skysight-inc/HackerNews huggingface dataset:
Can relate as well. I thought it was bullshit before also. I was convinced. That assumption (from pop culture takes by people who poison the discourse because they can’t separate a “feeling” from an informed opinion) kept me from treatment way way too long.

It’s amazing to me as someone who is always careful to consider the source of my positions and how my words affect people that there are people out there who just say/write things. They feel it then they write it.
The "only" thing Microsoft should be blame is for signing a driver updates itself by taking "configurations ( code )" from userspace and turning a blind eye to all these loopholes because they also know it's not practical for them to sign all the driver code that goes into the kernel.

Maybe most of these "drivers" shouldn't be in Ring0 to begin with? This is a general problem and the norm, Windows is just another OS that allows this this way.
He miscalculated super hard regarding LFI. I genuinely think he did not expect Glucksmann and Faure to basically sweep the antisemitism/antisionism under the rug that hard for the elections to get access to Melenchon's militants.

RN, through no skill of their own, is in ideal position right now. The coffers are going to be full, they have 3 years to clean up their candidates and get the messaging correct, and they have absolutely nothing to do with the coming EU budget restrictions. And R! is finally dead after having served their purpose of shifting the discourse.
Not just more prude but shifting it. In the past it was normal to see naked people at the beach or changing rooms. Now that's been stamped out, but porn is massive. The only naked people the majority see are porn actors.

It's not more prude, it's just more sexualised.
Is AWS Lambda a Halo Product?
That's LGPL.
I use https://www.bridgetownrb.com/ and it works pretty well. Very easy to use and deploy. Blog posts are listing line by line, like "index". I didn't customize much from the generated code(only logo and header). You can take a look: ruzig.com
IMHO, unwrap() , expect() and company, has infected the Rust language so deeply that one wonders when (and not "if") will a library send a panic and crash the whole program.

How could be erased those panic! methods that are used in most of Rust's libraries is something that may be is beyond the possible? beside is promoted from all the Rust's tutorials and reference code.

So much correctness in the Rust language just for to promote to all the community to crash the program from libraries without handling the error is something I can not understand.

I hope this philosophy do not reach the Linux kernel.
I mean, hypothetically you might think computer security companies would be full of passionate computer security enthusiasts.

And as security tools break a lot of security norms - like sandboxing, least privilege, and running in userspace - you might think such enthusiasts would make sure they were coded with the utmost care. That this team of secure coding all-stars would be code reviewing, managing scope, fuzz testing, static analysing, formally validating and suchlike, as befits code running with the highest privilege levels.

Surely huge multinational corporations wouldn't grant unlimited privileges to kernel modules written by clowns.... would they?

If you believe the crowdstrike marketing, I can see how you might think shadowy saboteurs are the only plausible explanation.
>> if your business doesn't have need for redundant data stores or major backend services

If that’s the case, your web app is much less complex too, which reduces the need for a product that reduces complexity?
For the same reason that the president needs to have spent at least 14 years in the USA prior to be elected: so that the people can know the candidate.
I had this setup with a Netgear NAS (old and slow). I switched to a better NAS and Jellyfin and could not be happier. Well, I could be happier because Jellyfin has some quirks, but I'm pretty happy.

The main difference is that it works everywhere, from any device on the LAN (browser, iPad, Android phone, you name it), and even remotely (using Tailscale, to avoid exposing Jellyfin to the world). It's like you have your own little Netflix that you can access from absolutely anywhere.
I wonder how does booking.com pay for the tickets? Do they use a new card for every transaction or do they buy thousands of tickets with the same card? Do they use a corporate card or personal card (which might be against ToS)? If they use a corporate card, isn't it easy for Ryanair to see it and block the transaction?

Also, cannot airline see that requests come from datacenter IPs and not from residential?

It looks like it is super easy to block this on airline side.
I'd say exactly your argument is why it's hard to make changes.

The US has this pretty weird civil religion where the constitution is the holy text and the people that wrote the constitution are prophets.

Most other countries don't have that. A lot of democracies don't even have constitutions (UK, for example). The US constitution is an interesting historical document, but it's just a collection of laws. There are a lot of things democracies have figured out since it was written. Amendments are basically impossible at this point because the canon is closed and American politics have evolved to make it structurally impossible.

It should be possible to argue that laws should be fluid without appealing to the prophets of the civil religion. You could, you know, just talk about why it's a good idea. Shouldn't that be more powerful than trying to guess what someone who lived multiple centuries ago would have thought about it?
yes, but the good thing is that you don't have switch shells with this.
I'm running nushell on windows, which is nice, but I haven't got it as concise with $env.config.table.mode = "none", it also doesn't feature the tree display
Thank you -- much appreciated. Sine waves are such a simple/nice effect for movement.
There's "something that requires highly specific conditions managed to slip past QA" and then there's "our update brought down literally everyone using the software". This isn't a matter of bad luck.
Sandwhich shop is just a layer on top of the Grocers, and they charge 100-200% more. So, why do people pay for it when they can use the Grocers directly?
I'm curious how would look like a real example with different Email classes. It seems silly. You don't often need a VerifiedEmail. But VerifiedUser is more useful from VerifiedEmail. You could get an implicitly verified email without introducing a new type.
Switched from Plex to Jellyfin a few years ago and have been happy with it. Plex had issues with movies with subtitle files. It tried to constantly reencode stuff. Couldn't work it out. Jellyfin works fine.

Also, I'm not getting nagged for features that I don't want anymore. I happily paid for my account, Plex, but just let me watch my local movies in peace. Leave me alone with television streaming, free movies or whatever else was the latest thing that was being pushed.
MPL or CDPL
When you accept donations you have to be transparent about how it is going to be used. They cannot change their mind like that.
What makes you think Linux can't have a virus or malware? It has attack vectors like any piece of software, surely?
> iDrac and how they wantonly reprogram the SAS hba.

Wait, you've had the SAS HBA be reprogrammed by the iDrac? Does it happen just randomly? I've mainly got experience with the PERC controllers, not much with the standard HBAs
Right, but being able to "trust" because it's "open source" makes me think trust comes from the ability of read the source code, not modify it.
Exactly, and I need those features, I'd use LaTeX (and if collaboration is needed, either git or overleaf depending on who I'm working with). For a ~1 page document of text, where there is minimal markup required, markdown through pandoc produces a nicer looking document than using the output from web-based editors (e.g. google docs, confluence), which is typically where I'm starting with .doc.
It’s possible to disagree with someone without dehumanizing them. All you’ve done here is make yourself look bad.
If you actually have a normal functioning brain (imo) the detriments out weigh the benefits: you will do more but the quality will be lessened and you’ll have fewer insights.

(Also this is apart from the ethics of abusing a medicine that is tenuously situated in the public mind but is literally life saving for a small population of people (untreated ADHD increases risk of early death and reduces lifespan more than smoking or diabetes)).
The fanciness of your home page detracts from your message (on my phone). I nearly gave up.
Company nationality is a somewhat diffuse concept. IKEA, Chrysler, Fiat and Citroen have holding companies in the Netherlands. Should they be considered Dutch companies? Share owners (also of American listed and incorporated companies) are from all over the world.
Crowdstrike pushed out a world-wide update to their client software, which auto-updated itself.

This update was buggy and it caused the host machine to go into a BSOD boot loop.

The fact that the host machine happened to be running Windows has very little to nothing to do with it.

It's like blaming a pothole for your car going exploding. Yes there was a pothole, yes it shouldn't have been there, yes it could have been avoided, but the fact that your car self immolated because of mere pothole points to possibly other underlying issues with your car.
Cloudcutting a High End Fan
They made this comment as a correction. It is intentional. When somebody shows you who they are, believe them.
I just migrated our app from Vercel to AWS Amplify.

We’re updating everything to use SSO so we can do BeyondCorp-style auth on SaaS platforms. Vercel wanted to charge >$10k / year to get on their enterprise plan for SAML access, vs bill prior to that was ~$2.5k / year. The migration took ~30 mins and we expect our bill to drop to $500 / year. the toughest part was making sure we didn’t miss any build variables / secrets.

Is this as cheap as running base metal? No. But 30 mins to save $10k / year was worth it. And maybe the bigger point: what value are they really adding if it’s this easy to migrate off?
Don't be so quick to assume racism. You don't see people blaming Microsoft's cock-ups on Indians who are not DEI hires but would be a valid target for racists. I think blaming DEI hires for problems is mostly people who don't like the idea of hiring based on race/gender/etc. and who also realize that if you do that hard enough, you're bound to get inferior people because you're limiting your hiring pool. Of course companies that pay low salaries are also limiting their hiring pool and also bound to get inferior people. There are plenty of complaints about that too - if a famously low-paying big consultancy company (IBM?) has a cock-up, it's often blamed on their low pay.
> But for central file service and printing it was rock solid

That's not really correct.

I mean, yes, it was rock solid, true.

But it was not a file server, or even a file and print server. It wasn't a "server" as such at all (although it could be one if you wanted.)

A "server" is a concept from client/server computing:

https://www.sciencedirect.com/topics/computer-science/client...

In other words you have a network, with lots of small computers (clients) talking to one or more big computers (servers).

That is so pervasive since the 1990s that you seem to assume it's how everything worked. It is not. Xenix was strong in the earlier era of host based computing.

The core concept is that you only have 1 computer, the host. It's kept in a special server room somewhere and carefully managed. On users' desks they have just terminals, which are not computers. They are just screens and keyboards, with no "brains". Keystrokes go over the wire to the host, and the host sends back text that the terminal displays.

No network, no computers in front of users.

In the '70s and early '80s this was the dominant model because computers were so expensive. Before microprocessors host machines cost tens of thousands to hundreds of thousands of $/£ and companies could only afford 1 of them.

Most were proprietary: proprietary processors running proprietary OSes with proprietary apps in proprietary languages.

Some companies adapted this in the microprocessor era. For instance Alpha Micro sold 680x0 hosts running a clone of a DEC PDP OS called AMOS: Alpha Micro OS. It sold its own terminals etc. It was cheaper and it used VHS videocassettes as removable media, instead of disks.

Unix replaced a lot of this: proprietary versions of the same basic OS, on those proprietary processors, but with open standards languages, open standard terminals, etc.

Xenix was the dominant Unix for x86 hosts. It let you turn an 80386 (or at a push a 286) PC into a host for a fleet of dumb terminals.

Xenix as stock came with no networking, no C compiler, no X11, no graphics, no GUI, nothing. Each box was standalone and completely isolated.

But a 386 with 4MB of RAM could control 10 or 20 terminals and provide computing to a whole small business.

No Ethernet, no TCP/IP, no client/server stuff.

Client server is what killed Xenix's market. When PCs became so cheap that you could replace a sub-$1000 terminal with a sub-$1000 PC, which was way more flexible and capable, then Xenix boxes with dumb terminals were ripped out and replaced with a PC on every desk.
Start off by searching for "yx" or "xy".

Then do your actual search.

If you're going for image search, do the yx/xy text search first, then you go over to images.

That'll (for some reason) never give you a captcha.
I suppose you could change the structure rather fast with a few well-placed batch operations in a shell, though I also understand why you wouldn't want it.

Regarding the randomly merged episodes, perhaps the culprit isn't the folder structure or file name patterns, but metadata on the files themselves? I never had this particular situation, but I wasted my fair share of life dealing with assumptions music players make about ID3 tags, and how they're routinely broken by files sourced from random places on the Internet.
> The snarky answer is that it's easier to be a full stack developer if your stack starts and ends with JavaScript.

That doesn't need to be snarky. I know JavaScript and a variety of other languages, but if I'm picking a stack to work on the whole of, it's going to be a whole lot less context switching to use one language throughout, so JavaScript (in fact, TypeScript) it generally is.
Show HN: GoLrn – Your Gateway to Information Security Basics
Hey Hacker News community,

I am excited to announce the launch of GoLrn, a platform dedicated to providing comprehensive and accessible blogs on information security topics. Whether you are a college student, a recent graduate, or someone starting their career in the information security domain, GoLearn is designed to help you learn and grow.

What We Offer:
In-Depth Blogs: Dive into detailed articles covering a wide range of information security topics, from basics to advanced concepts.

Upcoming Product Management Content: Soon, we'll be adding a series of blogs focused on product management to help you broaden your skillset.

Career Guidance: Get tips and strategies for acing interviews and securing placements in the information security field.

My goal is to create a supportive and informative community where learners can find the resources they need to succeed. We welcome your feedback and suggestions as we continue to grow and improve.
This comes off as a political hot-take trying to score quick points, which is not interesting to me as an engineer.

What WOULD be interesting is a discussion around what the actual indicators they used and whether we could expect a nation-state actor to leave behind concrete evidence. That discussion would be deeply nuanced and constructive to future endeavors.
It isn't. They were being self-deprecating.
HTTP 421 might be appropriate
Not sure why Paramount is on that list, but ofc. Disney and Elsevier are in the business of applying copyright law to extract $$$ from the creative works of ordinary people.

(Disney: takes fairy tales from the public domain. Elsevier: You pay them to get published)
No, bad grammar on my part. I hate both the old idrac and it's shitty Java, and outdated pki certs, and, I hate dell's random reprogramming of the hba logic to suit their own model. They take the perc which is simply an lsi card, and do their own firmware which removes things like simple hba.
This is the problem with the internet. The post I’m replying to is a complete lie. Non-stimulant medication is basically useless.
> Because age is no indication of fitness for any kind of activity or role

Do we live on different planets. Most young people are able, most people over 80 will have mobility and/or cognition issues.
>These types of announcements immensely damages their image and affect their customers, if they could avoid it easily as you imagine, why would they not?

laziness, greed, apathy
Share Specs, Not Execution
I've spent time on both sides of the API divide – consuming as a mobile dev and producing as a backend dev. This experience crystallized a key principle: share specifications, not execution details. I've written about how this plays out in the real world, especially when juggling tools like Swagger and Postman.

The post covers
- The inherent tension between Swagger's spec-focused approach and Postman's execution flexibility
- Real-world consequences of over-sharing execution details in API documentation
- How our team adapted our API development process to better adhere to this principle
- Thoughts on what an ideal API documentation tool might look like, combining the strengths of both approaches

I'm curious to hear from the HN community: How do you balance sharing API specs without getting bogged down in execution details? Have you found effective ways to use Swagger and Postman (or other tools) together?
Reasonable question, BTW agents were part of this but I removed them temporarily. There is somewhat agentic behavior in magic-cli which you can take a look at.

My main motivation was a gap in the Rust ecosystem for this, as well as a desire to have reasonable abstractions for model alignment, agents and structured response generation with error correction.

In addition, Ollama is a first-class citizen so local LLMs are supported (it calls the locally hosted APIs which Ollama exposes).

And as a last point, it’s just a fun project to hack on.
If you have suggestions for similar abstractions I missed, please let me know!
That's why you use a local model instead, that way you're out of money after buying the GPUs already and don't have to bother with the implementation taps temple
Sure, and we already have keyboards, so there's no need to use floppy drives or rubber chickens to make music either.
This is my first time hearing about Jellyfin, and wow what a breath of fresh air compared to the typical hyper growth model employed by a lot of OSS projects.

Any Jellyfin users here that can vouch for it? I currently have a SMB share on a Raspberry Pi 4 and I connect to that on my Amazon Fire Stick using the VLC SMB features. It works ok but the VLC UI leaves much to be desired. Would Jellyfin be better for this? Is there a client that works on the Fire TV stick? (This one I think? https://github.com/jellyfin/jellyfin-androidtv)
How is it sensationalizing? I would not have thought it possible to reverse autism at all, now I do. Only read the abstract but it’s still pretty sensational.
Web Crap Has Taken Control
Love jellyfin, I'm even considering port forwarding so my friends can make use of it!
> And also results in a cleaner shell history

In Bash you can also keep the history cleaner by adding ls (or other commands) to the HISTIGNORE env var: https://superuser.com/questions/232885/can-you-share-wisdom-...
But you don't want "implicitly verified", when there exist any code to which the difference between "verified" and "not verified" matters in some way.

In your own example, if you happen to use e-mail verification as proxy for user verification, then the very code that creates VerifiedUser instances would want to have VerifiedEmail as input!
> IMO, there's nothing worse than paying people too little money.

In a for-profit project, I'd agree. Jellyfin isn't though, and they're pretty up-front about that, so "paying too little" doesn't really apply to the people who end up contributing.
Int's are a very poor analogy.

Somewhat less bad would be IEEE 754 floating point numbers - where your floating-point "numbers" can include both +0 and -0, sub-normal numbers, infinities, NaNs, and other miseries.
You are right, and your points on SSR where all good. If SSR is a must have, I do not know how to solve it. I see "riot.js" manages to do it, but I did not go into details.
A question for those who know optics: If the angle of incidence is past the critical angle of red do all of the visible spectrum get reflected without any chromatic effects ?

Are there cameras that have a sensors laid out on a curve matching the expected surface on which the image is in focus ?

I wonder why there are no cameras (apart from astronomical telescopes) that use reflection only for imaging. Such a camera would be too bulky to be practical ?
I wish they could get added as an official app to the Samsung TV app store, etc.
Abstracting the email example, if you have a finite state machine that verifies some fact, you can model each state as a type. Their example goes Email -> ValidEmail -> VerifiedEmail. You could equally go String -> Email -> VerifiedEmail, where String is what the user submits as their email address. If you are verifying emails in the context of verifying users you could go Map<String, String> -> User -> VerifiedUser, where Map<String, String> is what you receive from an HTML form submission.

Getting hung up on the details of which type you use is missing the overall point.
I need to take the time to finally switch from Emby (what Jellyfin was forked from).
Are they? How do you store spherical cows? Do you need to roll them out to pasture and then back into the barn, or do they roll on their own?
It's worth noting that this feature is available, but the recent Windows issue [reportedly] ignored it.
You can use ProtonVPN for port forwarding if your ISP doesn't support it (or you want to protect your home IP).
> Some can try

Rust does this with standard types even. "Parse, don't validate" is the answer to the question: why does Rust have so many string types? Of course you can hack around this using `unsafe` but, as you say, in that case you have to put visible effort into deliberately subverting the type system.
Is there something that makes this specific to Chrome or is this a web compatible library?
This is a kind of query you'd never use in real life though. What is even your expectation when you search "Linux"? If there isn't a specific one, it's not a good test.
> The central account is what makes claiming the server and sharing the library with others and the overall remote login experience very easy, this is what enables plex.tv/link functionality.

The fact that this is all it enables just reinforces the idea that it should be optional. All of the core functionality is possible to implement without requiring an account.
Oh, great, so my brain really is soup after decades of drinking caffeine and not sleeping enough because of untreated AuDHD.
I don't think that it is the job of Jellyfish but it would be nice to have a foundation dedicated to do that for all projects.

Especially in Europe where you can get a nice tax deduction but only if you do the donation to a well (and complexly) registered non profit