skysight-inc/HackerNews huggingface dataset:
It is a reasonable idea, but there are other things that can be done too.

However, in the stuff about SQL, you could use SQL host parameters (usually denoted by question marks) if the database system you use supports it, which can avoid SQL injection problems.

If you deliberately allow the user to enter SQL queries, there are some better ways to handle this. If you use a database system that allows restricting SQL queries (like the authorizer callback and several other functions in SQLite which can be used for this purpose), then you might use that; I think it is better than trying to write a parser for the SQL code which is independent of the database, and expecting it to work. Another alternative is to allow the database (in CSV or SQLite format) to be downloaded (and if the MIME type is set correctly, then it is possible that a browser or browser extension will allow the user to do so using their own user interface if they wish to do so; otherwise, an external program can be used).

Some of the other problems mentioned, and the complexity involved, are due to problems with the messy complexity of HTML and WWW, in general.

For validation, you should of course validate on the back end, and you may do so in the front end too (especially if the data needed for validation is small and is intended to be publicly known). However, if JavaScripts are disabled, then it should still send the form and the server will reply with an error message if the validation fails; if JavaScripts are enabled then it can check for the error before sending it to the server; therefore it will work either way.
"Talos: Secure, immutable, and minimal Linux OS for running Kubernetes"

I guess we'll never know...

But in truth it's for running on hosts.
The Institute for Propaganda Analysis was set up before WW2 to teach the american public about propaganda. Many academics and researchers sought to educate the people in the face of
mainly foreign related propaganda.
https://en.wikipedia.org/wiki/Institute_for_Propaganda_Analy...

It was abolished because the Americans wanted to go to war and use propaganda themselves.

In other words, the USA had a national program to educate the public about harmful ideas and misinformation, to see the signs and to resist but they abolished it because they wanted to do misinformation on their own people.

---

Today we see "nudging" being used to manipulate. All our governments (and corporations and charities) seek to control our behaviour against our conscious wills. They won't easily give up their toolbox of tricks. Especially when the tricks actually work!
purely technical, but lower latency (even at the cost of crackles), make everyone have a good mic, emulated spacial audio.

I think these things would help so so much. I wonder if there is any research on the impact of these.
It's buried a bit in the article, but if you have to sanitize input to allow only some kinds of inputs (e.g., specific tags), you should really be parsing it fully to an AST and then acting on that (or using a library doing the same) since otherwise you're going to be subject to all sorts of pain.
So SIMD would need to set the overflow flag also to catch em.

Which would be much faster than the checked add (adc). Does any hardware support such checked SIMD arithmetic already?

Or can you still assume that most arithmetic is still broken in most languages/libraries.
Keep ints for primary keys and keep all the db magic for your internal references then use ULIDs or TSIDs for your external keys and keep the ability to have well behaved indexes. Win-win with minimal disk impact
The tweetdeck link redirects to a pricing page - I thought it was free?

Weird story, but when I first used twitter ~2 years ago, it was to follow one specific current event, so my entire feed was one single-issue. I loved it! Over time I've obviously clicked on content on other topics and the feed got all mixed up with 20 different topics, which feels so gross and disorganised.

If anyone remembers 'Zite' app (which unfortunately got acquired and disbanded ~2014), it was basically a bunch of news feeds sorted per topic - super handy at the time for the things I was interested in: I could read 50 notes/articles on blockchain (then in its infancy), then on airbnb, then uber etc. I could read exactly one topic at a time without any distractions mixed in. It felt so organised. I really like single-issue feeds like what tweetdeck is (I think, I don't pay for it).
> Except most of the RISC-V supporter has been claiming every RISC-V execution are flawless.

No-nothings, perhaps.

RISC-V cores are being designed by probably a couple of dozen companies, and chips made by many more (SiFive for example has 100+ customers for their cores). All of them have a list of more or less serious errata, just like every Arm and x86 chip.

The strength is in the diversity, in the freedom to experiment and innovate, in the shared software ecosystem, in the security of knowing that if your chip vendor goes out of business for any reason (bankruptcy, change of plans, being acquired...) there will always be another vendor you can turn to.

Unlike the people who were depending on Itanium, DEC Alpha, Motorola 68000, z80 and dozens of others.
Why offer a crappy default Spanish translation when you can just not?

- The name of the product is broken "Jelly Star Estrella" instead of Jelly Star

- "Descubrir Jelly Star Estrella" instead of "Descubre Jelly Star"

- "Jelly Star Estrella Presenta un diseño" consistently uppercasing the first word disregarding their product name in the sentence

- "Jelly Star EstrellaLa luz LED" or just not leaving spaces

- "Aparece en dos colores" instead of "Disponible en dos colores"

I got tired reading an IA generated translation not reviewed by one single human that spoke the language, that went through some quick copy and paste.

Concept looks cool, I just can't trust them on quality.
It says both:

> Within the same millisecond, sort order is not guaranteed

And:

> Monotonic sort order (correctly detects and handles the same millisecond)

Which is it?

To make it more confusing, the spec later contains a section about monotonic sort order[1]. And looks like not all libraries implement it [2].

[1]: https://github.com/ulid/spec?tab=readme-ov-file#monotonicity

[2]: https://github.com/suyash/ulid/issues/10
What features do you want from Home Assistant?
Kernel is largely what matters here
This is a very confusing article. Surely it's the beacons that transmit beacons, not phones? And what is the signature based on? What is the fix? Terrible reporting.

In any case I doubt this has much practical impact given you presumably need an SDR to do this tracking.
For example, these folks:

https://www.igalia.com/
It's more than just factories and large hotels by far, but still not "most" businesses (which implies greater than 50%).
Damn, what if we don't have any access to a physical copy of the game?
Recent Pixel devices support Android pKVM nested virtualization, with optional 2-way isolation, https://android-developers.googleblog.com/2023/12/virtual-ma...

Even if Android is compromised all the way up to (and including) the host kernel, the isolated VM remains uncompromised

This allows virtualized Linux VMs on supported Pixels, running alongside Android, https://www.xda-developers.com/nestbox-hands-on/ & https://www.esper.io/blog/android-dessert-bites-13-virtualiz...
Doesn't have to be Exynos. The US version has the Snapdragon 8 Gen 1, which had heating and battery drain issues. The Gen 2 solved these issues.
C++ Design Patterns for Low-Latency Applications
This doesn’t have to be over engineered either! After all an enum is a perfectly valid AST.
lol 1) that happened 2 years ago 2) triton was on everyone's radar way before that
No, its definitely not silly. Why make comments like this? I'll take the repercussions, but passing judgement on language by how things sound is doodoo behavior.
Yeah. Even using sideloading before the EU stuff you couldn't use JIT. Altstore (not the EU version) managed to get it working I think, but it was very finicky and I think it doesn't work in newer versions of iOS
Afaik it depends on the generate function you use. You can let it keep track of the increment when generating, at a performance cost (atomic operations).
Power to do what, exactly?
I've been harboring a suspicion for several years that I've forgotten an account or two. Maybe I'm one of the fidelity investors.
I think it’s meant to be monotonic within one node but not cross-node (cross-node the sort order is random within the same millisecond). The random portion of the IDs are sequentially incrementing within a single MS on a given node.
> Also if I’m shit talking the boss’s boss. It’s never using work devices.

It's wild that some don't get this. A couple years back some employees at my company were fired for doing just this over the same IM system we used to coordinate everything else.
AWS focus on GenAI is about using AWS specific tools that lock you into AWSs ecosystem.

Stuff like SageMaker et al still require compute, storage, network traffic, etc.
Sounds a lot like the host OS is generic instead of container-focused, which could be part of the problem.

What was the cause/solution? Images too big?
The Moto X 2013 was awesome. It already had some modern smartphone features (AMOLED, always listen phrase) And it was so comfortable in-hand. The Moto X 2014 was already a pretty big regression in that regard (then Lenovo bought Motorola from Google and updates went down the drain as well).
Disagree.

Escaping/sanitizing on output takes extras cycles/energy that can be spared if the same process is done once upon submission.

Think more sustainable.
Love it. Just two questions from curiosity.

One. In your experience of using it for a while now, what is a typical tree size? What’s the highest it’s ever been?

Two. Why did you write it in C? Several other languages would surely make it much easier to implement that program. Not a critique at all, just curious. (I’m actually glad you wrote it in C. It’s a nice, reasonably sized piece of code to peruse.)
I wonder what the most dense cubed kilometre is, in the world.

My loosely informed bet is on Hong Kong, but I'll be glad to be shown wrong
> They could, but rareley do. On Reddit this requires clicking many links.

It doesn't, unless you're using the new UI, at which point it's kind of your fault anyway, because Reddit is entirely unusable as a discussion place with its new UI. You have to click to load more than 3 anything, and half the time it refreshes and loses your position anyway.
seems obvious that there is a small group of people who will pay for a premium small iPhone, priced the same as regular sized phone
I think you totally misunderstood me. What I was advocating was that you give those willing to learn new things the ability to implement their ideas and by that their colleagues will see that there is a better way.

The most important thing is getting the others to want to learn.
> rentier class from extracting value from the commons by way of
broken technology.

At least you understand the economic reality; that broken technology
is now more profitable than working technology.

Most of us cling to a 20th century understanding of supply-demand and
value-add. We still think the giant companies and celebrity superstar
"technologists" are trying to "make the world a better place", We have
yet to really grasp enshitification - a fancier word for betrayal and
burning the social capital of science and technology (and people's
belief in it) accrued over many centuries.

You don't even need to be "political" about this, I'm just a computer
guy who wants to understand why everything around me is fucked,
despite so many very smart and hard-working colleagues toiling at this
for 50 years.

We keep trying to fix engineering, but we're tackling the wrong
problem. At some point the social conditions in which engineering
takes place must be addressed. It occurs to me that our ideas about
engineering may not scale beyond the initial industrial revolution
when Telford and Brunel built bridges out of iron that people could
obviously see and benefit from, or they collapsed into the sea.
Nowadays its confusing to know whether a new gadget is a labour saving
godsend or a weapon pointed at you to destroy your life and liberty.
Active does better much better. If you know how the price moves you can easily beat the market.
I didn't say replace. I said replicate. Or, put another way, capture the essence of his moderation style. This could be useful for the rest of the world that's impoverished in dangs.
There's no mention of the UUID v7 in the README. Based on my basic understanding, v7 uses the first 48 bits to encode the Unix epoch, which makes them more useful for sort/indexing scenarios. Might be useful to compare ULID and v7 in the README to make it clearer the benefits one has over the other.
If it only solves the problems I already find trivial then it is a parrot. Nowadays we all have a calculator with us but if you emphasize that fact and choose to not practice and excel at basic arithmetic then you will be unable to perform higher mathematics that require it at every step. Of course if your problem is always already a solved problem then sure a parrot can be convinced to spit it out.

So yes, the actual question for software engineering would be how to get AI to produce and iterate on an OS. The hallucinations aren't the only problem then, the lack of predictability in the answers is the biggest issue.
More security people laid off but also layouts in general put strain on the remaining workers who are supposed to do more work to make up the difference hence more likely to cut corners to deliver products
I'm curious about other's experience with LDAP's supposed succesor: SCIM (http://scim.cloud). based on REST, it does sound simpler to implement & integrate compared to LDAP. but is it actually better compared to LDAP?
The problem is that legal world are still undecided about the safety of public models.

Plus often businesses need GenAI to be trained on their own IP (ie stuff sensitive to their own business that they don’t want in the public domain).

—-

Point 1 will be decided over the next few years as creators take companies to court (or “ethical AI” starts to displace the current models trained on unlicensed content)

Point 2 cannot be resolved without training your own models.

——

Let’s also not forget that LLMs are just one part of the GenAI movement. There’s audio and image generation too (Plus video, but that’s more an extension of image). In fact it was the latter that I worked on.

And then you have other areas of AI outside of the generative space too. From hundreds of different applications of image recognition to sound processing to searching for other kinds of bespoke patterns. These are all areas I’ve worked in too.

Often a GenAI product will require multiple different “AIs” to function, as part of a larger pipeline that appears like a single opaque box to the customer. And most of those models in the pipeline likely aren’t generative, let alone LLMs.
It's normal playbook to have embedded agents as close to the centre or top of an organisation as possible. I would expect states to be involved although not directly in control initially.

These groups tend to trust each other. What they should do is suspect themselves and especially those who seem better (resources, intelligence, charisma etc) than they are. The clueless newbie who is under suspicion is often the innocent one and the one giving the answers the state agent.
I work fully remote, the suckiest meetings are internal to the company but not because the meetings are remote, it’s because the company sucks.

The external meetings are always superior because most of those companies don’t suck.
>"Good design is as little design as possible." - some German

Actually german engineering have bad design that focuses on user convinence and/or aesthetics.

https://www.youtube.com/watch?v=qU7TJPZ2Tp4

Instead of having the camera just pointing outwards, there's an extra failure mode when the camera doesn't flip out. I seen a BMW with the reverse camera stuck, so it can not retract.

Bonus: https://youtu.be/CVDDtbiGDxA?t=148
I think they might be referring to ble advertisement packets
I'm a text person too, but I suspect we're not the majority, and definitely not the entirety of the smartphone-using population. I recently noticed my wife is increasingly often exchanging voice messages on Messenger instead of text messages, with increasing number of her friends. I queried about this several times, she says they all find it more convenient. It sounds unbelievable to my text-first sensibilities, but apparently it is.
This Tiny Country Feeds the World (2020)
Technically I've got 18tb raid 10 and 12TB raid 1, I just didn't think it mattered and I was too lazy to explain that on my phone ( • ‿ • )

The 6x6TB were previouly in a Synology NAS (roughly 8yrs old now) and I was planning to slowly migrate everything over to 12TB disk's as things start failing
It’s a trade off for sure. But if you know at the time of collection all the ways in which your data is going to be used in the future, you work at a more well-run organization than me!
There’s no mention because this is 5-7 years old. I believe that predates UUID 6-8.
Phones can also transmit beacons. The same as laptops, actually, some of them constantly broadcast BLE beacons.

The signature is based on physical layer characteristics, according to the linked paper : « They result in two measurable metrics in BLE and WiFi transmissions: Carrier Frequency Offset (CFO) and I/Q imperfections, specifically: I/Q offset and I/Q imbalance. ».

Yes, you would probably need SDR to do this tracking, but SDR are generally not this expensive.
This is FLoC-style adtech, right? Really scummy of them to make it opt-out.
They probably do. They just make it their day job by selling their services to others as well.
Wikipedia is rolling out dark mode support
The things we could have had if it wasn’t necessary to use regulation to force Apple into doing the right thing.
Soil is not the same as soil. There is soil on earth where allmost nothing can grow, because it is too salty, or lacking fertilzer. The research here is using flies for producing that fertilizer.

(but I think they still need to eat something else than mars soil)
This isn't “default permit” or “enumerating badness”. Its kind of the opposite.

The idea is that you don't want to store text in your database in a form that is safe when rendered as HTML, JS, JSON, SQL, etc. That would be "enumerating badness". Instead, at the moment you render the text as HTML, you encode the text into an HTML-friendly form (via escape characters). If you want to embed the text into a SQL query, have your SQL library add sql-specific escape characters where needed in the text. Same for your JSON library, and so on.

Its the responsibility of an encoding library to encode and decode text in the appropriate way. A JSON or SQL library should be able to encode then decode any arbitrary unicode string, even one which contains quote characters. Just like how any arbitrary unicode string should be able to be used on a webpage, in a text field without being able to interact with the rest of the page in any way.

Most libraries already do this if used properly. SQL libraries (using parameters) will escape text where needed. React will embed text in an html-safe way. JSON libraries escape quotes in strings. And so on.
I think it's curious that there are two models driving OS and browser development at the moment:

1) Google's model. They try to control all the ways that people discover goods and services, and then sell ads to the providers of services. Whether people are looking for electronics, flights, restaurants, contractors or nannies, they are going to use Google Search or Google Maps or another Google service to find it, and service providers need to pay Google to be discovered. Google is using ads to get a cut of every business transaction.

2) Apple's model: They try to control all the ways that people pay for things. For digital goods, that's the App Store and In-App-Purchases, for traditional things it's Apple Pay and Apple Card and Apple Cash. Apple is using payment services to get a cut of every business transaction.
They are ad delivery vehicles (think: sports) and often structure programming around ad slots, so in some senses, they kind-of are.
Which raises another pithy phrase in this area: parse, don't validate.

https://lexi-lambda.github.io/blog/2019/11/05/parse-don-t-va...
Yes I love seeing &lt; in my database. Every time I see it I think oh boy how many cycles will I save when I display this in HTML!
Emails Generator AI
The AltStore team helped them but it’s not on AltStore? I’d really like to see a nice strong offering there, more pro and privacy/foss oriented perhaps, similar to F-Droid.
> In the DS9 episode I’m thinking of, shapeshifters (“changelings”) had taken over Star Fleet (the military)

It was even more interesting than that - they didn't take Starfleet over at all! They bombed a conference and sow some fear in the backchannels, and then sat back to watch as Starfleet panicked. A few well-positioned people tried to pull a military coup, for more-less the same reason the US gave up on many of its freedoms after 9/11, but unlike in real world, they were denounced by the rest of the military, the coup was stopped, and the entire two-parter served as a strong message that it's fear, not attacks from outside, that can quickly destroy the utopia.

Basically, a Star Trek take on "people willing to trade their freedom for temporary security deserve neither and will lose both" - noticed on time and successfully averted.

> DS9 would never have been green-lit during Roddenberry’s lifetime.

Gene would be wrong about this, IMHO. DS9 is the series that makes the utopia seem more real, as it gives it cracks and puts pressure on them, to show how people can overcome them. It makes the Federation seem less like religion, and more like just great future overall.
It's not a simple linear scale of regulations and no regulations.

EU is arguably more regulated than California, but the regulations here have more sense to them, and arguably higher benefit to cost ratio.
Tangled is pretty cool looking. I'm really curious how it works.
Huh? This is a 100% solved problem in most languages. You just need to replace all of HTML's special characters with their escaped / encoded form. Eg, '<' becomes '&lt;', and so on for &, ", ', >, and all the rest.

There are libraries in almost every language to do this for you. A quick google search found these:

JS: https://github.com/parshap/html-escape

PHP: https://www.php.net/manual/en/function.htmlentities.php

And there are many more.
I don’t think the latest Android is designed for 2000mAh phones. Maybe Android 4 or lower could theoretically work better with this capacity range.
'Goldmine' collection of wheat from 100 years ago may help feed the world
I didn't clarify as there's even more of a mix of ranked vote variations than that in Australia.

STV is also used in many state and territory local and state elections, see:

https://en.wikipedia.org/wiki/Single_transferable_vote#Use

and scroll down to "local bodies" | Australia for a partial list.

The take home poin is that straight up simple Ranked Vote has an issue but is still (IMHO) better than FPTP and there are many ways to take the (minor) curse off of Ranked Vote to make it "better" (far less likely to hit a weird box corner that'll cause arguments | riots | civil war).

I mean, seriously, it's about electing|hiring people to work for the public, in the worst case we should at least just reset and restart, it's not life or death, it's just hiring a few managers that can be fired at any time or charged and imprisoned if they graft or steal.