene from Rocky II: https://www.youtube.com/watch?v=q7cDQY9wVF8
Model 3/Y production was 386,576 but all other models combined (S/X/Cybertruck) were 24,255 for the whole quarter.
Three-year outcomes of post-acute sequelae of Covid-19
Location: Lagos, Nigeria

Remote: Yes

Willing to relocate: NYes

Technologies: Figma, UX/UI, Motion Design, Micro-interactions, WordPress, Web Design, Design Systems, SaaS Design, User Experience, User Interface, UX Design, UI Design

Résumé/CV: https://drive.google.com/file/d/1O4XxOfcxIqS9z0Sd5XpXalPZ-LT...

Portfolio: https://www.mubarakabubakar.com/

Email: mubarakabubakar96@gmail.com

I am Mubarak, a UI/UX and WordPress Designer with 4 years of experience designing digital products in the design industry. I have a proven track record designing intuitive and delightful user experiences that drive user engagement and satisfaction. My design experience spans across various industries, including logistics, supply chain, financial services, Agriculture, E-commerce, Art, and Environmental service.
For the home cycle mechanic Park Tools make a good guide book which utilises their products.

https://www.parktool.com/en-int/product/big-blue-book-of-bic...
Correct. As much as Mr. Gruber may be irritated / frustrated that Figma AI's engine just apes Apple design patterns when asked to build a novel interface, how much legal protection do we really want to give button, switch, and gauge patterns?

Think about how wildly different Photoshop and Gimp's UIs are. Do we want a world where every application has to be that different from its neighbors because the government has granted strong legal protections for interface design IP? Remember what Nintendo owning an exclusive patent on the crosspad did to every other game console's crosspad for several decades? To give an analogy: I think people generally consider the "APIs are copyrightable" decision to be a bit bullshit... Who wants stronger protections for human interface designs than we already have?
SEEKING WORK | INDIAN STANDARD TIME | REMOTE

Technologies: Java, SpringBoot, Python, Django, Flask, SQL, MongoDB, Golang.
projects: https://alles-tools.com/
Email: suvarnanarayanan2g (at) gmail.com

I have experience, mostly dealing with, web
applications but I'm down to make you anything that can be realistically
done, albeit I would need a bit more time than usual if it is not web dev.

Payment: Paypal/Remitly only
Fees: Up for negotiation - Not looking to charge much!
Just do what the faq suggests and email hn@ycombinator.com. You're much more likely to get an answer there than here.
My key takeaway from this article is that the best place to go see the Milky Way is deep in the Amazon rainforest… where the tree cover is nearly 100% and there isn’t a single road for a hundred miles.

That’s a neat collection of graphics. I’m curious how bespoke the creation process is for each graphic or if this is something everyone just does in ArcGis or similar.

That last graphic about the Western US being the only other candidate is interesting because the two sides of the Rockies weren’t connected by a highway until the I70 over Glenwood Canyon was completed in 1992. Before its completion, the western and eastern halves of Colorado were practically different states and it took the interstate highway project half a century to get there because the terrain was so challenging.
Hdmod (not the money grab hd edition) is a good nodernized version with lots of QoL, modding scene is active and there is also VCMI engine. All working fine
Nuclear could power the AI boom–but only if proliferation risks are minimized
Scikit-Learn is the most popular Python ML framework, it's a swiss army knife that does a little bit of everything well. Not particularly suited to computer vision, however.

Imbalanced-Learn is a good framework for resampling in imbalanced classification problems. Can be useful if one of your classes is rarer than the other.

Albumentations will help with training set augmentation - this is an important operation on your training set, because it effectively gives you more training data for "free"

OpenCV is a good library for classical computer vision. Note that the author has a... "creative"... opinion on channel order for images, so you'll be tearing your hair out converting from RGB (what most people using this library will be familiar with) to BGR (their opinion, based on an old convention from 24 years ago) and you will shoot yourself in the foot multiple times as a result. Repeatedly, and you won't know why. This deviation from the norm is such a time vampire (Seriously guys, it's not 2000 anymore, why is this still in BGR?!), but the library is also very powerful with a wide range of features, so it's worth the trouble.

Now, ideally you don't reach for a top-shelf tool like a neural network. They're spicy, they're fun, and cool as hell, but if you can get away with a classical approach, you want to try to do that. If it's something like counting cells or objects in an industrial camera, that's the kind of thing that works well here. Stuff where you can come up with a good series of filters, then plug into a classifier or count some pixels. Fiji ImageJ is a good GUI if you want to play with filters without a bunch of coding.

If it's something like "identify the breed of dog generally in social media images with dogs in them" then you'll need a neural network. If you need a neural network, PyTorch is the standard now. More object oriented API, and it's not a Google product (unlike TensorFlow), which is good - Facebook has a good track record of not killing their products.

Finally, one last tip - if you go deep learning, transform your input images from RGB into HSV before feeding into the network. This tends to help the neural network a little anecdotally
The "perceived benefits" of being able to see more things at once might really be an illusion if they're just a firehose of distractions.

Less so when the things in question are "an error log next to the bug I'm filing about it", or "program output and the program I'm iterating on" or "the total state of production while I'm deploying code" or "chat with team members while I'm reacting to an incident and don't have the mental bandwidth for extra context switching". A really powerful tiling WM with desktops that can be independently switched between a couple of monitors is pretty much a superpower in these situations.

TFA seems overconfident and mistaken in its assumptions.
Location: South of Germany, Europe, Worldwide
Remote: Yes, occasional travel to meetups and company offsites welcome
Willing to relocate: Not permanently, in-person onboarding is fine
Technologies: Ruby on Rails, PostgreSQL, Sidekiq, Hotwire, Heroku, API integrations
Résumé/CV: On request
Email: seniorrubyengineer@gmail.com

Hello! I have been working with Ruby on Rails for more than 15 years already. Across various industries, built several green field applications from scratch, but also worked with huge and old legacy applications with millions of active users.

And I have been in leading positions of different flavors in the past 10 years as delivery, project, tech, or team lead. Often being the CTO's right hand, working autonomously across teams and taking full ownership of web application development and operations.

Looking for a very senior IC position in a company utilizing a Ruby tech stack (currently I am a Principal Engineer). Happy to take over leadership, product and management responsibilities, for example as fractional CTO.

Ruby on Rails | start-up | remote
You can use Vue without build tools as well
What I mean is that imagine you have HTML like this:

<div hx-disable><img src="foo.jpg"></div>

You might screw up and give the attacker a way to control the src attribute like:

<div hx-disable><img src="//evil.com/bad.jpg"></div>

So, maybe unintentional behavior but still no xss.

And if you let the attacker inject double quotes, then they can escape the attribute and do something like this:

<div hx-disable><img src="foo" hx-delete="/account" hx-trigger="load"></div>

In this case, htmx would still prevent the xss because hx-disable causes htmx to ignore the hx-delete attribute in the child element.

But if we assume the server fails to encode angle brackets too, then the attacker wins because they can terminate the hx-disable, as described in the post.

<div hx-disable><img src="foo"></div><span hx-delete="/account" hx-trigger="load"></span>

But they're different levels of screwup. Accidentally letting the attacker control the value of the attribute is one level, letting them inject extra attributes is another level, and letting them inject extra HTML elements is another level.

Granted, if you're screwing up output encoding, you're likely going to grant the attacker the ability to inject elements at the same time that you allow them to inject attributes, but the defender has a bit more protection if they disallow or encode angle brackets in user input.
That's because Sun just bolted stuff on to Unix. Bell Labs actually achieved that goal in Plan 9 which is still very much alive.
Is there a name for this simple style of writing?

It reminds me of the style of pop science books written in the late 19th and early 20th century. There's a nice charm in it, like it's trying not to be pretentiously complex.
The same could be said for compilers, too. Deployed binaries and code have never been the "source" of your app.
well you would have to stop taxing profits and tax revenue.

Otherwise there is no way to stop companies doing the licensing Intellectual Property trick to bring profit to near zero.

But the people who would have to do it and the people who sponsor them into the office would lose a lot of money. So it will not be done.

Recently the Panama papers investigation was concluded and no wrongdoing was detected.

One thing begs a question why were the journalist responsible killed in a car bomb? As far as I checked a car bomb is not a random event.
Can I kick it off programmatically inside a Cargo build via build.rs? I tried to go down this road with SWC and ... failed.

To be clear: I have JS/HTML artifacts in my repo alongside Rust source. I want to bundle them then ship them inside a produced Rust binary, or at least with it. With one build step using Cargo.
Is this not a problem given impeachment votes will follow party lines? A party with the presidency and with >1/3 of the senate would have unchecked power. As long as there are individuals who are willing to execute the orders (who can later be pardoned), the president could delay elections or eliminate political rivals indefinitely. The system of checks and balances were put in place by the founders assuming each party will serve their own interests. Politics aside, if this immunity is given to the president, the current system would provide no checks for the executive branch of a party willing to exercise the full extent of those powers. People would essentially be expecting on good faith each election that the president will not become a dictator; there would be no procedure to actually prevent that.
HN really strange, page jumped from front to page 3...

I'm still searching for the holy grail of web development without Javascript or TypeScript, still not found.

Leptos still ahead but still imature, recently with panic! with signal usage.
Dioxus today commited improvements to suspension such as placeholders...

egui unusable in mobile, as Android keyboard overlaps the window.

Don't know other alternatives in other languages, but for those who don't want JS it's difficult.
If it is pulling a filesystem from tape into memory and booting from that, it could be pretty quick. Reading sequentially from tape, if you are already at the right location which is easy if that location is the start of the tape, isn't particularly slow at all – non-sequential access is where tape storage becomes very slow due to massive latency in the physical mechanisms.
Location: Singapore

Remote: Remote/Hybrid/Office

Willing to relocate: yes

Technologies: React, Vue, Svelte, Typescript, Sass, MongoDB, NodeJS, websocket

Resume: https://drive.google.com/file/d/
1vkjdftUUw6nQL30LGrWH32r3Plm9swHS/view

Email: juno.ngx@gmail.com

Portfolio: https://www.junongx.com/

While my professional experiences appear limited, I have built a good amount of things, as displayed on my portfolio website, and know my way around getting things done. I'm also very happy to be full-stack, if the job allows.
His buyer will also check the title before buying, so the point is that if there is an issue with title he won't be able to flip it.
WSJ – Mini-Strokes, Gut Problems: Scientists See Links to an Old Bout of Covid
"Creativity Inc" about Pixar should be a candidate.
> I don't believe not using a condom with a Tinder date is an option, at least in the West.

It's a very common option. About 30% report non-use of condoms in their previous one-night-stand.

Most STDs are minor and/or easily treatable diseases. The worry about them has a huge moralistic component.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9274792/
It could end up like Chatbot (pre-Gen AI) and 3D Printers. I started a company a few years back, literally with the name "bot" in it, and bought myself a 3D printer. Both are left in the dust.

I don't think Gen AI will be totally bust, but it won't be as promised (anytime soon). Just like in a software project, the last 10% is another 90%.
It might be a violation of the law and clearly illegal, but that does not mean it is not an official act for which the president is immune.
No, I didn't because this is a project that I can't pursue. But the usual situation in academia (and, I guess, anything that is not self-published) is that the copyright owners of publications are not even the scientific institutions that produce those materials, much less the researchers themselves.

People who are interested on the subject and who may want to pursue a project like this one are likely to be academics or ex-academics, and they know beforehand that it's not just the technical work they need to put on, but also everything connected to matters of intellectual property involving multiple parties. That knowledge is enough to discourage most.