skysight-inc/HackerNews huggingface dataset:
IMO these sorts of analogies to houses and porches don’t really work because there are just different cultural norms between websites and porches.

If there were a convention of leaving stuff on your porch to donate it, and a general assumption that when people left stuff on their porch it was up for grabs, somebody started storing their groceries there, and they were taken… they would just be stupid and not sympathetic.

If somebody just moved to a neighborhood where this was tradition and didn’t know about it, they would rightly be a little bit annoyed when the groceries they stored on their porch were taken, but really they only have themselves to blame for not understanding the local conventions.

If somebody opens up a storage company and then just put all the customers’ stuff on one of these porches, they are just dangerously, unethically incompetent. Even if there isn’t a convention of taking stuff from porches, actually. Because there are also armed gangs (nation-states) that go check out people’s porches for secrets.
I don't really care what people do with their lungs, so whether they want to smoke or not, that's their problem. That being said, I definitely have an issue with smokers who think it's ok to throw cigarette butts on the ground. It's crazy how we still allow non-biodegradable cigarette filters to exist.
How maintainable the code for humans?
I'm curious about the security implications and corporate policies about uploading your entire codebase to an LLM where others can access it (indirectly or directly).

Other than that, I'm very interested to see how easily opensource libraries could be converted from ecosystem A to B.
It would if an attack was already underway or was planned to execute in very short order. It’s also possible that Crowdstrike wasn’t the issue, but rather the solution. If you find out the bomb is set to go off at noon on July 19 and you can’t easily patch it, you just shut the whole thing down for a day.

It’s an action plot from a movie. Improbable, but not impossible. I don’t think our government is nearly that competent, but who knows.
But adding a detour is easy in a car (even during rush hour - congestion is mainly on big axes). Restaurant doesn't need to be right where the traffic is.
> homebuilding outpaces growth of "family units"!

The article literally says the exact opposite. If you're going to disregard the article's data and analysis, I think you need to show your sources so we can look at them together. It seems likely that we're getting tripped up on category definitions, though. The US population grew by over 21 million people from 2011 to 2021 while the average number of people in a US household dropped from 2.58 to 2.51, so it can't be only 5 million families in a relevant/meaningful sense. Atomicizing families that don't actually live under the same roof is disingenuous. An adult moving out of their parents' home becomes their own separate family unit for the purposes of real estate.

Though if you want to talk about the steady decline of the average US household size, we can certainly do that. It seems applicable. More people total and fewer people per household does turn into needing more households.
I am not.

The size of the organization may only serve to increase the number of potentially bad pieces of code from just plain old tech debt, poorly engineered, or just a hack job implementation. The ability to control quality of code is highly dependent on how staunch the organizational culture is around keeping the repos clean of dead, kludgey, or just bad code, and strict enforcement of agreed upon architecture.
Ask HN: Server-side HTML Templates based on DOM?
For side projects I've used BeautifulSoup in Python to break down HTML documents into the DOM, manipulate them at the DOM level, then serve them to a browser.

For instance the "main template" for a site could be an HTML page that has a <article> inside it which is a placeholder for the content. The content is itself an HTML page, and the <body> of the content is inserted into the <article>, also the metadata gets merged so the <title> passes through.

You might write

<div>First Name: <span id="#insertFirstName"></span></div>

and the system would insert the firstName into that span, for instance.

I've done the same thing in Java with tools like jsoup and HTMLUnit.

This system can rewrite links and do other interesting transformations on the guest HTML.

One thing I'll concede is that this is slow compared to the alternatives. In a crude test a system like this and not optimized might be able to transform 10-50 pages per second on a core whereas it is easy to get 3000+ with string based templates.

I haven't seen other people do this, are there any examples you of know of DOM-based templating? Any thoughts?
But then you should also run it on a realtime OS.
Ask HN: Are there any decent CrowdStrike alternatives?
If your IT department says you need CS, what’s a reasonable reply, other than “OK”?
Microsoft added 'safe mode with networking' a long time ago.
Adams himself changed the plot in every version of HHGG, from radio play to book to computer game to movie. I think it shows how little he was attached to the details of his fictional universe. Personally, I like the plot of the movie a lot, especially the invention of the point-of-view gun
How bad is the HN hug of death btw? My laptop can serve 200k QPS per core. I can't imagine HN is that much more intensive? Are 1vCPU VMs just that much worse?
This what you expect from VCs. I always prefer to report these incidents to GDPR authorities if user data is leaked. Then they pay the fines and some get a criminal record. Money is something VCs “print” and manipulate.
From the techcrunch article:

> “On June 30th, a16z addressed a misconfiguration in a web app that is used for the specific use case of updating publicly available information on our website such as company logos and social media profiles. The issue was resolved quickly and no sensitive data was compromised,”

What the fuck is this? They are blatantly lying here. There was a lot of sensitive data compromised. Anyone who inspected the site could have had access to everyones emails.
Any data that is interpreted is code. So the short answer is that they deployed code without testing it.
It's not clear to me from the article how Mantle was porting the build scripts, infrastructure config files, etc across languages. Typically these files don't cleanly translate from one framework to another. Was this considered as part of 20% of project for human engineering effort?
CrowdStroke?
Culdesac might work ok if you allow bike and pedestrian thoroughfare at the end point. Otherwise they are impossible to walk or bike due to long distances to get anywhere
Come on, religion spawns from the culture it's created in, not the opposite.
Yeah, but does it come with IPMI that doesn't work?
> Value it provides is for the business. If a tool can do it, there is no need to hire or keep an engineering team.

What exactly is the "value?". It worked before so what is the purpose of the change.

> First. It's a tool that does, so reliable more than a human.

Sorry but, are you new to LLM's? Have you seen the recent news? "Reliable" it is not.

If your pitch is that an LLM will just write all of your code in the first place, there really isn't any need to migrate the code to another language when by your logic the LLM could just manage its existing language. The logic here quickly breaks down and doesn't make any sense.
Presumably employees are more expensive than property here. Both paying them to take care off and loss incurred because they left to work somewhere else where the conditions are better.
Weigh your cut vegetables, then add 2-4% salt by weight. Thoroughly mix it in a glass bowl by hands and let it weep out water. Let it sit in a jar with weights to keep the vegetables below the brine water level. After a few days (depending on heat and the desired softness and fermentation) drain the excess brine and add chopped garlic, green onions, ginger and chili powder (I usually leave a bit of brine to wet the chili powder). And seafood if you're interested. Pack this into jars and let it sit in a cool place for awhile (I use the fridge if I have space, otherwise a root cellar, or in the ground works).

But yeah, 3% (non-iodized) salt by weight. You can top off the brine with filtered water if your vegetables don't weep enough, but this hasn't been a problem for me.
I'm extremely for integration of smart features into home, business and industrial applications. However, and this is a great, great big HOWEVER, the smart features must always be an added feature, and absent the customer desiring to use them, or the ability to use them via technical issues/obsolescence, the equipment in question should degrade to a usable state.

Perfect example: I own a bunch of iHome smart outlets that I use with Apple HomeKit. Got a whole box of the things off ebay years ago, paid about $6 each. Along with (obviously) being a smart home accessory that runs via HomeKit, they have a little button on the side you can push to toggle the power on and off. So, in the odd event that my network is being uncooperative and I need to turn a light off, I can do that very easily. Not as easily as I could with my phone, but still quite easily.

I don't understand why industry is so hostile to this. It just makes sense to me: build in all the smart features you like, but if they're not working, just have the bloody thing operate like a normal... whatever. Microwave, lamp, etc.
rename it to openSUS and replace the chameleon with an amogus, problem solved
NCOALink data has the names and addresses, but apparently only if someone already has the name and old address, and pays the fee.

"We do not disclose your personal information to anyone, except in accordance with the Privacy Act.”

Exception: "if already in possession of your name and old mailing address"

Edit: spelling and such
I download the most textbooks I can, for evaluating which appeal to me, and then use that one. If I don't like a chapter on it, I look for another one.
My credentials for textbooks for self learning:

1. Must explain stuffs in a clear way.

2. Must give enough examples.

3. Must have many exercises AND a solution book for at least some of them.

Context: prepraing to study all undergraduate Math and Physics courses to get a holding of General Relativity. Since I graduated as a Math Master but forgot most of it, I have to start from Calculus and Linear Algebra. I count about 8-10 courses for the journey.
> might have some impact on whether the act was illegal or not

Only the burglary, trespassing, or B&E parts. Theft is still theft even if you leave your doors unlocked and/or open.
Pack it up, boys! Our work here is done...
You may understand it that way, but you also have a much deeper knowledge of this than the targeted audience of the RCA.

Make no mistake, this RCA was not published for technical folks. The only reason it’s even published is to make their customers feel more secure. You and I are not their customers; high level management and executives are.
I guess this is a competitor to services such as overleaf [1] and codimd [2]. Although this is yet another syntax, it seems to be supported by pandoc [3]. Lately, I have been using Quarto [4] more and more as I program in R, which also produces very nice outputs, especially HTML. But none of these solve the academic usage problems of (1) producing nice diffs for reviewers, and (2) can easily be shared with, and commented by, non-technical collaborators. Thus, I fear Word will be difficult to replace for many years, at least in my field, for scientific writing

[1] https://github.com/overleaf/overleaf

[2] https://github.com/hackmdio/codimd

[3] https://pandoc.org/typst-property-output.html

[4] https://quarto.org/
Kosher salt and table salt of similar chemical composition (i.e. not the 60% potassium "low sodium" stuff) should be interchangeable if measured by weight?
has anyone tried this?

does this really work as described?

esp. browser/mail clients when viewed on portrait-mode on a smartphone etc.?
> litigated into non-existence

There's a long list of incredibly damaging fuckups by software companies, but I can't think of a single example of an existence-ending judgement from litigation.

The biggest reason why billion-dollar software companies continue to release shitty and dangerous products is because they face zero legal liability for their negligence.
I imagine something keeps monitors how many times the lift has gone up and down for maintenance reasons. Maybe a nice model monitors fluid pressure in the hydraulics to watch for leaks. Perhaps a model watches strain, or balance, to prevent a catastrophic failure. Maybe those are just sensors but if they can’t report their values they shutdown for safety’s sake. There are all kinds of reasonable scenarios that don’t rely on bad people trying to screw or cheat someone.
You forgot about getting into a prison for not paying the fees.
A few.

https://www.gartner.com/reviews/market/endpoint-detection-an...
This is anecdotal but in my experience the restrooms still suck and are poorly maintained (This was my experience in Hamburg and Amsterdam in 2023). What is even worse is that there seems to be a little recourse to correct it in the short term. There isn't a "Free market" of toilet companies because the same firm seems to capture all the toilets in a given area. So you have the worst of all worlds, you have to pay to use a poorly maintained restroom and there is little you can do about it...at least as a traveler not familiar with the local customs. Maybe locals can enact some improvement.
Show HN: Minimal Screen Recorder
Made a simple web recorder. Design is inspired by Braun. No upload to any server, all done locally.

For best performance use Safari as it allows to turn buffer into video right away (<1s).
No. The current inventory of methane sources even with these upwards estimates for industry are unable to account for what is observed in the atmosphere. This is a big topic of current research.
This. People also tuned in the radio, and when a good song came on they would be quick to hit the record button.
> We will update our findings in the root cause analysis as the investigation progresses.

Give them a minute.
The OP is Chief quant at mathacademy.com
Oh man this brings back bad memories- I had forgotten about the Bindery. I was a CNE (3.X) back in the day.
Have you ever stood next to someone while they smoke?
Yes, we should invent robots to vacuum those offenders.
Did a company ever get sentenced for a bug? Maybe in aviation or medical tech?
Perhaps some processes should be put into place to make exposing the entire company into a multi-step failure?
The maangchi recipe is really good and easy. I wish I could find tiny shrimp/saeujeot though.
I was a systems engineer and also taught NetWare admin classes. I also worked with Novell to update their training material.

I remember the first release of NetWare 386 very well; it was a breeze to install, but the early version had a bug and if you unplugged the 10Base2 coax from the server it would crash. Apparently, the routine to display a warning message on the console had an issue. Novell issued a patch NLM.

I had one site that experienced random crashes, but it was not the aforementioned bug. Long story short: After about two months of sleuthing, working with Novell and Compaq, camping on site and driving to/from the office to site (about 2hr each way), I found that it was a mains spike caused by a dishwasher right up against the server room wall in the next room.

The fix was to move the Compaq server, which was actually a large desktop model, on its table to the opposite end of the server room.
> Or to simply retain employees.

Protect employees in order to retain them, yeah. You're welcome to impute for-profit motive here, but either way I fully agree that I wouldn't want to be responsible for maintaining a public restroom in a city center.
I'm interested to hear what you would propose.
I read the whole thing and learned a lot. It’s full of relevant information, even if it’s a bit wordy at the start.
Jefferson Disk
Presumably it's from certificate transparency logs. That's one reason I do not use TLS for my personal hosting.
Show HN: Full Moon Chat
Made a Telegram-based chatbot that gives access to esoteric characters including Tarot master, Buddha, Imam, and others.

It can be fun if you’re into reflection, and inner work.
For far too long we have put up with unmetered popes. Lemme give you 95 reasons why all popes should be metered...
"...All this to get one man" - Every action movie ever.
True. It's the same with projects like 'The Ocean Cleanup'. In Mainland China there's an army of underpaid elderly street sweepers earning basically nothing (2k RMB/month), who constantly clean up after folks mindlessly dropping their trash on the streets. Or take the craze around drugs like semaglutide (Ozempic) in the West. Technologists constantly come up with solutions that directly or indirectly support immoral behavior and unsustainable lifestyles.

I'm not saying let's not have robots cleaning up. But first of all, before we look to such solutions, litterers should be fined to high heaven. Make it sting, so that these people don't even think about doing it anymore. Make it day fines, based on the person's income. They will learn to keep beaches clean that way.
I hope you are joking but with my constantly degrading opinion of LLMs it would not at all surprise me if you are in fact not joking.
Ask HN: Could a less ambitious Amiga have saved Commodore from bankruptcy?
In particular, an Amiga with capabilities similar to a 1984 Mac but with color would have been cheaper and easier to program for.

Maybe such a machine could have even been aimed at the education market.
To people who say this is not a Microsoft issue... it absolutely is a Microsoft issue. Microsoft allowed third parties to muck with the Windows kernel in a way that makes the computer unbootable. How is that not a Microsoft issue?

Apple has a vetting process before they will allow an app to be added to their app store. Why doesn't Microsoft have a vetting process before allowing a third party to mess with the Windows kernel? Does Crowdstrike have SOC2 or some other certification to make sure they are following secure practices, with third-party verification that they are following their documented practices? If not, why not? Why doesn't Microsoft require that?

It is clear that the status quo can't continue. Think about the 911 calls that didn't get answered and the surgeries that had to be postponed. How many people lost their lives because of this? How does the industry make sure this doesn't happen again? Just rely on Crowdstrike to get their act together? Is it enough to trust them to do so?
It’s only market manipulation if you have the intention of making the stock go down, right? If answering the OP is illegal, then no employee of any listed company can ever say something bad about it, which sounds too restrictive?
They say they run this process multiple times a day. Must be tens of thousands of deployments. I'd guess complacency set in at some point. Just completely inured to the risks they were taking.
I had never heard of CrowdStrike before. The name seems to imply that it's a military cybersecurity weapon, such as for a massive DDOS on command.
Friend does incident response and Windows forensics, and pointed something (in retrospect) rather obvious out yesterday: the instructions for cleaning up simply told people to "delete .SYS files according to this wildcard". No additional context.

That caught his eye, because to him it sounded like madness. Apparently deleting random driver files is a fairly well known way to screw a Windows system up even more than it already was.

This statement from CS must have gone through legal and PR review, so we have to assume every word and statement has been carefully vetted from a cover-your-backside perspective. It is light on information content, but there must be reason for them to so forcefully telegraph that the files being deployed (and removed) are not themselves drivers.
I don't think you will get the introductory "As a (so-called) senior software engineer at Crowdstrike" brags here at this time since they are internally screaming and swallowing their pride over that massive outage.

Why would any of them come forward right now?
Huh? Even if he was seethings, why is caring about your family a bad thing? Is your opinion suddenly not relevant anymore when you've fled the country? Weird mindset
I was excited when I upgraded my NetWare 3.11 servers to NetWare 4, installed the TCP/IP update, and went to enable it.

Then, I saw the UX. You had to configure IP addresses as dotted HEX quads. It was pretty obvious that someone at Novell fundamentally didn’t get it.
The company doesn't need a "hack" to not pay money. If they don't have a published bug bounty program then they owe nothing.

They also have contact email addresses listed at the bottom of https://a16z.com/connect, which the researcher conveniently missed.

They were looking for clout, not responsible disclosure.
Do we not remember "Ma" Bell?This should perhaps be a wakeup call in regards to Microsoft and other large tech having concentrated fingers in too many pies. This appears to be an anti-trust issue at its core.

Was it really a botched update? Or was it a test run for holding the world hostage prior to a coup?
Until RDMS added support for JSON, and NoSQL people discovered why data consistency and query languages matter.
You don't want to push secrets in their raw form on GitHub, secret scanning would disable keys from supported providers.
Wonder how many are polishing their resumes right now.

I guess it would depend how honest they are in their communication. Presumably if they outright lied, it would give enough incentive for someone to create an throwaway account via a VPN from a browser and machine instance they never used to say something like “hell, no, that’s not what happened”
The key section being:

> The model village includes a scale model of the model village (which would be at 1:81 scale). This model, in turn, contains a scale model of the model of the model village; being at 1:729 scale this measures around 1 foot (30 cm) in width. This model also contains a scale model (in paint only) of the model of the model of the model village (which would be at 1:6561 scale).
The fact that this VC firm didn't provide bug bounty for such a gaping hole does not instill trust.
While I appreciate the effect this kind of downtime can have, I just don't understand these stories.

Presumably it was planned in advance, so the patients know the time of their appointment and the doctor knows what was planned, and everything necessary to physically perform the treatment is already prepared at the hospital. What's stopping them from doing it without filling it into a digital system? Why is it impossible to make a paper record and fill it into the computer system later?

If somebody was literally dying, would they stand around the computer like confused characters in a The Sims game who can't find the door, instead of saving the life? And if not, why is this less urgent case different?
It only takes a couple of minutes if you first update your on-site set of LIVE systems sitting there to detect a problem.

If problem encountered, don't send it out to everyone else.
It’s more fun getting attention by doing it publicly and being the victim (security researchers love hitting the 'nobody respects us' button) than putting basic effort in.

A single email bouncing is frustrating of course, but he then posted that an easily found vulnerability existed on Twitter, while a16z:

- has a contact page page https://a16z.com/connect/ with 4x emails to their offices at the bottom (despite claims the main site had no other emails)

- links to their Twitter where DMs are open https://x.com/a16z same with instagram, FB, and linkedin, all open

it would be easy to just email all of them at once and waiting a couple days to see if it gets escalated.