skysight-inc/HackerNews huggingface dataset:
Re 2: How is that "spoofing"..?

You just demonstrated the uglier package-manager-independent overrides(npm)/resolutions(yarn) aliternative method. Because for whatever reason they couldn't play nice with each other.

npmjs.com seems to be interpreting the field incorrectly but 1) AIUI that does not affect actual npm usage, 2) If you rely on that website for supply-chain-security input I have bridge to sell... Basically all the manifest metadata is taken as-is and if the facts are important they should be separately verified out-of-band. Publishers could arbitrarily assign unassociated authors, repo URL, and so on.

https://docs.npmjs.com/cli/v9/configuring-npm/package-json#o...

https://classic.yarnpkg.com/lang/en/docs/selective-version-r...
I've never been to Boston, but Wikipedia tells me they have several universities - Harvard and MIT, which I've heard of, and also Boston University, Boston College, University of Massachusetts Boston, Bentley University, Brandeis University, Tufts University, Northeastern University, Wentworth Institute of Technology and a load of others.

In a city with a population of 600k that's going to be a decent part of the local economy.
Osint for Investigative Journalism
Yeah true enough, they probably spent more on diesel alone.
Hugely surprising that package.json and package-lock.json don't have to match. The way I would expect it to work is something like:

for d in dependencies_from_package_json()
get_package(d)
if hash_package(d) != package_lock_hash(d)
error()
end
end

And not:

use_package_lock_and_ignore_package_json_lol_fuck_you_haha_kthxbye()

I also discovered that npm doesn't actually verify what's in node_modules when using "npm install". I found this out a few ago after I had some corrupted files due to a flake internet connection. Hugely confusing. Also doesn't seem to be a straightforward way to check this (as near I could find in a few minutes).

But luckily "npm audit" will warn us about 30 "high severity" ReDos "high impact" "vulnerabilities" that can never realistically be triggered and are not really a "vulnerability" in the first place, let alone a "high impact" one.
Teenage Engineering is like the reincarnation Apple Computers.
Thanks for that feedback! I will make sure to share it with the teams! That streamlined experience is something that we work hard to achieve. --Katie
> However, I do think there is a case to be made for falling into the trap of being more interested in the gear than the thing you're meant to do with the gear.

Is that such a bad thing? It’s supposed to be a hobby, if geeking out on gear relaxes you you shouldn’t have to feel bad for not being productive with it.
Farming is a pretty big thing though, if you want to get into that it might be better off buying property and slowly turning it into a smallholding. Or work at a farm as a farmhand.

Anyway, not parent commenter specifically, but if you're in a situation where you have loads of money but don't know what to do with yourself, volunteer work is always an option, and there's loads of things you could do, be it formal volunteer work (e.g. homeless shelters, retirement homes) or informal (set up IT classes at your local library, go around your neighbourhood and pick up trash, pick up a conversation with a random lonely stranger)
GenAIPot – The First Open Source AI-Powered Honeypot
Solr. The correct answer is Solr. All the search features of Elasticsearch (both are built on Lucene, which provides the actual search implementation) without the problems that Elastic (the company) or Elasticsearch (the product) brings with it. 99% of companies using Elasticsearch would be far better of with Solr.
EASTL is not a C++ standard library implementation even if it's design does follow it in parts.
Why are these spam accounts not perma banned and removed?

For example, this[1] account mentioned in the article has 1781 packages of gibberish.

Also, the whole reporting process is onerous, there is a large form. Of course, gatekeeping on reporting is good, but there should be a possibility to report an entire profile of package publisher.

[1] https://www.npmjs.com/~eleanorecrockets
Don’t get me wrong, i think streaming is great, and it has allowed a lot of artists to publish music that probably wouldn’t have made it otherwise.

Some only have one or two songs in them, and with streaming that’s fine. With record labels they’d have been forced into a record deal producing one or two good songs, and 3-5 mediocre albums.

Likewise, for pop music, streaming is great. Pop usually has a very short lifespan where a song is popular, and after that the majority thankfully fades into oblivion. I would hesitate to purchase pop music even on iTunes despite most tunes being $0.99, but with streaming i don’t think about it.
Exact same here, Google auth in a chrome extension
An Introduction to Nix for Ruby Developers
> Doctors without Borders soliciting donations

We had such a visit recently; we were so appalled at the very idea that DwB would stoop so low as to send door-to-door solicitors around the town, that we immediately assumed this person was scoping the block for a potential break-in. Because he asked about our neighbor and we accidentally let it slip that he's away, we put up a hidden surveillance camera[0] overlooking the stairway and both our doors' for a couple days, just in case someone decides to come back at night. We also immediately queried Doctors Without Borders about this, warning them about a potential crime done using their brand.

Imagine our surprise where Doctors Without Borders responded to confirm that the person who visited us was, in fact, legitimately soliciting donations for them, and that they actually do door-to-door. Something in me died that day.

--

[0] - We repurposed a nanny cam for this, where by "nanny cam" I mean Ubiquiti G4 Instant, because the only way you can get a baby camera these days that doesn't send videos of your kids to random third-party servers is by buying industrial surveillance hardware.
Interesting approach. I hadn't considered actually implementing such "brute force" methods. I guess it's similar to fuzzing.

I think the problem is you are then moving your "real" condition/decision branch documentation into your tests. The tests are then basically a guard rail for just in case someone modifies some abstract bit of code and it changes the behaviour of some otherwise opaque decision branch. The approach in OP seems to be to just move the "real" logic/documentation into the code itself and do away with the abstractions (and perhaps the tests too).
Interesting stuff, thanks for the reply!

Do you run into issues where they block your scraping attempts or are they quite relaxed on this? Circumventing the bot detection often forces us to go for Puppeteer so we can fully control the browser, but that carries quite a heavy cost compared to using a simple HTTP requester.
The sun doesn't shine on me
The maximum of 4 users can be a bit limiting.
Just enter a username and I’ll give you full access
Not at all! I'm reminded of this blog post: https://brooker.co.za/blog/2023/04/20/hobbies.html
The best understanding of matter is in the form of quantum field theory (QFT). QFT is always formulated with some background metric (geometry) of spacetime as an input.

One idea is that the metric (geometry, gravity) could be a field just as matter is a field and people tried to apply the standard rules of (perturbative) QFT to gravity but failed. This is because the theory of gravity is unrenormalizable [0]. An interesting avenue in saving this line of thought is asymptotic safety where the idea is that gravity coupled to the standard model could actually be renormalizable in a certain sense [1].

In any case general relativity and quantum theory have so far been irreconcilable and there is now consensus on how to bridge the gap between those two theories. It is exactly because of this that most physicists will think of gravity and the other forces to be of a different nature.

When people say that gravity is not a force they mean that there is no known particle which acts as the intermediary of said force. For all the other forces we have a theory that explains the exertion of force via a particle.

Your first point states that "general relativity is just a model". Many physicists believe that it is more than a model but a true description of what the world really is like. I understand your urge to label theories as models, but ultimately the question is whether or not there is some level of ground truth that can be accessed in the form of mathematical theories.

[0] https://en.wikipedia.org/wiki/Renormalization#Renormalizabil...
[1] https://en.wikipedia.org/wiki/Asymptotic_safety_in_quantum_g...
If/when we are able to provide object storage in the future, we will announce it on our social media channels, our customer forum, and our customer newsletter. We are also always very grateful to anyone who posts our good news here on HN. --Katie
Interestingly, negative prompts for stable diffusion (like "deformed hands") has similar effect.
How LLM decides what's hallucinations? Mayhaps, it double checks itself? But probably it became self-aware.
A rope or two, tied off in just the right places, could eliminate most of the danger by controlling where the tree is able to fall.
https://en.m.wikipedia.org/wiki/Eurorack#/media/File%3AKeith...

How the hell do you replicate your sounds between performances, recordings, etc.

This must be the musical equivalent of people sending eachother zip files with source code instead of using git, lol.

EDIT: don't get me wrong, not dissing the approach! It looks glorious and I wish I could play with one once..!
There’s lots of services like this that I have seen, including a popular one where you can donate $1 to a charity in order for your email to reach someone’s inbox.
What do you mean time is irreversible? Your movement in it is irreversible, just like your movement on a one-way road is irreversible in space. Time itself does not possess the property of irreversibility, at least in modern physics. All the equations describing natural phenomena can work both ways, forwards and backwards in time.
Beware, the commentator is now going to argue that the covid vaccines were somehow secretly injected before 2020, because, you know, it was part of "The Plan (tm) (patent pending)"
Agentic Security – LLM Vulnerability Scanner
The steam controller that the steam deck was based on can still be found. I bought a few of them when they had their final sale.
Badge of beta (tester).
In MS Excel, adding a new line within a cell is Alt+Enter. In LibreOffice Calc, the same is Ctrl+Enter. It’s like the LibreOffice (or probably StarOffice/OpenOffice teams before that) wanted some kind of vengeance on Excel users.
I read it as a rule of thumb or explanation device.
You can replace it with a broader and probably better principle about all two-party interactions: "Which one of us is more challenged right now?" If you are the less challenged party, you should probably be mindful of airing your grievances.

And therein lies a complication: You might be dying of cancer but be a socially skilled person. And your visiting brother might be healthy as a spring baby, but as socially rude/unskilled as ever. Who is now the more challenged part - you might be dying of cancer, but you are still better equipped socially to wrangle your brother and the situation, than he is.
I'm not saying we should tolerate that brother, but precisely his 'social cancer'/lack of ability to handle his (social) interactions leaves him with 'chronic social cancer' as well.

This goes too for whenever you are helping someone with solving their problem - are you helping them in a sensible way, relatively to how they are challenged
- often we end up fighting the 'victim' as we smother them with 'advice'. ("Well you only have this problem because you refuse to do what I told you to do earlier" yada yada).
It's definitely something that plays Bardcore at least.
In this example it's faster for me to understand what the code does by reading the comment than to parse the code itself. If you're just scanning over a lot of code and looking for what you care about it could be helpful.
One thing that I like about working at Hetzner is that it is privately owned, so we don't have a bunch of investors expecting an ever-increasing return on their investments. We can re-invest profits in the company itself, in our infrastructure, and in our crew. --Katie
RuSSH: a Rust SSH client and server library
AWS tracks the cloud's biggest security threats and helps shut them down
One might even say: He fought the law, and the law won.
I couldn't find again the example I saw many years ago, I could only find a GCC bug that has been fixed now. So you're likely right and I just didn't remember correctly. But we still can have the zeroing out of memory before deallocation that can get silently optimized away. Maybe also naive attempts at checking for signed integer overflow could be silently optimized away. My general point is that, if the compiler determines that the code has dead instructions/unneded checks, it is very likely that the programmer's mental model of the code is wrong. So, just like the case of using an integer as a pointer or vice versa, we should have a warning telling the programmers that some code is going to not be compiled. Also in the case of the null pointer check: this would make the programmer realize that the check is happening too late and should instead be performed earlier
Reminds me of a summer job I had once, sitting at a machine assembling the plastic part of toilet blocks. I sat at one end where my job was to place a foam slice rough-side up onto the plastic bit appearing in front of me. Pssht. Pad. Psssht. Pad. Psssht. Pad. 8 hours a day, break every two hours where I'd spent some of that money on a snack, CD player with pirated music doing its thing.

I mean I only spent two weeks or so doing that if I recall correctly, the rest of my time there was supplying the eight or so machines (times five people per machine) with parts and taking the finished boxes away, but still.
Sourcetrail: Free and Open-Source Interactive Source Explorer
It might not be an environmental cause - if people are genetically more susceptible to those cancers when aged between 20s and their 40s then a lot of people in the older age ranges would have already died from them before the year 2000 and so wouldn't be caught in their data.

If they want to confirm it is an increase then they could repeat their analysis on a set of data covering years previous to 2000.
I’m curious to know why you thought it “sounded like this was a protest project ‘for the people’”?

I’ve read the parent post above and looked at the website and see nothing that would make me think it’s a “protest for the people”.

It just seems a little strange when you then go on to say “strive to address… what was said, not what you imagine the other person said”.
I'm really glad you've found my "book" useful!
Makes me want to continue writing it :)
Nobody is building human-level artificial intelligence with language alone
> hating how Apple makes decisions

Apple makes decisions like any other company. They are not going to spend engineering time (money) on things that don’t benefit them in some way - that’s a quick way to go out of business. Doubly so if you are actually enabling customers to move away from your eco system - you might have lost future service sales.

You cannot blame apple for acting in its own best interests. That’s the nature of the capitalism beast.

If you want hardware to be opened up for the installation of other operating systems, you’ll have to lobby a governing body for that.
This is awesome, and simplifies lot of my workflows when using their APIs directly. I also want to give a shout out to Outlines team, https://github.com/outlines-dev/outlines, they've been doing structured outputs for the last 12 months, and their open source lib can be applied across all open weight and closed/API-based models. Most likely, Outlines heavily inspired the OpenAI team, maybe even using some of their codebase.
Miniatures cost extra, just so you know. Bulky stuffs are cheaper.
Your first reaction is to attribute this specific situation to intentional malice?
This is a great post, but I want to dispel this never-ending myth on HN that Japan does not have a lot of cars and drivers. To be clear: All highly advanced non-micro-state nations are driving nations! Read that twice, please. (Yes, we all know that Japan is insanely urbanised with at least three megacities.) Just 15km outside major cities in Japan will be lots and lots of driving. More than 30km, basically every house has a car.

That said, I don't know why the number of deadly accidents is so much lower in Japan, compared to the US. Is it speed? Is it driver training? There are so many K-cars driving next to huge dump trucks that could squish them like a fly!
> However, I do think there is a case to be made for falling into the trap of being more interested in the gear than the thing you're meant to do with the gear.

Have you ever met a guitarist[0], or a golfer? I play guitar, and as a teenager I spent _years_ playing a cheap encore guitar plugged into a no-name 15w amp imaginable with a zoom 505 [1]. I practiced for hours upon and hours and sounded awful. Now as an adult, I get to spend some money on the hobby and sound like what I thought I sounded like aged 15!

[0] - https://www.guitarworld.com/features/gear-acquisition-syndro...
[1] - https://www.youtube.com/watch?v=cGKrBrCw-aQ (not me, but representative)
Whoever is the creative director at TE is amazing.
I can pass those on as +1s for our customer wishlist. Thanks for the feedback. --Katie
C++'s approach also doesn't stop alternative approaches implemented in third-party libraries and sometimes those also do get added to the C++ standard library spec (many standard APIs are very close to pre-existing Boost APIs, for better or worse).

Since most standard library implementations are open source you CAN also pick components individually even if it takes a bit more effort to get all the required support cruft and avoid namespace clashes.
Many performers use a semi-permanent patch. You effectively build a synthesizer with exactly the affordances you want, and carry the thing to the gig patched up. (Those setups tend to focus a lot of cable management too, lol, so that you can actually reach the controls)

Or, some do improvised live patching, in which the goal is NOT to replicate sounds.
>You've missed the point. I made absolutely no claims about Americans.

You didn't, but I did. Like any place, Americans have a culture of their own, and car ownership is a big, big part of that culture in most of the country. (Similarly, owning guns is a big part of that culture for a large fraction of the population.)

>When a person moves from a place with bad public transit and walkablity to place with good public transit and walkablity it is likely that they'll go car free or at least use their care much less. Same applies the other way around.

Well, of course: people have to be practical at some point. Someone moving to a car-bound hellscape is going to need to get a car to have an enjoyable life, and someone moving to a dense city where car ownership is extremely expensive and inconvenient is likely to not want a car at all. But people don't just randomly move to these places: they move there because they want to for some reason, and the ubiquity (or not) of cars is probably a big part of that reason for many. People who absolutely love driving everywhere and hate public transit aren't going to move from suburban USA to Manhattan or Berlin or Tokyo, and people who like living carfree in major cities aren't likely to make the reverse move unless there's some huge incentive (high-paying job, family obligation, etc.) and even here they're probably not going to be too happy with the change.

I really feel like a large portion of the pro-dense-city people really think that almost everyone really secretly wants to live this way and only buys into car culture because it's forced on them. While growing up in a particular environment obviously has a huge effect on your personal preferences, and people sometimes change their opinions after seeing or experiencing a different environment, I think they're discounting how many people really do like car culture, even after seeing the alternatives. My view is that car ownership is a luxury, and a car-based society has huge economic and ecological costs and is ultimately unsustainable outside of rural areas, and eventually more-efficient societies are going to outcompete car-based societies (or, they'll both be destroyed in an ecological collapse leading to general societal collapse). I think we're already seeing a lot of this with the US, where labor costs there are absolutely insane compared to the rest of the world.
Late edit: I should I have written "Luup", not "Loop".
You might not wish yourself Baldwin's encouragements to do so.
Open source Claude artifacts, supporting GPT-4o
https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web

We have open sourced a claude artifacts solution that can be used in our own LLM chat. It not only supports claude, but also supports GPT-4o. Everyone is welcome to provide feedback.
JapanTimes agrees with you: https://www.japantimes.co.jp/japan/2023/07/21/explainer/bike...

> you’ll have to pass a quick traffic test and submit proof of identification on the app in order to begin renting.
I'd say most performances on these are accompanied by a DAW. Then you just record it and re-use sounds between performances. For some instruments/tracks you probably want the freedom to play it live and accept that it sounds different between performances. In fact that's the whole appeal of it in my opinion.
Applied Cryptography Group
Ban the root cause (funny token money). While incentive exists it will find a way.
The system it runs on is part of the specification. A program is correct if fulfills all specified requirements. You're saying a car is defective because it breaks when you put sugar in the tank.
PBC Library – Pairing-Based Cryptography
Does anyone know what tool and font was used in the illustrations in the article?
I'd usually associate the term "regional" with chains like Meijer, Giant Eagle, and Winn-Dixie.

With 2,392 stores in 38 states plus DC[1], I'm not sure Aldi US qualifies.

[1] https://stores.aldi.us
I have written safety critical software.
this is going to be amazing for fantasy mmorpgs
Time travelling in London with Streetview [video]
This sounds so ridiculous from an outsider perspective, it's absolutely crazy!
Oh nvm, it's just a drug dealer shooting another drug dealer
I would love the product visual to be interactive. It screams "play with me".
SF is rainy for Dec/Jan/Feb according to Wiki climate data: https://en.wikipedia.org/wiki/San_Francisco#Climate
IIRC, Einstein actually spent quite a bit of effort trying to reformulate electromagnetism as a geometric curvature just like gravity, but eventually published a paper admitting failure. I recently saw some physicist talking about revisiting that with some new tricks because maybe it wasn't such a bad idea after all.
It can do that too, as it supports essentially unlimited accounts.
I know only pieces of his life, but whenever a video or audio clip of Baldwin pops up, I listen voraciously. He is articulate in a way that seems to blend the cerebral with the emotive. He seems to summon forth both Maya Angelou and Christopher Hitchens; The level of articulateness is so rare. I wish I had him on tap as a podcast, ... endlessly ruminating. If you want a slice..

[1] https://www.youtube.com/watch?v=9jXwWCyMJyc

[2] https://youtu.be/oFeoS41xe7w?si=T9ZnSOAfSqpqj-Y2&t=851
Particle Launches Tachyon SBC with AI Accelerator and 5G Connectivity
Ah good catch, I somehow still assumed same galaxy.

Thinking about it, ironically I think the direct mention of Ursa Major might have played a part in that.
Alaska Airlines blowout: Crew detail 'chaos' after mid-air blowout
You don't (mostly, except by ear) and that's part of the allure of it.
IntelliJ Idea 2024.2 Is Out