skysight-inc/HackerNews huggingface dataset:
Thanks for the feedback — I wanted it to be multi-client though, so I could use it on my phone and laptop. Having it be optional is a good shout though :)
Back in the old days, top level arrays were a security risk because the array constructor in JS could be redefined and do bad-guy stuff. I cannot think of any json parsing clients that are vulnerable to this.
no. anti-disparagement clauses in severance agreements are illegal.
It is an attractive location for young people that want to live in SF instead of the boring burbs. Downtown has a ton of food options for lunch. You can walk over to a Giants game or to the waterfront. Union Square in particular has turned into something of a trash heap, but FiDi to the north and SOMA to the south are (mostly) attractive.

It is easily accessible for anyone on BART or Muni lines so you may not need to own a car.

Outside of that, it's still a flex to have a downtown SF office. This isn't just for warm feelings, it can affect fundraising and talent attraction.

And currently, office prices are super low in SF. My company is paying about 1/5th of the price (literally) for the top floor of a building compared to a company that rents the floor below them (which signed a 5 year lease in 2019).
I wish you would have been more involved in the discussions [0] [1] leading up to this. I know you were invited to participate, since Chad shared your thoughts a few times via proxy. Regarding your main points:

1. I'm on the governance 'board' for Fair Source, and I am not associated with Sentry. All it took was involvement and deeply caring about the subject (which I know you do).

2a. The requirement for delayed Open Source publication (DOSP) could have been discussed further if there was more involvement from other non-DOSP companies other than me (before I relicensed from ELv2 to FCL). I advocated for ELv2 to be considered Fair Source, but nobody else advocated with me, and I ended up abandoning it for the FCL. I was looking forward to you discussing SUL and how it was a good fit for Fair Source, but you never did.

2b. The lack of options for self-hosted monetization (e.g. EE/CE offerings) is no longer a problem for Fair Source under the Fair Core License [0], which I drafted alongside Heather Meeker (who helped draft FSL and ELv2) to solve the problem of self-hosted monetization under the FSL or BUSL.

With that said, I think where we landed i.r.t. requiring DOSP makes sense as a differentiation vs open core and "source-available." I was originally vocally against Fair Source requiring DOSP, but the lack of involvement from other companies using ELv2, SSPL, and SUL, made the decision a little bit easier.

[0]: https://github.com/fairsource/fair.io/issues/14

[1]: https://github.com/fairsource/fair.io/issues/21
promptly ordered 2 (an HD and 4K) .. its still cheaper than the new "AI" enabled experience ..
> there are so many pitfalls when designing this

Agree. When people hear the adage "don't roll your own crypto", they often think it refers to crypto primitives only. In reality, it's also hard to design a secure crypto protocol, even if the underlying crypto primitives are secure.
Garry Newman - Explaining S&box
I already knew what a sum type is. Fortunately I discovered Rust, which actually has proper sum types rather than trying to make do with a tagged union and a whole lot of squinting.
That depends on how many X employees actually live in SF and how many commute each day back and forth from the same South Bay. When I worked in SF, I regularly shared a train with the latter crowd, and there are a lot of them. I'm not saying they all work for X, but I suspect for a lot of people there the move would actually be an improvement.
And yet just today I read an article about how more than half of tech CEOs now are allowing workers to work fully remote if the choose, which is up from closer to 35% a year ago. It’s possible some of the RTO push was to get people to leave, or that management, underestimated how unpopular it would be with employees, or perhaps the simplest explanation: management is mostly a cargo cult just throwing spaghetti at the wall, with no real rhyme or reason behind their decision making.
Indeed, it's a beginner course, but they market their app as if they've discovered some secret algorithm to learning languages when any of their students would get just as much value out of any number of other independent learning methods.

But at least it's not University courses which are, dollar for dollar, ridiculously overpriced.
I assume there's TLS in the server connection already, but the encryption here is to make the communication unavailable to the server for decryption, so "bare" TLS does not solve the problem.

With TLS you need pubkeys you can trust (the certificate authority hierarchy provides that trust for the open Internet) or you're vulnerable to MITM. You could potentially share pubkeys using a similar out-of-band mechanism to that currently used for symmetric key distriubtion, and tunnel that TLS connection through the server's shared comms channel. That would work OK for two parties, but it becomes significantly more cumbersome if you want three or more, since each TLS session is a pairwise key exchange. Notably, however, this would not transit secret keys through server-controlled web pages where they could be available to Javascript. Something like Noise [0] might also be useful for a similar pubkey model.

Unfortunately, this kind of cryptography engineering is hard. Key distribution and exchange is hard. There isn't much of a way around learning the underlying material well enough to find this sort of issue yourself, but misuse-resistant libraries can help. Google's Tink [1] is misuse-resistant and provides a handful of blessed ways to do things such as key generation, but I'm not sure if it's suitable outside of cloud deployments with KMS solutions. nacl/secretbox handles straight encryption/decryption with sound primitives, but it still requires a correct means of key generation [2] and distribution.

[0]: http://www.noiseprotocol.org/noise.html

[1]: https://github.com/tink-crypto/tink-go

[2]: https://pkg.go.dev/golang.org/x/crypto/nacl/secretbox
Function calling uses JSON mode. While it has been mostly correct, I do get an incorrectly formatted response sometimes (maybe 1 in 10k requests?). So it sounds like this fixes that bug.
Next do it with Penrose tiles!
Thats why they are leaving SF
I don't think it's meant for live collaboration. Given that the OP is pretty focused on overcoming time restrictions, all-day remote machine monitoring seems like exactly the kind of use case they had in mind.
Lumineer.io - great for data analytics company

Swagbot.io - perfect for innovating in swag delivery or gifts

PartnerHacker.com - cool for a newsletter or media company in the product or UX space

FullerHouse.io - sweet option for a blog or e-commerce site

Make me an offer. All considered.
Ha! I have the same thing as a bookmarklet for specific sites. It’s fun to watch it render the clicks.
Go ask the elderly why they love cold callers and scammers. It is beyond my comprehension how their minds work. If Moses split the sea in front of their own eyes they wouldn't trust him to lend him five dollars, but as soon as there's a scammer on the phone or on the internet, wallets open wide.
I'm currently using Jellyfin to manage my media. With very few exceptions, it's been as turnkey as it gets. Anything with a web browser is good enough to use it, making nearly any kind of setup sufficient. Almost any OS can just browse the web very well. I run it with Docker on Synology DSM. Early on in Jellyfin's life, some Jellyfin server updates required manual intervention, but for a long time now, I just update periodically (every few months) and haven't run into a problem.

With that in mind, if I wanted a Linux HTPC setup for minimal tinkering, for the purposes of accessing YouTube and Jellyfin, I'd probably go with an immutable system; I like the look of Bazzite for this. Then, I'd probably disable automatic updates, and manually update things periodically when I have time. If it breaks, you can always roll it back, but manual updates will take the minimal potential disruptions to probably just zero. You could run this on a cheap mini/NUC PC. For TVs that are not mounted to the wall, you could probably even mount it to the back using a VESA mount adapter.

That said, I don't currently have plans to replace all of my Chromecast setups, so I haven't actually done this. That's because they've been working very well for years and there's really no reason to mess with something that works. They were cheap, they run Android apps, and I've cut out all of the unwanted advertising.
No price Microsoft could pay Apple to use Bing: Google antitrust ruling excerpts
The issue is the San Francisco gross receipts tax, which becomes problematic for any payments company because it applies to the payments volume

Twitter is planning to become a payments platform
If it were possible to sink your teeth into them and extract enough cash such that it would sting, things like this wouldn't happen.

It's only because it costs them exactly zero dollars and cents that they feel they can get away with bullying anyone they want.
If you want something written from a criminal viewpoint, but not from a criminal, I highly recommend A Burglar's Guide to the City: https://www.goodreads.com/book/show/22237142-a-burglar-s-gui...

It's more about architecture and security than it is about crime, but still very good.
Why would you offer more collateral? What’s in it for you?
If he does, he should announce it doing a cover of "All My X's Live in Texas".
Good morning Irina,

I sent an email to that address last night with your name in the subject line. Thank you.
It's a relatively common convention for JSON APIs.

Possible reasons:

- Extensibility without breaking changes

- Forcing an object simplifies parsing of API responses, ideally the key should describe the contents, like additional metadata. It also simplifies validation, if considered separate from parsing

- Forcing the root of the API response to be an object makes sure that there is a single entry point into consuming it. There is no way to place non-descript heterogenous data items next to each other

- Imagine that you want to declare types (often generated from JSON schemas) for your API responses. That means you should refrain from placing different types, or a single too broad type in an array. Arrays should be used in a similar way to stricter languages, and not contain unexpected types. A top-level array invites dumping unspecified data to the client that is expensive and hard to process

- The blurry line between arrays and objects in JS does not cleanly map to other languages, not even very dynamic ones like PHP or Python. I'm aware that JSON and JS object literals are not the same. But even the JSON subset of JS (apart from number types, where it's not a subset AFAIK) already creates interesting edge cases for serialization and deserialization
Wrong. I don't understand why people attempt to make corrections like this.

Anyone could browse Twitter anonymously, since the beginning.
It will be interesting is to know what specific help was offered while Delta was trying to clean up the mess. My guess is that MS were probably using it as PR-op or future up-sells. Delta didn't want to be in business with them in long term as their CEO praised apple publicly.
Was Egypt's first pyramid built with hydraulics? The theory may hold water
Under the hood, it's quite similar to function calling. A few differences:

- Structured Outputs is a bit more straightforward. e.g., you don't have to pretend you're writing a function where the second arg could be a two-page report to the user, and then pretend the "function" was called successfully by returning {"success": true}

- Having two interfaces lets us teach the model different default behaviors and styles, depending on which you use

- Another difference is that our current implementation of function calling can return both a text reply plus a function call (e.g., "Let me look up that flight for you"), whereas Structured Outputs will only return the JSON

(I worked on this feature at OpenAI.)
You've never worked in fast food have you? "Taking it easy" is not how it works. You're on the clock 100% until you clock out, no rest, no breaks, if a burger takes more than 60 seconds to land on the customer's tray the boss is on your ass. If you miscalculate how many patties to slap on the grill and either run out or you have to toss some because they've sat in the steamer for more than 15 minutes you are in for such a dressing down. The machine tracks from the start of the order till it is closed out so he knows. He has some bullshit regional contest thing with all of the other franchisees in the area that he has to win if he wants to make that boat payment. If there are no customers you are cleaning, even if you just cleaned it. Plus you had to spend like half of your time training new recruits or filling in for them when they stopped showing after like two days. I did one summer of that in college and it cemented me in my tech career path. I couldn't deal with the stress.
This is the result of prop c 2018?
It's anecdotal, but my wife was a Disneyland cast member for ~5 years. She claims that the words 'thank you' were a rare occurrence to hear from guests...
It depends on your threat model. If your threat includes three letter agencies and nation states then you're right-- don't use Proton. However, 99.9% of people don't have that threat model. In that case, Proton is better than most other providers out there (for email, vpn, etc).
I picked up the habit of saying "cheers drive!" after living in Bristol.
> Yes routers learn details about the destination of the packets they carry, but this is not a problem for most purposes.

For which purposes is it a problem?
By your logic, AirPlay and Chromecast are just smaller versions of broadcast television.

Come on man
If the tactic results in a return on investment, somebody will do it -- even if it makes them unwelcome at family reunions.

When the cost is extremely low -- spamming -- any return at all will justify it.

When the cost is low and the return is relatively high -- cold calling -- it will happen.

Only regulation and good enforcement of the regulation can stop these activities in a capitalist regime.
Your argument is that it's more of a spectrum than black and white, and yes, that's surely how things are in real life. You are just much further along the extrovert end of the spectrum than you realize and now believe you get what it's like at the other end, but you just don't.
To be fair, "MacBook" is basically a portmanteau of "Macintosh Notebook", so it's really not that far removed from "Apple Laptop".
Community notes by themselves do not do much if the network administration has severe bias vs one side of political spectrum.
There are a lot of very readily apparent reasons you are apparently ignoring as to why your company got a much lower rent rate than someone who signed in 2019.
Seriously - the ability for people to ignore multiple, rather large elephants in the room is hilarious.
Really important update that was not mentioned:

gpt-4o-2024-08-06 has 16,384 tokens output limit instead of 4,096 tokens.

https://platform.openai.com/docs/models/gpt-4o

We don't need the GPT-4o Long Output anymore.
I watched the film for the first time recently and was mostly disappointed. The best scenes focused on the sales tactics and the industry-specific insights, but at least twice in the film the main character starts explaining something and cuts himself of with "but you don't really care about all that". Then, on to more repetitive scenes about paying for sex and taking sedatives.

And was I supposed to like the main character? In any way, shape or form? I feel I can relate more to full-fledged anti-heroes like Walter White or The Wire's Omar than I can to this basic jackass.
I regularly receive DMCA outside of America, which I wished I could reply to "your law doesn't apply to me, cite the right one in my jurisdiction or get lost".

But I can't.

Because my hosting will process those by default and shut my sites down unless I just comply to the take down, no matter how legitimate it is.

It can be even a bogus take down from a US point of view, or even a take down for a non existing content.

Doesn't matter. I have to show that I comply, or 48h later, my server is shut down.

That's seriously messed up.
Cities tend to have a lower per-capita crime rate, it's just dense and visible.

This is just suburban paranoia. Crime happens.
having an inferior uBlock Origin implementation, because the real owner of the device blocked other browser engines in the device you paid $1000 for, is not cause for celebration.
We'll update gpt-4o in 3 weeks. (We've always updated it couple weeks after launch, so no one is immediately surprised by a new model drop.)
Selective enforcement of law based on moral preferences leads to bad places.

What if its a local owner but you met the guy and think he is a jerk?

What if he votes differently than you like?

Do you think the various groups committing robbery care who owns the store, and if so, care in the same way as you? Would they stop if the pharmacy became locally owned? Would they give up shoplifting if there were no big box stores nearby?
Generally agree but one cohort are folks on H1B visas that have their residency tied to their employment status with a particular company. It's transferable to a different company but requires getting an offer to another company large enough to do H1B sponsorships.

I wouldn't be surprised if the % of people working on X on an H1B rose since Elon took over.
Drowning Doesn't Look Like Drowning (2010)
>telephone sales in general were more common then and less likely to be a scam

Caller had to pay long distance costs at the time and really until you got in the later 90s early 2000's did you start seeing unlimited long distance everywhere.

Getting cold calls from random people way back then was super rate because it was expensive.
Hi Garik, thanks for sharing! What framework are you using?
Great idea — Though https://www.spotify.com/uk/kids/ exists, an app which consolidates them together for this purpose is smart. There might be an audience beyond just kids though: having Apple Music / Spotify / local media all in one app sounds pretty appealing.

Also, sweet landing page :) I hope you do well.
BART runs with 20 minute headways on longer routes (and as little as 4 minutes through San Francisco). The six CalTrain "baby bullet" express trains run hourly at best, with long service lapses mid-day and in the late evenings. Locals run more often (about every 10--20 minutes during peak commute hours) but add a half-hour to the just over one-hour express schedule.

(Both are still faster by far than driving, particularly during rush hour.)

CalTrain: <https://www.caltrain.com/media/22502/download>

BART's Green Line (Daly City - Beryessa / North San Jose) departs every 20 minutes from 4:55 am though 7:36 pm (southbound) and 4:59 am through 6:49 pm (northbound):

<https://www.bart.gov/sites/default/files/2024-01/January%201...>
Attempting just now, looks like Chromium took ~9.5 seconds total and Librewolf ~11.5 seconds. Essentially all of that time in both cases was waiting for responses to `/login` and `/` though, so still any difference in browser speed seems to be imperceptible and well under the noise threshold for how long the server takes.
>it would not occur to me that "learn language" in a headline should imply that

That's because you've been marketed-to by beginner's courses your whole life, probably. Like I said, this goes back to things like Rosetta Stone, or Berlitz before that, etc. etc.

They all have done the same business model. Suck people in with the ambiguity of "learn a language" (and all the sweet social capital it will give you!) teach you a few touristy words and phrases without any way of telling you if your pronunciation is way off (AI might help in the future, but it isn't there yet), and happily blow sunshine up your you-know-what about how well you're doing.

If you can't tell, I'm a bit cynical about general audience language apps.
> If you can look past the $200M they defrauded from 1,500 investors… they were actually a pretty successful sales team.
Working in restaurants and hospitality is hell on Earth. Work long hours for peanuts and get shouted at.

I'd rather be a gardener or a farmer.
Right? Makes me wonder how bad things are over there. Money-wise, that is, not eNGAGEmENT, cos every number you see that Twitter/X publishes is just "going up on every metric!!1~"
So you've been able to gauge life and the street scene in SF based on several meetings? That's super interesting. I would argue the Embarcadero is fairly nice and I live here, but what do I know.
A company being too large to be competent is maybe not the excuse you think it is.
Just in response to your second point, I do think that's specific to you and your circles. I know multiple retired or semi-retired people who have moved towards the center of a city. Without work to keep them occupied, they want the hustle and bustle, which means something to do. And driving has become more of a hassle and a barrier to the kinds of lives they want to live. These are east coast or midwest cities, so maybe there is something about SF that's different, but that's my experience.
Generate Code Context Files to Plug into Claude
I've recently gone full time remote - mainly to be closer to family - and all I can say is thank goodness I'm near the end of my career. I vastly prefer hybrid - being in the office for a couple of days at least allows for networking, face time and serendipitous opportunities. There is no way I would be where I am today if I had always been working full time remote. I simply would not have had the opportunities to cross paths with people.
Thanks!

If Greece's case is anything to go by, I doubt they'd ever accept that as it may bring to light some... questionable practices.

At some point I need to deduplicate the products and plot the prices across all 3 supermarkets on the same graph as I suspect it will show some interesting trends.
I remember every other TV commercial ending with an address for where to send my self-addressed stamped envelope.
That’s fair, I never visited the office. But if that was the only issue maybe they’d consider a different part of SF, which would be easier for current employees.
'The hobbit' may have shrunk early, evolved from a tall human ancestor
That is not as bad as I expected