skysight-inc/HackerNews huggingface dataset:
Do you still think it's easier to type in a 6 digit code that is on your mobile while you're browsing with your desktop (compared to Touch ID / Face ID with passkeys)?
eBay doesn't even try to stop for-profit pirated downloadables and CD-Rs
That's what most people think and the world keeps trucking along.

It's the rare people that don't who actually change the world.
Show HN: VimSweeper – Minesweeper with Vim Motions
This was a quick weekend project to make a basic minesweeper that I can play with vim motions, mostly because I like minesweeper to keep my hands busy, but playing with a mouse or trackpad makes my wrists hurt pretty quickly. Thought some others here might enjoy as well :)

Written in C with Raylib, for anyone curious.
Also the author does give the year in the next paragraph. So no googling required.

I also didn't know what the date of the American revolution was, but I understood it was just an example.

> if you’re like me, you’ll find the question much easier to answer given the second version of the sentence, because you remember the American revolution as starting in 1776, not in the 76th year of the 18th century.
Kenyan protesters are using AI in their anti-government fight
Anybody remembers <command>?
In Danish, they are called »legoklodser« (i.e. Lego bricks); seldom is the word capitalised.
I don't necessarily think this is a bad thing.

I "enjoy" doing my own ops part of the job because it often feels like I have fewer roadblocks in my way. I build my stuff (or fix my stuff), test it, build some deployable artifact, and deploy it. I do it all on my own schedule, immediately when I'm ready to do each step, and I don't have to wait on someone else.

But if I'm being honest, I have spent so so so many hours dealing with "ops bullshit", that I probably would have been more productive overall (perhaps worse latency, but better throughput) if I could have just focused on the build/fix and test parts, and kicked the final result over to another team to deal with deployment concerns.

I'm still not sure which is better. Maybe neither is objectively better, and it depends on the person and organization. Maybe have separate teams, but make your devs do a tour of duty through the ops team every now and then so they understand why the ops people get mad at them from time to time. And vice versa.

Anyway, I don't buy the CYA/hand-wavy reasons in the article guessing why DevOps is supposedly dying. I suspect it's for the same reason Agile turned out to be a drag on so many developers: people cargo cult and don't really understand why they're doing a particular thing, so they never adapt it properly to their environment.

So the managers bring in consultants, and the consultants just roll out their cookie cutter solution, with their favorite issue tracker, CI/CD product, deployment system, etc., without really understanding the org's needs.

Then the managers get upset, and we get articles like this.
Isn't that the beauty of open source? That we are empowered to make tools that fit our needs and the needs of our users?

I don't see why open source tools should be intentionally crippled in the name of some sort of "purity". Implementing this feature costs nothing (it is an open standard, unencumbered by licenses or patents), and you can continue to use the tool as if the vendor-specific option doesn't exist.
A simple string match on "+1Clk Windows 11 10 8 7 Vista XP Install" finds 1500+ items that are 100% bogus.
Not copyright, trademark. Two very different things, with very different laws.
Sid is a rolling release in the same fashion as other distros. New code comes in whenever you update which probably works sanely but might be transiently broken.

If you follow "testing", you get a slightly strange cadence where things change quickly just after a stable release and gradually slows down until stable is created, then picks up pace again.

A reasonable choice is to follow whichever named release is currently in testing. Currently that's "trixie". It's identical to the testing release until the fork happens, at which point the local install will be an instance of stable. It's very easy to forget you've done that until you notice some program you're running is older than you expected, at which point upgrading to testing to find the newer one is straightforward.

The machine I'm writing this on is running debian unstable. Installed ~ four years ago when I bought the machine, expecting it to continue working until the nvme burns out.
You can find a reference by looking for "generic trademark"
From Cloud Chaos to FreeBSD Efficiency
I don't think Lego company will have to bear cost of these theft. It will be the retailer.
Just for the record, the name "Lego" comes from »leg godt« which means to play well. The earliest toys from Lego were not the iconic bricks we know today.
> celebrating proprietary, vendor-specific-extensions in our open source tools

It's not proprietary nor vendor specific. I'm not sure what makes cURL "our" tool?

> by nature, supposed to operate in a vendor-agnostic manner?

Does the inclusion of this feature mean a different feature cannot coexist with it? Was it so absurdly complicated to develop that it took time away from other integrations?

> This flag makes zero sense for anyone who isn't an AWS customer.

Do you also dislike QUIC or RTMP? How about NTLM?

> that "being an AWS customer" is not free

Yea but "using AWS protocols outside of AWS" _is_ free.

> It really surprises me that this made it into curl.

They should turn down useful but impure contributions? The lead developer of cURL still has a day job.
But there are other scenarios where your password could be stolen without someone getting access to your 1password, for instance if your connection isn't protected and a man in the middle can intercept your password.

Then they could also intercept your TOTP code, which is valid for a pretty long time by default (remember that the TOTP code is accepted for some time after the counter goes to 0 to account for transmission delays, slightly out of sync clocks, etc.) and use that to log into your account.

TOTP does not protect against modern forms of phishing. You need something like FIDO2.
You never expose the bigserial, you generate a ID (like UUID) for external use/identification and simply have an index over that column for fast selects.
Disclosure: I'm the author of the first blog post.

I think my personal biggest learning when developing passkey-based authentication is that there's a bunch of useful WebAuthn libraries for every major language / framework. However, these libraries only cover very basic uses cases to login and create a passkey. In real-life applications though there are so many scenarios (users deleting the private key of a passkey, users using non-passkey-ready devices, etc.) that require substantial work on your own and it's not really obvious when you start developing a passkey-based auth solution. It's something that most devs discover on the journey.
SEEKING WORK | USA | REMOTE

I am a 20+ year experienced developer.

Most of my work has involved embedded development (Linux, RTOS, baremetal, C/C++/uPython), including various forms of networking and distributed systems, audio/video, as well as backend services (usually using Python, Django, and Go), deployments (AWS, DO, Ansible, Docker, etc). I also do iOS and Android development. I do some frontend work, but that isn't my specialty.

I love helping people develop new products to meet their goals and needs, especially with a focus for getting it in use and making money as soon as possible to demonstrate utility and make money. I also have extensive experience taking over existing legacy code bases.

I am available for part-time or full-time contract work, long-term or short-term. I would love for every project to turn into a lasting business relationship.

Github: https://github.com/jd-boyd
Website: https://boydtechnicalsolutions.com/ https://blog.jdboyd.net/
Email: jdboyd@boydtechnicalsolutions.com
LinkedIn: https://www.linkedin.com/in/jdboyd/
https://www.vice.com/en/article/yvx77j/why-stealing-legos-ma...

This isn't a new development. And it was going on long before the vice article... in the early 2000's it was an eBay "issue".

Recently I have found a bunch of "lego" sets on some Chinese websites (they are pretty good, and the unique kits are interesting). And it points to an interesting pattern. IN the west we are keen on steeling high end goods, honey, wine, TV's, fancy bags, Legos. IN china they just make a knockoff... food, wine, phones, bags, and legos.

Im now kind of curious if this is a manufacturing base outcome or a cultural thing (or a bit of both).
Hey HN!
I am finding freelancers who want to be hired.
I will be posting their services on my site and get people to take their services.

If you are interested to offer any service, just fill the form in link.

Also, you can reply below if you have to tell me something or have a feedback!
The way the “loudness wars” work is by reducing the dynamic range to be far narrower than what’s available at 16bit, which gives the impression of loudness even though the loudest sounds are no louder.

Lets say the mastering process compresses the recording extremely to a 42dB (8bit) range - outputting that to either 16 or 24 bit will make zero difference. The audio will still have a dynamic range of 42dB.
It's still bothering me that Y is a vowel in french but not in English. Can we all agree on something for once?
You can also get 666 in a quid for what it's worth
Doing the same thing and expecting a different result is either madness or stupidity. Rigor and correctness are lacking in most, if not all, software engineering and it's still not okay.
Best solution is to have a serial identifier internally and a generated ID for external. And yes it shouldn't be a UUID as they are user-hostile, it should be something like 6-10 letters+digits.
Heh, I hit random a few times and bumped into #126577, some radio station in the US, and it reminded me why I stopped listening to the (free/open) radio.. so many ads it ruined it for me.
Maybe it is also because many families cannot afford anymore the prices Lego demands for their sets. I can imagine the poor father in front of the shelf weighting his options.
> And we — the well-meaning engineers — shoulder much of the blame.

This does not follow from the rest of the article at all. I'll begin by acknowledging the concept of the "asymmetric nudge" as a useful thought. It does somehow explain and ground a feeling of engineers within large corporate structures, where somehow all of your good ideas turn user hostile. The author fails to sufficiently answer the followup question though. Why are the nudges asymmetric, and who holds responsibility for that?

This is where the "sociopathic" executive comes in. The executive does not make technical decisions. Instead they make human decisions, like what projects to fund, what form of communication to accept, and what sorts of arguments to listen to.

The power of the executive is not to censor designs, it's to instill the values into you that steers your self-censorship.
Build a community around your product and get people to join. Bring in people with good amount of followers in the UI UX space. There are many prominent UX ppl who make videos on YT who also happen to work at tech companies and act as mentors to lots of ppl who want to get into UX.

You probably want next gen of UX designers who are probably looking for work and if your product is actually good/revolutionary you can set some kind of new paradigm as to how to do UX in this new way. You know, people who are hyped about AI and new tools.
It would be great to have some radio static playing when switching radio stations.
Instead of uuid7 why cant they use ulid?
I haven't played a piece from sheet music in years, and I still get stuff demonetized. You in fact have to know the common themes well enough to _avoid_ playing things that sound too much like them.
Ulid is also similar to it.
> I don't fault her on this

I do. She didn't know Chinese. For her to attempt a translation (by mashing up earlier translations) shows contempt for Chinese culture and literature.

https://www.jstor.org/stable/j.ctt1wn0qtj.12
The problems from unnecessary bigserial is nothing compared to the pain of insufficient serial.

This is especially true for PostgreSQL which increments sequences for upserts (even if no records are inserted).

That's how I've hit 32-bit limits on tables that had only a couple million rows.

---

I would only use 32-bit for very selective items that is used in a lot of FKs, like a tenant ID.
But the the article goes on to conclude:

> And we — the well-meaning engineers — shoulder much of the blame.

Which doesn't seem to align with that understanding.
The head of a HDD floats, FDD heads slide on the surface.
Because some people believe tools exist to make lives easier, not to evangelize some sort of ideology. A lot of people use AWS; adding helpers for it into commonly-used tools can make people's lives easier.

And beyond that, there a bunch of clones of various AWS APIs, both in other proprietary products, and in open source alternatives. I bet this functionality works with those, too.
Seemingly very interesting moves, but I wonder what specific needs remain for a 'browser-level' local LLM, because local LLMs will be on devices in the near future. So if we're not connected to the internet, maybe a device-level LLM would be better. On the other hand, when we open the browser, we're connected to the great internet! I know browser-level LLMs can have several benefits like speed, privacy protection, and cost-effectiveness, but these features are covered by internet-based LLM APIs or device-level LLM APIs.
Apple Approves Epic Games Store for iPhone and iPad in EU
Yes! https://duckdb.org/2024/06/10/delta.html
If you read just to the middle of that same paragraph, the thesis becomes pretty clear. The Economist, in my experience, has perhaps the highest signal:noise in the mainstream press.
Microsoft is a large company. The threat intel team doesn't write code for Windows. The person you're quoting is highly regarded in this space. Her being part of MS is a very positive sign.

The work this side of MS does in shutting down serious cyber crime and cyber espionage is well known in the security space.
That's neat but I'm embedding the CRC-32 hex digest itself in a TBD location rather than a chosen text. It's moot because the time savings would be premature optimization. Brute force takes only a couple of minutes and I barely use it. Thanks for the thought though.
It was a bona fide spoken language at the time the Daodejing was written. Likely sounding very little like modern Chinese.
I've been buying some Lego knockoffs with great satisfaction. There are many companies now, and their quality has been really great, only slightly below Lego. The prices are so low that I can easily buy replacements if I would need to and still come out cheaper.
Exactly, dunno what to call it ... but every new concept starts out good, gets crazier and crazier and sometimes it may become good again, but most of the time it just devolves into more crazy.

In one of the orgs I worked, ther was a team which worked on the basic devops framework which the application teams could use to then configure their resources. It was a very sane approach.
Oh, some of the big banks are.

But: Au contraire. It's existed much longer than that.

So you've heard of products called vitamins and painkillers?

The CEO of Semantic Designs, Ira Baxter, calls the kinds of migrations and mass changes they sell "heart surgery."

As in: "How many people go to the doctor and say 'Doctor, I think I need some heart surgery?' No one."

A very common thing that happens is that a company starts a project to upgrade some dying system and gets cold feet in the middle and then scraps the project. "We survived last year, we're surviving this year, we'll survive next year." Sometimes it takes extreme pressure, like the compiler for the original language no longer existing, before they migrate.

(And it's not just the really big changes. A friend of mine, who founded another program-transformation startup, discovered this when he landed a deal using his tool to upgrade some company from PHP 4 to PHP 5. They decided that they needed way more code review than the kinds of trivial changes being made actually should require, decided not to do it, and then wound up not doing the upgrade.)

When Ira begins talking to a new customer, he asks two questions:

1. How long have you been in your job?
2. Have you tried to do this kind of thing before?

If the answer to #1 is too long, then he knows that either the manager he's talking too is risk-averse and complacent, or that he'll be promoted to his next job in the middle of the project. To make a good deal, he needs his counterpart to be someone who wants this kind of upgrade to be their big initiative that will help them rise.

If the answer to #2 is no, then he'll know that eventually talks will break down and then they'll try to do it manually or in-house by underestimating how hard it is. For their most famous project, the B-2 Stealth Bomber migration, Northrop Grumman did exactly that -- came to Semantic Designs after a failed manual migration and a failed in-house tool development effort.

So, yeah -- it's a very tough market. The buyers don't behave like you think they should.

I wrote about this some in an appendix to pathsensitive.com/2023/09/its-time-for-painkillers-vitamins-die.html
Although this is good news, Epic will still have to pay Apples Core Technology Fee.

For most developers this will be a deal breaker, because it also applies to free software which most of the time is only supported by donations.
>The issue, of course, is that “counted centuries” are off by one from how we normally interact with dates—the 13th century starts in AD 1201. There’s a simple solution. Avoid saying “the 18th century”, and say “the 1700s” instead. Besides being easier to understand, it’s also slightly shorter.

The kind of person who cares and reads about "the Xth century" can also trivially understand the date range involved.

The kind of person who can't tell 18th century is the 1700s and 21st century is 2000s, it would make them little good to read history, unless they get the basics of counting, calendars, and so on down.
Location: Dhaka, Bangladesh
Remote: Yes
Willing to relocate: Yes
Technologies: Go, PHP, JavaScript, TypeScript, Vue, Angular, Pulumi, Terraform, Ansible, AWS, GCP
Résumé/CV: https://iampavel.dev
Email: contact@iampavel.dev
Thats not your typical shopflifter.

Btw, there are pretty good off-brand Legos.
In Finnish (spoken in another Nordic country) it's plural "legoja" / "legot", with the singular only used as attribute, e.g. "legoukkeli". It's been this way at least since the 80s.
SDF.ORG Acquires Remote Systems Program from Living Computers: Museum+Lab
> Would a few bars of someone's performance of a piece be removed because there's inevitably going to be similarities when performing a piece?

This still happens, yeah.
Legos makes sense for me as a short form of “different boxes of lego”. Similarly I’d be fine with e.g. “plant milks”, “kinetic sands”, etc.
let me guess, you don't actually write code. just talk down people who actually do
this is a crypto lib and the authors repo obv has a ton of hardwork
https://github.com/mratsim/constantine
Do you feel as strongly about king James version of the bible?
> things I think are done most poorly in Python

For ML stuff there’s no way around using Python (pytorch, TensorFlow, etc. etc.). While I appreciate that ML researchers make their models available to run locally, if you’ve ever run LLMs or SD, it’s very clear the focus is on getting models out of the door before others. But man is it a hot mess: every model needs its own Python version/installation from various sources (OS provided, github, package repos, python.org downloads, etc.), the code bases being rife with dozens of module and environment managers and other meta crap that obviously doesn’t cut it, Python devs using a dynamic language but then want types/annotations badly, etc etc. Sorry but from a SW engineering PoV, Python is pure and utter trash (it started life as a better BASIC for learning after all). I’m particularly puzzled by developers choosing/advocating Python for system administration and as shell replacement who now have to ship a locked–down Python version and package repo such as RedHat and Apple.

Perl 5 code, by virtue of being frozen for over ten years in anticipation of what’s now called Raku, has a slightly better chance to run OOTB. But there’s no guarantee: recently came accross 2000ish Perl code using jcode (lib for Shift-JIS and other CJK two byte encoding) that I couldn’t run because jcode uses hashing sigills that were removed from Perl since or something.
Judging from the title, description and photos, these could be just pairs of an original CD bundled with another CD that contains compatibility software, e.g. Wine or DOSBox, and an installer, so the original CD can be installed and played on newer OSes.

Nothing inherently wrong with that. Also, the photos of the CDs themselves look genuine to me.
Its because in the west you will end up in court. In china only laws benefitting the CPC is enforced (hyperbole - maybe.. but still).
I was subscribing to this theory when I decided to go into factory work instead of an office job. As far as keeping me active with no willpower, it worked great and I stayed thin and healthy. But aging takes its toll, and that's where focused workouts shine. Our knowledge of physical therapy has increased a lot in my lifetime, so you can correct most of life's little aches and pains now -- but only if you aren't using your time chasing chickens.
The really impossible thing to translate into English here is that 道 was also the verb “to say.” So 道可道 is a pun that could mean “the way that can be trod” or “the way that can be said.”
People pay as much for art because they are the rare combination of educated person with money which values the aesthetics and artifacts of an era, or as something to signal their wealth to others, or as a way to launder money.
In that sentence? That was talking about my interpretation of the OP, which suggests individual engineers advocate for themselves in traditional organizations when they believe in their ideas. So it would be the individual engineer deciding if they believe in their idea, though in traditional orgs it would be the managers that have some say in what gets implemented.

However I also see people respond to me when I talk about co-ops who somehow think I want to be Joseph Stalin, where in the imagined case they are skewering me for wanting all the decision making power. But that is a fantasy as the whole point of a co-op is to have more diffuse decision making power than under traditional orgs!
Ahhh Lego the Oracle of Toy-makers ;)
It's less about purity and more about overhead. Adding this feature adds friction to refactoring the code, adds surface area for vulnerabilities (and the user ignoring it won't make that go away), and makes the binary bigger. The cost/benefit ratio might well be favorable, but implementing this feature absolutely costs something.
Unity got raked over the coals for this. Real shame Apple more or less got away with it with its ransom bekng to stay inside the walled garden.
I got lucky and got BBC first, followed by a few random stations (Russia, India), and ended up listening to drum & bass on a French radio. I miss discovering music like this!
I'm from Spain and some elderly people un the South have a very hard accent to grasp. That's a reality. Andalusia, Extremadura and Albacete. The last one have been the hardest one to pick something.

The same happens with the Basque language/variants with some Uribe Kosta subdialects and some further away French Basque dialects.
settecento means "700". Just proposed above as a way to say 18th century or 1700s, same as we sometimes remove the "2000" and just say "the 10s" for the decade starting 2010 (nobody cares for the 2011-as-start convention except people you don't want to talk to in the first place).