skysight-inc/HackerNews huggingface dataset:
Yeah, the holes will match up with VESA hole patterns, I guess. But that's the only 100mm-based standard I can think of. I would have[1] chosen a size that matched with 2020 rails, or LEGO bricks, or Erector sets, or common lumber (1.5" is a multiple of erector set beams, so two in one if you go that route), or something.

[1] have. 1/3-scale two-by-two (1.5" square lumber)-based gridbeam actually works out really nicely.
Actually, no, the host OS was Amazon BottleRocket, a specifically container-focused OS.

The cause was indeed images being too big. Images — not only the raw images, but also their extracted contents on the filesystem — count towards ephemeral storage too. In their case they can't even control the size of the images because those are supplied by a vendor.

The solution was to increase the node's disk space.
kitajs already being a fork of https://github.com/nicojs/typed-html . What makes this one more robust or stable then?
I was around in the 90's, yes.

If newspapers are your model of a better alternative - pre internet, newspapers were funded largely by advertising. Yes, they also took subs and sales, but they could not operate on that alone. A very large amount of product and service discovery -not just consumer, but B2B -happened by means of ads (including classifieds) in newspapers and professional magazines. Have a look at a 19th century issue of "The Engineer" or "The Builder", it's very enlightening.

If we want to get rid of the current internet giants, we need to figure out what can replace them so effectively that businesses dump them like they did the newspapers.
If you're going to do that, you're going to need to get universities to treat computers as an actual applied discipline. Physical engineers at least get some practice working with numbers around real materials.

I've met too many recent university graduates that don't even know you need to sanitize database inputs. Which, not their fault, but the university system as it currently exists in relation to software is not set up do do the thing you're asking.

The alternative is to have a really long exam (or a series of them like actuaries do?). Here are 10 random architectures. Describe the security flaws of each and what you would change to mitigate them.

The other change that needs to be made, is that engineers need to be able to describe the bounds of their software. This happens in the other engineering disciplines. A civil engineer can design a bridge with weight capacity X, maybe a pedestrian bridge. If someone builds it and drives semi-trucks over it, that's kinda their problem (and liability).

We would need some sort of way to say "this code is rated for use on an internal network or local only" and, given that rating, hooking it up to the open internet would be legally hazardous.
Show HN: I made a LLM trade Stocks
Hi HN! I made this as a side project, but astonishingly, it actually turned out to be profitable for me (Paper Trading).

In short, the algorithm works in the following way:
1. It discovers trending and profitable stocks provided by the Alpha Vantage API through news sentiment analysis.

2. Now, having a list of good stock options, it cherry-picks those stocks that it considers to be from "evergreen companies" that just can't go bankrupt and will result in profit in the long term.

3. It sets limit orders for the stocks by analyzing the past 7 days of their prices (all by using LLMs).

4. The stop-loss price is calculated as 95% of the current price to mitigate risks.

5. It then buys the largest amount of stocks that have the greatest spread (limit price - current price) out of the chosen stocks through a position-sizing algorithm.

6. It constantly monitors the positions and buys more stocks when the existing ones are sold off.
Man, Mozilla is taking hit after hit lately.
I think permissions are a bit wonky? I could, as a random person, close some other project's PRs. How is the authz supposed to work?
> You can't tell beforehand which participants will beat the market, even having full knowledge of their strategies and skill

I never implied that I can. That fact doesn't prove that it's somehow fundamentally impossible to do that. The problem is that it's impossible to tell if you "strategy" is working until a significant amount of time passes and by that point the markets conditions might have changed to such an extent that you don't longer have an edge (add to that the fact that it's hardly possible to determine what part of your success was luck/skill). So there is always a huge amount of uncertainty.

Albeit if we look back by ~10-15 years it's rather obvious that it was possible to beat the market by a very significant e.g. there were clear rational reasons to believe that Nvidia would do better than its competitors like AMD or Intel and that there would be significant growth in GPU compute/ML/AI (of course accurately estimating the extent and exact timing but that wasn't necessary at all to get above market return) same applies to many companies in adjacent and unrelated sectors. Was I or the overwhelming majority of investors capable of realizing that and more importantly acting on it? Certainly not. But looking back it obviously wasn't random.

The efficient-market hypothesis is clearly false, at least in the short to medium term. That in no way means that most investors are even remotely capable of utilizing this fact.
> don't believe data is real.

Oh but they do, try taking some data that belongs to a corporation and see how quickly law enforcement responds. Aaron Swartz found out the hard way

It’s only when you steal personal data that nobody cares.
Rather gov.us.
Acceleration problems are not limited to EVs.
An interpreter that runs at 20% native speed would be considered a very fast interpreter. That would be an order of magnitude faster than a „trickle“.
A "data lake" strongly suggests there's lot of information the company needs to aggregate and process globally, which should very much not be the case with a semi-private rich notebook product.
In the biology there are families of neurons, each one with different morphologies.
This is fine if you're only running on a single core, however if you're a multiprocessor OS you still need to deal with legacy when bringing up the other cores. Intel and AMD should consider a mode that disables that and brings up the other cores using a 64bit SIPI. While I applaud Intel on the X86S idea... I think there is room for bits of that without throwing out all the backwards compat. An X86SC which drops real mode and only supports 16bit 'real mode' in virtualization.

Yes, I see the argument that if you go to that point you might as well just use emulation. However running mixed 32bit/16bit code (Windows 98/95) becomes problematic just because of performance reasons. DosBox does well, but good luck supporting games for the Pentium 3 era that still used 16bit libraries because of course they did. (16bit Installshield was so common going into 64bit that MS just has code to replace it so 32bit applications can still be installed despite having a 16bit installer)
That would be pretty cool. Especially if they nail scoping tightly. Classic example: you want to buy alcohol online and need to verify your age. Instead of clicking “yes I’m old enough” (zero validation) or uploading a photo of your drivers license (way too much info), login with your digital ID.

The e-commerce site asks hey is this person (1) a resident of region X and (2) at least Y years old? The e-commerce site is responsible for knowing what ages to check for what regions. ID service is responsible for validating the facts you want to share. You get the age controlled service and no third parties get more info than they need. Better.
Consider posting this as a new post! It seems like a fun list to read through
> You’re being pedantic in all the wrong ways.

No, I simply disagree with the whole premise, at least to a limited extent.

> All of the available evidence shows that publicly-available actively-managed funds are essentially playing this game

Yeah that's true, I was mostly talking about individual investors and/or non public funds.
Show HN: IP geolocation and email validation API
Hi, we've created https://ip-api.io, a simple API for accurate IP geolocation and reliable email validation.
What's there to expand on? Do you not realize how bad of a look it is for a company to publicly admit, on their own blog, the amount of time and engineering effort they spent to package up, move, analyze, and sell all their customer's private data?

This is why laws like CCPA "do not sell my personal information" exist, which I certainly hope Notion is abiding by, otherwise they'll have lawyers knocking on their door soon.
People can still call me and leave a message. I'll receive their message when I feel like it, not when they feel like it. It's really not all that terrible a thing. You should try it sometime.
TweetDeck (now "X Pro") is no longer free and they removed the good old version. The new version completely misses the point of what TweetDeck was. You can no longer use multiple accounts at the same time for example.
Install it:

brew install kaskade

pipx install kaskade
and a lot of the Caribbean
Thanks, I'm glad the explanations were helpful.
> but it’s still debt and you have to “service” it by providing products and services that do have a marginal cost.

This should be accounted for. Say you sign a customer for $100 for a year. You should be able to estimate up front that it will cost you $5 in service costs, $15 dollars in support, $5 in ... then you can book the $75 as expected profit. Some of that can be put back into marketing in a short loop.

The main difference from monthly is that it takes N months for that revenue to be captured. However you are more certain about it. (Especially in pay-after where you can subtract actual support and infrastructure costs from the revenue.)
Pedantry:

1. if you click "UTM SE" in this article, you get taken to https://taoofmac.com/space/links/2024/07/14/0819;

2. and this page in turn is apparently of an unusual "commentary on a link" CMS type — where it seems that clicking the little arrow wingding beside the title — or clicking the thumbnail (which is a thumbnail of the page the comment is "about") — takes you to the page that the comment is "about";

3. where that page (https://www.theverge.com/2024/7/13/24198015/apple-utm-se-pc-...) then explains what UTM SE is, across its header and subheader:

> After initially rejecting it, Apple has approved the first PC emulator for iOS

> UTM SE can ‘run classic software and old-school games’ for Windows, Mac OS 9, and Linux on your iPhone.

---

This is admittedly confusing and indirect — but that's mostly due to this website's publishing system's weird reading-UX choices, not so much due to the author's editorial choices. (Unless this publishing system is created by the author, in which case...)

A few UX recommendations to the site's designer:

1. fix the rendering for your "Link" resources! Facebook and Twitter have forced the rest of the web into expecting that this kind of resource will be rendered as what they call a "link preview" — using the OpenGraph metadata (og:title and og:description) of the target page. As such, only rendering the page's scraped <title> might produce bad results, as nobody's expecting you to do that, and so hasn't optimized their pages' out-of-context comprehensibility for that. They've optimized for people rendering og:title + og:description — so if you want your own "link previews" to be comprehensible, then that's what you've gotta do too.

2. You probably want to give "supplementary" Posts like this one, some CMS metadata that points to a previous Post or Link as the "prerequisite reading." If a Post has prerequisite reading, then your CMS should render the Post's full unfolded body view with an embedded summary of the previous resource at the beginning. (Where in this case, what I'd expect is a blockquote of the Link resource — in turn including the link preview!)
The original HN thread is littered with people calling to kill all liberals and talking about taking specific people's heads.

The reporting that followed that post suggests the shooter donated $15 to Act Blue when he was 17 and registered as a Republican at 18. All of this within the context that this young man is from a very rural town in Pennsylvania that Trump easily won. The whole situation is just odd.

The best thing for everyone to do is to do nothing, because nothing good comes from this point. No point in making things worse.
Valid points. I was also thinking about apt install-ing some C library, try to pip install a package, have it fail to build, look for headers/debug packages in apt, set LD_LIBRARY… you know. It hurts, a lot.

And yet, python is a fantastic language because it’s the remote control to do the heavy, complex, low-level, high-performance stuff with relative ease.
Why do people self-promote entirely unrelated YouTube channels on this site? It's baffling.
Stock market is not zero sum.
What feedback are you getting? The implication is that you have users that are constantly surveilled by video and input device monitoring, and that they are telling you they are enthused.
Popcorn Time: multi-platform, BitTorrent client with integrated media player
> git push directly to the repository, in a separate branch namespace. This is how e.g. Gerrit works (pushing to a special ref makes a review, which is essentially the same as a pull request).

And that `git push` doesn't need to be literally to the one and only repository. The SSH daemon could create an isolated environment (e.g. QEMU, FreeBSD jail, etc) that contains a copy of the repository, and run the commands in there. Obviously this could also check SSH keys and the requested git commands before doing anything at all.

It would probably be like what Sourcehut does[1] for letting you SSH into build VMs, but instead of a build it's a push. And they already do some logic during a push[2], so their code for those two places is probably a good place to look for how to implement this kind of thing.

[1]: https://man.sr.ht/builds.sr.ht/build-ssh.md

[2]: https://sourcehut.org/blog/2019-11-22-what-happens-on-git-pu...
> Try meeting women on Tinder without Whatsapp.

Drop the "without Whatsapp." It's cleaner.

If I ever feel like meeting a woman again our first encounter won't be on a fucking phone app. And that will be just fine.
Penny's Big Breakaway – The Platform Game Evolved – Developer Deep Dive [video]
Since it's now abandonware, you can download Emperor: Battle for Dune from archive.org directly or via torrent:

https://archive.org/details/EmperorBattleForDuneUSAEurope

(For others who, like me, want to try this game out with the wheybags patch :)

Just for fun, I also dug up the past pirate releases:

releaseName TYPE releaseDate
------------------------------------------------------- -------- -------------------
Emperor_Battle_for_Dune_v1_06_Update-RAZoRDOX GAMES 2001-06-21 00:00:00
Emperor.Battle.for.Dune.Update.v1.07.Cracked-MYTH DOX 2001-06-30 16:16:43
Emperor.Battle.for.Dune.All.Level.Saves-EyM 0DAY 2001-07-10 12:07:49
Emperor.Battle.for.Dune.Update.v1.08.Cracked-MYTH DOX 2001-08-17 08:17:39
Emperor.Battle.For.Dune.Update.v1.09.Cracked-MYTH DOX 2001-10-06 06:04:21
Emperor.Battle.for.Dune.Update.v1.06.Cracked-MYTH DOX 2003-07-11 22:33:37
Emperor-Battle_For_Dune-NORDiC-DOX-RUSDOX DOX 2003-07-11 22:33:45
Emperor.Battle.For.Dune.Poradnik.POLiSH.PDF.eBook-KiOSK BOOKWARE 2006-03-10 01:48:50
Emperor.Battle.For.Dune.Money.Trainer-FLTDOX DOX 2006-10-10 21:52:25
Emperor.Battle.for.Dune.v1.06.Update-RAZoRDOX 0DAY 2006-10-10 21:52:30
Emperor_Battle_For_Dune_Money_Trainer-FLTDOX DOX 2006-10-10 21:52:30
Emperor.Battle.for.Dune-DEVIANCE GAMES 2007-02-15 17:25:00
OST-Emperor_-_Battle_For_Dune-CD-2001-DGN MP3 2010-09-01 22:45:42

I was surprised to see there is even an OST soundtrack! Amusing.
Do you have a commercial interest or is this just for fun or a kind of public service?
That's okay. In my experience every time some place secedes they always want to redesign the website anyway.
Yes, indeed. This push for "AI has to do everything" is dumb. It seems to be the new buzzword and koolaid that has to be attached to every context just because.
Thanks! You're probably right, I should somehow put it in the mobile site too. Appreciate the suggestion:)
How would you address concerns from privacy advocates and small-government folks about this expanding federal control into states’ business?
Wow, this brings back some memories. I had no idea it was still going, I thought the studios had managed to close it down.
or else what?

did this law codify any penalties?

I propose CalPERS pension invalidation for everyone thats ever been employed in that municipality, I think this is the trick that can change departments from the inside when the old guard gets affected
i would like this too, i don't think it's going to be easily found on some website though, Disney will sue the owner out of existence
I mean it does mean that they don't have faith in their ability to beat the market on average across significant time spans.
Last time I checked, you still have to manually clone templates, query slots to fill and imperatively manipulate DOM. Did this recently and found the process very annoying compared to frontend framework template experience. Compared to banging out template literal strings, sounds like too much hassle, especially in Node.js, where there's no DOM by default, so you'd have to import a DOM library.
> Likewise, no one should expect to beat the market, even though many will in practice.

My only point is only that not every investor is rolling the same dice. It's just that it is effectively impossible to every verify whether you were rolling a 90-sided dice or a 100-sided one. It's rather clear that at least in the short to medium term (e.g 2-3 years) the stock is not even remotely perfectly efficient (that doesn't mean that the overwhelming majority of investors are somehow capable of utilizing that fact or that a significant proportion of those that did seemingly manage to do that weren't just lucky)
The problem with .us here is that private entities can register domains there.

I think this change is great, because when you are looking for official information for a city or county and all you find is a .com, there's no way to be sure it's legit. Using .gov signals it's official, but .us does not.
The risk your (completely hypothetical) offer would involve is reputational. There's no reason for a funds manager to ever risk their reputation on your stunt since they are constantly risking money and reputation in the ways that they control. Indeed, one could almost certainly put together a bet similar to yours using derivatives and have the potential upsides and downsides without the reputational damage.

Of course, if you offered your bet to all comers and gave significant publicity, unknown "funds managers" would be happy to take you up, though they might well default if they lost.
I thought the quiet part was that they are data mining their customer data (and disclosing it to multiple third parties) because it’s not E2EE and they can read everyone’s private and proprietary notes.

Otherwise, this is the perfect app for sharding/horizontal scalability. Your notes don’t need to be queried or joined with anyone else’s notes.
You do not have to be able to build actual sql injection yourself in order to have properly secured queries. Same with xss injection. Having rough ideas about attacks is probably necessary, but beyond that you primary need the discipline and correct frameworks that wont facilitate you to shoot yourself in the foot.
Are you an engineer in the U.S.?

Seems like engineers rarely do the math on their productivity.

A tool that costs $100/month and saves an hour or two can still be worth it.
System Logs Aggregation with Postgres
Challenges of optimizing deep neural networks
> Renewable technologies such as solar and wind power “cannot provide the security that we need”, he argued, reflecting his government’s scepticism towards these technologies.

Is there any right or far-right party that has a fact based take on renewables?
Duc: A collection of tools for inspecting and visualizing disk usage
Claiming that AI is not useful is absurd and oxymoronic. If you cant figure out how to use it, you are locked in a paradigm that is becoming obsolete.
Canada Said to Have Mapped Out Secret Chinese Police Operations
"Are There Men on the Moon?": Churchill on Alien Life, 1942
> most of the day, I would not need any beacons at all - maybe there is an intelligent limit on avoiding them?

My approach is to leave bluetooth (and every other radio, but that's neither here nor there) turned off when I'm not actively using it.
Functions deserve their own symbol in Lisp.

Though I prefer ^ since it’s easier to type.

https://github.com/codr7/sharpl
In August 2023, I received this text message from a number I don't recognize:

Do you live in San Francisco and have a child age 7 or younger? Take a 10 minute survey to share your voice! The first 300 participants will get a $10 gift card! https://tinyurl.com/bdzxjsvu

The message didn't have any information about who it was from, or how they got my number.

Also, the link was to a URL shortener, which is often used for scams. I was curious, so I clicked anyway.

The link redirected to a form on another web site:

https://survey.communityvoicecommunitychoice.com/jfe/form/SV...

That website said it was an SF government department. But the web site domain did not end in sf.gov, which made me more suspicious.

I was curious about the questions, though, so kept clicking through.

But then just before the end or the survey, it wouldn't let me continue without entering my full name and email address.

I decided to alert someone at the department which allegedly hosted the survey. When I Googled the department name, the first result had the domain sfdec.org

Now, if SFDEC actually exists, then there's a good chance that sfdec.org, being the first link, is legit.

But I had never heard of that department before, so how could I know it was legit? It would take a bunch of time to look at .gov sites and see if they refer to sfdec.org

I emailed someone listed on the sfdec.org site, and they replied saying the survey was legit. But to this day I'm not sure whether the sfdec.org site is a legit government site.

It seems like it would be easy to create a fake department and fake web site.
I hear you, since I spend half my free time fixing stuff that breaks on my house and its contents.
I sometimes wonder how western music notation would look like if it were designed from scratch today with all the knowledge we have today.

It feels like the current system is the Imperial system and somewhere ought to be the SI metric system.
> hundreds of forks that were created just to submit one patch.

Or, worse (IMHO) when they created the fork to house a patch - sometimes a meaningful feature, bugfix, or security fix - and then left it because the submission process was too onerous to bother. Onerous can also include never getting the PR reviewed, too, which is far more damaging (IMHO) because it disincentivizes future contributions, too

I actually would love an "implied PR" view of the forks which would enable quickly filtering out the -0,+0 "shallow forks" from the -50,+2000 "oh, that's likely doing something interesting" ones, provided it has the sane ?w=0 to hide forks that felt it necessary to push up simple reformatting changes
It would need to be a zero-day (or close to it), which means nation-state level sophistication.

You can decide for yourself whether to include that in your personal threat analysis.
Not being sure that your brand new invention will even be useful, and therefore not bothering to think about international politics while inventing packet switched networking is now “American exceptionalism”? That’s just absurd.