skysight-inc/HackerNews huggingface dataset:
Same, which is why I bristle at my title containing "engineer" as I don't have a PE. If most software engineers want to legitimately call themselves engineers, the field should be formalized as an engineering discipline, including coursework, certification/licensure and, better yet, apprenticeship-like experiences required for "real" engineers working toward their Professional Engineer license.

Edit: I'd add this goes double when working on safety-critical code, or anything touching protected health data, or payment/financial data. It's just too toxic and valuable to leave to a chance change.
The app is also your membership “card“. I haven’t used a physical Costco card for many years.
EvapoRust is a miracle liquid.
To find the correct pricing you just check how much shareholders make. If they get unreasonably high return on their investment that means the company is overcharging.

Tax shareholders on their gains and rebate customers if the company doesn't adjust the price.
Could also be using tracer rounds to correct the aim.
Hey, if you want to see potential improvement for your project, i have a similar one based on the same stack as you: https://github.com/thegoodduck/NetSour
DNS.fish: Domain DNS record lookup
What distributions specifically have you had a problem developing on?

I've developed on Ubuntu and Pop_OS! in C# for years and never hit a problem.
I wanted to learn some details about that story (I heard about it back then, but never digged deeper).

Your link seems to lead to some kind of shady video clip portal.

Was that intended? If so, is there a textual version as well? Video clips seem to be a poor medium for most kind of actual information transfer.
i've always viewed big pharma as like pre-internet record labels. they pick up talent (that often comes from bohemia aka government funded research), vet it, run the trials and put up the money, do the engineering to deliver it at scale and then market it.
In case anyone else is confused by the wording:

> A federal judge imposed a $125 million fine on Ripple after finding last year that its institutional sales of XRP violated federal securities laws.

OK so it violated the SEC rules for the institutional sales.

> The judge reiterated her view that Ripple's programmatic sales of XRP to retail clients through exchanges did not violate federal securities laws.

But it did not violate the SEC rules for the sales to retail.

I was confused at first. As someone else wrote in the thread: it's poorly worded.
https://www.amazon.de/dp/B0BCQ2N367?tag=vandover-21&linkCode...
I'm not sure why you're replying to me with a sarcastic response when I was merely disputing the notion that "The whole point of their privacy stance is to protect you from companies like Google and rogue governments".

On the other hand, the issue is not as simple as Apple following the law, because Apple chose to lock down iPhone and set themselves up as the sole gatekeeper for app installations. On the Mac, which allows distribution from outside the App Store, it's not possible to completely ban apps in this way.
My point being that the sani-wash that most all pubs/bars/clubs use would eliminate any bacteria hidden in scratches. Hence my caveat that I know America best and perhaps that is not the standard in other countries. A UK pub might not use these traditionally which may introduce sub-par cleaning.

Thank you for the explanation but already knew it, just going towards the part where commercial washers are less "soap" and more sani-solution.
Definitely. They need to be able to round up $GROUP when the order comes down. I'm sure everyone has a group to fill in there.
Got me thinking about FUTO's Source First License. I'm liking these movements in general, but they could use some consolidation and standardization similar to the *GPL family.
> the US didn't have the resources for more

They were correct that the US didn't have the resources for a second uranium bomb.
AWS 'Bucket Monopoly' attacks could allow complete account takeover
> In April 2024, students at Emory University organized a protest on the university lawn against Cop City and the university's ties to Israel. A statement from protest organizers accused the university of being “complicit in genocide and police militarization” and called for "total institutional divestment from Israeli apartheid and Cop City at all Atlanta colleges and universities." The protests were peaceful until Georgia State Patrol, Atlanta Police and University Police forcefully dispersed the protests. Law enforcement used tear gas, rubber bullets, and tasers during the crackdown. 28 people were arrested, including the university's philosophy department chair.

> The arrest warrant for the festival attendees stated that domestic terrorism charges were brought against those based on probable cause, such as having had mud on their feet, and that those with legal aid phone numbers written on their bodies were considered suspicious. According to The Intercept, there is no information contained in the warrants that directly connects any of the defendants to illegal actions. Atlanta police chief Darin Schierbaum refused to comment when confronted by journalists about this allegation.

> In May 2023, three activists were arrested and charged with felony intimidation of a police officer and misdemeanor stalking, with penalties up to 20 years in prison, for posting fliers and identifying the officer that shot Manuel Terán. That same month, three more activists were arrested and charged with charity fraud and money laundering for organizing a legal bail fund. Regarding the arrests, Georgia Attorney General Chris Carr pledged to “not rest until we have held accountable every person who has funded, organized, or participated in” the protests.

Hmmm seems like systemic abuse of power to me
Personally, I love Costco and find their product quality and employees to be better than Walmart / Sam's Club. The number of Costco members keeps increasing year over year so clearly they're doing something right [1].

[1] https://www.contimod.com/costco-statistics/
Something changed at the top with costco a year or three ago. The friendliness seems gone, and replaced by some really strange/hostile policies.

I ended up in a shouting match with the tire center manager who claimed I was in a "car accident", and thus my road hazard warranty was void after I took a nail on the freeway. I was not in a car accident, I would have known -- I was there.

30 minutes of my life I'll never get back grappling with him and the store manager -- for them to try saving a $90 pro-rata credit. My tire business has been pulled out of costco after like 25 years. It's getting tough to justify the rest of the membership. It's always a shopping hellscape there, and everyone is rude/grumpy.
> it's a bit silly though, I think if they could understand our language well enough to convey complex scientific ideas like an atom and its size, then smart people could probably find a good way to convey direction

You completely missed the point of the original thought experiment. The whole experiment already assumes that the Martian understands the concept of direction perfectly. That's the premise of it.

The hard part is to convey which direction is which. It's a completely different thing from the concept of direction.

It's not about Martians is so stupid and we need to try very hard to make them even understand what direction is. It's about whether there is a universal and fundamental (as fundamental as elementary particles) reference to distinquish left and right.

> Now you say if you are standing left side of the line looking left to right the numbers would go 3,2,1 if you are standing on the right side looking left to right the numbers would go 1,2,3

The Martian doesn't know how to "looking left to right". He doesn't know which side is left. That's the whole point.
I don't know why this was downvoted but this is absolutely a fact in places like America. You may want to feel all fuzy that you are recycling glass but unless you are geographically near a glass production plant, your glass most likely ends up in the landfill. It does not make economic sense to truck crushed glass around the country, there are not a large number of plants making glass.
Show HN: Kaption AI – WhatsApp Web Extension for Audio Transcription
Show HN: KaptionAI - Automate Transcription and Summarization for WhatsApp Voice Messages

Hey HN,

We're excited to introduce KaptionAI, a tool we’ve developed to streamline WhatsApp communication by using AI to transcribe and summarize voice messages.

Key Features:

• Voice to Text: Converts WhatsApp audio messages to text quickly and accurately.
• Summarization: Generates concise summaries of long conversations.
• Mobile Bot: Send audio messages from your phone for transcription and summarization.

Use Cases:

• For Professionals: Save time by quickly understanding long voice messages from colleagues or clients.
• For Students: Make group projects easier by transcribing and summarizing classmates’ voice messages.
• For Journalists: Efficiently transcribe and summarize audio from sources for faster article writing.
• For Accessibility: Provides text versions of audio messages to assist those with hearing difficulties.

We’d love to hear your feedback and suggestions for improvement. Feel free to ask any questions or share your thoughts!
They dont lose money on those sells, rather they just don't markup like everyone else does.

The mark-up on products tends to be so big that it looks impossible to buy at Costco prices without costing them money.
Oh who cares about Rust. This could have been written in many different languages safely, including C/C++. Would it have been easier in Rust? Maybe. But it's also a legacy codebase. So we shouldn't be surprised it wasn't in Rust.

There are SO MANY things that went wrong. They don't even seem to care about half of them.

Ok, it wasn't tested. It wasn't staged. It wasn't a slow roll-out over hours. It wasn't verified from the deployment servers.

How about why is it parsed in kernel space at all? I didn't see that listed.

Why didn't you have a mechanism to catch faulty updates at runtime and flag them so that you'd be able to survive the next boot? Mark somewhere on the FS "I'm loading #19583". If you boot up and find that, it means you failed, so skip it next boot. Succeed? Remove the mark. Tada. Resiliency.

Why are you even doing this stuff yourself? There are Microsoft APIs for a bunch of this stuff that would have helped reduce risk. Oh, because your code is deployed on XP and up and you don't want to have 2 or 3 versions? That went well didn't it. I bet if you were using those you wouldn't have crashed the kernel space.

Do you fuzz? We know you don't. You broke Windows. You broke Macs. You broke Linux. You keep doing this. You're not good at being resilient. You had to face-plant in front of the entire world before you decided to do something. I didn't see fuzzing mentioned.

Those mitigations you propose are not enough. They'll help, but you're still vulnerable. You're supposed to be a _security company_, I'd expect a better list of how to secure software from a security company.

By all means, use Rust or Swift or (insert other memory safe language) if you want. That's smart. But if their existing kernel module had no UB and buffer overruns, it would still be doing things a kernel module shouldn't. The language involved is just a very tiny part.
Devices with insecure SSH services are everywhere, say infosec duo
> We can see exactly how federal agencies would or would not abuse their authority

I would argue that federal agencies have absolutely spent those decades abusing their authority.
Gamer/enthusiast segment expects performance increase, not energy savings. CPU consumption is not even the greatest power hog in gaming PC.

Zen 3 brought 20% more performance at much better power consumption than Zen 2, and this set expectations. Zen 4 was a weaker improvement, and some people hoped that was one time thing, and maybe Zen 5 will get back to Zen 3 level improvements or better. But the improvement is even worse this time.

That's why in this consumer segment, 9700X is like Intel 11gen, a token increase in performance (and sometimes, decrease) as compared to previous gen, and thus a meh product. In other segments, like in desktops for work, or laptops, focus is different, and the same performance at lower consumption is a great new feature. So it's not all bad - it's just meh for gamers and enthusiasts.

Yes, you can overclock, and expect to either win the lottery, or maybe get problems like Intel has. If AMD did not clock these higher by default, there is a good reason for that, and it is not because of green political reasons. AMD has every incentive to clock as high as possible, to look and sell better. Most probably, the current batches of 4nm chips out of TSMC aren't rock-solid at higher clocks.

Re X3D, yes those should be better. But this is marketed as 9700X, not as 9700, so it's a flop. PCWorld was so surprised by the non-improvement that they postponed their review and checked with AMD if their poor bench results really are what AMD intended them to see.
I really have no idea what you're saying.
A performant table data structure with powerful and convenient syntax for interaction is one great feature Q has that Python lacks.
FYI, Java has tagged union types (since version 16).

Pattern matching too.
GitHub repo: https://github.com/runZeroInc/sshamble/
> They stopped the study because of the incredible efficacy and lack of side effects.

Are you aware that historically when this has happened, it almost always turns out to have negative side effects and marginal efficacy?

Don't you think an easy con is to flip a coin 3 times, and if you get heads all 3 times, tell everyone it always comes up heads, and there's no need to continue to measure it, but just to trust them?
Right ok that makes sense.
Is there a name for a specialized Sankey graph that also retains color across the combination stage?

It'd start to be a layout algorithm at that point, but example input arm 1 being orange (everything else blue) and the orange then subdividing into its ultimate destinations. Eg. 20% of this output, 15% of this one...
The police can't ever maintain lists of people suspected of criminal behavior?
Check, check, check. Literally tried all of those things. I'm trying man. Not much is clicking. I'll keep trying things though.

The best purchase I have made in the past few years was a subscription to my rock climbing gym. But I can only go climbing 2-3 times a week since my body needs to recover.
I used jitsi for a long time. Then they started throttling and then they demanded user registration. I ditched them at that point and started using this. What you say it's maybe true, didn't checked, but for above reasons I gave up on them. Each to their own I suppose
Yup, also MacOS only

> The security vulnerability was found within 1Password for macOS and targets users of all 1Password 8 for Mac versions before 8.10.36. To exploit this vulnerability, an attacker would have to specifically target 1Password for Mac users and convince them to run malicious software on their computer. An attacker could, the 1Password support posting confirmed, abuse missing macOS-specific inter-process validations in order to impersonate a 1Password browser extension.

> The macOS XNU (macOS kernel) inter-process communication framework is system-native and used by 1Password to enforce ‘hardened runtime’ protections that should prevent tampering with such processes and, therefore, prevent certain types of local attacks from taking place. The Robinhood Red Team hackers found a way around this protection during an independent security assessment of 1Password for Mac.
Crowdstrike in their own RCA wrote that they had no staged rollout for these types of updates: https://www.crowdstrike.com/wp-content/uploads/2024/08/Chann...

And I believe it because for administrators there is no configuration to delay the rollout of these "content updates", you can only delay the sensor updates.
> ... because there is none of the of the regulated safety and quality mechanisms required for software that are normally associated with professional engineering.

And then a lot of "real" engineering now require software anyway: self-driving cars (written in part by people who are hacking together webapps by pulling in thousands of NPM dependencies) comes to mind.

The future is honestly a bit scary looking.

On the bright side things are going to get "interesting". At some point in the past we had many "Uber but for ...". Soon we'll have "Clownstrike but for fridges", "Clownstrike but for cars", etc.

Should be fun.
That is correct, pdfjs is not usable for printing. Chrome uses Skia for printing, not sure what Firefox uses.
An interesting video came up on my YouTube recommendations last month that compares bardcore (and neo-medieval) to actual medieval music [1].

Western music underwent a huge change after medieval times moving from a modal system to a tonal system. Bardcore is tonal music trying to evoke a medieval vibe, and it often succeeds quite well...but it is still far different from what actual medieval music would have sounded like. If you like bardcore but are curious what historically accurate medieval music would have been like, you might enjoy the video.

[1] https://www.youtube.com/watch?v=X6_8ZEhmaGE
Also the government, aka the public, subsidizes a lot of those costs
I doubt there is very little cost to memberships for Costco. So it has extremely high margins.

Since the products that are being sold in Costco are close to wholesale they also carry a margin, just not as high. So even if 100% of the memberships were used, they would still make a nice tidy profit. Purely because the products literally pay for themselves. This is primarily due to how Costco has low costs to having little need for additional warehouses outside of their public warehouses. Their cost of goods sold vs revenue is about 87%. So about 13% profit. That is just the goods themselves.

So the more I think about this, there has to be some sort of cost to memberships. Especially for people arriving, because if there was no cost, why implement these scanners? While memberships help with profit, there is a huge cost to implementing something that could scare your customers away.

I also think the whole "makes a majority of their money" needs further explanation. The highest percentage of their profit is from the membership fees. The highest percentage of revenue is from the goods sold is my bet.
Do you think will take time for Whatsapp team to activate this feature in Whatsapp web? Because Whatsapp android app in beta version (2.24.17.7) already has a transcribe native feature for voice messages, I recently noticed that around one week ago.

edit: btw I don't know which model Whatsapp team is using behind scenes but definitely doesn't looks like is whisper because is notoriously slow in comparison with using whisper inside chatgpt android app or groq web interface.
That’s the problem: the term “LLM agents” doesn’t have a clear, unambiguous meaning either.
Sentiment might hold some merit, but this article is 80% copy pasting from an RCA report and 2 sentences saying nothing more than "This shouldn't happen" while offering no alternative or deep thought into improvement...
What makes intellij so much better than visual studio or vscode?
You can be overweight without being obese.
What about aerial drones flying over seas? Are we going to get, at long last, sharks with lasers?
Neat little app, I was just wondering where agents actually come in to it?

Looking at the code I can see any use of agents (MoA or model routing).
If you are serious about reducing bandwidth, why would you stick to lossless codecs?
Hey, tithe!

Thanks for your time! You gave us amazing feedback to work on.

We'll definitely look into this. Thanks again for your support and feedback.

We do not want to sound hostile.
Only until you realize that repli-cant.
Even bubba's pissin hot 3.5 inch magnum birdshot isn't going to reach above 300-400ft in altitude and its going to be extremely inaccurate if it gets there at all. I think most drones are typically flying above this.
It is horrific. I somewhat purge my feelings of guilt (I was born in the U.S.) by believing they "did not know what they were doing."

It's maybe a stretch to compare it to modern Russia bombing Kyiv — because modern atomic weapons are orders of magnitude more horrific.
>They could release an update that allows later updates to bypass Little Snitch

Or the ability could be there already without us knowing.

But fortunately we can still run our own routers/switches and see outgoing traffic. If you configure LS to block everything then you could confirm it with your network gear.
Oh yeah so unfriendly.

sudo dnf install dotnet-sdk-8.0.
sudo apt install dotnet-sdk-8.0
sudo apk add dotnet-sdk-8.0
While I agree based on the quality of software development I've seen over 15 years in the industry, I don't think the hard requirement should be a regulatory structure.

That absolutely can work, and does for plenty of industries, but it also creates the potential for a false sense of security until planes start falling out of the sky.

My frustration, and disappointment, in the software industry has generally been the complete unwillingness at scale for us to take on the responsibility to ensure safety and reliability without regulations enforcing it. Plenty of this responsibility (blame?) falls on companies led by individuals who are solely focused on profit and self-interest, but we have to own some of the responsibility as we're the ones agreeing to write and ship bad code.
Mineshaft Gap – A real-time strategy game for the C64 by Drmortalwombat
In the United States speech is not a crime.
You are reinventing PDF.
We're from the Government and we're here to help.

You need a license to operate a backhoe, but not to write software.
The Crowdstrike report explains why it crashed, but not how it passed final end-to-end testing. There appears to have been many tests of piece parts (unit testing), but that's not the same as testing the full system.

I would think all the end-to-end tests of the full system would have been instantly detected the problem and prevented it, because it would have failed all the end-to-end tests.

Did I miss something? Did they never test the complete system as deployed? Looks like it, but maybe I misunderstood something.
> Oh, because your code is deployed on XP and up

Not even, it only runs on 7 / 2008 Server and up.
I'm very curious about those auth patterns that are different. Are you talking of managed identities?
One of the most annoying things about not upgrading macOS are the recurring Notifications that try to get you to upgrade. There's no way in recent versions to disable them AFAIK. They are especially grating if the machine has multiple user accounts, as switching to a different account tends to trigger one.
I don't have a group to fill in there.
Those are untagged union types and are less useful than you think.

For one, they don't work for generic code where you want to discriminate. I.e., if you have a generic A or B type, you can't pattern match on it. And it's hard to add restrictions to the generic types such that it would work.

Such types sort of work in TypeScript, but TypeScript also has structural typing, meaning that it's designed for it.
There are decent mobile robot and pan/tilt platforms on Amazon for <$200. Hooking a gun and mobilenet up to this would be a Saturday afternoon project for most people here.

If you're worried about robots with guns that ship sailed a long time ago.
That's quite a list of problems with that update; wasn't just a single bug that slipped through the cracks.
Reject ClearviewCopOut Settlement
Great list. Although suddenly sex when single seems like even more of a bother than before.