skysight-inc/HackerNews huggingface dataset:
I appreciate you responding here. I might be in the minority, but if you really wanted to impress me I would love to see a response to the sibling's comment about "unlimited" data usage.

I know every company sells unlimited plans that actually aren't, but that's never going to change unless somebody starts being honest about it. Hetzner could really set themselves apart by making that clear. You could have a simple "why we don't have an unlimited data plan" to explain that other companies aren't being honest. Could be good for PR.
Not to be confused with Figure 1 [0] which you should q.v. in case of any complaints.

[0] https://www.dourish.com/goodies/see-figure-1.html
Ships are slow moving, high value targets that can be destroyed at lost cost --- given a little ingenuity.
I'm not sure I really understand the weight this article gives to "nonces"—from an outside perspective, it seems like writing an titled "Exploiting authorization via cookie on Google.com" when you've found a simple XSS. In each case, the problem isn't the nonce itself, but rather the fact that developers are 1) allowing arbitrary file uploads with insecure sanitization, 2) embedding a secret value in frontend JSON blobs that any user can read, or 3) a completely unrelated SQL injection vulnerability.

For #3 especially, it's pretty confusing to single out nonces as especially vulnerable. Any secret defined in wp_config would have been similarly exposed by this exploitation method. For example, the SECURE_AUTH_KEY or the LOGIN_KEY. If you had found an installation that put those values in the database (probably common for multiuser installs), would you have instead written an article that claimed "Wordpress logged in sessions should never be used for authentication"? Or that wordpress auth sessions are "often misused by developers"? Similarly with #2, you make a haphazard effort to tie the improperly sanitized uploaded files back to nonces by saying "a nonce is required to acces the uploaded file", but that really doesn't have anything to do with the vulnerability itself—many users on wordpress installs are required / expected to upload publicly visible files, or files visible to their own user. Or even files visible to the administrator! The method of authenticating access to the files has nothing to do with the vulnerability itself, it was only a small piece of trivia required to properly exploit it in this specific plugin in some cases.
The board votes. I’m fine with that, I’m fine with my phrasing of “them” to vote
Flux.1 seems good but not quite sure if it exceeds MJ.
Clicking on the settings icon shows a "Not Found" error.
OpAmps are still one of the most common chips used today, and one of the most obvious analog computers in use.

And yet not even one paragraph in this article?
I’ve always wondered how ancient man made these. Were any of the women this fat and he had a reference image? Or was he just extrapolating? If extrapolating and fantasizing they seem extremely accurate in modeling how actual obese human women look.

It seems odd for anyone to have that many extra calories back then to store that much fat. Unless it was some sort of ancient religion that worshipped a fertility leader that received much more food than the rest? I’ve asked this question on Reddit before but didn’t really get any quality answers.
O man I love teenage engineering. I built a visual archive of their work just a few days ago --
https://play.soot.com/teenageengineering
Outside of niche areas, I think programmers can easily go at least 5 years without needing an upgrade. The average office worker can probably use recent hardware until it breaks. My 2016 Macbook would be fine for day-to-day work if the battery wasn't completely dead. My current laptop (M1) and desktop (3600) are both 2020 models and fine for most programming tasks.
I haven't yet tested ECC with any Zen 5 desktop CPU. But yes in general with Zen 4 that ASRock Rack and Supermicro boards have worked out well. With time will try out ECC on Ryzen 9000 series.
If you're suing your customers? With frivolous lawsuits? You are admitting that your business is in collapse.

There's no mystery here. The company cut Trust & Safety so that people could post whatever they want under the guise of "free speech." This means more objectionable (to advertisers) content on the site. Advertisers do not want to run ads next to objectionable content.

Worse, Twitter was never big enough to really matter to big ad spenders. So it's small, doesn't have the ability to move the needle for any big advertiser, and now CMOs/ad agencies have to worry about their ads being run next to 4chan-quality posts? Easy decision to stop spending there. There's really no conspiracy involved here.

At base, this is a simple conflict of ideas. Twitter management wants to create a space where people can post ideas that may be broadly seen as objectionable, even if they are legal. Big advertisers are well-known for restricting their ads to more sanitized spaces (this practice predates the Internet). The goals of Twitter management are directly in conflict with the goals of big advertisers. This was the obvious way for this situation to unfold.
Oeh I could use some of this for Home Assistant, get all my devices actually represented in a 3d model so I can just tap a lamp in stead of a button.

I imagine it also works for houses since those are just 2 or 3 appartments stacked on top of each other, if you think about it.
I've been using Brave and I recently decided to give Firefox another shot. I clicked an Amazon affiliate link from one of Ben Vallack's YouTube videos for a handheld espresso maker. Next thing I know I'm getting tons of ads on Facebook for espresso machines. This was with uBlock installed.

I never, _ever_ had that happen with Brave. In the context of Google deprecating MV2 - Brave's shields are hard coded into the Chromium chromebase and do not rely on MV2 or MV3 [1]. They will also be continuing support for MV2 extensions.

1. https://brave.com/blog/brave-shields-manifest-v3/
2. https://news.ycombinator.com/item?id=41158769

Note: There isn't really any discussion on that HN post, but perhaps this may spark some.
.. save yourself an else :

int value1 = 128;

int value2 = 256;

if (condition) {

value1 = 8;

value2 = 16;

}
I think you're misunderstanding here; people are talking about a smoke "test" using a real credit card against the real production payment system, using production API keys/authentication/etc, with real money moving around. No payment provider forbids that.
I think I'd end up more limited by data usage than speeds, so the VPS route might actually make more sense. 10x VPS might actually be higher aggregate throughput than a single dedicated 1Gbps line as well.
I have to imagine they’d only care if you were running significant volumes of test transactions and refunding thems, like if you were using live credentials in a dev environment.

Either way I’d be hard pressed to deploy significant changes to payment-related code in production without at the very least seeing a real $1 charge go through and everything work as expected. The risk of a ToS enforcement for this seems much lower than the risk of some bad logic in an if (env == ‘prd’) making customers unable to give you money.
If you have a CSV and are happy using LLM, then you should ask an LLM to give you python code to generate a sankey plot. It's not difficult to wrangle.
Depends on what you are working on.

For Rust and C++ compilation fast CPU/RAM/SSD makes a massive difference, so I'm always eager to upgrade to the latest and greatest.
https://prices.openfoodfacts.org/
He could, but hasn't done so yet.

Instead, Elon continues to make decisions like closing Twitters headquarters.
Show HN: A Visual Archive of teenage.engineering
It was like that with Jazzmasters and Big Muffs. And even Les Pauls in the 60s and 80s. They were just cheap and widely available used and out of fashion, but then someone started using it again and the prices just exploded.
Rust APIs use string slices (&str) extensively. With its current design, converting from a String to a &str is a no-op; if String instead did small string optimization, converting to &str wouldn't be free. Furthermore, thanks to the borrow checker, Rust code tends to avoid copying strings around, so the benefit of SSO is reduced. C++ does more string copying and didn't have a standard string_view for a long time, so considering the tradeoffs both languages made reasonable decisions.
It is all about metrics and how you bend them to whatever you prefer. However, the more this deviates from actual reality, the more likely reality will eventually show up and bust the show in the most horrible way possible.
Be sure to check out Waypoint (usewaypoint.com). It's an email API with a tightly integrated template builder and has idempotent requests (https://www.usewaypoint.com/docs/idempotent-requests).
On Autoscaling – What Goes Up Must Come Down
I literally cannot imagine a website so important that I'd be willing to expose myself (let alone my children) to it like that. The web continues to grow smaller every day, it seems.
The idea of using humanoid robots in the automotive industry has always been a bit confusing to me. Automobiles are all the same within a model and are built on an assembly line, so they are well served by robots with fixtures specialized to each production step.

Wouldn’t a humanoid robot be better suited to factories with batch processes or engineered to order products?

Would be curious the hear the perspective of anyone in the automotive industry - do you see humanoid robots being useful in your industry?
Great job! It looks super cool.
No need to invoke metaphysics here. Whether time is an illusion or not doesn't depend on its "existence," though I'm not sure what you mean by "exists." I'm not convinced anyone does.

I agree with your overall point though. All we really need to say, when we say something is an "illusion," is that the phenomenon in question is not as it intuitively appears. Our expectations were one thing, but because of x, y, and z, this can't be the case. We think of it one way, but it's actually another way.

It's tempting to draw this distinction upon metaphysical lines, e.g., we thought it was one way, but here's how it Really (TM) is. Again, this is totally unnecessary and adds nothing to our scientific understanding.
Hi Nick,

I'm probably not in the target audience, but still, it looks lovely, I've enjoyed exploring the 3d part.

As a suggestion, a full screen button for the 3d scene would be nice, as I don't have VR, just a regular monitor. And if you're feeling adventurous, you could maybe even add WASD support for greater immersion. But that's a bit of work, as you would probably also have to include a physics lib for dealing with collisions.

Also, I almost didn't see the "try it out" link.

All the best with your project!
Fatigue-detecting earplugs could diagnose sleep disorders
Django 5.1 Released
Didn't you answer your own question with the quote? It needs to originate from a residential IP address
Hi I'm the founder of OpenFaaS and am sharing a new article looking back on autoscaling in OpenFaaS since its first iteration in 2016. This covers considerations for scaling up, down and to zero, along with what's needed to gracefully drain requests - and gives a glipse at cluster autoscaling too.
Oh God why does it look like an Amogus
better schools is not a factor at all. right out of college, or a little later most of the high quality engineers move to Bangalore because that's where the jobs already are. once people settle down a bit, they tend to be averse to move on average. it's network effect and sheer inertia. no one really wants it this way.
The only machine I've ever had with this GPU setup was a 2013 MBP, which ran perfectly.

But yeah, I've heard horror stories with newer multi-gpu laptops, especially on Linux.

So, since I've been happy with the 4k performance of iGPUs ever since the hd530 of the 6th gen core, I've specifically looked for iGPU-only laptops.
I did clean install Windows. I initially tried to just move and install. The built in Web cam isn't working.

I assumed a hardware defect, but it's fine on Manjaro. No secure boot for me though...
I upgraded my 3900 to a 5900, and it is quite adequate for my needs. If the next upgrade means a new motherboard, ram, etc. I can wait until the difference is worth it.
No, the electrons actually move in the same direction always, just as a free falling object always moves towards the locally dominant mass. We could call the direction of electron movement "right".
I have an HX Stomp as well, but I'm doing most of my practice lately with a Tonex One, which I got for €150 brand new, and sounds amazing. It's incredible how far we come.
Hi, if you're allowed to answer, are there any future plans to support custom CFGs through the API ? Like llama.cpp does with it's GBNF format.
Firezone's DNS-based routing is able to manage access to multiple services independently, even if they share the same IP address. So you could for example allow access to gitlab.company.com but not jira.company.com even if they were on the same webserver / loadbalancer.

It took a couple iterations to get it right - lots of fun edge cases involved. We ended up having to build automatic NAT64 and 46 for DNS resources to handle some of them. We wrote a post on how this works: https://www.firezone.dev/blog/how-dns-works-in-firezone

In terms of attributes for allowing access, we currently support time-based, country/region-based, auth method, and IP-based, with more planned:
https://www.firezone.dev/kb/deploy/policies#conditional-acce...
You don't know that when making the initial purchase.
Study Reveals Public Opinion on Polygenic Embryo Screening for IVF
I guess thank you apple for finally allowing someone else to use the 3n process. Everyone applauding apple for their incredible silicon, but IMO it's 70% just thanks to tsmc.
:wave:

Hey, the rest of the thread is over here. It looks like you moved the goalposts so far away you might be lost.
> The second worst part is the emoji combining sequences [...]

That was the main reason for me to pull in harfbuzz. At least it "just resolves" those sequences to glyph indices.
I think their main market is people who definitely won’t use the product they can convince to think “I will definitely use this product”.

(This one came pretty close to getting me)
It's good to see Django keeps improving.
Show HN: CashPredictor- Predict Monthly Cash Flow from Revenue, Expenses, Growth
This is debatable. From what I've seen, increase of tough-on-crime policies and police presence does not make anything safer.

Also no, the rate of gun violence in the US is much higher than any developed country (and even a few undeveloped ones). Again, unavoidable and obvious.

I also think it's a bit hilarious when this talk of increased policies and tough-on-crime policies doesn't include... making it harder to obtain a firearm. Requiring ID checks, requiring registration, only allowing certified shops to sell. Apparently those policies are too tough and too much of a burden for law enforcement, somehow.
I'm on an 11 year old CPU :)

The slowest things are videos that lack hardware acceleration. These fancy new video encodings are a form of forced obsolescence IMO.
It's the same across almost all tech. Phones, tablets, laptops, CPUs, GPUs, displays, TVs. Unless you have specific needs at work or chase the most recent games, the need to update almost went away. I'm still on i5-9300 in my laptop and will happily use it till it dies. (Then look at the battery life in the replacement before considering performance at all)
hey man. This is dope. Do you have an email I could reach out to? Im working on something in this space & would love to collaborate on something with you.
How do you think regulation should happen? Without votes?

I don’t care for alternative App Stores since I don’t want to deal with my family getting spyware. Shouldn’t I be allowed to vote this way?

Voting to have certain regulations and companies adhering to those regulations are two different things.

If you want to have alternate OS on your hardware, find a way to lobby or vote it into regulations. I would support it.
This is not true, as there is no continent called ‘America’.

There is only ‘North America’ and ‘South America’.

American is used by people in the US because the USA stands for the United States of America.

Just like how the Mexicans use that term because the UMS stands for the United Mexican States.

Being offended at the use of American just for people from the US is simply due to a lack of education.

The term you are looking for is Pan-American.
When a person searches for something and clicks a Reddit link, Reddit instantly knows exactly what that person wants. Advice about which widget to buy, or how to solve a problem or whatever. That seems like an incredibly valuable data point for advertisers, way more so than vague guesses about demographics.

Is the ad business so bad these days that they can't effectively monetize this? It seems like they're flailing around in desperation instead of leveraging their core advantages.
It would be nice to see the idle power numbers, including the motherboard. A lot of the time I'm using my home PC for light tasks (browsing, listening to music, etc). The idle power is likely to dominate unless doing heavy processing tasks or gaming.
I'm in a similar boat. I'm rocking 3600 that I purchase in Feb 2020. I'd love a reason to upgrade, but I really can't justify it for my personal machine. It still does everything I want faster than I'd like. I'm personally just going to hold off until I need to so I can enjoy a massive improvement in a few years.
sure dang, I'm the bad guy now :D
It dates back hundreds of years.

You might of heard of people like Marx and Engles and the concept predates them.
Close (https://close.com) | Product & Engineering Roles | REMOTE (US)

Close is a bootstrapped, profitable, completely remote, ~90 person team of thoughtful individuals who value autonomy and impact. Since 2013, we’ve been building a CRM for small businesses with a focus on better communication, without the hassle of manual data entry or complex UI.

We're looking for a Senior/Staff Backend Engineer (Python)

Apply here: https://jobs.lever.co/close.io/163446a3-2f3d-4f4a-9aec-cb1c8...
you could always keep hertzner for work and use the others for experiments. although plotting being banned seems a bit extreme.
Well, it's not like Chrome and Chrome-clones users weren't warned about this outcome around ten thousand times over the last few years in every massmedia. Now the ball is on the user's side.
Perhaps Epic should focus more on actually making their platform not hot-garbage (aka actually making a better competing product) instead of holding games hostage and forcing users into their beyond subpar platform, they've had plenty of time and people still go to the steam forums for an epic exclusive to ask questions and make guides about the game. Steam is simply the better product and the only way Epic can stay alive is by employing anti-competitive business practices.
It's the law and being punished more severely than murder in most cases. It's also unnecessary because all of you know what this is about
And 30% soldering RAM on-package.
They specifically mentioned they had a range of glasses, so don't know why you say it's poorly researched:

> For their range of glasses – which included variants for champagne, schnapps and cognac as well as three different sizes for beer – the designer trio were inspired by the equally beautiful so-called Wirteglas, which the East German designers Margarete Jahny and Erich Müller created in the early 1970s.
> but most payment providers simply do not offer testing APIs of a sufficient quality.

Moreover, sometimes they vehemently oppose testing via real payments and reserve the right to cancel the contract should this happen.

To this day I have a distaste for working with payments.
Regarding SMS only auth, you should be cautious. Here's a blog with more detail: https://stytch.com/blog/totp-vs-sms.

As a suggestion for what to implement (I'm biased because I work there) but I'd encourage you to check out Stytch (https://stytch.com). We're an API-first authentication, authorization and fraud prevention B2C and B2B solution with several methods including email/password, email magic links, social logins and 2FA (OTP, TOTP).
It seems very easy to use.
Why equity share at all?

Simply look for a separate, independent business partner with marketing and support skills.

Their equity becomes the customer base that they will grow and develop in the same way you developed your equity in the software.

You simply provide service to this marketing partner at some agreed upon fixed rate. They will be responsible for finding and handling their customers.

A very simple business arrangement/relationship and clear division of labor. I'd recommend avoiding making this any sort of *exclusive* arrangement in case the partner does not perform.
> Good - Mozilla is only propped up in this position by Google, it's time to kick the crutch away.

I'd rather see Mozilla reformed rather than sink. It's the only non Chromium browser that still exists, isn't such a memory hog, and has good extensibility.
Let's assume we can trust these numbers. The user count is not material for a site that has already scaled and monetized, so focus on the actual money changing hands.

That is obviously in decline but does alone not capture how much worse off the company is today than before the acquisition. In 2022, the company did $4.4B in revenue and had negligible debt. In 2023, the company possibly had debt service payments in the range of $1.2B for the year. If you back out the mandatory debt service, 2023 looks more like $2B in topline.

Put another way: Twitter 2022 was significantly more capital-efficient than Twitter 2024.

Similarly, one can run a simple model of the value of the company now. Once you include the $13B in outstanding debt, you will end up with a negative number.

Yes, this business is currently in "collapse."
Why oh why would new users need to guess that "3.26.0" means the 2026 release, when a "3.2026.0" is a much more explicit statement, that also makes it clear that there will never be a "3.21.0"...
Where I live in Texas there are football (soccer) pitches in most local parks, school grounds, etc, which kids tend to use. Also often baseball fields and sometimes tennis courts as well. Most people here have such a park in a 10-minute walk from their home.
From simple to ornate and back again
> consciously choosing

This is remarkably hard to prove and also ignore that many people can play a role in suicide.

If you, say, bully someone every day and they take their life sure they made a decision, but you influenced it and you're partially responsible. People don't take their life for no reason. If you look at the reasons, it's incredibly complex and actually not mutually exclusive to gun violence. Meaning, their reasons may include there's a gun present.
It's the magnetic field that has the arbitrary sign convention. You can't determine the direction of a magnetic field from observations without using the right hand rule.
The author says his cancellation was prevented by Travelers not sending out a non renewal. Is it really just delayed for a year? Certainly they will"fix the glitch" and make sure to not renew his policy correctly the next go around.
I understand the scope of the problem. Saying nothing can change is also wrong.

We literally built a nationwide interstate highway system in this country which included bulldozing downtowns and spending the equivalent of hundreds of billions of dollars to do it. That wasn't that long ago, we're the same country in most ways.

It's a political problem at all levels. Not a technology or physics problem.

Looking at the full scope of the country and saying because the overall problem is large we can't take any steps to improve it is defeatist.
The weird prejudice against FF is too strong. I wager that people will browse internet with spam over switching to a better browser. BeCaUsE iT iS SlOwWwWw or something along those lines.