skysight-inc/HackerNews huggingface dataset:
Using marketing tricks to get a job in marketing seems like a full equivalent of a hacking of security services provider to get hired as a security expert. I suppose most HN visitors would assume the former to be ok as long as nobody harmed? Why so many commentators feel upset about the story then?

P.S. Though I do not like an attempt to pose as poor nobodies while they obviously could afford spending money on iPads to give away
Since function parameters are immutable in Zig, is this a difference that you need to care about?
My pleasure. It keeps growing constantly, there are so many platforms out there.
No it's not. I wish.

I have tried 4 times now, and I'm pretty sure it's because the only recipes I find are from Korean-american migrants, meaning that they'll use kosher salt, which we in Europe don't have. The salt/water ratio will be off, which will prevent fermentation (and lead to oversalted kimchi).

If anyone here is a Korean and knows of a somewhat traditional kimchi recipe using metric units and table salt, I'd be stoked if you would post it in a comment.
I think a lot of this boils down to the fact that you can make large multiples of the amount you'd make working on this kind of thing by working on something relatively non-productive like finance, consulting, adtech, etc. A large percentage of my engineering class went into one of those. One of the smartest guys I knew there, who studied nuclear engineering, now does healthcare private equity.

The incentives are all messed up. We should do some combination of making these jobs more attractive and making those relatively extractive jobs less attractive.
Crowd Skibidi
Heh, I used to work for a solar PV system manufacturer. Half the office was embedded systems and hardware engineers, who all ran System76 or Framework laptops. All the web devs had Macs. Management all used ThinkPads. You could tell what somebody did there just by looking at their laptops. And well, I guess the oscilloscopes were a bit of a giveaway too :)
People who are experiencing a natural or political disaster which partitions the internet.
Kext still exist on macos
That's probably why they never show it on sand - it would suck it up. Things with the highest surface-to-mass ratio would make it to the top of the vertical tubes — things like dust, cigarette butts, and candy wrappers. Pebbles have too low of a surface-to-mass ratio to get sucked all the way up the vertical tube.
Not as long as the weeks it's going to take to undo this.
Astro is really good for this use case. Also easy to host on platforms like Netlify.
Yes, in 2.0 we got rid of the "less" and made it server.
Just do it, what do you have to lose, that company is toast anyway
Probably less than if a human did it. Compared to my code, AI generated code is much more thorough and takes more edge cases into account. LLMs have no problem writing tedious safe-guards against stuff that lazy humans skip with the argument that it will probably never happen.
If you accidentally leave your front door wide open and somebody steals all your stuff, you'll also say that you were robbed.

There might be a legal distinction between "breaking and entering", "burglary", "trespassing" etc, and in a legal sense, whether the front door was open might have some impact on whether the act was illegal or not and what the consequences are, but in colloquial usage, you've still been robbed.
What type of clock is used by this library?
Federico Tomassetti is also good. Check out his blog: https://tomassetti.me/blog/
My, if only there were other worlds possible than "stuck in traffic for 2h" and "flying down a 14-lane road on a 4-ton child-killing machine"... But sadly it's impossible :'(
Maybe companies will rethink handing over critical security to a company where multiple highly security critical mistakes compounded each other.
Crypto bullshit - a16z pipeline is a great reflection of a16z as a firm.
Use an Albanian VPN and you’ll get no YT ads on your phone. Toggle VPN only when you’re watching YouTube. Apparently Albania has banned ads on YT so you don’t get any.
Next.js makes you prefix env vars with NEXT_PUBLIC_ if you want them to be available client side, and Vercel has warning flags around it when you paste in those keys.

It's obviously not foolproof, but it's a good effort.
But it also teaches security researchers to sell that info next time instead of reporting.
12.9 still seems very low to me. What makes the lower number better? I wouldn’t want the difference between 12.9 and 7.4 if it means I need to give up on driving cars and take slow inconvenient public transit or be limited to where public transit takes me. Cars are freedom.

I would also argue the US is more successful than literally every other country in part because of fast road infrastructure. So maybe they’re all just making the wrong tradeoff.
Most likely legal is highly involved in any postings about the incident
Exactly. It's not too difficult to imagine replacing LaTeX for some fairly straight-forward documents. But just by casually browsing tex.stackexchange.com, you'll soon find out that people use LaTeX for an amazingly wide range of different things, and it's capable of serving many, many edge cases very well. To be on par with that is a very hard goal. Let's not forget, LaTeX has been around forever, and consequently has grown into an incredible complex and varied ecosystem.
This reminds me of Microsith, which had a support form where you can ask it questions, but the response was always "format and reinstall".

https://web.archive.org/web/20050206190826/http://microsith....
All sorts of cleverness going on there. I'll bet they saved a ton of money on development by lowballing people on fiverr or whatever they did, and indirectly they'll also save a ton on bookkeeping when a russian ransomware group effortlessly takes them for everything they have.
When I create a new service and add LetsEncrypt cert to server via ACME. I immediately see logs filled with junk, obviously bots searching for shitty defaults that devs might leave open. I have even seen requests for the process env file lol.

How was such vuln not found and abused in this case? a16z is very lucky or maybe it was abused and not disclosed. Researcher or bored person with a kind heart/white hat hacker mindset is the first to reach out.

a16z should be fined heavily unfortunately there is no legal framework for this type of negligence
Why a language and not a framework? I mean some langs even implement half their functionality in std libraries rather than part of the lang (as a preference actually).

I see their being overhead and what not that would make it very domain specific and less appealing for anything that doesn't need collaboration.
Ever had a bug in code you wrote?
Ask HN: In which configuration language should Glasskube Native packages be in?
Currently Glasskube only supports wrapping and patching Helm Charts and plain manifests. As Helm chart creation has its quirks (https://glasskube.dev/blog/5-helm-shortcomings/) creating native Glasskube packages is high up on our road map.
Our main priorities are:

- Well defined package structure - Comprehensive but scaleable configuration options - Integration with existing typed configuration options & dependencies - Support for in Code and optional dependencies - Tooling that will package a Glasskube packages and generate manifests

We would also appreciate your vote on our GitHub discussion.
Just FYI: site is inaccessible from outside the US.
>Of all the countries China is doing the most to curb its emissions.

China "doing the most" to curb emissions is perfectly compatible with them "doing the most" of the actual emissions. At high enough scales, no matter what you're doing, you'll be doing "the most" of it, in both directions.

What matters at the end of the day is emissions in absolute terms.
Holes stay dug (for the most part), AC needs energy to keep working.
I feel a weird level of repulsion that this approach is not only, apparently, rewarded, but also considered advantage in our society that will result in future success. I have long wept for our future and this is likely a reminder of why we fail as a species.
I personally prefer ConTeXt (https://wiki.contextgarden.net/ConTeXt_Standalone).

It's comparable to LaTeX, but better in my opinion.
Rover could "eat" garbage with its robo-snout.
I can't picture how that would work. While collaborative features require that some objects are shared and synchronized, efficiency and programmer sanity rely on the fact that some objects are not. If synchronization is opt-in, how would a language integrate it any more fundamentally than a library can?

Also, CRDT's don't provide synchronization for free. They ensure that all concurrent modifications will be merged somehow. If the data being synchronized has any structure, it requires careful CRDT-aware data model design to ensure the merging is semantically reasonable (or that, in the worst case, incompatible changes produce a detectably broken state).
Thank you for pointing out why it should be a public utility that does the right thing rather then a private company who was willing to burn the state down for profit.
Not mentioned in the article but, I'm sure a big part of it is they don't want him to overhaul the H1b system.

Now that he survived it will be interesting to see if he uses his last term to go in there and not be just another "owned politician".
Stuck, boring, and comfortable in 9-5 routine.

I, have become . . . comfortably numb, myself . . .

Maybe for a long time, I've considered 9-5 to be easy hours but what happens during that time needs to be uplifting in some way. Some big way would be good even if it's not financial.

The stuck, boring, and comfortable could be juggled or rebalanced on their own, or you could throw in the 9-5 for some other schedule or commitment. Or dig deeper from where you are now until you hit a promising spark, in spite of any disappointments that may be obstacles.

Over many years of employment I had no doubt I would be an entrepreneur, and a boring 9-5 is no more real work or commitment than a more uplifting 9-5, but I never could have started my company on the side during any of the boring times.

I think the ideal situation is where you look forward to going to work every day because you accomplish something for your employer, and you look forward to coming back from the employer whether it's home for R & R or to work on your own future business. You need to feel some worthwhile anticipation either way/direction.

For me 9-5 is not a problem in itself, but commuting can be the big downer, and a lot of it can go together if it turns out that commuting with the mainstream is what the real problem is. A revised employment schedule with a bit more time commitment can still be OK if it takes away from a more painful commute. You need to look forward to your destination both coming & going, and the anticipation needs to outlast your travel time each way.

It's never going to be like driving to Disney World, but that's an extreme example for many people of how long a trip you can sometimes maintain anticipation for.
Vacuums use a lot of power - I wonder how long the batteries last, especially since the average beach is a lot bigger than your standard living room.
The number #1 cause of car crashes is the presence of cars.
Walkable communities have less cars, therefore, less car crashes.

The city grid is mainly to blame. The city grid of most American cities is uniquely bad - filled with streets which run at right angles to each other.

Take a look at Brussels vs Queens New York. Brussels had 5 road deaths in one year. Queens New York averages 75/year. That's almost a 7x difference adjusted for population.

Brussels has as an extremely irregular and walkable grid. Queens, like Manhattan, is full of dumb dangerous straight-lined roads and 90 degree angles.

The more irregular the grid the lower the traffic fatalities (assuming you're in a high-income country).

Why do suburbs have cul-de-sacs? They have curves, and They are useless as roads. They force cars to slow down, and disincentivize automobile traffic. Ergo, less cars, and your kids might get away with playing in the street without getting hit.

Rip up the grid and build a walkable community. It won't be cheap. Upzone and lower property taxes for any private developer that builds affordable housing on a walkable grid in your city.

There's only one place in the United States that's trying - Culdesac Tempe in Arizona. Northeast/California NIMBYs won't let you dare try to fight off their localism. They vote. Do you vote?
Bikes cannot be faster than cars because cars can literally accelerate faster and have higher top speed. When car infrastructure is sufficient there is no theoretical way bikes can move people faster as you claim. As for safer - cars are very safe already and it is irrational to care about minor risks.
You can implement S3 V4 signatures in a few hundred lines of code.

https://github.com/Peergos/Peergos/blob/master/src/peergos/s...
I mean crowdstrike has a linux equivalent which broke rhel recently by triggering kernel panic
world is already burning with effects of climate change.

botched software updates on a Friday is just the chef’s kiss
In which case "Are you awake and sane?" would be a sensible reality check before heading out.

You're trying to hand-wave away the inexcusable. The outage is a symptom. The problem is the lack of even the most basic testing.

Clearly these files are sent out without even a minimal sanity check. That is a problem, and it's not something that can be hand-waved away.
The article mentions stair climbing as a requirement, not sure I buy that.

Agreed. That requirement seems to be at odds with the premise of cleaning up beaches.
If you could actually access their Salesforce instance, that would be very nerve wracking for founders, since usually Salesforce, etc, logs emails which may continue unannounced fundraising plans or M&A plans that haven’t been shared externally by portfolio company founders.
Show HN: How to query your CCTV cameras using GPT-4o-mini?
How selfish of you. Don’t you care that your demand for your smartphone could result in the death of a miner in Africa?
This post has some info but seems more from a customer:

https://news.ycombinator.com/item?id=41003390
Find this pretty useful for understanding query plans. There are some sample plans on their website:

https://explain.dalibo.com/
I think the good news, if it's incompetence, is that they can greatly reduce the risk of recurrence by improved processes and tooling.

I doubt there's much they could do about forcible government intervention.
> They protect these many companies, industries and even countries at such a global scale and you haven't even heard of them in the last 15 years of their operation until this one outage.

They certainly run their software on those many customers' systems, but but based on my experience with them, "protect" isn't a descriptor I'm willing to grant them.

We don't have the counter-factual where Crowdstrike doesn't exist, but I'm not convinced that they've been a net economic or security benefit to the world over the span of their existence.
95%+ of hotels/motels do not have 24 hour cleaning staff, and the guest service agents working the computer are not going to be wanting to clean bathrooms.

All those branded 80 to 120 room hotel/motels are trying to reduce the staffing outside of 7AM to 4PM, even to the point of having check in kiosks that video call you to someone in South Asia/Phillipines/South America.
Scientists urge GPS to share UK patient data for research into new treatments
Reading this I was amazed that the cheapskate place I worked ~89-92 shelled out to get us a Netware server, considering the crappy hardware they had us developers working on. But then I just realized that we were probably running on a pirated copy.

The company was a PC builder that wanted to get into software, but they also did some services work like installing Netware. They were a fairly sizable local operation until one day when they won a large bid for computers for the local University by bidding based on a projected continuing drop in components, and then an unexpected supply problem pushed prices significantly up. This was after I left the company, but they seemed to go bankrupt basically overnight.
I didn't mind the controls, they were somewhat clunky but fine once you got used to them.

The game suffered imo because the puzzles had nothing to do with the story. They felt arbitrary and disconnected from the world, unlike the puzzles in Myst. Solving them never felt very intriguing, I was motivated to solve them just because that's what you have to do to finish the game, rather than motivated to solve them because they were interesting.
Found it https://github.com/automerge/automerge/blob/b8f88cacc6f46f92...

Vector clock. Why not a Hybrid Logical Clock?
> Preventing those cigarette butts from winding up on the ground in the first place would be the best option

If we can outlaw plastic straws and bags we should outlaw plastic filters.
1. Stair climbing isn’t just about movement from top to bottom. Stairs are a common place where people drop litter. Cleaning litter on the stairs isn’t accomplished by carrying the robot down the stairs.

2. Why do you believe the robot will always have a minder? The objective very much would be setting these off from a central location and covering a whole neighborhood or city.
Board Game Shelf Analysis
I am using a simple Jekyll theme minimal-mistakes[0] which I customized to suit my needs.

I'm hosting my blog[1] on GitHub Pages, the repo[2] is public so you can take a look and fork it if you find it interesting.

The setup is really simple, straightforward, and no-cost.

[0] - https://github.com/mmistakes/minimal-mistakes

[1] - https://www.vladsiv.com/

[2] - https://github.com/VladimirSiv/VladimirSiv.github.io
Is it pseudoarchaeology or just unlikely?

If people abandon skepticism and the scientific method, I'd call it pseudoarchaeology. But from what I've seen it just sounds like an "out there" idea that isn't strictly impossible; like string theory.
No need to go so fancy, they delivered on their name already and struck their crowd of customers already
I test a lot of them, online and with Ollama, and Sonnet 3.5 is in a league of its own for practical coding purposes.

Still makes a lot of mistakes, but it gets things "more right" than any of the others in a much more consistent basis.

I've now cancelled my ChatGPT subscription to Claude and also mostly stopped using the APIs (I use Msty to compare most models, you can give the same prompt to multiple models at once and compare the results).

Sonnet 3.5 is amazing.
Skyway and White Center aren’t rural. They want to be unincorporated to pay less taxes and follow less rules. I agree that suburban unincorporated shouldn’t be allowed. I would add that small, below 50-100k, suburban cities shouldn’t be allowed. But that isn’t for smaller subdivisions but larger ones,

But that has nothing to do with rural areas. My brother lives in Iowa near medium town. Everything else is small towns, less than 1000. Should those incorporate and spend money on city services? What about the farmers who are spread out? What municipality do they belong to? The county is the best option.
Flash attention
More like complaining when your teenager takes a break from mowing on trash day and leaves the mower next to the trash and someone takes it.
CrowdStrike debacle provides road map of American vulnerabilities to adversaries
It was 1985.
https://archive.ph/yfbek
Funnily I found the 1st version more coherent than the one corrected for speed fluctuations.
> Guess how the production of those scales with higher speeds?

I am guessing you don’t know yourself which is why you’re posing questions as an argument.

> Guess what, that's changing with EVs. Hybrid or not.

It’s not changing. Consistency of speed is important no matter what. Regenerative braking is imperfect.
If you put all your stuff on your front porch with a sign “please take what you want” and it’s all gone the next day - then you can’t say you were robbed.

I think this is a more apt analogy to what az16 did here
The next time someone finds their keys, they're going to find this article and commit them to a public github repo instead...
I'm not sure it's about scale. Their current structure demands evilness, and they (or their investors) choose that structure.
How very odd and unfortunate. Name brand recognition is an invaluable thing which can't simply be replaced on a whim.
Thank you.
Lots of them already using AI for all kinds of tasks.
I think it's just important to stay practical as lots of companies slap ''magic AI'' on everything, where it doesn't always makes any sense. Similar to a period when everyone was building everything on a ''blockchain'' because it was ''cool'' and could have given you funding, although the reason for your ''groundbreaking todo app'' to be built on blockchain was... none.
Show HN: OSS back end learning platform
Learning backend by building APIs - any language and API framework is supported

It's in a super early stage, currently having a single available project, with a second one I am working on.

Would love to get some feedback about anything (ux, difficulty, clarity, etc..)
When Government bans internet, people should never vote for them. They are the most evil one and I think all country should get together and sanction them.
I liked this enough to keep a tab open ;) but now it's been down for a few days - what happened?
I have used maangchi’s method as well as fermented a couple dozen other sorts of things over the years. It would be hard to argue that fermentation is prevented. In my experience it is a very active ferment.
Counterpoint: OP is a security researcher and couldn’t find a single human email address at one of the most well-known VC firms on the planet? LinkedIn? Twitter? Facebook friends? Come on. They’re not hard to reach if one really wants to.

(Note: I still think A16Z should have paid them.)
Was going to post something similar. There may be a need for a way to confirm ( not detect, which is its own field ) organic content. I hate the thought, because I assume I know where that goes privacy-wise.
Why this article focuses on a small rebel group I don’t know. I am pretty sympathetic to them, but unfortunately they don’t really have a lot of power. The larger ones, like the United Wa State Army, the Kachin Independence Army, the Arakan Army, and the Karen National Liberation Army control a much larger part of the country.

And let me tell you, they don’t care about democracy or community lead activism. They will only tolerate absolute independence, which is why fighting happens until they get it (see KIA until ceasefire broke, MNDAA, UWSA, etc). This is because they are involved in running and taxing illegal jade mining, illegal gold mining, cyber scam, and meth operations, and all that money goes away if a functioning federalized system is established. There are literally KNU and Shan State Army leaders under indictment in New York for trying to sell $40 million of heroin in return for weapons. This is part of why the US has been very hesitant to offer aid to these ethnic armed groups.

It is so sad how dysfunctional Myanmar is. If they had a government at least half as functional as Thailand they could be so much better off. The country is so messed up there are literally articles about how criminals have worked out deals with police and judges to send paid substitutes to prison so they wouldn’t have to go. Not to mention the regular reports of ethnic cleansing and massacres.
Isn't this already possible with codemods?