skysight-inc/HackerNews huggingface dataset:
Update: https://www.spacex.com/launches/mission/?missionId=sl-9-3
> like the meeting discussion overview in teams

Amusingly, Microsoft had an autosummarize feature in Word as far back as, like, 1997. The fact that this appears to be the rare feature that actually got removed from Word could be an indication that this use case might not be as compelling to users as one might think.
Same here, though with a TI-99/4A. I never had a drive on that thing, so it was always on tape, complete with handwritten odometer counts on the insert card for reference.
> If you've used AI, you know it's a massive timesaver.

I have used it, and I have not found it to be a massive timesaver.
Please feel free to put your money where your mouth is and convert your portfolios into an AI frontier fund.
OpenAI reports near breakthrough with "reasoning" AI, reveals progress framework
What Saudi's decision to end the 'Petrodollar' deal mean?
https://arstechnica.com/information-technology/2024/07/opena...
Amazeballs. I love thinking about the counterfactual history.
Hey, thanks for asking! Kid is almost 4 now and doing great. She eats a pretty varied diet, fortunately-- if she were picky, I expect we'd have had to have made some changes early. We made the call after consulting with her pediatrician and a dietician, both of whom were on board. All check ups have gone well, and she's been ahead on all of her milestones. She's never had any clinical or lab evidence of any deficiencies. I'm a physician myself, and I take care to watch out for anything concerning. There's a reasonable body of literature out there now supporting the safety of a well-implemented plant-based diet in kids. We actively supplement B12 and DHA/EPA.

I call her diet plant-based rather than vegan, as she's not old enough to make the ethical calls herself, but it's been interesting watching as she notices the difference between our diet and others and begins to ask questions and comment on it. As she gets older and spends more time at friends' houses, we'll probably ask that parents/school/etc. not serve her meat, but we're not going to be militant about eggs or dairy. As she gets older and can make more of her own choices, she'll make her own calls on all fronts outside the house. As of yet, she's asked about other people's omni food, but she's always turned it down when offered. We've been careful to specify that these are our own personal choices and have encouraged her to start thinking about where she stands on them herself. We're curious to see how things go from here.
Question is too vague to possibly answer, and from a new account it sounds like a weird introductory hook to start advertising gambling website URLs later.
Which should result in even larger penalties, hopefully those penalties can also be levied against the individuals that were associated with hiding the data breaches. Mid level manager that gets an email from Snowflake saying that there's been unusual activity who then hides that information or doesn't look into it? Fine 'em (and AT&T). Mid level manager tells a random engineer that DOES look into it and finds that they've been hacked but hides it? Fine AT&T and this person even more!
I think you'd be hard pressed to find a workload where that behavior needs to be generalized to the degree you're talking.

If you're serving HTTP requests, for instance, simply serving each request on its own thread with its own event loop should be sufficient at scale. Multiple requests each with CPU-bound tasks will still saturate the CPUs.

Very little code teeters between CPU-bound and io-bound while also serving few enough requests that you have cores to spare to effectively parallelize all the CPU-bound work. If that's the case, why do you need the runtime to do this for you? A simple profile would show what's holding up the event loop.

But still, the runtime can't naively parallelize coroutines. Coroutines are expected not to be run in parallel and that code isn't expected to be thread safe. Instead of a gather on futures, your code would have been using a thread pool executor in the first place if you'd gone out of your way to ensure your CPU-bound code was thread safe: the benefits of async/await are mostly lost.

I also don't think an event loop can be shared between two running threads: if you were to parallelize coroutines, those coroutines' spawned coroutines could run in parallel. If you used an async library that isn't thread safe because it expects only one coroutine is executing at a time, you could run into serious bugs.
What current technologies do you believe are possible to secure?

I am sympathetic to the overall sentiment here, but between any web browser + server stack you are looking at hundreds of millions of lines of code written in unsafe languages.

Add on the human factor and there is just no hope of really securing this.
You could consider investing in a big screen and provide a more comprehensive service by renting it out for concerts and events. You could also reach out to companies that already do this.
> This kind of system has consistent led to regulatory capture by the licensed industry.

That is indeed the intention. To counteract the financial incentives of shareholders (which result in bridges collapsing or data breaches) with the financial and legal incentives of a special class of employees - licensed engineers.

The reasons this works better than letting people sue after the accident has already happened [1] is because that it gets the incentives right. In sue-after model the responsibility before an accident has happened to make the product safe is quite diffuse across the whole organization, and the decision makers (C-suite) do not in fact have the expertise to determine if the product is unsafe.

Giving licensed engineers veto powers over the entire C-suite and the shareholders is indeed how you concentrate responsibility at a single point. This type of licensing model has worked wonders in civil engineering, electronics engineering, law, medicine etc in improving safety standards for the public. Software engineering is not special.

[1] Think letting the victims of the bridge collapse suing as the only method of preventing bridge collapses. This is not how things operate.
It’s part of the inflation reduction act https://www.whitehouse.gov/cea/written-materials/2024/02/08/...
Location: Minneapolis, MN, USA
Remote: Yes (open to onsite too)
Willing to relocate: Yes
Technologies: Full-stack generalist who leans frontend. Also strong at technical writing. Frontend: HTML, SCSS & CSS, JS & TS, React, Vue. Backend: PHP, Node.js, Java, Go, Python. Databases: SQL, Postgres, Mongo, and Redis. Miscellany: comfortable with CI/CD, end to end testing, and devops tasks including containers & deploying cloud or bare metal.
Résumé/CV: https://paulisaweso.me/static/paul-esch-laurent-resume.pdf
Email: p+hn@uly.io
This part:

> ... the requirement of cross-origin isolation, which would have prevented us from rolling out to any browser beyond Chrome and Edge.

Is incorrect. The primary development browser for the two VFS APIs they're writing about is Firefox. (Citation: that development all happens on my computer.)
Have they? AI compared to cryptocurrency has already been deployed and battle tested on billions of users, just think of BERT used on Google queries, all the models used for moderation and recommendation on social media (probably the whole reason why TikTok is so popular), translation, captioning etc... It really seems quite different.
Doesn't drinking so much water dilute stomach acid? Do you feel changes of digestion?
I don’t know if the author intended to be “local first- adjacent” with this project, but I am seeing a lot of wasm-target projects lately, including replicated databases, and I wonder if this project isn’t a peek at what a truly distributed (browser-to-browser) workload might look like. This project persists the system config in GitHub, but if the components are wasm then there’s at a chance that they can use that provision themselves in every browser.

Imagine a workload where a client does their own compute, by provisioning worker components locally and retrieving only shared data from your systems - how much cheaper would your hosting costs be?!
ATT – Data Incident
Is it more expensive?

Hiring lots more lifeguards for an entire summer is seriously expensive.

I'm having a hard time imagining how a couple of drone operators plus the drones is more expensive than, say, 20 more lifeguards.

Not to mention the drones do things that lifeguards can't do, like search operations and shark detection.
FWIW, I think the concern though is/was that for most of us who aren't doing shared-data multiprocessing this is going to make Python even slower; maybe they figured out how to avoid that?
It’s a district court in Texas, not the Supreme Court. Don’t get excited.
They have a back door to the switches. They don’t need this.
Yes, like I said Snowflake apparently knew very few of its many customers were using MFA.

Reports say password-stealing breaches were happening as far back as Oct 2023. But Snowflake didn't notify people (customers, FBI, SEC) until May 2024.
Hopefully the bubble will pop when the GenAI bubble does. (Not that it probably should, since this both predates and is unrelated to it… but hype isn't rational to begin with.)
Much of that pre-2000 code remains. But so much more has been added in the last 1/4 century that "the same codebase" is somewhat a matter of perspective.
Agree the author should not lead with THAT copy! If you dig down though (I did) there’s quite a bit of technical documentation that I found interesting. “Different” for sure.
No, the people whose name is attached to budget decisions and higher level company direction that leads to this are the ones who are responsible.
The firmware OTOH?
The primary thing that tripped me up about async/await, specifically only in Python, is that the called function does not begin running until you await it. Before that moment, it's just an unstarted generator.

To make background jobs, I've used the class-based version to start a thread, then the magic method that's called on await simply joins the thread. Which is a lot of boilerplate to get a little closer to how async works in (at least) js and c#.
> Making all of the opcode implementations the same size (padding to the size of the largest opcode implementation with .balign 256), then removing the jump table entirely.

Another idea would be to sort the opcodes by size (32-byte, 64-byte, 128-byte, 256-byte - or perhaps +1 to avoid the set-associativity problem below) rather than simply indexing.

> This was also slower, also probably because of cache friendliness: the opcode implementations go from 16.6 KiB total to 64 KiB.

This is probably cache-unfriendly due to alignment too (associativity limits mean more conflict misses for highly-aligned memory), not just size. Most documentation only talks about this problem regarding the data cache though ...
It explains in the article, it drops an inflatable raft.

And then lifeguards have vehicles to get there as well. They're not limited to running on foot.
I double dare the government to eventually take this to the 5th circuit of appeals then

The state is about to get cooked
That is on. I'm talking about wide scrollbars. Not ones you have to click with precision.
The company I work for (high profile private sector U.S. defense contractor) has security people (FSOs and such) that are constantly concerned about being held legally responsible for actions (or inactions) related to theirs and other's work (specifically those with personal or facility security clearances). They regularly claim that they can be held responsible for the failures of others.

Their hesitation leads me to believe these legal repercussions happen more often than not. Would be interesting to see some data on the claims. My guess is the people being held responsible for these things aren't your average developer taking down prod.
A/UX 4.0 I believe was going to be based on OSF/1. The MkLinux port was also useful in the Mach 3.0 migration (as were the open source BSDs which refreshed the 4.4BSD code Rhapsody was based on, from NEXTSTEP 4.0 which only ever shipped as an alpha).
These are public beaches for recreation.

And the drones aren't being flown by beachgoers, but by the city for public safety -- looking for sharks and swimmers that are too far out.
First, the famous quote: "Why did I quit VJing? I was the first to arrive at the event and the last to leave. I brought and set up all my own gear, worked the entire time, and I got paid less than the coat check girl." - Hyperdelic Dave

There are many ways to get into it, but for the most part it's all about direct connections.

• Network with professional VJs, lasers, sound, and lighting services. You can work freelance to produce content and/or actually play at events. You can probably get paid to make content, but you'll only be able to help out at shows (for free) until you learn the ropes and prove you're reliable. This is the most common path.

• Contact artists directly. You'd probably just have to make free stuff until you develop a good enough reputation to get paid. This is showbiz, so there's a pretty high bar.

• Try to work at a company that does visuals. It's extremely competitive and there are not that many seats available. The first two options are your best way into this later on.

• Do it yourself. Buy a projector, contact your local clubs, raves, event promoters and offer to do visuals. Plan for very long nights. Consider doing guerilla visuals around your town.

• Keep releasing content. Pitch them to VJ loop services like vjloops.com or Resolume. Learn marketing, etc. There's very little money in this, but if you get good, you'll at least make a name for yourself, which can help with the other options.
I Was a Teenage Webmaster
so although most of the commentary and airtime is alarmist about how some regulations that maintain order will be struck

there are so many other regulations that really are rackets, are there any pet project cases anybody here is now excited to bring over the next generation of these courts?
> If GPT-5 is just another "it gets it right sometimes" dice-roll machine then it won't matter how many modalities it has. It will be DOA

Every single thing and every single person can be seen as a "dice-roll machine"; when I give even a senior engineer a task to take on this sprint, there's a significant chance they won't complete it that sprint (and it might just have been infeasible at all). At the end, all work boils down to the project management triangle (On Time, On Spec, On Budget - choose two), and the better the AIs get, the more tradeoffs we can choose from and the more and more we'll gradually be using them, regardless of whether we'd able to ever trust them to complete a task perfectly 100% of the time.
What's odd is until August of last year I worked for AT&T and had to do 2FA for accessing almost every internal site I used, and that extended to most SSO integrated external sites - including the relatively small number of Snowflake instances I worked with.

I do know that not every employee designation required universal 2FA but more or less all IT/ATO staff did.
What does "the account belonged to the actual person" mean if they're a literal nobody? If a literal nobody happens to have my same name and know someone on the inside to verify them, does that mean they're the real me as far as Twitter is concerned? and on the other hand, lots of popular creators don't use their real identity on their Twitter profile, do they not deserve to be 'verified' because they aren't the actual person?

The checkmark now is better because it's no longer an arbitrarily handed down status symbol, it indicates that the user has enough of a presence on the account to pay for it and wait the couple of days it takes for the checkmark to show up.
Japan wrestles with dangers of 'smartphone-walking'
A fatal accident involving a pedestrian who was looking at her smartphone has underscored how our screen addictions can have deadly consequences.
Now authorities are trying to figure out how to tackle the problem.
I think we might be conflating meaning, importance, 3rd party benefit, and satisfaction (at least).

I'm not advocating for anyone to stay in what they feel is a bullshit job while trying to fake some perception of meaning. If you're unsatisfied with your work for ~two straight months, absolutely make a change.

Is the problem that you're doing work that doesn't benefit anyone else? That you're constrained to only do it in an unproductive way? That you personally are not satisfied by the work? That you receive no gratitude for your work? That you're no longer learning or growing? Not making enough money? Something else?

What I'm really having trouble agreeing with is that the system is so broken that it's futile to try to improve your situation, and that this constraint is getting worse. It's so far from my experience that while it might be true in some cases I know it's not true globally.

I started out minimum wage picking up garbage, working front line retail, etc. barely making ends meet. I used a significant portion of my free time to learn new skills. I sacrificed hanging out with friends on the weekends through most of my 20s. I worked hard. Progress was slow at first, but I built momentum. Over the years I got more and better opportunities. Now my work is meaningful, challenging, impactful and pays well. (I'm in my 30s)

When I hear someone say that they are trapped in serdom, or that capitalism is the problem, and that it's futile to try and improve their circumstances, I can't help but think they have been tricked into sabotaging themselves.

Some people truely are stuck due to disability, but people who have the ability to be productive and have just given up are wrong.
I mean, that's kind of what KeyWhiz does, no?
Yup. I agree.
So you are basing your outlook on extrapolating from a completely different engineering domain and a completely different socio-historical context?
Its not just a bad password, it was a password that was exposed to a info stealer in some way. It might of been reused or overshared into some system that got exposed. From what I understand someone got a huge info stealer dump and started putting two and two together and noticed all these scraped passwords and tried them on snowflake
I didn’t say that everyone is an idiot. I implied that gate keeping is useful as a first pass against people who are unlikely to have the drive to keep going when they experience difficulty.

When I was a kid, docs were literally a book. If you asked for help and didn’t cite what you had already tried / read, you’d be told to RTFM.

Python has several problems. Its relative import system is deranged, packaging is a mess, and yes, on its face needing to run a parallel copy of the interpreter to pip install something is absurd. I still love it. It’s baked into every *nix distro, a REPL is a command away, and its syntax is intuitive.

I maintain that the relative ease of JS – and more powerfully, Node – has created a monstrous ecosystem of poorly written software, with its adherents jumping to the latest shiny every few months because this time, it’s different. And I _like_ JS (as a frontend language).
Doing something out of a sense of duty should not require a vow of poverty along with it unless we plan on committing to lifetime benefits and support for the people who take that path (like providing food and housing, because the low end of the GS scales are literally below poverty rates as it is).
The strangest and worst job market I’ve ever seen. Negotiated going to contract only instead of full layoff but literally having trouble even getting interviews.

Know three good devs with over 15 years experience that are all pushing 6-9 months with no offers.

No one seems to know why it is so hard but universally across the board don’t know anyone who isn’t struggling even getting callbacks.
Fake news: https://www.bloomberg.com/opinion/articles/2024-06-27/the-pe...

Also discussed 29 days ago: https://news.ycombinator.com/item?id=40673567
Haha thank you. Clearly input validation is needed
But that’s more expensive than the drones so here we are, no?
How about not being able to collect rainwater in your backyard?
C++ has apt-get etc. because the libraries do not change all the time. Also, of course there are vcpkg and conan.

Whenever you try to build something via pip, the build will invariably fail. The times that NumPy built from source from PyPI are long over. In fact, at least 50% of attempted package builds fail.

The alternative of binary wheels is flaky.
Hmm, shouldn’t it be lSLAPD or LDSA? After all, it is an LDAP server, not lighter weight protocol!
Because AT&T reported it to the FBI and DOJ, they in turn requested AT&T to not disclose it and there are exceptions in the SEC rules for exactly that scenario of actively working with law enforcement.

Regarding 2FA, it probably means they just enabled it in their access rules for any access to snowflake, but it's highly unlikely AT&T will walk away from Snowflake anytime soon because it had become their preferred BI/Data Analytics platform and they were actively migrating several hundred TBs of data out of Hadoop to Snowflake.
Because the program is run by the NYPD, so already high cost. Who purchase the drones from some contractor at most likely elevated cost. This doesn’t account for all the training costs on specialized equipment.

Hiring life guards for a few months is a drop in the bucket that has proven more results than drones dropping a raft operated by an organization that doesn’t even teach CPR.
Search for the button - yeah, I started out like that, AHK Imagesearch, it works really well once you get the hang of it, capture a little thumbnail, bmp is a good format because it doesn't shift any hues, then it can read that .bmp and it will search for the portion of the screen that matches it, but it works better if you limit the search area with an x1,y1 to x2,y2 rectangle. I had one that I called drax.ahk (this was around the time of the GotG movie so I named it after Drax) and it would click reply then insert quotes from the movie like "Nothing goes over my head! My reflexes are too fast, I would catch it."

Good times. But window handles (HWND) are easier and more reliable.
Use a work journal
this is already an established principle in other engineering fields. If a civil engineer screws up and a building collapses, both that engineer and the engineering firm are liable.

Why should the software industry be any different?
Terminal Webmail
GMail in the web browser is extremely slow on older machines, requires JavaScript to be enabled, and can't run in text mode.

If you live in the Linux Terminal and you need access to GMail, you'll love Terminal Webmail.

Features:

- Print email in terminal including inline images and gifs

- Print attachments in terminal

- Download attachments

- Mark email as read

- Reply to email using the default EDITOR on your system

- Write email

- Set to, cc, and bcc for any reply or written email
Somehow tangent: can anyone tell me why WhY i can't just copy the text in any Windows' error windows? It looks like it's all text somehow is a texture which is un-selectable?
So i have to retype manually (and translate back to English) the error messages to look them up
Its a interesting issue, its kinda of like software piracy, so what if someone steals the product, we will still make money on the product with the normal sale of the data in the first place. Its just making the news because it was a breach. It's not counted as a breach if the exact same party was to buy the data outright from ATT in the first place.
Well, Python had threads already. This is just a slightly different form of them behind the scenes.
Any where that would take a very literal act of congress to make changes, then yeah, that'd be a nope for me.
I am guessing, it is same original source that Finnucane had about Hunter Biden's laptop being a 'russian plant'.