skysight-inc/HackerNews huggingface dataset:
The biggest no-no for trading is when you get information about a tender offer, that being one company buying another. Even if you're in the bathroom and you hear the guy in the next stall over talking about it on his phone you're not supposed to trade on that information because everyone knows that a potential tender offer is material non-public information.
As mentioned already, it's not about the method of installation. In my experience python-based tools are slower and buggier than their native counterparts, and that's only after going through the installation process.

Tools written in C / C++ / Go / Rust just don't have nearly as much fuss, and they run faster and are smaller too.
> I work in finance, so I have had numerous trainings on NPMI from different points of view.

What point of view did you get training from other than the point of view of your company's compliance department? I've worked in trading for a long time and never got training from any other source.

Compliance should tell you to take a very conservative view of the law: they have basically nothing to gain from allowing you to trade in a gray area, but you might.

That doesn't mean the SEC or the District Court should take the same conservative view. They have to apply a balanced reading of the law and look at historical precedent.
> but there is a reason why it was installed on all Unix and Linux systems by default

AWK has that one covered fair and square, even BusyBox has AWk.
Maximizing Bugs Bunny
Getting a wife has been so far the best and fastest route to practice soft skills.
That still doesn't give you any right to just take what Apple built for free. Maybe there's no right option for you - I know there isn't for me, I'd prefer to have Windows Mobile (not Phone) again.
Show HN: I made it easier to save, manage and plan online recipes
I’d add another risk here because I think it’s the main one the TOTP actually ends up protecting against in this case: Credential Stuffing.

Since the TOTP secret is generated by the service and not the user, it prevents credential stuffing. It can’t be reused between sites. If you’re still reusing the same password on every site this is a huge increase in security given how many services are breached.

… but using a password manager and a unique password for each service already does that.

So storing your TOTP secrets alongside your password in your password manager is a _very_ marginal benefit. Prevents a replay of the login if it got captured in the clear and… not much else I can think of.

Where-as a “true” 2FA adds protection against malware, data breaches, physical access, and other risks. That seems like a pretty big benefit for minimal work.

I think for most people using TOTP to avoid the “this shady download/keylogger controls my entire life now” scenario is a pretty clear win on effort versus risk.

So I mostly agree with what you wrote here except the summary. I’d say everyone should be using “true” TOTP where they can, and if you’re going to store them alongside your password they’re little more than security theatre so don’t bother.
You can't vote out oligarchy and dictators who owns the media. Two party system will never really care about average peoples problems. But they will together increase the debt limit of USA, fast. Because they are both in it for the money and power :) and to make Middle class smaller and smaller.
> Re "long term maintenance mode", there's the not so small matter of how many people can, in fact, actually develop perl. The codebase is large and full of many traps. It's a difficult, but not impossible, codebase to contribute to.

Yeah, and that was one of the main reasons cited when they announced Perl 6, back in 2000. 24 years have passed and it's still an issue.
That was shockwaves that damages brain tissue as it passes through it. Dont try to use a jackhammer as bone vibrator.
It is a good decision. He traded on insider information, he should not be able to get off because he tried to be clever and traded a different company’s stock.

Some observations. That guy must be a very decisive (or impulsive) person. He heard the news and decided on the alternate stock trick, found an alternate stock, found a suitable option on that stock and executed the trade all within seven minutes. Perhaps the merger was in the works for a while and he had been thinking and planning this for a while and just pulled the trigger when he heard the merger was approved.

Also, hners should know that they are getting a lot of value by reading that article. Apparently it was written by a team of eight lawyers, seven of which are partners! Considering the billing rates of toplaw partners, this humble article may easily represent 10k dollars of billable time!
As a great alternative there are a handful of very cheap Saleae knock-offs using the same series of Cypress/Infineon logic chips, and they work well with e.g. Sigrok.
Nice overview.
Are the performance Advantages mentioned?

I didn't know about the pyupgrade tool. Very useful.
Most people in the US do not have an employment contract. However last company I worked for did have business ethics you had to agree to every year and I believe one of the things was not shorting company stock.
I think the best place to learn is Afrefs Academy
On popular mid-sized websites spiders/bots traffic is about 50%. On less popular - up to 90%. Every new SEO tool adds to it. Vercel, Cloudflare et al will happily charge their customers for that parasite load. Web search engines will become worse because of it. Seems like we will be better off blocking it altogether.
You'll definitely get flagged because of the disproportionate non linear payoffs. But that's the point of call options. So some people do use them legitimately
Double checked, your search is cached for 5 minutes (that's the timeframe when new request would not happen)
> Cryptography and cryptocurrency aren't the same,

They aren't, but this is a cryptography library.
> Out of curiosity, do you mean that well-known disagreements among scholars have structured the legal system in essentially-Islamic regions?

I'm not sure about legal systems but the religion itself has several positions on many questions. The way this happens is that 2 or more qualified scholars disagree on a ruling based on their reading and analysis of primary texts. This results in two or more rulings. Sometimes, they're equally valid and this more or less created the 4 schools of practice in Sunni Islam. Sometimes, even within a school, there are differences of opinion. The distinctions are usually minor but for someone who is observant, it gives them options when following the stronger position is exceedingly difficult. The technical term for this is a Rukhsa (dispensation)
https://en.m.wikipedia.org/wiki/Rukhsa
from https://www.microsoft.com/en-us/research/blog/graphrag-new-t...

> It does this by detecting “communities” of densely connected nodes in a hierarchical fashion, partitioning the graph at multiple levels from high-level themes to low-level topics, as illustrated in Figure 1. Using an LLM to summarize each of these communities creates a hierarchical summary of the data, providing an overview of a dataset without needing to know which questions to ask in advance. Each community serves as the basis of a community summary that describes its entities and their relationships.
Even today, Perl is the only scripting language with more than 200K modules and no Global Interpreter Lock.
Writing Alt Text for Data Visualization (2020)
I agree that you'll never wear through a normal wood cutting board in normal use.

But you will scratch the surface immediately, and you should be cleaning it aggressively, so you gotta keep that in mind before putting days or weeks into making a beautifully polished, highly detailed work of art.
There are a number of standard libraries that we (Google) ban because we have in-house alternatives that we generally prefer. (In some cases, this is due to compatibility with our threading model. In others, it's probably due to inertia.)

From a skim: <chrono>, <filesystem>, <thread> (along with other concurrency libraries like <mutex> and <future>) are the main ones.

As far as language features that we ban, it's notable that we ban exceptions. Rvalue references are generally discouraged outside of well-trod paths (e.g. move constructors). We ban runtime type information (dynamic_cast, typeid, etc). There are some newer features in C++20 that we haven't accepted yet (modules, ranges, coroutines), due to lack of tooling, concerns about performance, and more.

Sometimes these bans get reversed (there was a long-standing ban on mutable reference parameters that was overturned after many years of discussion).

One of the key points we try to emphasize is that readability is primarily about reading other people's code, and so we provide well-trod paths that try to avoid pitfalls and generally surprising behavior (e.g. this article's focus on initialization? https://abseil.io/tips/88). There is value in moving closer to Python's "There should be one-- and preferably only one --obvious way to do it."

We assert that one of the goals of the style guide (the second section, after Background) is that rules should pull their own weight; we explicitly cite this as a reason why we don't ban goto. I imagine this is also why there isn't an explicit ban on alternative operator representations (e.g. writing `if (foo and bar) <% baz(); %>`).

I don't think I agree that every rule pulls its own weight -- I like to cite that I copy-pasted the internal version of the style guide into a Google doc earlier this year to see how long it was... and it clocked in at over 100 pages. But maybe that's an indicator of how complex C++ is, where we have to make the tradeoff between being concise, being precise, and providing sufficient context.
As mentioned elsewhere, it ensures the ability to perform resumable and consistent batching queries across the data set without missing records.

Ordering over an insertion timestamp is not enough if two records may have the same timestamp: You may miss a record (or visit a record twice) across multiple queries.
Thanks for taking the most uncharitable interpretation of what I wrote possible. It’s so productive.
D3 is nice and really customizable, but if you want something just out of the box that looks pretty would be my guess.
As of written, the no-gilexperimental support will come as part of 3.13, due to come out in Oct 2024 (right now, it's in beta)

3.13 release note : https://docs.python.org/3.13/whatsnew/3.13.html

no-gil PEP https://peps.python.org/pep-0703/#backwards-compatibility
You’re probably right. Though I’ve applied for 70+ jobs in the last 6 months with a carefully written resume/cv sans gpt, and I haven’t had so much as a screen. It’s a depressing time.
To add, in this scam system, now they are systemically important banks who can't lose :) Once stock market crashes, they can just wake up and say we have unlimited printerrrr. It's all just a scam
I think of the age number "practically" as the number of "birthday celebrations" I have experienced, excluding the actual day of birth. That's the same as the amount of completed years I've lived on this earth, and one less than the year I'm living in, because that year is not yet completed. (Except of course on birthdays)

But I think this also illustrates just how averse our culture is to using zero-indexing in counts: The age number absolutely is zero-indexed - a baby before before the first birthday is zero years old. But no one calls it like that, instead we drop the year count entirely and fall back to the next-largest nonzero unit, i.e. we say the baby is so-and-so-many months old. And for newborns not yet a month old, we count in weeks, etc.

I think, culturally, it's not that surprising as this method of counting is older than the entire concept of "zero". But I think it shows that there is little hope of convincing a large number of non-nerd people to start counting things with zeros.
With Nothing to Do
I've developed a command-line password manager and authentication application in Rust. Here are the key features:

1. Uses KeePass file format for secure credential storage
2. Supports One-Time Passwords (OTP) for two-factor authentication (2FA)
3. Provides a convenient CLI interface for retrieving 2FA codes

The project, named Passlane, offers a streamlined approach to password management directly from the terminal. It's particularly satisfying to generate 2FA codes via command line!

For those interested in exploring the code or contributing, you can find the project on GitHub: https://github.com/anssip/passlane

I'd appreciate any feedback or suggestions for improvement.
There are a whole community of trading degenerates who trade 0-days till expiration (0dte) options all day long. Some of them claim they make money with black box algos. Those options move a little too fast to trade as a human unless you sit there with your finger on the sell button all day long.
abstraction is the crabification of software,it gets do powerful and so good,it kills the carprace wearer. Allowing fresh new script kid generations to re experience the buisness story and reinvent the wheel.
She hasn't read Harold McGee On Food and Cooking and she doesn't care about the maillard effect
Why? Rspack supports webpack plugins even tho it's written in Rust. That's how you win at adoption.

If Biome would support plugins the answer to post title "What's coming next for ESLint" will be "slide to obsolescence".
Without it ESLint is going to cling on legacy codebases for a bit longer.
Weaponized... Rather strong word.
Ask HN: Looking for empirical advices on "serverless" ML hosting
Hey HN,

I'm exploring serverless platforms for hosting custom machine learning models and could use some advice from those who have experience with these services. I get that "serverless" still involves servers, but I'm looking at options that market themselves this way.

I'm considering:

modal.com
runpod.io
replicate.com
beam.cloud

I'm curious about two main things:
Pricing: How do the costs compare for running custom ML models on these platforms? Any detailed breakdowns would be great.
Cold Start Time: How quickly can each platform start up a custom model from a cold start? Are there big differences in startup times?

If you've used any of these, I'd love to hear your thoughts and experiences.
No, what is it? Here it is A kind of button that acts like radio buttons?

https://www.w3.org/TR/2011/WD-html5-author-20110809/the-comm....

One more example here.

https://www.w3.org/TR/2011/WD-html5-author-20110809/the-menu...

I'm also unfamiliar with <menu>, it seems a very sensible idea? What went wrong with it?
The guy only earned $107k. I understand it’s their job to enforce the law but the SEC really seems to only go after small timers.
The Curious Case of Fullers Library and Its Deceptive Link Requests
this is awesome -- ty :)
Let's see what's left in Alphabet that isn't Google.

There's Calico, CapitalG, Fiber, GV, Intrinsic, Isomorphic, Verily, Waymo, Wing, X. Nest and DeepMind were absorbed into Google, and many of the previous Alphabet mini-companies are already gone (Makani, etc).

My personal expectation is that Calico will eventually wind down, as their research has been pretty unexceptional and I don't think they've managed to find any real revenue sources.

Intrinsic is probably on borrowed time, looking for revenue, and if they don't get significant amounts in the next two years, will be shut down.

Waymo isn't profitable yet but it looks like the execs have decided to give it a very, very long runway, and they are the technical leader in no-driver cars. It's still at risk if they don't find a good revenue model.

Wing has no real revenue to support their costs, and drone deliveries just aren't going to be a great business, so I expect it to shut down in the next two years.

Fiber- it's hard to tell why Google has allowed this to continue for so long. The only thing I can imagine is that they are somehow using the usage data to generate revenue or ML training data.

Intrinsic is really new so they probably have a couple years runway, but pharma sales aren't a great business to be in if your only product is a protein structure predictor and binding predictor. I work in this field and I still see this as an unrealistic bet on Alphabet's part.

That leaves Verily. It's clear Alphabet has downsized it significantly and scoped the projects down significantly. They have turned away from every single early idea and pivoted to a few remaining areas where they have some strength. I work in this field and it's amazing to me they keep it around- so I expect that unless they sell it in the next year or two, it will be shut down.

CapitalG, GV, and Google's real estate ventures will probably all continue because they have generated a fair amount of revenue.

Google Cloud is part of Google, not Alphabet, which IMHO is an insult to the people who run it. It could be spun off as an all-in Alphabet company but it's so closely tied to the rest of the Google infrastructure it will never live on its own.

Truly impressive how little Alphabet has achieved.
Why not learn it anyway. Broader 'bildung' is a lifelong pursuit.
Hadrius (YC W23) Is Hiring Founding Engineers in NYC
US created 111,000 fewer jobs in April and May than previously estimated
Hacking Depression, Hacker News Edition (2018)
> if your network is compromised I can read your password but not totp

What part of my network? The password is being encrypted in my browser, sent over an encrypted and authenticated connection, and decrypted by the service I’m logging in to.

The only real place to compromise here is before the “browser sends this to SSL library” part in which case you’re already on my local machine and you can just grab everything in my password manager when I unlock it.

> if I hacked a website you’re registered to and you had reused your password I got your password but not totp

If you’re not using a password manager and a different password for each service, then yes, using TOTP provides a large security benefit.

If you’re using a password manager it is probably specifically to avoid password re-use, so this doesn’t apply in most cases.

> if I broke through your computer and password manager then yes it’s all over, but this is not the only threat model and frankly the least i am worried about

If you’re on my computer, yeah, you’ve got both and the TOTP, they do nothing.

So there’s no scenario here where “password manager for passwords + TOTP” is decreasing my risks in any meaningful way.
The basic disadvantage of that design is that a real radio or TV can change channels in milliseconds, but it takes seconds to set up a digital stream in most cases.

Thus the interface of “changing channels” by rapidly pushing buttons is not so pleasing for a streaming-based player as it is for the real thing which is why Netflix provides the search and browsing interface it has.
A New Age of Materials Is Dawning, for Everything from Smartphones to Missiles
This is a valid point but it highly depends on the use case and larger context on whether this will be relevant or not. If you have a table where you fetch multiple rows close to each other in paginated manner this would be relevant for the performance but if you only fetch individual records by uuid, data locality wouldn’t increase the performance.
https://www.wsj.com/tech/composites-manufacturing-boeing-dro...
For people who need to use Office seriously, unfortunately LibreOffice is not an option. But should be good for light usage.
You assume that because you were not able to overcome whatever error/s you encountered with Google Auth and Authy, that you were being forced to use MS Authenticator.
Quite interested in this board game. Do you have some more information on this?
It's amazing that they caught him and he got what he deserved but there's one thing that worries me...

We're talking about a petty $120K in profit for Panuwat according to several sources:

https://archive.is/SGklv

How comes the SEC can even find something like that?

$120K in options trading win/loss is nothing. Peanuts.

It's also quite wild that this one is the case we hear about. There's obviously actual insider trading ongoing with proper amounts and not this $120K non-news event.

So how comes they even found him and how comes it's that minuscule, ridiculous, amount that gets reported and published everywhere?

On a big equity or index, $120K can be a single option contract on a 5% move in a single day (OK, 5% moves in a day aren't the most common but still).

And AFAIK there are millions (tens of millions?) of options contract exchanging hands daily.

So, well, $120K... To me it's just seriously WTF?
Xuanwo's Vision: Data Freedom
Exchange rates used to be pegged to labor. The futures market obfuscated that and is controlled by a central bank through government issued subsidies which cause food surpluses which “should” reduce the price of produce.. if not for the manipulated futures market.

I’m sure population density is a variable in this equation as well, I just can’t figure out where to pin it.
I have some carpenter ants that appear every winter, then they make off with some of the blades of my grass.

Just a bit after you stomp some of the workers or drop some diatomaceous earth on them you can see soldiers appearing in the entrances to their holes. They seem to actively try and block injured and/or dirty workers from re-entering the nest.
Please tell me more of what you mean.
No, I just highlighted how your point was underargued.
You're simply missing the point.

> I seriously don’t understand why people in 2024 insist in reproducing these core services but badly and at great expense.

Because those users have a flow that they like and don't want to change it regardless of all the pitfalls in that flow. "It works, there is just this one problem. Why don't you invent a solution for this one problem for us. I don't want to use S3, or Azure or whatever. Just give me an sftp endpoint I can upload files to". Oh CSV doesn't have a standardized way of parsing escapes? why don't you handle a `# escape=\` or `# doublequote` or `# singlequote` or `# ignore-new-lines-in-the-middle-of-a-string` and we will use that.

Heck, it's 2024, and we have a fully automated, source control (github, gitlab, bitbucket, etc) integrated, S3/Azure Storage/GCP Buckets integrated, Dockerfile and Makefile aware, application deployment service and we still have a non-trivial number of users asking "Why can't I just drag and drop my .php or .py files over fileZilla to deploy my code? I don't want to use git or docker or S3". Oh, you can't version our code updates when we just drag 100 files over sftp? why don't we update a `version.txt` file when we're done updating then you count that as a version?
Interesting list. I need none of it except the guaranteed dict insertion order!

But of course, I have to learn all of it to understand other people's code. Python's syntax has really gotten worse. The match statement is ugly in comparison to functional languages, I'm not sure about f-strings, the with-statement extension adds new overhead to the reader.

Python is really like C++ now, except 50 times slower (yes, I know about the slow std::unordered_map special case that is due to its rigid specification).
So bogus claims are alright when fact checking is inconvenient...
Yeah, if he had made $107M instead he would have had the lawyer power to go free.
As someone that besides being a developer, has had build engineer, systems engineer, devops, as 2nd title, this has always been a placeholder for everything else that we do besides coding activities.

The guy in the team that bothers with setting up computers, physical or virtual, configuring Jenkins, Bamboo, Team City,.., writes the RPM build scripts, and whatever else that other devs rather not do.

Just like Agile, DevOps and such, they all end up being ways to have conferences, books, consulting services,...