skysight-inc/HackerNews huggingface dataset:
Cheeky buggers.

I'm also aware of an attack/exploit on carpark ticketing systems that people are using to get cheap parking.

I wouldn't call it sophisticated but it does require an understanding of the system above your average punter.

But what is most interesting, is these kinds of exploits seem to be getting found by non-technical people, and while I see all the ways it is easy to trace the exploit back to them, they don't and so to them it's more akin to a videogame exploit. Ie: they can't envision real world consequences from messing with a computer system.

In their defense, they have been getting away with it for two years now.
Thus "It depends on threat model."

In this case, clearly the simpler tech was a better fit.
Y'know, if worded differently, without misogynistic overtones, this could have been a good discussion. Please read the guidelines [0].

[0] https://news.ycombinator.com/newsguidelines.html
I don't mind venv and pip — they may be inconvenient but at least they work.

The requirements.txt however is essentially broken for any project that changes in time. If you don't freeze transitive dependencies versions your builds break with no prior notice. If you do, transitive dependencies stay there forever even when not needed anymore.
Glad I’m not the only one
I've found it to be quite accurate here in upstate NY, with a few recognizable exceptions. In particular, sometimes it seems to think it's hearing a blue-headed vireo when a red-eyed vireo is singing. Also, it sometimes misreports yellow-rumped warblers.
Desperate for power, AI hosts turn to nuclear industry
I created a Hacker News redesign
I redesigned Hacker News' website, and I coded it too!
Physical property rights, which I strongly support, are not a law of nature. lions and tigers dont have property rights. They are a concept, but one is no more natural than another. matter exists, knowledge exists. exclusive monopoly to one or the other is no different.

RE Cars:

I think the analogy is apt, but you you ignore the time an effort that goes into creating one. Who would build or buy a car if someone could just get in and drive off.

The same is true for literature. Why spend years writing a book, play, or song, if the first person that hears or sees it reproduces it for everyone and you recieve nothing.

It is just like spending time building a car for someone to drive off with it.

Your argument focuses on the user, not the creator.

>and if someone else gets in my novel and drives off with it, why, i can still read it as easily as before.

Thats all an well for the consumer. The car thief doesnt care either, as long as there are cars to steal and idiots buying cars.

You might argue that peope will create literature out of innate desire,as an argument how screwing them over wont impact incetives, but how is that different from physical property.

You think someone has a deep drive to write the next great ammercian novel, but not grow food, so it is ok to steal one, but not the other. What if people want to grow food, does that then justify stealing it?

I just think it is extremely hypocritical to dismiss IP creators while protecting the car makers or food growers.

IF someone wants to create IP for free, grow food for free, or build cars for free- They CAN!
(2022)

Some discussion then:

https://news.ycombinator.com/item?id=31905218
Trust me, I understand that Linux is all about reading.

I also understand that it is perpetually irrelevant in the consumer computer space, despite everyone in that space absolutely hating the dominate OS. A hate that you can watch grow in virtually real time on any social platform. But that hate is focused on pushing the giant back in-line, not at abandoning that giant for fresh pastures. You know why?

Because 30 years ago, someone who touched grass realized that consumers cannot, let me repeat: cannot, use an OS that is "all about reading".
No way to allocate port numbers without clashes ever. What I do is having a Ports.md in my personal knowledge base with all port assignments in my personal projects and networks: port, description, project link and/or service host:port. This works very well, I don’t have tens of thousands of projects so I’m not going to exhaust port numbers. I used to try to use Unix domain sockets as much as possible for anything fronted by nginx, but stopped bothering with that since I started centrally maintaining port assignment.
1. You're right! Will fix it to handle this as well as the support for relative directories

2. Yes, Will integrate a logging library instead of fmt (https://github.com/uber-go/zap)
> If you haven't seen that error #3 before

I have been in the #3 hell, almost exactly how you described but it was always about SSL and its missing headers. On my desktop wiki, the most important section about Python is the one that contains the incantations required to compile SSL, setting myriad of variables and using pyenv to build a newer (3.10/3.11/3.12) Python.
A once-in-a-lifetime explosion is about to create a 'new' star in the sky
Vector graphics are really hard to do on a GPU in an efficient manner. The way the data is stored as individual curve segments makes it difficult to parallelize the coverage problem, it's equivalent to a global parse; the best approaches all do some form of parsing of curve data on the CPU, either rasterizing fully on the GPU, or putting it in a structure the GPU can chew on.

But again, this has nothing to do with HarfBuzz or wasm.
https://news.ycombinator.com/item?id=40905891

* Python has too many package managers *
I recently built an simpler kvm/ip using a few pi pico's and ms2130 chips. https://www.modularkvmip.com doesnt matter what server you use. Its not opensource but its just usb device passthrough at the core.
I don't like 1Password _for my use case_.

If your use-case aligns with what 1Password is selling, I'm sure they still make a great product.

If sharing's a huge part of what you're looking for, then 1Password or Bitwarden are probably your best options. If it's not and you're comfortable managing your own sync, then I don't think KeepassXC can be beat.

Pretty much the only thing I'll say concretely is Don't. Use. Lastpass. Like, if you've got the option of putting all your passwords in a plain text file on your desktop or in LastPass... pick the plain text file.
Thanks! Could you please point me to a reference for (1)

etcd/wal actually does do preallocations (https://github.com/etcd-io/etcd/blob/24e05998c68f481af2bd567...)

Yet to implement max buffer age! Any references for this would be bomb!

Is mmap() really needed here? Came across a similar project that does this? Really gotta dig deep here! https://github.com/jhunters/bigqueue
Will do! Thanks for the comment
I have a project managed by Poetry - how easy would it be to switch that to use rye? What are the upsides/downsides compared to Poetry?
That is somewhat concerning for myself, I do offload to my notes and to my code my memory, but I started having problems memorizing in high school, somewhat related to my complete rejection of somebody asking me to memorize something just because they said so, instead of being useful.

But then, I do remember programming language libraries that I use often, so it can't be ADD
Famously, in recent history:

A New Zealand handyman with a passion for jet engines says he is building a cruise missile in his backyard using parts and technology freely available over the Internet.

https://www.aljazeera.com/news/2003/6/5/new-zealander-builds...

https://en.wikipedia.org/wiki/Bruce_Simpson_(blogger)

https://www.youtube.com/@xjet
Yet to implement linting and unit tests. This is kind of a rough draft/v0
In audio, you can usually tolerate a few milliseconds of latency (more when mixing, less when recording). This means you can buffer your audio stream, for example in blocks of 64 or 128 samples.

As far as I know, these millisecond latencies are orders of magnitude higher than what would be tolerable in HFT. There the units are microseconds and nanoseconds.
> How does a company like NVIDIA operate without IP law?

Don't bother us with such complexities. We developed our ideas about IP after being outraged by attempts to stop our piracy of music and movies, and carefully reviewing lists of all the cons of IP (after completely ignoring and throwing out the list of the pros). The only righteous path is for the law to be reform to reflect our views.
Armed men have never enforced that everyone gets what they deserve. Not even close. They enforce those laws that we have decided they should. It's a huge leap from saying that someone deserves something to saying that society's armed men should take that something from other people and give it to them.
And how would you know if something is actually "great" or important enough to never quit? That your efforts aren't better spent elsewhere?
I guess so! Will be fixed
cries in CI
The biggest danger by human overpopulation is global warming and other forms of permanent enviromental damage (specially to other animal species), which has no equivalent in this experiment, global warming wouldn't be such an issue if there weren't 8 billions of us, is hard to verify but is likely that if there were "only" 1 billion humans global warming would have progressed only an 8th fraction of what it currently has. Of course any chance of addressing such population issue is long gone but hoping from a change of hearth from the people at charge of the top most polluting industries is even less likely as far as I can tell (fossil fuels, agriculture, fashion)
Absolutely loved your project ZoneTree. Gotta dig deep on this
Wheel falls off Boeing 757-200 during takeoff
Halted was like my Disneyland.
> Moreover, the fontations platform, which is the Rust framework Oxidize is producing, will unify font compilation and consumption, reducing the number of places new font-format features need to be implemented from three (FontTools, FreeType, and HarfBuzz) to one (Fontations), which would reduce development cost and overhead.

Will FreeType and HarfBuzz remain supported as C/C++ projects long-term, I wonder? Asking as someone who depends on these and doesn't want to introduce a dependency on a Rust compiler :)

Anecdotally, I notice a lot of game developers avoid FreeType and Harfbuzz entirely, instead opting for much worse text rendering in the form of stb_truetype.h only (Dear Imgui uses this, for example) - which 'is nice because it is a single header C file' but sucks with international languages; many people use SDFs for similar reasons.

I think the proposed move to WASM fonts, if done right, could make it easier to reduce the amount of code people need to render fonts (if the WASM font does the heavy lifting, and a small C program could render it) and alleviate this trend of people not using a good text rendering stack
I don't think that is the solution either. From someone who lives in a country without safe harbour style laws, it is prohibitively risky to bootstrap digital ventures that work with customer images.

Something like imgur or giphy would be untennable here, in my opinion, unless you had an army of lawyers (which doesn't solve the nefarious content problem, just keeps you in business)
Good admins. Now they need to get to Ecuador.
It's all-in-one. Also mise > asdf.
Deeply entrenched in that freedom is the fantasy of inventing some new miracle product, or supremely popular song or book. It’s protecting the idea that someday I might be the wealthy benefactor of these practices and rules. We see people vote against their interests all the time because of “The American Dream”, and the hope that they might achieve it.
> let's not pretend it's valuable research

Why not? How can anyone determine that research is not valuable if it's not carried out? There may be ethics points of view, that people may have different opinions about, but how does that exclude the possibility of useful results? Can the degree of usefulness be determined by the degree (or the inverse degree) of ethics? If so, how? Arguments that use self-evidence as argument for their correctness are not useful.
I feel that transitive dependency is convenient, but that's what makes your application fat.

Moreover, many of those transitive dependencies aren't actually needed (they might be needed for some obscure feature that you don't use). Good libraries might declare those dependencies as optional, but not always.

And almost all dependency conflicts arise from multi-level transitive dependency problems.

May be it's better to just instruct user which transitive dependencies he has to install and let him do the job.

I, myself, miss dumb simple java build tool which would to the very minimum of job. I'm happy to assist it when necessary. Maven is nightmare and Gradle is hell of a nightmare. I don't need that complexity for my projects but I have to pay the price. I often think to downgrade to Makefile or shell script.
Surely, that downtime quote is apocryphal. The early decades were plagued by poor service due to maintenance, mechanical failure, and human error. In the early decades, manual switchboards were the primary method of connecting calls. The intense workload and physical demands on operators often led to service disruptions . In 1907, over 400 operators went on strike in Toronto, severely impacting phone service. The strike was driven by wage disputes, increased working hours, and poor working conditions

They didn't have downtime logs, but that doesn't mean that the rapid growth of telephone demand didn't outpace the Bell System's capacity to provide adequate service. The company struggled to balance expansion with maintaining service quality, leading to intermittent service issues .

Bell System faced significant public dissatisfaction due to poor service quality. This was compounded by internal issues such as poor employee morale and fierce competition.
I tried this and proceeded to lose hours trying to figure out what I needed to remember. It's a horrible feeling, because I know I needed to remember it
Keep reading the python tutorial you're working through and you'll eventually see they import 3rd party libraries. That's when things get difficult.
My personal setup is:

- Wired headphones
- Speakers (Creative Pebble) when doing group meeting
- USB microphone (Fifine). It is directional and does not pick up everything in the room. I put it on a boom arm attached to my desk for quick positioning.

No Bluetooth, no earbuds with microphone, no internal microphones. Although, when I'm away from my desk, my wired headphones has a mic. But it's a better one than what I've seen on some earbuds.
You don't need to shut down processes on the server. All you have to do is isolate CPU cores and move your workloads onto those cores. That's been a common practice in low latency networking for decades.
WASI API: Capabilities and Filesystems
Why Your Business Should Switch to Web3
You should use pyproject.toml to specify loose constraints instead.
And did you fix the performance problem?
Probably have different versions of Python installed manually. And/or architecture different.
That's not true. It does slow things down because it has an atomic access. How slow depends on the platform.

unique_ptr does not slow things down.
A few notes in no order:

- spaceflightnow.com has excellent info on upcoming launches and then streams most of them live. Highly recommended.

- don’t plan a trip around a rocket launch. They get scrubbed all the time. Find something else you want to do in the area (even a few hours away, such as Miami) and then make a game time decision to go if the launch is likely to happen. That said, the Kennedy space center visitors complex is fantastic, especially with kids, and is worth a short trip with or without a launch.

- The article says to get there early. Personally I wouldn’t fret if watching in Florida. There’s lots of good places to watch from and given that launches happen almost weekly these days (and sometimes multiple times a day!), the crowds are not that crazy.

- it’s cool to see, but don’t overinflate expectations. I watched a Falcon 9 launch. It was fun. It was not as loud as expected. I understand that Falcon Heavies are louder (obviously the same goes for Starship). But at the end of the day you are pretty far away from these launches. It’s nothing like what you see on TV where the cameras are nearby.

- you need to tune in to a live broadcast to know what is going on during a launch, and if it is going to go ahead. Just keep in mind that there are delays in the broadcast, so by the time they are counting down to ten, the rocket might already have launched.

- personally I went to Cape Canaveral for one launch (I live 2.5 hours away by car) and I had fun. It was worth it but I wouldn’t go again, at least until starships launch from Florida. But I live in Miami and you can see the launches that happen at night, very clearly. The rocket is much brighter than any star and has a clear “rocket trail”. Anytime there’s a launch early enough at night, I try to take my kids to see it. It’s fun and definitely worth the five minute drive to a dark clearing. If you are in south Florida, check the launch schedules ahead of time and try to go outside and see one!
Odyssey, Hollywood-grade visual AI
I played this for an embarassingly long time. My high score that might entertain some engineers:

defective adhesive -> pipe repair patch -> fluid leak -> hydraulic press -> drill -> bucket -> water -> fire -> a giant pile of crisp hundred dollar bills -> budget cuts -> reliable engineering -> leaky lithium batteries -> uninterruptible power supply -> power outage -> electrochemical rust removal -> rust -> scissors -> paper -> rock

I had more creative ones (unsuccessfully tried stopping a supervolcano with an asteroid sized cork bottle cap), but it seems surprisingly grounded in 'reality', if we can say that!
This is trivial and solutions exist in the wild already. If you buy tix for the Paris Olympics, you can transfer them to your friends or you can assign their names to the tickets directly.

The interesting mechanism there is that you can buy a lot of seats at once, but you don’t get to choose where they are exactly, only the section. So in every case you’re going to have people buying big lots of tickets and distributing them to friends and family after the fact.
RECAP link to the PACER docket copy:

https://www.courtlistener.com/docket/68157923/oclc-online-co...
> GC != RC.

I am aware.

> But that’s not what GC wants, unless (as I said before) you’re happy with your non-GC heap pinning objects (the browser isn’t, but some GC clients are, sometimes).

I can't figure out exactly what you mean here. Temporary pins on the stack should be fine, and I don't see why anything else would be necessary.

> GC wants a guarantee like: you cannot have a pointer in any data structure unless that data structure can be found by GC, and when it is found, make sure to respond to the GC’s request to scan it. That ends up being hard to do with any type system, unless that type system only allows objects to be allocated by that GC and the abstraction sits in the compiler/runtime below the type system (like in Java, Go, and Fil-C).

Doing heap allocations through the GC doesn't sound very hard. And why does it need to be below the type system?

Maybe instead I should ask you what the already existing GC libraries for Rust get wrong? Do they require users to be unsafe or do something to break safety? Are they unusable to implement javascript?
Solving the Almgren Chris Model
I don’t sense any misogyny. Which part are you referring to?
Lots of people do.
> poetry took whole day and still couldn't resolve deps.

I hate doing this, but the solution is to reduce the search space for poetry to find a compatible version.

Verbosely install with poetry (-vvv) and note the package it gets stuck on. Find the currently installed version from the lock file and specify it as the minimum in your pyproject.toml file.

The time to find a solution went from 2-4 hours to <90 seconds when I did this a few months ago for a large complex work project.
Free KCSE Past Papers Computer Studies
Above gave the calculus solution in
algebra and also values from discrete
arithmetic with (10)(365) steps per year.

For the arithmetic for the calculus
solution, in Rexx,

y.0 = ( 1 / 100 )
b = 1
k = ( 1 / 2000 )

Do t = 1 To 5
t1 = t * (10 * 365 )
e1 = RxCalcExp( b * k * t1, 16 )
y.t = ( y.0 * e1 ) / ( y.0 * ( e1 - 1 ) + b )
Say Format(t,9) Format(100*y.t,6,2) || '%'
End

Table below has the values from both the
calculus and the discrete versions:

==== Growth ====

Customer Fraction
Year Calculus Discrete
1 5.90% 5.89%
2 27.99% 27.97%
3 70.68% 70.66%
4 93.73% 93.73%
5 98.93% 98.93%

Lesson: Sometimes in growth problems with
a calculus solution, a discrete version
can give close results.
lol

Fire Bucket Hose Candle Power failure Welder Shovel Scissors paper rock
I agree shaders would be a terrible choice for this.

However, the article clearly states there are intentions to move towards much more than just shaping in wasm:

> I proposed that the future of font shaping and drawing/ painting will involve a fully-programmable paradigm.

> Bad Apple will become much easier and faster when we introduce the draw API in Wasm.

> Drawing and painting API will eventually come to HarfBuzz, probably in 2025.
All of these points are valid, when given a caveat of "if Postgres covers your actual needs".

Like, I've personally worked on many systems that used Redis for absolutely no reason. As it was not actually measurably improving the latency of any part of the system. It was basically just another place to store data.

Obviously, Postgres and Redis are not the same, and there are situations where keeping data in memory at all times is important for latency. Hence the caveat. But most companies are not in any such situation.

Same story with the rest of these technologies - people often reach for them without really considering whether they are any sort of improvement over just storing the data in a relational database. This is commonly done by engineers who underestimate the capabilities of a relational database.
They were, but the incentive structure encouraged them to shorten those times. It doesn't help that in addition to what I mentioned above, many of these manufacturers work out deals with cities to get a percentage of these fines, resulting in an incentive for them to no eliminate false positives and find ways to fine more people, which is even worsened by courts often finding that such systems are infallible. I recall one story of a DUI being upheld against a person even when it was show that the device showing he was intoxicated was more than a year beyond its calibration date.

My intended point isn't that red light cameras can't be done right, but that in reality, the incentives result in them not being done so. It's a near endless game of whack-a-mole to force their implementation ethically.

There are some other threads here talking about changing where fines go that could get things on the right track, but there are some many other avenues pointed out in my comments and others that are potential for abuse.
Nearly 2M metric tons of wild fish used to feed Norwegian farmed salmon annually
All company's are "bad" in some way... does that mean all employees are bad?

> No.
you'll likely struggle to find specs at that sort of level publicly available

Intel was far more open at that time (up through the Pentium IV era); here's the datasheet for the PIII:

https://download.intel.com/design/PentiumIII/datashts/245264...

...and yes, it does expose all 36 address bits on the FSB. The FSB protocol is actually the same as the one first used by the P6.
> If you abolished IP all of that would go away.

Do you have any evidence for that? It astonishes me that humanity has progressed for thousands of years without any IP protection, but for some unclear reason it wouldn't today.
Regardless, that is what the motion to dismiss is based on.
Attackers can run a virus scan before distributing it.