skysight-inc/HackerNews huggingface dataset:
Interesting that a lot of the (general, not specifically here) commentary is "don't use bash, use python" which I find quite clunky, noisy, and boilerplatey to do the same thing as a shell script. Kinda Master Foo and the Ten Thousand Lines†.

Ruby's https://github.com/ruby/shell (which used to be bundled in Ruby itself) doesn't get much mention but is much more clear and useful to me.

# system commands are not defined by default, only builtins, for safety
Shell.def_system_command 'ls'
Shell.def_system_command 'grep'
Shell.def_system_command 'jq'

Shell.new.transact do
# simple redirs just work
ls | grep('test') > 'some/file'
ls | grep('other') | tee('foo') >> 'some/file'

# pops at the end of the block
cd 'some/dir' do
# nested redir for demo
(cat < 'foo.json') | jq '.[] | { bar: .bar }'
end
end

† http://www.catb.org/esr/writings/unix-koans/ten-thousand.htm...
Reminds me of this insightful article: https://mikerowe.com/2020/03/walk-me-through-this-safety-thi...
When Google added Yubikeys it reduced phishing internally to zero.

https://krebsonsecurity.com/2018/07/google-security-keys-neu...

I adore my Yubikey.
I think you missed the point, most of the problems that affect GraphQL APIs you will also experience with REST APIs, or any kind of APIs.
I tried it, uses GPT-4o, the $10 sign up credit dissapeared in a few hours of intense coding, I'm not paying $500/mo for a fancy autocomple. Manual instruct style chat about code with Claude-Sonnet-3.5 is the best price/perf I've tried so far, through poe.com I use around 30k credits per day of coding of the 1M monthly allotment, I think it was $200/y. It's not available directly in my country. I've tried a bunch of local models too but Claude is just next level and inference is very cheap.
Eh, it’s just some sass.
The UI to spot the 'reaction' is really bad though. I got a mail to my work Outlook which was some kind of daily digest with the thumbs up.
> What isn’t clear, in retrospect or otherwise, is why companies/apps/services need to keep learning this lesson. The user outcry was utterly predictable from even before the first web article was out.

One possibility is they knew there would be an outcry but estimated that the loss in user support because of it would be limited enough that the upside of having the majority of users with the setting left on wins.
Please see the section titled "Faster multiplication"
How Coca-Cola Obtains Its Coca
Uh thats sad. I processed one a similar IBM controller unit when I worked in recycling. I tried for 2 weeks to first figure out what the heck it was, and then secondly find a home for it that wasnt scrap.

Ultimately, it was gutted and converted into a mobile workstation.
Databend is a cutting-edge alternative to Snowflake, offering cost-effective and straightforward solutions for large-scale analytics. It utilizes a lightweight meta service instead of the resource-intensive FoundationDB and employs OpenRaft for replication and high availability.

- Databend: https://github.com/datafuselabs/databend

- OpenRaft: https://github.com/datafuselabs/openraft
After programming for 40 hours a week, it's normal not to have the motivation to work on more programming things. It's not mediocrity or clinical depression.

My passion for software development died with my first full time job and returned as soon as I changed fields.

Go touch grass, find new hobbies.
https://archive.ph/v7rRy
> And yet people will over and over again insist that that would never work. Doesn't that strike you as odd?

Not really. Perhaps they know enough about this that they believe it wouldn't work. How much would you pay for Firefox per year? How many people would pay that figure?
I wrote a series of backend, internal GraphQL APIs. I think the argument of "make the exact queries it needs and load the exact data it needs" actually applies _more_ to internal APIs than to frontends, where I personally prefer a well schema'd BFF pattern. We did face some performance issues with some of the server libraries, unfortunately, but the backend development team were extremely productive in comparison to supporting multiple API shapes.
BitSavers automatically redirects you top the closest(?) mirror so I guess that's where the uni-stuttgart.de URL comes from.

Bitsavers is cool. They also offer an rsync endpoint so that you can efficiently mirror the whole collection. I have a mirror at home (it's about 1.5TB by now) and every weekend I check out the new stuff that came in this week. So much interesting history being preserved there!
If you use OpenAPI/Swagger you can most likely generate the client code along with the types. I use the npm package below, and it just seems to work simply without any headaches.

https://github.com/hey-api/openapi-ts
I think that's demonstrably false.

His point about the runtime complexity of an API being entirely distinct from how the interface to it's code is exposed (whether GraphQL or REST or otherwise) is fairly obvious, I think.

The counter-argument is that unlimited query complexity makes it far bigger problem, and the author's point is that if you're using it for private APIs with persisted queries, you shouldn't have that problem unknowingly.

Don't get me wrong - I think the takeaway is that GraphQL's niche is quite small, and he's defending exactly that niche. It's not often the case that you can develop an API in a private manner which doesn't undercut higher-order value in the future, as the rise of AWS hopefully made evident.
Thank you. I hadn’t heard that one before but exactly right :)
I like the vision where next wave of LLMs will include this advice in its training set.
I use their free offerings a lot, especially when there is need to share / collaborate with others. When you need people who work on different cloud infrastructures, it's refreshing to be able to redirect everyone to Frama equivalents.
If you want to maximize your chances of winning a very large game like this, you need to play quite a lot riskier than is intuitive, you definitely do not want to pick a popular player if your model predicts someone else will outperform him.

If you want to finish top 5%, having the best model should do it, with some attention to risk management in the last few games of the season (play riskier if you are in the 90th percentile than in the 99th).

If you want to maximise your chance of beating your friends, have the best model and think a little game theory at the end of the season based on whether you are leading or chasing.
Not Speeding Up Delta Decoding with Value Speculation
> They solve the same problem but in very different ways.

Yes. Async/await is stackless, which leads to the “coloured functions” problem (because it can only suspend function calls one-by-one). Threads are stackful (the whole stack can be suspended at once), which avoids the issue.
Gemini is probably using ring attention. But scaling to that size requires more engineering effort in terms of interlink that goes beyond the purpose of this release from Mistral.
Good. DEI is a hangover from 2020 that, aside from buying some cheap publicity points, didn't do anything for anyone (except the DEI activists themselves).

The very theory that skin-deep diversity helps businesses grow is based on extremely flimsy observations. It is likely non-reproducible. Notably, the most important competitors of US businesses in East Asia don't even pretend to care about diversity, and they thrive.

If an opponent completely ignores something that you worship and isn't stricken by the gods for his insolence, chances are that your gods are false, or, at best, very weak.
Relevance Theory
Yeah, I see.
For operation of flag, is by HN or unactive naturally?
Show HN: Online Media Conversion Tool
In the context of this Australian source it's political and this particular article is casting shade on nuclear in China for local Australian reasons.

China still has plans for some 100 nuclear reactors (IIRC) with 10 or 15 under construction right now (again, ballpark as I recall) and a still standing long term goal of nuclear at 18% maybe 20% of total generation.

China already has nuclear reactors, has generations of skilled nuclear reactor technicians and a new generation in the pipeline being trained. It's also a large economy.

Australia is a great deal smaller in both population and wealth and utterly lacks any significant skill set in nuclear power generation and engineering, a handful of Australian nuclear scientists aside.

Of the two dominant Australian political parties one essentially denies AGW (climate change) is an issue and seek to do as little as possible, to this end they have proposed their "climate solution" as Nuclear!! (but much later than now, and only a few power stations, and we don't really have an actual plan like a blueprint or time table or permissions from proposed site owners, etc).

This isn't a nuclear plan, it's a plan to build more coal power station "in the meantime" and hope that one day it'll be economical in Australia to buy some "off the shelf" set and forget SMR magical thinking nuclear tech.

As a matter of pragmatic action, in the immediate short term, in an Austraian context, it makes better economic sense to put money now into rapid expansion of renewables and storage - there's even a solid government scientific body report on that.

This isn't a "let's hate nuclear" position, more a "what's the most economically feasible solution in Australia as it stands now" position.

The downplaying of China's nuclear portion of future planning here is entirely based (by my best guess) on not wanting to be seen to say "Hey, it's working in China" to an Australian readership.

It is working in China, but that has no real bearing on nuclear being a good fit in Australia at the present time.
No, you misunderstand. If you're not the person who hates reactions for unarticulated reasons, you won't have this option enabled, so you'll just see the reactions as emoji like most other people.

The person who hates reactions, OTOH, is going to see all these annoying notifications and unnecessary clutter, because he apparently prefers unnecessary clutter rather than a simple emoji. After all, these people are telling us they want others to type out long, wordy messages just to, for instance, acknowledge a prior message. My proposal here would do just this, but require the sender to do nothing different than before.
Family, kids, friends.

It seems like in a lot of rich countries we are heading towards a major population shrinkage, to go with a solitude and isolation crisis.
The most important thing is to make sure you use an encrypted email auth protocol.

I was in a tipping comp years ago. At this workplace I had already warned the management against insecure email protocols but they wouldnt listen.

Anyway, came time for the company footy tipping comp.

Once I worked out which manager was running it, I used their plaintext password against their admin login to the tipping website. Worked straight up.

Every week I would make my tips, then after the games had been run but before Monday rolled around, I would use the admin access to change my tips.

Didnt try and hide it just went 100% victory every week.

The admin of the comp would even go out of his way to try and satisfy the very angry football fans that it wasnt run on company systems so theres no way that I could find my way in to change things.

In the end I fessed up, I couldnt get them to change the email system, but he apparently proactively took the password post it note off of his monitor which was nice.
Be thankful that this actually works. It wouldn’t if both Microsoft and Google checked for the magic token at the end of the SSID string :-/
I love going to theaters when we visit London and over the years I've seen tens of plays if not over a hundred. Shakespeare's are the only ones I had problems following so we stopped seeing them.

Like you I don't think this is a problem of Shakespeare or me. My English is not perfect, but since I don't seem to have problems communicating otherwise or following plays or movies even in dialects (within reason) I take this as a substantial proof that it is generally good enough.

My personal take is that it is a combination of language that is just unfamiliar enough and old references and idioms that I don't get because I haven't been taught them in school while learning about plays.
We Love Writing Software So Much, We're Willing to Do It for Free
> It takes guts to defend non-extremist positions, because the extremists will always have more powerful one-liners.

Thanks for that quote :)
Unfortunately I’m on a bus to the airport for a couple of days so I’m a bit constrained.

If you know Postgres, I would recommend taking a look at Postgraphile. It’s awesome, and comes with an explorer web UI that really helps (GraphIQL with extras). Everything happens in real time. so if you update a view, the UI updates.

There are lots of GraphQL clients but many of them do all sorts of crap you don’t need. I just use graphql-request which is super simple. But of course you can just use fetch() too.

There are also lots of “standards” for GraphQL that make it seem more complex than it is. Ignore that stuff and just start playing with a good server like Postgraphile.

Good luck!
Can you define slow as shit? Was it worse than the Google/Nest Wi-Fi things? I am aware ethernet drops would be faster, but I just don't need 1Gbps in my bedroom -- just for the connection to be reliable and of a reasonable speed. My benchmark to beat would be what my Eero mesh thing gets.
> This is nonsense. GraphQL queries are simple HTTP requests, with no more complexity than REST. You POST a query string and some JSON

The complexity of GraphQL in fact begins there, and also sort of explains a lot of why GraphQL is all but simple:
Why am I using a query language instead of just passing an AST via JSON, a data format every general purpose language supports very well these days?

The answer to the above question, and most of GraphQLs other complexities: Some arbitrary design decision.

Another example:
GraphQL could've easily been expressed as a REST API, even an Open API. From what I have seen, with the help of VC backing and FAANG endorsement, GraphQL mostly rose to replace JSON:API, which accomplishes pretty much all of the same goals in just JSON (and is RESTful).

One big issue of GraphQL is also that API clients tend to suck. That's not a problem for OpenAPIs.

And again, why is this the case? Some arbitrary design decision.

I feel like in general, someone creating a new DSL where it's not needed (and is obviously designed to look cool rather than actually be expressive), is a good sign they're just writing the software to stroke their ego rather than reach a meaningful end.

That's why in all the promo material for GraphQL you only see the query language, and not all of the actual setup required to send a request or even what an actual GraphQL HTTP request looks like. GraphQL, the framework, is not actually as simple and elegant as GraphQL the query language attempts to portray it as.

It's almost like someone came up with a query language for fun then came up with all the details of how a web server would utilize it afterwards.

Even today, GraphQL markets itself only as a query language (A query language for your API). When, as you have already mentioned, it is more than that.

That's why most developers know vaguely what GraphQL is ("Oh, that one language") but not how it actually works in practice. And when they actually encounter it, it feels almost like a betrayal, because it's nowhere near as simple, sleek or elegant as all the marketing they saw suggested.

At least, this was my experience when having to deal with a
third party GraphQL API (funny enough, they migrated from REST, see ShipHero).
While being in general interesting (and comprehensive, it seems) study, the provided impact on space travel in the press release is purelly hilarious:

> Even a slight deviation of just one centimetre on Earth can grow to a deviation of hundreds of metres over the huge distances involved. “Otherwise, it won’t be possible to land in a specific crater on Mars,” he says.

Common... we don't lunch rockets with probes to other planets purelly balistically since forever. There are course adjustments along the trajectory in the atmosphere and in space. This is needed not just because of Earth related effects, but because engines perform slightly differently from predictictions, center of mass shifting relatively to center of thrust in zero-g because of liquids sloshing, etc.
The only thing I really disagree with in the article is that security needs are opposed to a good user experience.

It is certainly true that security needs can sometimes get in the way of better UX although there is plenty of security that users never encounter. It is also true that the UX of many security designs is awful. However, it is not true to say that security requirements are opposed to good UX.

You can absolutely create good UX with good security, but it will require more effort. Improving your UX doesn't normally hurt security. In fact, having better UX can help security. Conversely, improving your security does not inevitably hurt your UX (although it certainly can if you don't give it sufficient consideration).
Trump is truly capable of staging his own assassination attempt. They meaning Trump's inner circle found a young innocent guy who was bad at shooting we will never know what he got promised. Even the sniper who shot the boy said this must be an inside job otherwise with all the security how in God's way could he possibly made it to the rooftop??? Security inside the building security everywhere and the shooter walks by with an automatic rifle in his hand or on his back???? The only one who wins is Donald Trump if president elected he wipes out all his felonies puts all his enemies in jail etc.etc.etc. Think about it .
Instead of Chesterton, I think Thomas Aquinas made the same point more simply: "If the highest aim of a captain were to preserve his ship, he would keep it in port forever."
It wasn't sarcasm, I'm 100% for that.
Obvious question: how does it relate to vCard, which is the standard way of describing contacts?
The examples shown are too simplistic for real world use: how do I specify multiple phones/emails, like work and personal?

And a nitpick: it cannot be both "open source and public domain" -- open source means it's licensed under an Open Source license, while public domain means that there are no IP rights.
> avoid anything written in the last 10 years

Why?
I think the public/private distinction here is more in "officially allowed for public use" vs "API your frontend uses but is not documented for public use". Obviously security is still a thing, but having good ergonomics for your frontend devs means your frontend devs can just work forward and backend people can focus on other things instead of going back and forth on perf issues downstream of REST APIs
Get ready for pull request from all kind of organizations. We had something similar a few years ago, when it became a bit populair, it got bombarded with all kind of illegal stuff like cp. We had a contact by the police to notify them when to report the illegal stuff. We stopped it because we had to implement continues monitoring of what was uploaded.
Interesting that your experience was a double increase in costs from going up in security level. My experience was it was an order of magnitude (10x) at each level .

E.g., OFFICIAL let's say is $1,000,000
PRIVATE becomes $10,000,000
SECRET becomes $100,000,000

What we did experience was the cost in time to deliver a service doubled however. E.g., OFFICIAL was 3 years, PRIVATE was 6 years and so on. I expect it varies significantly between types of system, ours was a SaaS platform that read telemetry from embedded systems on assets in the field, so I'd assume that would be one of the drivers for my differing experience than yours.
It’s extremely useful for a business to have a rough idea of when they’ll be able to deliver something. Budgets, contracts, client relationships, marketing, etc are affected by it.

So should Engineering give a best effort to estimate that, or just throw up their hands and say “it’s done when it’s done”?
Dilbert strip on "is our top priority": https://qhselife4business.typepad.com/qhse-life-for-business...
From the terms of service:

> Please be aware that there may be certain adult or mature content available on the Website. Where there is mature or adult content, individuals who are less than 18 years of age or are not permitted to access such content under the laws of any applicable jurisdiction may not access such content. Certain areas of the Website and Services may not be available to children under 18 under any circumstances.

Ironic given that the creator is only 17 himself per the original post. Having run a site like this before, you can expect to get some awful stuff uploaded before long, up to and including CSAM. Not sure I can trust a minor to moderate this stuff and push that "report" button in good conscience knowing that a minor will have to view the material to make the call.
Someone should have added this to https://4techmix.com/2024/07/17/ten-tech-implications-of-a-t...
Nothing a couple AGM-88 HARMs launched in general direction of Królewiec couldnt solve.
This would have been very useful at several companies I worked at as a product manager for release blogs.

I always start editing in gdocs because it's so much easier to collaborate on than any blog platform, but then you always need to copy/paste the content once final into the blog and nearly every time, it copies some elements of formatting into the rich HTML editor I don't want (fonts, font sizes, etc) while I do want some things (headings, bold, italics). It's usually easy to import markdown to blogs or trivial to convert it to stripped-down HTML that can be imported. One of the teams I worked on built a simple gdoc script to do this
What he's saying is that everything should be idempotent, which may be possible for local only calls and filesystem snapshots, but anything doing a network call is outside the realm of this possibility. Such a system would need to spin up a local, accurate backend for any network call, execute the call, verify the results are not catastrophic and retry with a real call, but then we also introduce time caused uncertainty as the real system may drift enough from the expected state during the local validation. A fun thought experiment but science fiction IMHO.
That article doesn't really say either way? It doesn't mention utm nor give a list of what's removed nor link to such a list (at least not the two links I tried). But if you found the list somewhere I'll take your word for it that utm isn't on there specifically; I should have used more generic phrasing though this did seem like an immediately recognisable "ah, that's what's meant" example
Not surprised.
https://4techmix.com/2024/07/17/ten-tech-implications-of-a-t...
We use it for an application that aggregates data for consumption by several different teams that all consume different subsets of the data. When you have a pretty simple use-case it's really not that bad to get a decently functioning API off the ground, and because it's self-documenting we can spend our time on more mission critical work.
https://archive.ph/3A7b3
OK, I forgot we're talking about FiOS here. For sure that is slightly weirder than DOCSIS (which is all I've ever known personally). Since it's not really a standard like DOCSIS you probably "must have" some piece of Verizon-proprietary gear whether rented or otherwise and I'm sure Verizon remote-manages those in the same basic ways like you said. But I am pretty sure that still, security-conscious or advanced users can disable the Verizon device's WiFi and drop it into bridge mode and provide their own router and APs. To me this provides a way to opt out of this that is well within the capabilities of anyone sophisticated enough to understand the risks.
Could you sue for false advertising?