skysight-inc/HackerNews huggingface dataset:
Well, they have to, right? If they don't, they could be seen as promoting such tools and if they later want to restrict users from using such tools, this could be used as evidence against them.
Yep delegating it all to IAM is another huge win.
"While responsive and accessible SVGs are possible, they require manual client-side JavaScript logic"

an oxymoron, given that many assistive devices don't run JS [eg text-browsers like lynx]
Ah, the delightful Nikita Bier is featured as a success story using this tool. I was in a business incubator with this guy, he was the biggest scammer I have ever met. He took hundreds of thousands of money from the Knight Foundation for a business he never planned to build. Scrapped the company, then sold a bunch of addictive teen apps to Facebook
Well they are pure functions of input data. It's just that which pure function they are should be treated as a random value that changes over runs / version numbers.
> final, penultimate

Final (or "ultimate") is what comes after penultimate.

We're just in the swing of history toward monolithic power. We'll likely swing anti-trust-ward soon.

No idea what this has to do with a singularity or why that's the only possible future, so I'll stop responding now.
We live in an era where people will unironically tell you your article written in html/css might be a bit difficult to include on their website.
Measuring Stochastic Data Complexity with Boltzmann Influence Functions
very insightful perspective, thank you!
Right now there is a significant single-threaded performance cost. Somewhere from 30-50%. Part of what my colleague Ken Jin and others are working on is getting back some of that lost performance by applying some optimizations. Expect single-threaded performance to improve for Python 3.14 next year.
Until the US federal government pays civilian tech talent competitively, this is always going to be an issue.

Your typical hands-on-keyboard blue team engineer in federal government is a GS-12 getting paid around $68,000 per year (or $99k in very high cost of living areas like DC). They have expensive health benefits, 13 days of PTO a year, put a huge chunk of their paycheck (almost 5%) into a mandatory pension plan that consistently underperforms the market, and can literally go to jail for making mistakes at work depending on the statutory context they work in.

The best people in these jobs burn out fast and quit or they end up having to abandon IC work for GS-14/15 jobs (max pay is around $190 for those) in order to keep up with cost-of-living and justify their careers.

As a result, you have almost zero genuinely capable principal/senior engineers in government who have the authority to architect complex IT systems for security. Instead you get contractors who charge the taxpayers enormous overhead costs and cut corners wherever possible.

If there's one letter to write your congress person to improve government - my vote would be for civil service reform to attract and retain actual top tech talent. They've done it for doctors and lawyers (both of whom can get paid well above the $190k GS pay ceiling), but engineering is still not treated as a comparably skilled professional trade.
Meta's Data Center Locations for Facebook and Instagram
Meta drops restrictions on Trump's Facebook and Instagram accounts
This is fascinating indeed!

From the 2nd link:

> The worst part of epilepsy is never knowing when you’re going to have a seizure. The psychological impact of that uncertainty is overwhelming.

..which is one of the reasons I made this post.

Thanks for your input!
> Biz folk, what am I missing? What am I not considering? Thanks!

That, when the light show operators of the 1960s tried to organize to get paid like musicians, Bill Graham Presents crushed them.[1]

Live Nation / Ticketmaster is the descendant of Bill Graham Presents.

[1] https://www.pooterland.com/rabbit_hole_1969_lightshow_strike...
> Google is (still) a great tool for this sort of conversion

Alas, not in this case, since Google is interpreting that as a 42-gallon "petrochemical-industry traditional abstract measuring unit of crude oil" as opposed to a 55-gallon "physical container readers may have seen and everybody actually uses." (Including to hold crude oil, in the rare cases that it's not in an enormous tank or pipeline.)

Perhaps this is an example of where "intelligent assistant" software lands in a dangerous middle-zone of "wrong, but not wrong enough that it's obvious."

Anywho, if we reword it a bit and put in a less-rounded density, it comes out the same:

https://www.google.com/search?q=57+tonnes+%2F+%286.095+g%2Fc...

__________

P.S.: The way it parses this small change is also amusing, where "in water barrels" isn't a change in the type of barrel, but instead introduces a non-SI unit of pressure, making everything murky indeed.

https://www.google.com/search?q=57+tonnes+%2F+%286.1+g%2Fcm%...
When are we going to see the technical report of what happened? Since this data has a specific time frame, it makes sense to me that a backup was stolen. But, we'll see.

My guess is that the tech leaders a AT&T are going to have sore wrists for a few minutes because of this.
What happened to blogs
I feel like most things that will benefit from moving to multiple cores for performance should probably not be written in Python. OTH "most" is not "all" so it's gonna be awesome for some.
Not allowing long-lived, powerful tokens is so basic that I'm skeptical they did very much right.
Yes, this sounds like a good solution - someone else mentioned the PineTime which looks very promising.
Joining the dots on the facts so far, people don't seem to have grasped the apparent huge significance:

- guessing it was some GenAI startup looking into consumer tracking, alternate credit scoring, surveillance or other national-security use-case.

- Very unusually, the DOJ ordered two ~month-long "delay periods" in disclosure: ("The Justice Department determined on May 9 and again on June 5 that a delay in providing public disclosure was warranted"). Yet this didn't happen for Ticketmaster or MOVEit breaches revealed around the same time. "Cybersecurity delay period requests" is a new power quietly authorized by the DOJ+SEC+FBI, 18 Dec 2023 [0]. Note that [1] emphasizes this as "Corporate Alert - guidance for delay requests [on SEC 8-K]". Might Congress already have known/suspected, when it authorized the cybersecurity delay request powers, of the Snowflake/AT&T breach? Either way, whoever is involved seems to have very powerful friends. Also, the big FISA renewal vote was Apr 19 2024 [2].

- Seems the cloud instance was set up the same time GPT-4 was released (March 2023), also when Snowflake set up a Telco business unit [3] ("Location data... Alternate credit scoring, hyper-targeted marketing and more... an emerging trend of companies building partnerships with telecoms to power use cases across multiple industries"). This product is not aimed at the telcos' use-cases, but at new revenue streams. (Who might the unnamed Snowflake AI partner(s) be?)

- They set up the Snowflake instance with AT&T/MVNO customers with timestamps removed, but with location data, yet the phone numbers not obscured or removed. Doesn't sound like "internal analytics" or "competitor analysis". What sorts of end-users want to pay for the entire social-graph of 110m, regardless whether those customers never make a phone call again? [EDIT: I confused the details of this AT&T breach with the other (2019) one disclosed on 3/2024: 77m AT&T/MVNO customers, 90% of them former customers]

[0]: "FBI Guidance to Victims of Cyber Incidents
on SEC Reporting Requirements: FBI Policy Notice Summary" https://www.fbi.gov/investigate/cyber/fbi-guidance-to-victim...

[1]: "US Corporate Alert - DOJ, FBI, and SEC provide guidance for delay requests relating to disclosure of cybersecurity incidents under form 8-K"
https://www.klgates.com/DOJ-FBI-and-SEC-Provide-Guidance-for...

[2]: US House approves FISA renewal – warrantless surveillance and all
https://news.ycombinator.com/item?id=40041784

[3]: Snowflake cloud Telco unit, 4/2023: "Unlocking the Value of Telecom Data: Why It’s Time to Act" https://www.snowflake.com/blog/telecom-data-partnerships/
Can someone please create an instruction set where the entire instruction set is implemented (even if in microcode) on every processor that uses that instruction set?

Have you looked at RISC-V or x64? They are messes of instruction set extensions, most of which reuse the same opcodes.

We have terabytes of disk space and gigabytes of RAM. We can afford a few extra bits in the opcode.
Before the article came the misleading title: "Free-threaded CPython is ready to experiment with".

The link should have been to https://py-free-threading.github.io/tracking/
The reason some companies use external vendors is to outsource the risk.
To my understanding there is and there isn't. The driving force behind this demonstrated that it was possible to speed up the existing CPython interpreter by more than the performance cost of free threading with changes to the allocator and various other things.

So the net is actually a small performance win but lesser than if there was no free threading. That said, many of the techniques he identified were immediately incorporated into CPython and so I would expect benchmarks to show some regression as compared with the single threaded interpreter of the previous revision.
If it wasn't for the courts and a decent de-facto "constitution" (collection of treaties really), governments would absolutely love to expand the amount of data they (police, spy apparatus, etc.) have access to. That they also try to reduce the amount of data companies are allowed to save for themselves is tangential.

The court case I linked is evidence of that. The German state wanted Telekom to save more data, but the telco refused and won in court.
I think for the time period, hobbyists can't be written off either. My dad got into Commodore and Atari in the late 70's/early 80's, and sparked my interest in software. Computing already wasn't cheap, but if the home consumer needed to pay for extra licensing fees, I could easily see adoption being far more limited to business. I think a lot of developers, myself included, got their start as hobbyists and never would have caught the "itch" to develop if for not this early exposure at home.
I agree, but going from polling to push notifications will give me some peace of mind :)
Notes on Optimism, Hope, and Trust
DVDs can be any of 60i, 30p, or 24p. Competently made (not all are!) DVDs will be progressive if the source was.
That's correct, but Forth can always be made to run faster with enough additional work (a more robust compiler for example). That's what commercial Forth still do nowadays.
I agree the US is not immune to tyranny—one need look no further than Trump for that , though thankfully the checks and balances of democracy held. My point is that 200 years ago civilians with guns could stand up to a tyrannical government as there wasn’t much else more advanced weaponry that would give the gov an unassailable advantage. Civilians would have no hope of a chance today regardless of how many guns they had. So the main original purpose of the 2A, which was necessary at the time, is no longer feasible. All that remains are the downsides of the 2A.
US .gov website hosting MMA .pdf with spam link inside it
Seems to be a Drupal instance. Wonder how common this is across all their .gov websites? Found it by chance as one of the top 10 results in Google for "lfa 188."
I hope the birds win.
Precisely, ease of writing, not ease of reading (the whole project, not just a tiny snippet of code) or supporting it long-term.
When political candidates vow to "trim the fat" of the US government, the military is typically off limits, but the other government departments certainly aren't.
It feels this way with PATs as well, with legacy PATs still necessary for most of the things I use them for, despite being pushed into the newer ones. And the documentation is terrible. I had the exact same thought, the PAT transition feels like an unfinished feature as does the API transition.

For me the API transition is even more bizarre since it’s almost trivial to wrap REST calls with GraphQL.

What it feels like to me is a mounting level of serious technical debt which isn’t being addressed, and if that’s not a sign of trouble in a product like GitHub, I don’t know what is.
Interesting! Do you know what caused your cat's seizures? And how did you come up with the Keto diet idea?
German Navy still uses 8-inch floppy disks, working on emulating a replacement
Next time, use your towel.
So the advice is:

* Find meaning outside work, with the five hours per week you have between working full time, commuting (hopefully not as much anymore), and taking care of your kids and yourself. Hours during which you're completely exhausted and mentally drained.

* The same advice again, but while touching grass.

* Become labeled as negative, get union-busted.

* Quit and go to another bullshit job where the exact same cycle will repeat.

Look, I'm not actually saying this advice is wrong, or that it should be better advice. I'm saying that this stated goal:

> When I set out to finally put all these thoughts down in text, I did not want it to be all doom and gloom

was not achieved by the author. It is all doom and gloom. Because bullshit work really does kill your soul, and the best advice we can come up with for dealing with that is awful. Many, many smart people have spent a LOT of money and effort organizing the American capitalist system (and those in other countries, to varying degrees of success) so that you have absolutely no power to improve your situation, ever. Turning us all back into serfs is their intentional, focused goal, and has been for many decades, and they are invested in it, and they are good at it. It's only going to continue to get worse. You cannot do anything about it. Everything only ever gets worse.
Yes, because civilian tech companies are never hacked.

I do largely agree with your post but I'm also suspicious that stratospheric civilian tech compensation is a bubble.
> This release

What release. The last release of CPython was 3.13.0b3 on 2024-06-27.

SciPy is irrelevant to the title.
Unix permissions will allow you do to that perfectly fine.
Old Computer Challenge: Year 4
Nice, an order of magnitude speedup.
Are you saying the interavtive code snippies are not what you want? This article is great and I've needed something like this in the past.

What do you mean that there are "without charts?"
Even if I was willing to jump into this meat grinder, I dont think I could take it serious with those pretentious photos. This company screams "factory of sadness"
Late stage bull run for sure.
Cool! I made something remotely similar, a library for complex arithmetic that dynamically evaluates user-defined expressions. Since it only has pre-defined functions, the compiler can do pervasive constant folding.
I usually just catch something from one of the youtubers I watch in bed and go "hey, that looks fun!". That's how I lost two weeks of my life trying to see how far I could push my score on a random Balatro seed (personal best: 1.7e47! Look on my Mime, ye mighty, and despair).

I tend to like games with simple core mechanics and lots of ways to mess with them. Give me complex systems to play with (most roguelikes), Rube Goldberg machines to build (Balatro, Loop Hero, Minecraft), weird hipster builds to create (Path of Exile). Either that, or a tight (usually tragic) story that really gets to me (Hollow Knight, American Arcadia, Bastion).
GOogle happened and seo-garbage, like you say.
Harder sell for products like the apple vision pro.
>What kind of legal protections do you think should go?

Shielding people from liability is a good start.

>BTW, say, your bedroom serves no public benefit; its point is to provide you some highly private benefits. Is it bad?

I can't commit crimes in my bedroom and escape any and all responsibility for it.
Also, if you are an Emacs user, its VC package is very powerful. For example, `C-x v g` to bring up the "blame" (vc-annotate) view, in which you can (for any commit) press `a` to see what the file looked like before that commit, `d` to see the diff of the commit, `l` to see the commit message... That's just the tip of the iceberg of things you can do with it. It supports Git, Mercurial, Bazaar, CVS, Subversion and more as a backend.

https://www.emacswiki.org/emacs/VersionControl
What we learned from the Curiosity rover's broken wheels (2017)
All is well, then, one day, you have to update one library.

Some days later, in some woods or cave, people will hear your screams of rage and despair.
Almost all commonly used assistive devices support JavaScript, and have for years.

Lynx is not a commonly used assistive device.
The semantic changes are negligible for authors of Python code. All the complexity falls on the maintainers of the CPython interpreter and on authors of native extension modules.
But required weekends on site is unconscionable
Last time I was looking for a job I read about various interesting government jobs, and then gave up when I finally understood the pay structures.
Banks like that exist. mBank from Poland does in-app approve/reject - similar to what you get on an Android phone when you try logging in on a new PC.

They also send phishing warnings when they find active campaigns.

That said, plain old social engineering works well on people. Last week one small-scale influencer fell victim to a bank transfer scam. Got phoned by a bank person telling her that her account is targeted by hackers, then a cybersec police head phoned her and asked to transfer her savings to a 'secure account'.
Hmm, I don't see plugins. Only a couple shaders here https://github.com/pop-os/cosmic-comp/tree/master/src/backen...
The authorities requested the delay of the disclosure: https://cbs58.com/news/nearly-all-at-t-cell-customers-call-a...
I am bullish on the US long term. Other developed countries have a population problem which is going to start causing issues. Sub 1.0 birth rates are a catastrophe for capitalism. The US has enough immigration to keep the population somewhat level.
If you want to be pedantic, how about "incorrectly translating code into assembly such that two statements that should be separated by a sequence point in the C memory model can interfere with each other, but the implementations before this generation of Intel processor wouldn't reorder microcode execution such that it was actually a problem in practice".
Haven't they mostly abandoned that after Tegra X2 which came out years ago?
For highly secured services, I completely see the rationale for a private overlayed network. Tailscale, et al are great for this, where you're only exposing services to members of the private network. The problems start when people make the assumption that the private network is a secured network.

I don't think any of this would have mattered to ATT, as the breach was from a third party that wouldn't have been on a private network anyway.

But, that would be a great service bonus -- only being able to connect to a service via a user-configurable private overlay network. It would be nice, but highly impractical... I can't even begin thinking about how customer support would be able to handle a scheme like this.
“given that many assistive devices don't run JS [eg text-browsers like lynx]”

an oxymoron, given that many assistive devices don’t cooperate with any of the web or HMI accessibility guidelines at all [eg my wheelchair]
How sparse is your matrix?
Housing is notably not included here. Further, while it says government or non-profit provided health care and educated are included in the incomes for countries where it's available, the countries where it is NOT available don't show a reduced disposable income to pay for these things. These data do not show what you think they show. They already show a smaller gap than you had originally implied, and as I stated earlier, that gap is going to narrow substantially when the rest of these factors are taken into account.
It's a good business decision to make others do your work.
No offense, but you can type “hypersonic” into your favorite search engine and be reading the explanation on Wikipedia, literally in less than five seconds.
The exploited vulnerability (CVE-2022-21587) is some Oracle E-Business web thing, nothing Solaris-specific like it sounded from the article.
OpenAI promised to make its AI safe. Employees say it 'failed' its first test
https://archive.ph/ZJ8b2
Totally. I think comp is a necessary but not sufficient precondition for fixing government technology. The actual solutions (good authentication and least privilege systems, robust monitoring, rapid intrusion detection and response, secure by default system architectures) all take talented people to execute and the government doesn't have enough of those in-house. Instead most systems are built with a 7-figure contract to Booz Allen and friends and then maintenance and sustainment is left as an exercise to the reader.
https://www.preprints.org/manuscript/202306.0438/v1
I have this one I made in high school, with a little RPG style game to go with it: https://imgur.com/a/3XpM11z

These weren't hard to make as you just built out from the start and added random branches, or dead ended them occasionally.
Great news !
It would be interesting to see performance comparison for IO-bound tasks like http requests between single-threaded asyncio code and multi-threaded asyncio
Ask HN: HN-like tech forums in German?
Hi HN. I’m trying to learn German at the moment, and I’m looking to immerse myself more in German written content. To that end, I’m currently trying to find a HN-like forum, but with discussions and stories in German. If anyone knows of a place like this, please post down below!
I thought it was VVVVV at first and was confused
Did you try PGO? This post seems like the thing it was built for.
They have one developer position open which has a salary range of $140k-$220k USD. This is not worth six days a week in office. They do offer "Team-wide science reading groups" though
Absolutely, I had a university instructor that taught us both Windows NT and (I believe) Red Hat Linux in 1998, for running web servers. Linux made much more sense when thinking about a multi-user system running various services. I ended up dual booting Windows and Slackware to learn Linux, while also being able to use the software I was already familiar with on Windows. If Microsoft had gone deeply into POSIX for their consumer systems, I don't believe I would have switched over to Linux except for quality of life improvements that may have come about (which may have never happened).
App stores sometimes bring great discoverability and revenue opportunities. But if you don't have close connections working in related big companies, don't depend your future on it.

I categorically erased developing mobile apps from my work/dreams after my bad experience:

https://news.ycombinator.com/item?id=37903489#37911184

I also advise against it to people around me with my limited ability.
Just rename it to Dufus to be an indicator of what it can actually do
It's actually a great way to tell that it is known that the punishment is insufficient.
dumb question but how well do sharpies work in space? the ink diffuses through the felt tip - that doesn't require gravity. wouldn't that work pretty well?

also crayons seem like a better bet than pencils - they're still flammable and prone to flaking but at least they're not conductive.
Anatomy of a Search Engine by Two Stanford Graduates [pdf]
You'd have to look at purchase power, not dollars, to see how much they can actually do with all that spending. You get a lot further with $5 in a place where wages are $1, than with $20 in a place where wages are $15.
> safer-ffi crate

It looks to me like that crate is supposed to help with exposing rust functions to C safely, not calling foreign functions in foreign code safely. Am I missing something?