skysight-inc/HackerNews huggingface dataset:
This analysis is the right kind of analysis but most people use the wrong metrics.

On the value of your time side, the metric that I’ve seen people always use is the average value of a person’s time. However, the real relevant metric is the marginal value of someone’s time.

So,for example, if you are an engineer earning a fixed salary that works out to $100/hr, saving a few more hours will not earn you any more money. If, for example, it saves you some time, the real question is what’s the value of the time you saved. If it saves company time, then the answer is close to $0 with the only benefits being an earlier delivery (which may even be a negative in many workplaces for you personally). This may be a reason for the company to pay for the tool but not for you as an individual. Alternatively, if those 2 hours saved means you’re gonna earn an additional 2 hours of free personal time, then the question is what you will do with that personal time. If the answer is watch Netflix for 2 hours then the value of those 2 hours is likely much lower than $100/hr and in some cases may even be negative.

Then there’s an incomplete analysis on the other side as well. If I save 2 hours by paying a freelancer $20 to setup my servers, I may be losing some educational value that I would have gained it by doing it myself. And for some there may also be entertainment value attached. Personally, there are several projects I can outsource that I enjoy doing myself. Paying Google to manage my emails and calendars (at least the less important accounts) is actually taking away from the enjoyment I get in setting up, tinkering with, and maintaining my NextCloud instance.
That's fixed. I realize people outside the Mac/iOS sphere might lack context, so I added it in.
How about the Zig type system?
https://iopscience.iop.org/article/10.1088/1748-9326/aba7e7?...

Here the estimate for solar radiation management injecting aerosols in the stratosphere is estimated at $18B/year per degree Celsius. For the whole planet. Seems to me pretty cheap, even a private initiative can finance that.
> Mandatory password composition rules (excluding minimum length) and rotating passwords as well as all attempts at "replacing passwords" are inherintly dumb in my opinion.

I suspect that rotating passwords was a good idea at the time. There was some pretty poor security practices several decades ago, like sending passwords as clear text, which took decades to resolve. There are also people like to share passwords like candies. I'm not talking about sharing passwords to a streaming service you subscribe to, I'm talking about sharing access to critical resources with colleagues within an organization. I mean, it's still pretty bad which is why I disagree with them dismissing educating end users. Sure, some stuff can be resolved via technical means. They gave examples of that. Yet the social problems are rarely solvable via technical means (e.g. password sharing).
https://thedailywtf.com/articles/The-Killing-Job
Not human life.
> thought my original comment was obvious

Your comment is stronger without this. (From a fellow Shannon fan.)
It's obvious but many people here seem to be confusing the Linux kernel with kernel+systemd and complaining Linux has many processes like it's not customizable.
So, clickbait is fine, as long as we just editorialize the title? That's an unusual standard.
Well, my experience working in the industry is that almost no company uses good security practices or goes beyond some outdated checklists - a huge number wants to rotate passwords, disallow/require special characters, lock out users after X attempts, or disallow users to choose a password they used previously (never understood that one).

I think the number of orgs that follow best practices from NIST etc is pretty low.
He doesn't literally do nothing, does he? So I don't think it was exactly correct. And it was vague because it didn't explain what the article was actually about.
How much listening have you done to the results? How do you feel about the results? Just interested because I've listened to quite a few AI readings (sometimes without knowing ahead of time) and I'm still sort of processing my reactions.
Not sure, I wouldn't count on it. Currently deep in RISC-V and it seems there's hope.
*Translation: If we didn't just pile on dependencies upon dependencies, everything would be secure from the start.

Come on. The piss-poor security situation might have something to do with the fact that the vast majority of software is built upon dependencies the authors didn't even look at...

Making quality software seems to be a lost art now.
"my concerns"

Sorry, decades ago I was one of those people.
Wouldn’t fauna and flora care of this giant wall?
> great contribution

One of his great contributions, I would argue, information theory being another, and secure telecommunications.

Early work on switching networks (MS Thesis):

https://dspace.mit.edu/handle/1721.1/11173

Seminal work on information theory

https://en.wikipedia.org/wiki/A_Mathematical_Theory_of_Commu...

> they let him work on whatever he wanted

UNIX was written by some guys in the same organization, I wonder one of them thought "Oh sure Shannon gets to work on what he wants, why can't we work on the the future of a global inter-net? Why do we have to hide it as a text processing system?"

My management here apparently is a crowd sourced mob trying to silence me by clicktivism. Shannon and KNR had it easy, IMO.
AI's 'Oppenheimer moment': autonomous weapons enter the battlefield
Hmm..

Hodgin and Huxley did ground-breaking work on squid's giant axon and modelled neural activity. They had multiple parameters extracted from 'curve fitting' of recorded potential and injected currents which were much later mapped to sodium channels. Similarly, another process to potassium channels.

I woudnt worry too much having multiple parameters -- even four when 3 can't just explain the model.
Are you saying the new title is clickbait? How so?
Every other anime convention I go to has a fan panel featuring an interactive Jeopardy-style game. It's usually built using powerpoint or a half baked webapp that crashes the moment the audience connects. Would love to see more of them use buzzinga instead!
I think that maybe it would've always been like that. History sort of leans on the peasant as resource base, ruler as strategist trope.

While Dune itself is like that, so is all of history.
“ warning that the ice sheets on top of Greenland and Antarctica, which collectively store enough water to cause many more meters of global sea level rise, are already past tipping points”

The article specifically mentions the ice sheets on land.
it's a cool thing, but make it one time subscription, self-hosted, Docker, k8s, whatever else.. even a binary and I would pay for it, at least once. but I'm never going to deploy my blog on your stuff, that's for sure. also.. have you considered adding a few bricks of the indieweb.org / indiewebify etc..?
Show HN: I built an app that automates timeboxing
Hey HN,

Timeboxing assigns specific durations and start times to tasks, transforming your to-do list into a concrete action plan. When I discovered this productivity technique, I was unable to find any tools that made timeboxing easy. Having to do repetitive and inefficient procedures like using a dropdown menu every time to select a task duration in existing tools makes it discouraging to develop the habit of timeboxing.

I made Task Kitchen, which automatically cooks up a timeboxing schedule using your to-do list by syncing with all your calendars. The entire task-adding process uses natural language, so a task that lasts 40 minutes can be simply written as "Read atomic habits 40," making the process almost frictionless.

Would love feedback as well
One take away: Don’t count parameters. Count bits.
architecture astronauts let loose on unified field theories..
talking warm and fuzzy - big bold ideas.

let them, i say, until, the tide shifts to something else tomorrow, and a new generation of big-picture thought leaders take over dumping their insufferable text on the populace.
To my knowledge, the 6-pager was popularized by Bezos. It requires the document to be very well written, or else the 6-pager will be wasting the readers' time. It also requires strong reading comprehension, which frankly, most employees do not. It works well for Amazon execs because they are all sharp
Literally zero of the hundreds of devs I know that do software development on windows have make installed. Why would they? It's not usual in the space at all, that's msbuild
AT&T Paid a Hacker $370k to Delete Stolen Phone Records
Thanks! The further clarification and use of terminology is much needed here. Plus I needed that citation!
You're joking right? Most of us don't HAVE reputations to trash, reputation or a meal?
If it's released high enough above the rain cycle in the stratosphere, it stays there reflecting sunlight for 1-2 years, and produce little or no acid rain.

We know this because volcano eruptions does this, snd the effects have been studied: https://earthobservatory.nasa.gov/images/1510/global-effects...
Then again, you'd think leadership is something more than just responding in an uncritical straight line to hype and incentives.
I wish Web App could be built in one single language as I despise JS. But for that, browsers need to be created differently.
I also think we should work on geoengineering, but I also agree with those that fear that it will make us complacent and facilitate continued emissions.

So I think the time we start geoengineering needs to be after we’ve seen some really huge impact of climate change that really makes people panic and imprints in a whole generation that cutting emissions needs to be their highest priority. We probably need to see some islands that are completely swallowed by the ocean and a summer without ice on the North Pole.

I’m sure there’s some research we can do before that time. We need to be able to ramp up the measures really fast.
Another take away (not directly stated in the article but implied): Counting the information content of a model is more than just the parameters; the structure of the model itself conveys information.
I'm curious about this as well, I listened to a few of the samples and they seem to be of ok quality. But having experimented with this myself a bit, things can be fine until it chokes and you get very weird emphasis, emotion etc.

Side note, this almost feels like something 2012 Google would have done, a la their scanning of the Library of Congress. Something to show off their text-to-speech.
AWS Dual Stack VPCs with IPAM and Auto Routing in Terraform
I like that it is “reported” because a spokesperson from the company said so.
I wasn't trying to be snarky. Here is a 7 volume "A history of engineering and science in the Bell System"

https://searchworks.stanford.edu/view/1460436

The first volume 1875-1925 is over 1000 pages. I'm telling you, Bell was an important organization with respect to modern sociology.
I sure don’t know because I didn’t pay. I mean, probably the Chinese.
Acceleration in gifted youth and fruitless concerns on psychological well-being [pdf]
Better yet, count entropy.
Sleep (quantity, quality), work on sth you like, work out, eat good food, and sharing and receiving love. It is not only about sleep but sleep indeed is fundamental.
Damn this free market capitalism, and the maligned incentives it generates.
Nice job Ivan.

I expect your costs to drive down over time, which is nice.
Nearly all existing CLIs are much harder to use than GUIs, regardless of what technical possibilities exist.

They will delete your stuff instead of trash it. You can run commands on the wrong folder or even the wrong machine easily, since you're not directly clicking on objects. The context of where you are and what you're doing has to be all in your head.

Even with autocomplete there's a lot of typing involved. If you're not a touch typist, it's a real slog to type that much literally all day, and can even make your eyes and neck tired from glancing back and forth to the keyboard so many times.

If you customize any of this behavior, it doesn't look any different, you can't tell at a glance what's in bashrc.

It's great for scripting, if you do anything that needs to be scripted and also doesn't already exist as a prepackaged workflow in a gui, but there's a lot of stuff where it's rather difficult.

GUIs also could be perfectly well scriptable, we could have some futuristic UI where everything was an auto generated UI around drag and drop script blocks or something.
They literally explained in the article why they have a data lake instead of just a data warehouse: their data model means it's slow and expensive to ingest that data into the warehouse from Postgres. The data lake is serving the same functions that the data warehouse did, but now that the volume of data has exceeded what the warehouse can handle, the data lake fills that gap.

I wrote another comment about why you'd need this in the first place:

https://news.ycombinator.com/item?id=40961622

Frankly the argument "they shouldn't need to query the data in their system" is kind of silly. If you don't want your data processed for the features and services the company offers, don't use them.
One parameter is enough: https://aip.scitation.org/doi/10.1063/1.5031956
Had a few apps that become subscription and lifetime is given to the early subscribers including free upgrades
When I was thinking of a name I thought, well, what do you do when you’re playing? Buzz in. So I just thought “Buzzinga.” That’s the origin story.
"Selling" is a load-bearing word, too. They're probably not literally selling SQL dumps for hard cash. But there are many ways of indirectly selling data, that are almost equivalent to trading database dumps, but indirect enough that the company can say they're not selling data, and be technically correct.
Sounds like your ideal world is the 80s AIDS epidemic then
Chaikin's Algorithm for Drawing Curves
What’s Jack Welch management style in your eyes?

I know only a little about his history at GE. And I don’t have any reason to defend the guy, just curious what the view is these days.
> They have collected the test scores and grades of a lot of children through schools [...].

Citation needed. That would be in violation of the EU gdpr.
> Educating Users

This actually DOES work it just doesn't make you immune to trouble any more than a flu vaccine means nobody gets the flu. If you drill shit into people's heads and coach people who make mistakes you can decrease the number of people who do dumb company destroying behaviors by specifically enumerating the exact things they shouldn't do.

It just can't be your sole line of defense. For instance if Fred gives his creds out for a candy bar and 2FA keeps those creds from working and you educate and or fire Fred not only did your second line of defense succeed your first one is now stronger without Fred.
building software is just a wierd activity for humans i think lol
See @quickthrowman's comment for detailed breakdown on high-temperature and copper wire.
I feel like the killer feature is playing all the old games. Sitting on the couch and feeling like you know the answers is so different than having to actually buzz in and say them on the spot!
#1) Great, least secure privilege, oh wait, HOW LONG DOES IT TAKE TO OPEN A PORT? HOW MANY APPROVALS? HOW MANY FORMS?

Least secure privilege never talks about how security people in charge of granting back the permissions do their jobs at an absolute sloth pace.

#2) Ok, what happens when goodness becomes badness, via exploits or internal attacks? How do you know when a good guy becomes corrupted without some enumeration of the behavior of infections?

#3) Is he arguing to NOT patch?

#4) Hacking will continue to be cool as long as modern corporations and governments are oppressive, controlling, invasive, and exploitative. It's why Hollywood loves the Mafia.

#5) ok, correct, people are hard to train at things they really don't care about. But "educating users", if you squint is "organizational compliance". You know who LOVES compliance checklists? Security folks.

#6) Apparently, there are good solutions in corporate IT, and all new ones are bad.

I'll state it once again: my #1 recommendation to "security" people is PROVIDE SOLUTIONS. Parachuting in with compliance checklists is stupid. PROVIDE THE SOLUTION.

But security people don't want to provide solutions, because they are then REALLY screwed when inevitably the provided solution gets hacked. It's way better to have some endless checklist and shrug if the "other" engineers mess up the security aspects.

And by PROVIDE SOLUTIONS I don't mean "offer the one solution for problem x (keystore, password management), and say fuck you if someone has a legitimate issue with the system you picked". If you can't provide solutions to various needs of people in the org, you are failing.

Corporate Security people don't want to ENGINEER things, again they just want to make compliance powerpoints to C-suite execs and hang out in their offices.
Surely, there can’t be any disadvantages to putting one’s files on an external server they cannot control, operating under a one sided legal agreement with zero leverage.

Color me shocked.
We can see that already with existing PrEP formulations: in the US, the drugs retail for several thousand dollars for a single month's supply, and insurance companies had to be strong-armed into even covering them.
The users we talk with are tired of meeting overload and some also feel lonely working remotely. They appreciate that we are trying to cut down the time they have to spend in meetings, and that a Virtual HQ tool like Jamscape make them feel more like a part of a team, as in the good old days where everyone were in the office together. Some dislike having the camera on all the time, both because of privacy concerns and for practical reasons such as this conflicting with other apps (this is only a problem on Windows, macOS allows the camera to be shared by multiple applications), but after we added the option of using keyboard/mouse event monitoring* instead nobody has complained about feeling surveilled.

We are developers building a tool that addressed the problems with remote working we have experienced ourselves (I have personally worked remotely since 2011), and we are not trying to build a surveillance tool, as none of us like to feel surveilled. We have tried to make everything tit-for-tat, so that you only get out as much information as you yourself is willing to give. For instance, you can show live video of your face, and if you do that will be able to see live video of others, but if you turn off your own video you also lose the ability to see others.

*) this monitoring, as provided by the underlying OS, does not let us see individual keyboard events, only a monotonically increasing events counter, so there are hardly any privacy implications.
Ha, I’ve hit a that rotary exactly once about 20 years ago and I remember it was a bit of a sight.
Nothing prevents you from having the DND setting on all the time.
i think it's unusual to hit 3-5 ipc sustained in normal code, but it seems like we're in broad agreement about quantitatively what kind of performance an interpreter can achieve. i mentioned three interpretive systems that do reach about 15% of native single-threaded performance with very different approaches: the ocaml bytecode interpreter, threaded interpretive code like gforth, and numpy

it's just that i call 15% of native performance 'very slow' and you call it 'very fast', because you're comparing the moped to the walker you're used to, and i'm comparing it to a sports car because that's what you're paying for

instruction set jitting getting a speedup instead of a slowdown goes back to last millennium with hp's dynamo https://dl.acm.org/doi/pdf/10.1145/349299.349303 and was central to transmeta's business plan. qemu's jit is sort of simpleminded to make it easier to maintain
Perhaps they may use it, but they cannot be intolerant of you not using it and still be terrific.
How to Know When It's Time to Go
Portugal and Spain also aren't found of their politicians from 50 years ago (their regimes fell in 1974, and 1975, respectively). To add to your point.
IT Workers in Great Demand
I’d like to make an offline mode so you can connect physical buttons/buzzers and not have to worry about connectivity/latency, etc.
The Sane Pull Request
Do you realise that aids can be transmitted through blood transfusions, or to a baby from its mother?
So you have to sacrifice one of two people. Either the old who cannot take care of himself, or the caretaker who has to waste their life taking care of the old.
I love how much better listening to books with AI has become.

Have you done any attempts at multiple narrators telling a story?

Microsoft's Azure has a great tool for doing this but it's time consuming as you have to take all the text & match it to the narrator by hand. Open AI's last big demo kind of showed using voice chat to change narrator voices on the fly.

I think it would be awesome if you could submit a book, have a simple tool parse through & find all the speakers. Then let you sample how each one sounds with a brief description of what the person is like. Basically you get to have each voice do an audition & you pick your favorites. Then it goes through page by page generating audio based on the voices selected.

I'm not suggesting this feature for the app. I'm just throwing out this idea as one I've been thinking about. There have been a lot of books I've wanted to listen to but don't have time to sit down & read.
Oh look my old discipline. I feel compelled to weigh in since my PhD research largely explored this topic albeit in virtual reality.

Innovations and discoveries here (including my own) seem largely pointless. It's a classic example of "you spent so much wondering if you could, you never stopped to think if you should".

The authors final section Does Notation Even Matter hits on the larger points I would make - ephemerality of voltage (tuning), difference in modular systems, etc., however it fails to make a strong case for the need to notate this kind of music apart from form(?).

It is disappointing to see these kind of regressive pursuits still enjoying any kind of popularity in avant garde music circles - they are experimenting with new and novel instruments, why would paper, out of all modern mediums available to the artist, be the best suited for notating this kind of music?
>it is safe to assume 99% of strategies out there yield normally distributed returns.

I don’t know that I agree. If the market as a whole doesn’t have normally distributed risk, it implies even the simplest strategy of buying SPY and holding will also not have normally distributed risk.
> This isn't inherently bad - Twitter wasn't a great place for anyone's mental health *and is even less so now.*

This kind of thoughtless, evidence-free garbage undermines everything else in the post.
Alphabet demoted Waze from being the 'W' so they needed a new Israeli company to take the letter.
Based on the type of this rant - all security focused with little thought about usability of systems they're talking about - the author would probably be one of those people that mandate password rotation every week with minimum of 18 characters to "design systems safely by defatult". Oh, and prevent keyboards from working because they can infect computers via USB or something.

(Yes, I'm commenting on the wierd idea about not allowing processes to run without asking - we're now learning from mobile OSes that this isn't practically feasible to build a universally useful OS that drove most of computer growth in the last 30 years).
How does a 4 year old company get a total of $2B in VC funding?

Cloud and containers are by no means new. They aren’t first or even the 100th company to try this.

This is utter insanity.
UK English mostly treats unadorned “bracket” as referring to (), in fact, as opposed to US English which more often treats it as referring to [].
Making WarpStream Multi-Region
Over 2,400 patients may have been exposed to HIV, hepatitis at Oregon hospitals