skysight-inc/HackerNews huggingface dataset:
IAM is conceptually straightforward, but it's combinatorial difficult with all the different ways that AWS services interact with it. Support for IAM is also inconsistent across services. I'll give a recent example.

I have EC2 Mac instances in an autoscaling group that are running untrusted code. I've "sandboxed" that code by running it as its own user and blocking that user from reaching the IMDS endpoint with a packet filter on the instance so that the untrusted code, in theory, cannot get instance policy credentials. Nonetheless, I'd like to limit the blast radius should the code somehow escape that sandbox. So I want the instance policy as restricted as possible.

One of the things the instances need to do is set tags on themselves. For this, you can use an IAM condition on the ec2 CreateTags action to say "this instance can call CreateTags, but the instance ID has to be the instance itself". This prevents an instance from setting tags on a different instance in the same autoscaling group.

The instances also need to make a few autoscaling API calls, to complete lifecycle actions (CompleteLifecycleAction), and to enable and disable scaling protection (SetInstanceProtection). Here again, I'd like each instance to only be able to make these calls against itself. Unfortunately, there is no condition you can use with the autoscaling API to similarly limit the calls as you can with the ec2 API. The same condition that works with the ec2 API doesn't do anything with the autoscaling API.

Not helping matters, the documentation is very spread about. Just in the use case I describe above, you need to read at least all of these:

https://docs.aws.amazon.com/service-authorization/latest/ref...

https://docs.aws.amazon.com/service-authorization/latest/ref...

https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-au...

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-poli...

https://docs.aws.amazon.com/autoscaling/ec2/userguide/contro...
> tsmc is a chinese company

This part is wrong. TSMC is a Taiwanese company and as much as China's bullying behavior in the UN means most other contries do not officially recognize Taiwan, it still does not change the reality of the situation that Taiwan is independent in every way you can think of and the chines government has no more control over or benefit from TSMC than it does for an american company.
That's the reason I never got much into Twitter. I'd follow someone for a specific topic, but then more than half of their posts was about sports, politics...
can you not get to the site or when you run your code it does not run?
Yeah that's the one. Did you see they were phasing out the materials support in it for materialX?
I don’t see moshi-tora* used often here. Gestures toward leveraging Ukrainian expertise in sea drones would undoubtably be part of a Trump peace settlement.

moshi-tora is Japanese for planning on a second and perhaps further Trump terms.
Show HN: Full-stack observability platform for Next.js apps
I’ve been fed up with Sentry and wanted to make an observability tool specifically for Next.js that actually helps with debugging.

It alerts when server actions, React components or API Routes have high error rates, AND gives detailed context to what happened.

The main features are:

* Automatically gather context from Server Actions, API Routes, React components, and tools and libraries you use such as Prisma, Drizzle, Supabase & Stripe, making bug-fixing much easier.

* Automatically set up dashboards where you can monitor request and response payloads, API endpoint & Server Action latencies and all front & back-end errors & bugs.

* Alert you when bugs affect your end-users (eg. high error rates in your API routes, Server Actions or React components, spike in p95 latency of a certain API route, etc.)

On GitHub: https://github.com/useflytrap/flytrap-logs?tab=readme-ov-fil...

All feedback is appreciated, and if you would like to try it out with unlimited usage, please ask me here so I can give you an invite link!
Not me personally, but people at the nuclear plant I used to work for were let go for refusing to take the Covid vaccine.
> It’s also possible (I’d say - likely) that your boss knew,

Yeah, that part of the GP's comment stood out. To even imagine that "bosses" don't notice that their employees are not showing up to the office is pretty far fetched especially for the length of time described. At some point, even the other employees will start talking about it.
Elon Musk is very deep in the right wing pro-Russia conspiracy hole. And he's a proven liar.

For the love of real freedom, stop using twitter.
Same. Initially we just load balanced between various regions, ultimately bought some PTUs.
As someone in Gen Z, I seriously hope this trend doesn't continue...
I hope you’re right :)
> They'd probably still be king of the (small and expensive) hill without SpaceX.

Maybe.

IMO, ULA's Vulcan is more commercially competitive than Ariane 6.

But both rockets were developed in response to SpaceX, so maybe neither would have been made otherwise. In which case, ULA would be in even more hot water than ArianeGroup, since they wouldn't be able to get engines for Atlas V post Ukraine war.
The economic mood in Finland is downright depressed [1]. This kind of news is therefore extremely welcome because it indicates there's a way forward, out of the old industry doldrums where people are still moaning about closed paper mills and Nokia's failure 15 years ago.

$665M USD isn't a staggering number by Silicon Valley standards, but it's very significant for a nation of five million people that hasn't seen global startup successes like neighboring Sweden with Spotify and others.

[1] The actual level of depression is somewhat hard to track because Finns are always pessimistic regardless of how well they're doing. (This also makes them the happiest people on Earth in polls. The situation right now is never quite as bad as one had expected beforehand, so when a pollster calls to ask, the conclusion must be that they're pretty happy with things overall at that specific moment, but surely everything is going in the wrong direction anyway.)
Advice like yours is common and clearly valuable from an insider's point-of-view - but the cultural zeitgeist is that recruiting post-Covid is broken.
New NIST Hemp Reference Material Will Help Ensure Accurate Cannabis Measurements
So, you want to become an AI Engineer?
Not really. In my country, at least, it is explicitly stated in driving theory manuals to maintain at least one reaction distance between the car in front of you.

For a car traveling at 100Km/h the stopping+reaction distance would mean more than 130m, which is a quite large and possibly impractical for higher traffic scenarios.
Thank you!

I had a look at the Bruno website for the first time a few weeks ago, although I haven't tried it for myself yet. I'm definitely inspired by and agree with a lot of the principles behind Bruno: local first, developer friendly, readable/Git-friendly collections and so on.

I think I share a lot of the same motivations as Bruno's creator - I feel the landscape of HTTP API testing clients may actually have regressed in recent years from a developer's perspective, as the companies behind Postman/Insomnia etc. figure out how to monetise them.
Understanding the nature of many types of problems
The amount of misinformation on the internet is worryingly high but not unexpected. No such thing as Chinese Export logo exist. It cannot officially exist in the EU since the CE sign is protected. Whatever this website is sharing is FUD and misinformation.

It doesn't mean that nobody fraudulently puts those markings on devices without a testing certificate backing it. However anybody who puts CE mark on a product without complying is risking being punished by EU member states. As an importer and distributer of such goods you'll be punished as well. CE certification is indeed self disclosed but it doesn't mean that you would get away with noncompliance.

Source: https://www.europarl.europa.eu/doceo/document/P-6-2007-5938-...
Copyright infringement is emitting the code. The license gives you permission to emit the code, under certain conditions. If you don't meet the conditions, it's still copyright infringement like before.
> Imagine AMD simply put that $665M into tooling and driver development

Feels like a company saying they're going to "spend a few weeks paying down tech debt", which generally amounts to nothing getting done. Progress happens in creative pursuit of another goal and with hard constraints, in my experience. You can fix a specific piece of tech debt while working on a product feature that's adjacent to it, and you can create some great tooling and drivers while working on a product that needs them, but just setting aside the money for greenfield development often/usually ends up with it being set alight. I have worked at least one very well-funded place where the lack of product focus and thus lack of any constraints has just led to endless wheel spinning under the guise of "research".
Baidu robotaxis draw complaints from human drivers as service gains popularity
It makes sense then for AMD to buy them out.

If they’ve trained LLMs with lumi which has a lot of instinct GPUs there is a high chance they’ve had to work through and solve a lot of the gaps in software support from AMD.

They may have already figured out a lot of stuff and kept it all proprietary and AMD buying them out is a quick way to get access to all the solutions.

I suspect AMD is trying to fast track their software stack and this acquisition allows them to do just that.
> I've always assumed that 'at will employment' would make employees significantly more fearful of losing their jobs in the US.

Would that still be true in the particular case of RTO mandates? I don't think so since "showing up to work" fits nicely into existing employment law on both sides of the pond and is easily documented by employers. The point being that in this particular case of RTO mandates, at-will employment affords you the advantage of being more easily hired elsewhere, whereas you don't lose any practical protection.
I mean, that's the effect of increasing the supply, but I doubt its the motivation for most people.
You’ve never heard anyone in those groups have imposter syndrome? It’s very common.
This looks very cool! I’ll have to patently wait for the HN crowd to thin out before being able to play tho.

Considered spinning this off into a service where user can create their own murder mysteries for others to play?
They might have simply moved for their spouse's job as well and the previous commute isn't really possible anymore.
>I feel like it's easier than ever to develop software,

It's also inversely proportional more difficult to get hired nowadays in those fields though.

Back then when (for example) mobile dev was just getting started you could get hired with absolutely zero experience since nobody had any experience, but now there's a laundry list of requirement even for junior positions which are few compared to senior positions and the strict requires there in terms of experience.

Good for those who already had 10 past years of experience and learned the necessary background knowledge, bad for those entering now when the bar has been raised.
Researchers identify a cheaper, more convenient method to detect asbestos
"Author is modifying the product behavior with their software."

I would say that the end user is modifying the behavior of the hardware, that they own and are fully in control of, by choosing to run software that they purchased. But I'm fully aware that regulatory agencies probably have their own way of thinking about that.

Point taken about how we need some regulations, but isn't everyone sitting in an MBA program right now being trained to identify this exact kind of workaround?

As for displaying a device that isn't certified yet, who's the victim? What's wrong with saying "We can't take orders on this yet, but we're working on getting cool new product certified as fast as possible"? The article said displaying a device, not turning it on.

From your post, it seems like you're painting this guy as a malicious bad actor who going to destroy society when, to me, he seems like someone who's trying to find an efficient way to sell a solution to people who might find it valuable.
People with wizard-like skills are out there but typically can't command the salaries they used to.

Todays SWEs tend to know far less about how computers operate and how protocols work than in the old days.
Deliberately conflating the two, especially in discussion of US strategic interests, is not just unhelpful but makes your entire argument nonsensical.
You could probably have said the same about Airbus at some point. But now we are pretty happy we don't have to rely on Boeing.
You could also characterize the maximum braking ability of the train in front of you and the minimum braking ability of your own train and determine the needed distance for any given speed based on that. This would of course be more complicated and probably be solved by only including broad categories of trains (i.e. only two sets of values for either passenger trains or freight trains).
Not if they’re also trying to work from home as much as possible, along with all their colleagues.
Modern Everest climbing clothing is mostly goose down, although with a thin polyester like layer over the top, so still fairly natural.
>- Maybe a lot of programmers have ADHD, are autistic, or suffer from dyslexia, and find planning, naming, designing abstractions as excruciating activities.

I don't know about the medical conditions, per se, but I think this does bring up a point that is often overlooked when discussing best practices: our brains are different and organize things in different ways.

What works and makes sense to one group of people might not work or make sense to another group of people. I find that more literal-minded people are frustrated by what they see as unnecessary abstraction and are fine with duplicated code whereas people who think in abstractions have no problem seeing the bigger picture and are proponents of abstractions when the abstractions make sense to them.

I have coworkers who will look at a codebase with a layered/onion architecture and immediately understand and reuse all of the abstractions without issue and others who will immediately want to simplify it and change it all into concrete implementations. I find myself to be fairly evenly split so I see it from both sides.

I think it's often more about the nature of the latest person who looks at the codebase than the codebase itself. Eye of the beholder and all that.
Sounds like mission accomplished from management's point of view.
On the margins, it’s probably a lot easier for an American to find a quiet spot in the house to work — US homes are on average about 50% larger than European ones, and often have a spare room to use as an office.

While about the same proportion of Americans live in “cities”, a city in America can be the size of some European provinces thanks to sprawl. This means that even if you live and work in the same city, your commute can be well over an hour each way. This, combined with kids getting dismissed from school at 3pm and having nowhere to go but home thanks to unwalkable streets and a hyper-aggressive CPS essentially criminalizing leaving your 12 year old unsupervised for 15 minutes, makes going into the office a ridiculously inefficient proposition for families.
> It's not particularly useful to compare the cost of raw unorganized information medium on a single node, to highly organized information platform.

Except that it does prompt you to ask what you could do to use that cheap compute and RAM. In the case of Hetzner that might be large caches that allow you to apply those resources on remote data whilst minimizing transfer and API costs.
Man's thumb cut off to steal money from phone
Over time trends will be visible and used to make decisions. It's not instantaneous at all.
Free med school tuition unlikely to have a major impact on US health care system
I wonder why so many people are confused about what AI is (and what it's capable of). Could it have anything to do with the snake oil being peddled by Sam Altman and the media hype machine surrounding him?

It was only a couple years ago when Blake Lemoine was (rightly) ridiculed for seeing sentience in a chat bot. Now everyone is Blake Lemoine.

Waiting for the next AI winter to put all this nonsense to rest...
Free Reuters article: https://www.reuters.com/markets/deals/amd-acquire-finnish-st...

Joint AMD / Silo AI press release: https://ir.amd.com/news-events/press-releases/detail/1206/am...
Wow this is pretty cool! I'm gonna give a try.
For me, this is actually what most of my slack usage is. Just writing notes to myself and then occasionally messaging others.
The Best Science Fiction Books (According to Reddit) (2011)
Especially when that person is the founder lol
> this is still only $125k each -- that's hardly big money.

That works out to be about $10.5K (9.7K EUR) per month, pre-tax. I'm not sure where you're from/at geographically in the world, but in most places where I have lived that would be considered a large salary for just software development.

Outside of the major cities in the US, wouldn't that also count as a fairly large salary?
IMO, a big problem is that SpaceX makes it difficult to enter the market. They keep their prices very low, and have an amazing reliability record. Which makes it tough to close a business case around medium/heavy lift rockets. Especially taking into account development risk.

And it's not any easier trying to make a small-lift rocket. They suck the volume out of that market with their Transporter and Bandwagon launches.
Very nice!!

Did you submit this to the Anthropic hackathon? Seems like a nice candidate!

You've still got a few hours to submit if you haven't done so already:

https://docs.anthropic.com/en/build-with-claude-contest/over...
I think people have watched or read a lot about those old school or fictional competitors, arriving wasted at the event or with a messed up life because that's what the medias sell.

Even if it could have happen at a certain time, today's competitions are such high-level precision things that everybody is at the top of their game, every parameter is taken in consideration.

If you are not, you don't even get at the top.

I was surprised to chat with a few e-sport competitors a few years ago and learn that they are using drugs to maintain focus.
As someone who has to regularly commute one of these lines… doing “nothing” does become very dull after a while.

I think this thread is a little overblown. Some people will do nothing, read a book, listen to music, or nap. But the easiest thing to fall back to is your phone, especially for a monotonous daily commute.

I do at least try to be productive when using the phone, such as practicing my Japanese. But I think it’s totally normal to stare at the ground and listen to music etc.
Idiotic decision by that employer. Who cares where the employee is, if they're a top performer?

I'm convinced the back to office mandates come from people who thrive in office environments. Those people succeed, get promoted, become leadership, and then assume everyone else works just like they do. It's absolutely not the case.

That's without going into the many, many studies of office environments which provide empirics disproving common myths about office work, such as the oft-repeated lie that open offices encourage collaboration. Those facts just don't compute for people who love working in those spaces, so they ignore them and repeat happy lies instead.
This is great and feels very smooth to use. I really like the UX of it.

Great including themes, but for light mode it's only one. Does Posting/Textual support no theming falling back on the configured terminal that runs it?
Very cool, I wonder how it would play if run with local models, e.g. with ollama and gemma2 or llama3
Parallel Queries in Postgres
Tagging is actually available for free, so just wanted to correct that.
I text myself notes, and it’s not because I don’t want to use another app, but because I like the streaming append-only log style of notes. I don’t like how hard it is to search through them stores in iMessage. I’ve thought about building an app like this, just since I haven’t been able to find one. So the problem does exist, though it’s not for you.

And it’s plainly not the case that if people wanted these features they would be built into Apple apps. There is a massive ecosystem of iOS apps for exactly the reason that the Apple apps don’t cover everything. Same for any case where there’s a startup vs. an incumbent.
Lacking official sources, some Texans use Whataburger app to track power outages
You must have some wild dreams. Starship and New Glenn are basically as dreamy as Ariane 6. Starship is essentially operational as an expendable launcher already, and NG is starting the paperwork for first launch.

Ariane 6 will serve fine as an "assured access to space" for the local market (which is important), and good on them for finally getting it off the ground. But it's design goal was "Falcon 9 competitor" and it certainly isn't.
... to a youtube link... are you afraid.

it's a spoof 80s song that Robert aludes to in his blog tagline.
I once ignored a shirt and tie mandate and nothing happened besides some stern words from my manager after I told I wasn't going to comply. We worked in a basement and never saw customers, the mandate was just a power move on his part.
I learned something new thanks to your comment - never heard the story of Bluebeard before.
> the function in question is not given any inputs

As the problem was posed, the function does take an input; it's defined as a function from {0, 1} to {0, 1}. However, as I pointed out in another comment upthread, the function makes no use of its input so it could just as well be defined with no inputs. (Indeed, even if you read the question as asking about a function f that outputs 1 if God exists or 0 if God doesn't exist, it doesn't seem like whether or not God exists is supposed to be an input.)
Boeing's bad decisions were not based on shareholder votes, but rather a cabal of bad actors. You could have this happen in any economic system. In fact, Boeing planes, even with all the cheating, are statistically safer than those produced by the former USSR.
Very interesting.

At my company (tech) I've noticed that for the past 2-3 years grads are almost 50% women.

Now, I have absolutely nothing against this outcome. But I do wonder - instead of optimizing for a specific distribution of employee features shouldn't we be optimizing for hiring the best?

And you could say "they are the best, 50% of the best are women".

That's a possible explanation! However.... 5+ years ago when grad were roughly 100% men, weren't we hiring the best then? Surely back then they also thought they were hiring the best. Surely 5 years ago if you'd told the hiring manager "hey from those 20 people you hired, 10 aren't the best, 10 the best are these other people and they happen to be women", the hiring manager would've said "no way, we don't look at gender when hiring, we just hire the best".

My point is that we didn't understand why back then we were ending up with 100% men despite the fact that 50% of the population are women. We just mandated that 50% should be women. This is like you believe you have a bug and so you tweak something at random. Now it's different and you think it's fixed.

Anyway, they don't pay me enough, so I don't care :-)
What is this article? She just released a book, but it's a non-fiction popular science book. I assumed this was about a lifelong academic switching careers to become a full-time science fiction writer, but all I know based on this article is that she's been teaching at community college for about two years, and has written exactly one science fiction short story.
Introduction to Vectorization with Vector128 and Vector256