skysight-inc/HackerNews huggingface dataset:
If you don't `npm config set ignore-scripts true` then you are basically executing random unknown code every time you do an `npm install`. Modules can change hands and become malicious, which is much more plausible when there are thousands of sub-dependencies in a pretty standard modern web app.
As a (non-web) developer, I just don't trust PWAs: I assume they'll break their offline functionality in the most unfortunate moment while being not as tightly integrated into desktop as proper apps (even those using Electron). So I just keep using website as that has a more clear mental model.
IAM is eventually consistent. And they do a lot of derivations of hashing off an original signature and distributing individual, bespoke versions to services in different regions to limit the blast radius of a compromised credential.

If you go to an AWS event in the future, the name of the chalk talk was "The Life of an IAM Policy"
There isn't any new syntax here.
My main concern is the impossibility of finding trust in library dependencies. A typical React app has somewhere over 2,000 packages from almost as many different sources. It is impossible to check the reputability of each contributor.

I'm aware of things like "npm audit", but with the amount of false positives that spews out, it seems one just has to trust the entire ecosystem.

My intuition keeps telling me that this is a disaster waiting to happen, and I'm trying to understand how this can be so pervasive.
They are open to infesting more data and spitting out more and more AI models.
Looks great, and only £2.75! I think I somehow missed this one at the time.
Aha, that makes sense. BTW, i would like to reach out to you to discuss, if you like, your corruption cases and pain points so that we can improve upon them. i don't see a way to get in direct touch with you, but if you are up for such a discussion, please email a contact address to stephan at sqlite org.
Ehm, I'm from the EU, being a former globetrotter, living in the EU and... Situation here and in other places of the world it not much different. Yes most adults do know where Tokyo is and where is Central Asia or Perù, but... In substantial literacy terms most have issues reading non-super-dumb articles understanding them, elaborate a not so super-dumb concept in their mind, ...

Most adults do not know the bare minimum about the society they live in, oh sure, they tend to know the last gossip, but nothing about politics, bureaucracy, global changes and so on. They have a poor vocabulary, they can't write decent documents and so on.
GitHub and GitLab are more polished and support different workflows, but the Gerrit workflow is really quite specific and is mostly unsupported by the regular GitHub/Lab tooling.

I moved from a company using GitHub (and a decade of GitHub based open source experience) to a company using a Gerrit-like workflow, and I can see why people would be resistant to a move. On the surface the options look quite similar, but "at scale" I can see Gerrit working quite well and missing certain equivalents that would make a transition hard.

That's not to say GitHub/Lab aren't better, or that a move might not be worth it for other reasons, but a transition that pushes people out of their comfort zone and reduces their productivity for unproven, potential, future gains, is a hard one to justify.
Wait a couple weeks until I'm done with the league before you destroy the economy.
official Samsung Amazon.nl store 300 euro https://www.amazon.nl/-/en/Samsung-writing-internal-editing-...
> No one in this equation is some sort of undefeatable god. Humans have the benefit of quantity and diversity.

So they're defeatable, right?

When it comes to diversity, I'd agree this is a real human advantage: "Once you've met one Borg, you've met them all", memetic monoculture is as bad as any genetic monoculture: https://benwheatley.github.io/blog/2019/12/30-18.46.50.html

Quantity, not so much; even today there are single-digit millions of each of hardware to run the larger models and robots if you need to embody them, and the growth trend for both is likely to continue for a while yet before all but the shortest hyper-exponential timelines for AGI.

> Yes, and still I believe there would be a lot of posturing and arguing if you get multiple top people in the room.

And despite that, the Hoover dam and the ISS were actually built, and the pandemic lockdowns happened and the vaccine was distributed. The mere existence of arguments and posturing doesn't mean they prohibit cooperation, even if they're a resistance against it.
The weirdest part is a CS prof. ranting about -- the dark mode, display tech, etc. have exceptionally little to do with CS (which is mostly Math). Personally I'd have called the prof. on the nonsense -- google can be evil but that has little to do with their choice of colors.
No, that's not the sequence on ChromeOS. See this example

https://medium.com/@julianneagu/installing-pwas-on-chrome-ea...
And yet the consequence of letting people like this run your security org is that it takes a JIRA ticket and multiple days, weeks, never to be able to install 'unapproved' software on you laptop.

Then if you've got the software you need to do your job you're stuck in endless cycles of "pause and think" trying to create the mythical "secure by design" software which does not exist. And then you get hacked anyway because someone got an email (with no attachments) telling them to call the CISO right away, who then helpfully walks them through a security "upgrade" on their machine.

Caveats: Yes there is a balance and log anomaly detection followed by actual human inspection is a good idea!
You are more likely striken by lightning than coming in contact with terrorism whatsoever
I am not sure where you have seen this definition for intelligence. I don't think self awareness is required at all. Abstraction can or can not be, but it is not required. I think the most common definition is "ability to solve problems using skill or knowledge".

In Google trends ML and AI seem to have been correlating quite well with each other overall indicating that both have always been used.

Do you think for example that ants are intelligent? If so, why? Because ants commonly are considered intelligent.
This mostly seems the result of Cloudflare idiosyncrasies though. I don't recognise many of these commands (eg what is wrangler?), but we're running it as a regular Node app on a regular server, and it doesn't feel second-class at all.
From the 2015 submission:

> Perhaps another 10 years from now, rogue AI will be the primary opponent, making the pro hackers of today look like the script kiddies.

Step on it OpenAI, you've only got 1 year left ;)
That. Also not educating users is a bad idea but it also becomes quite clear that the article was written in 2005 where the IT/security landscape was a much different one.
I think that was for another reason. IMO sole purpose was calling t the another modem not connecting to the internet via dial up.
I never use this but a lot ofbold games Has those option.
You're welcome.

Yeah sure, thanks for asking. I actually do quite a lot of traditional art. Everything is on my instagram: https://www.instagram.com/vlad__siv/

Third post is done using Piet programming language. If you run the code i.e. picture, using Piet interpreter, you'll get a link to my blog.
Wild world you must live in.
My second point is that, in a setup of any complexity, a black start is nontrivial. You have a network, with routes, DNS config, maybe VLANs, maybe a whole SDN. If that’s down because the machines running it are trying to pull their own configuration over the network, it won’t come back up. You can get pretty far into the weeds with situations like this.

Facebook supposedly got locked out of their own datacenter due to a network outage preventing the access control system from accessing whatever service it needed to allow anyone to open the door.
https://wiki.osdev.org/A20_Line
The WhatsApp Groups website is an ideal destination for finding WhatsApp groups in various fields of interest to individuals. Whether you are interested in sports, dating, jobs, or any other field, the site offers a wide variety of “WhatsApp groups” that cover all of these fields and more.
As the seemingly designated computer person in the family, I always have them on a USB drive along with some stuff I wrote as well to help with repairing/reinstalling Windows.
All this added complexity seems to be just sugar syntax too. The examples here clearly prove that we could write clean code that achieved the same functionality without this feature.

We could also just use an Iterator pattern for such use cases too.

Go used to be such a simple language. I wonder what's driving them to keep adding complexity to the language itself. It makes me respect Harelang's goal of "freeze the language once 1.0 is out" a lot more.
This is exactly why I'm using ULID with DynamoDB.
As someone who worked heavily with Cloudflare offerings (being it Pages or Workers), I am surprised how much they have invested in the tech to make it work (V8 isolation) and then simply shipped a half-assed API/framework with little to no documentation. They are sitting on the revolution of serverless and wasting potential use cases because they keep chasing the next production to pump.
One could approach it the other way. Once more projects adopt all kinds of wrapper functions and types, the deficiency of Go will become a more widespread knowledge as compiler will get progressively less able to cope with added abstractions.

Hopefully it will put the common fallacy of "Go or Rust" to rest as the weight class and capabilities are on opposite ends of spectrum, with much closer comparison being "Rust or C# or Swift or Kotlin" if one looks for a Rust alternative that makes a tradeoff of not forcing many small decision to reduce decision fatigue by conceding to a reasonable extent certain areas Rust excels at.

In any case, for its touted simplicity Go sure doesn't look like a simple and straightforward to follow language anymore.

The 3-step approach to iteration is also well solved[0] in C#, and works even in rather complex cases like `File.ReadLines(...)` where the line iterator internally handles IO, file handle acquisition and disposal. Just `foreach (var msg in File.ReadLines("messages.jsonl"))` and you won't be able to make a footgun out of it.

This also applies to the usage chained with filter/map/etc.

var messages = File
.ReadLines("messages.jsonl")
.Select(line => JsonSerializer.Deserialize<Message>(line))
.ToArray();

[0]: https://sharplab.io/#v2:EYLgtghglgdgPgAQEwEYCwAoBAGABAlAOgEk... note .GetEnumerator() and .Dispose() calls
> Iceberg and Delta Lake, on the other hand, weren’t optimized for our update-heavy workload when we considered them in 2022

"when we considered them in 2022" is significant here because both Iceberg and Delta Lake have made rapid progress since then. I talk to a lot of companies making this decision and the consensus is swinging towards Iceberg. If they're already heavy Databricks users, then Delta is the obvious choice.

For anyone that missed it, Databricks acquired Tabular[0] (which was founded by the creators of Iceberg). The public facing story is that both projects will continue independently and I really hope that's true.

Shameless plug: this is the same infrastructure we're using at Definite[1] and we're betting a lot of companies want a setup like this, but can't afford to build it themselves. It's radically cheaper then the standard Snowflake + Fivetran + Looker stack and works day one. A lot of companies just want dashboards and it's pretty ridiculous the hoops you need to jump thru to get them running.

We use iceberg for storage, duckdb as a query engine, a few open source projects for ETL and built a frontend to manage it all and create dashboards.

0 - https://www.definite.app/blog/databricks-tabular-acquisition

1 - https://www.youtube.com/watch?v=7FAJLc3k2Fo
Hi working on agentic code execution, can you explain why you think a webcontainer is a good and useful solution to do LLM code exec over other low level container solutions
FWIW, I always found GitLab's CI to be mostly a Travis clone with a few improvements. CircleCI started in a similar place but seemed to improve faster for a few years. Eventually I moved everything to GitHub Actions which always felt mature beyond its age and I've never looked back.

Roughly my issues with GitLab CI was that it didn't provide sufficient primitives for a) breaking up the build into a granular build graph, b) correctly passing artifacts between build graph stages (caching wasn't a good solution), and c) guaranteeing at-most-one task in a critical section (such as a deployment). It has been a few years since I last checked on these, but it also sounds like the product hasn't move much recently.
Facts About Lagrange Points
I think what the person who replied to you is primarily reacting to is the term “cash grab”. And that is what I will focus on.

You yourself mentioned that Bill did not hype up anything about it, nor did you really counter with any arguments to prove that it was financially motivated.

I myself have not read it, but just because it was not what you expected or what the media portrayed it to be does not make it a “cash grab”.
wow, ty, this is brilliant!
MXP -> BNG
Richard Simmons, Fitness Guru, Dies at 76
https://www.wsj.com/arts-culture/richard-simmons-fitness-gur...
Psion Series 3:

<https://en.wikipedia.org/wiki/Psion_Series_3>
This is amazing!

I found the text a bit too reference-y, as in giving too much theoretical background, while what I'm actually looking for is workflow breakdown. The demo video at the top of the page[1] demonstrates it beautifully and I recommend you go give it a watch.
> start shoving ads down your throat, just like they've done with Instagram

I've never seen an ad on Instagram when using the browser version from my desktop. Is this universal, and if so, why?
I’ve replied to your other comment and I am replying again only after reading the other comments here, but I just realized here that I don’t think anyone is invalidating your experience of not liking it, but specifically reacting to the term cash grab.
They are cool, but I do think there is value to class-light pages.
He never left NZ, a patient offered him a similar job to the one he wanted in north America.
I just got power back late last night (6th day of outage). This comes directly on the heels of a prior power outage that also lasted nearly a week from a severe storm back in May. CNP seems to have majorly dropped the ball on this one from a logistics and disaster preparedness standpoint (especially considering they had a trial run only 2 months ago). Unlike the storm in May, a) Beryl was forecasted to impact Houston at least 24 hrs beforehand, b) its hurricane season so CNP should be ready to go. They routinely seem to lag behind on electrical grid improvements and maintenance. From my personal observations, a lot of outages could have been prevented by better tree management. (Anecdotally, I had a tree catch fire behind my house last year due to limbs contacting lines; I called CNP to report and they did nothing; said to watch it and let it burn out. They haven’t trimmed trees on the line behind my house in the 4 years i’ve lived here). With Beryl, it has become painfully apparent that CNP was simply not logistically prepared to handle the impact of hurricanes, and did not prepare in advance, a major failure for a utility provider operating on the gulf coast. These are not black swan events.

Root cause seems to point towards prioritizing shareholder value over providing services, and lack of regulation enabled by Texas laissez-faire handling of utility providers.

A short timeline:
In 2014 CNP reported ‘excess revenue’ but were allowed to keep it https://stateimpact.npr.org/texas/2014/10/20/texas-puc-leave....

In 2020 a major activist investor put a large stake in CNP https://www.bizjournals.com/houston/news/2015/12/14/billiona.... The owner of that private equity group also happens to be a major donor to the political party of the current Texas governor, who appoints the commissioners who regulate public utilities (https://theintercept.com/2020/10/15/paul-singer-hedge-fund-r...).

Texas electric utilities are regulated in theory, but in practice this regulation seems lax or at least not proactive. This was readily apparent in the 2021 freeze (Uri):
https://www.statesman.com/story/business/2021/10/21/texas-re...

And later in 2021 CNP also made direct political donations to Texas politicians: https://www.texastribune.org/2021/08/04/texas-energy-industr....

It doesn’t seem like Texas has done much to improve regulation since the 2021 failure. https://www.tpr.org/environment/2022-11-17/texas-lawmakers-a...

https://www.newyorker.com/news/letter-from-the-southwest/why...

It’s hard to see how these apparent conflicts of interest (and lack of regulation or consequences) don’t create an environment where a state supported monopoly can abuse their position by putting short term profits first.
Honestly, some Sony XZ and Xiaomi Redmi devices were kinda nice in the past because even when they had a sealed battery they were still replaceable without super expensive heat plates.

Ethically I'd probably recommend a Fairphone 2/3/3+ in used condition, though they are somewhat clumsy. Ironically it's somewhat more private because the fingerprinting sensor never works in all of these models :D

In theory the Pixel 3+ devices would be amazing, but their resale value is just way too high for my cheap pockets. I set myself a limit of max 200 bucks for a used device, for both used laptops and smartphones and I never buy new hardware.

I'd avoid MediaTek chipset devices, because they have a known RootKit that can be easily exploited. Their CPUs have an undocumented root mode, and there's some apps and SDKs available that got leaked a while back.

My previous devices are now kind of ARM homeservers, because they either run ArchLinuxARM or PostmarketOS [1] on them, which is kinda nice and gives me a little satisfaction when I see that I can still use them for a nice tinkering purpose even without a battery inside.

One phone even runs my local mesh router with external USB Wi-Fi adapters, off-the-grid and solar charged. The display is used for the Web UI to manage things, which is also kinda nice. It's basically a fullscreen WebKit in kiosk mode.

[1] https://wiki.postmarketos.org/wiki/Devices
You are awesome! I work with a former engineering manager of Stripe and one initiative they had me on was migrating our UUID's to the prefixed strategy you mentioned in Stripe.

Most of the effort, honestly, went into the compatibility layer when bridging which version of the ID was accepted on a given API, and ensuring that this major change was implemented between services universally (i.e., is service B going to fail if I send a prefixed ID?).

All of this to say, I am hesitant to generally recommend migrating from UUID -> prefixed UUID, but I will be considering starting future projects of my own with UPID
Isn’t the only real difference that the yield function is being passed into the iterator instead of being a reserved word? I don’t think it’s clunky, although it took a few minutes for me to get it.
> Winston Churchill said that democracy is the worst form of Government except for all those other forms that have been tried from time to time.

Sure but he had a good reason to conflate all forms of democracy as if there were no difference between them or ways to give more power to the people in, say, UK's form of democracy. Replacing first-past-the-post voting for example wouldn't require abandoning the entire system of government.

> The same for capitalism.

Sure but again there are important differences between laissez faire capitalism and a social market economy and yet this is used to justify reforming the latter into closer and closer approximations of the former. This also ignores that while the economy at large is clearly some form of "capitalism", communities otherwise operate on more non-capitalist patterns of behavior (e.g. buying rounds at the bar among friends, borrowing tools to your neighbors, BYOBs/potlucks).

Even interactions involving currency (remember markets and currency alone don't define capitalism) don't have to be transactional or profit optimized or be defined in terms of ownership and servitude. Of course things like the gig economy, consumerism and "hustle culture" are built around "capitalism"-ifying those non-capitalist interactions by reframing them as transactional or business opportunities - the most blatant example probably being the widely ridiculed genre of blog post a la "what breaking up with my partner taught me about being a hiring manager".
Defining a Go iterator is similar to defining a Python decorator that takes an argument. Both involve defining a function that returns another function, with the inner function having another function as its parameter.

This isn’t a particularly difficult concept, but manipulating functions in this way does feel unusual in such heavily-procedural languages. This has two downsides:

* Programmers who only use those languages are unfamiliar with the concept, and

* The languages’ syntaxes aren’t designed to make it particularly clear.
Well, that would have been the perfect smartphone for me, I had the original Jelly but it was too small.

Now, I have the iPhone 13 mini and I love it.
Three layers of context for useful AI
"We're Not a Target" isn't a minor dumb. It's the standpoint of every non-technical person I've ever met. "All I do with my computer is to read cooking recipes and upload cat photos. Who'd want to break in? I'm boring."

The best way I found to change their mind is to make a car analogy. Who'd want to steal your car? Any criminal with an use for it. Why? Because any car is valuable in itself. It can be sold for money. It can be used as a getaway vehicle. It can be used to crash into a jewelry shop. It can be used for a joy ride. It can be used to transport drugs. It can be used to kill somebody.

A criminal stealing a car isn't hoping that there are Pentagon secrets in the glove box. They have an use for the car itself. In the same way, somebody breaking into your computer has uses for the computer itself. They won't say no to finding something valuable, but it's by no means a requirement.
This kinda highlights the exact issue I'm talking about. "Just open this, add that, change this, build that...sure it may work, but it's far too much effort for a journal."
IANAL, but I know you cannot hide criminal activity with an NDA.

Making people waive rights to Federal whistleblower compensation, doesn’t quite go there but comes pretty close.