skysight-inc/HackerNews huggingface dataset:
> One, it makes me worry about the mental health of the author. They are clearly really not having a good time living in our reality, and I hope they can find a way to relieve the suffering.

> Two, I hope no one else gets caught up in it. There are a lot of strong words and claims but nothing remotely actionable. It's pushing pure panic/fear/angst.

This made me laugh, it comes off as so condescending. Don't worry about my "mental health". The purpose of life is not to just be content all the time, it's to overcome suffering and achieve some level of self-actualization.

If we are on the verge of the apocalypse, It should feel apocalyptic. The question is of how urgent the apocalypse really is (taken with a grain of salt to make room for the unknown) and what can be usefully done.

> cloudstrike is just a company that is strong on sales/marketing but weak on tech, who found a market that requires you to be strong on both. I don't think there's anything wrong with such companies existing, but it seems clear they should never be in a position to break everything.

I do think there is something wrong "fixing" security by just outsourcing your problems to some other company to monitor. Real security is about one's own operating practices and standards. Companies like cloudstrike don't necessarily increase security, they increase fragility because they act as a central point of failure.

> The fix could be the market, regulatory, and/or technical. There are tradeoffs, so we probably need to work through the arguments of different approaches and different combinations of approaches.

The author suggests that the problems are more systematic. I would say the fix is cultural: we have a flawed culture of outsourcing security to the market, regulators, or technology.
You could even power it, too: https://powerlighttech.com/autonomous-vehicles/
You could do A but in addition to the security issues now you have to pay for public IPv4s on AWS too so if you have a significant number of services that are private but need internet access it is still cheaper than NAT gateway but just barely.

I've done B before for dev environments and it works well. For production there is a large list to make it high availability.

Which brings up one of the travesties of NAT Gateway is if you have a dev (or more) and staging and you want it to match prod you're all the sudden stuck with a paying for multiple NAT gateways.
Nope, and that definitely would have helped, but I bet 99% of people looking to use an old phone as a server aren't going to do all that either.
I mean, it's 3 statements with like 40 lines of JSON options. Debatable what counts as a LOC, but it's still pretty impressive.
Location: Jersey City, NJ, United States

Remote: Yes

Willing to relocate: No

Technologies: JavaScript, Python, Google Gemini, Claude API, ChatGPT, OpenAI API, Perplexity API, React, Redux, TypeScript, Node.js, PostgreSQL, MongoDB, AWS, Azure, Docker

Résumé/CV: https://docs.google.com/document/d/1xLRZqMJfUf92ykCML0qPS8eV...

Email: jai [at] chaiwithjai.com

I'm a senior full-stack software engineer and AI/ML specialist with 5+ years of experience, including roles at HashiCorp, HealthVerity, and Cityblock Health. I specialize in:

- Building robust, scalable web applications using React, Redux, TypeScript, Node.js
- Developing AI/ML solutions leveraging Google Gemini, OpenAI, and other LLM APIs
- Cloud architecture and deployment on AWS and Azure
- Database design and optimization with PostgreSQL and MongoDB

Recent projects include:
- Advising a NASDAQ-listed company on $100M+ in AI acquisition deals
- Managing 20+ junior engineers to build internal applications using Google Gemini and GCP
- Designing curriculum for university-level web development and AI courses

I'm passionate about using technology to solve complex problems and am particularly interested in projects involving AI/ML, education technology, and healthcare innovation. Available for both short-term and long-term engagements.

LinkedIn: http://www.linkedin.com/in/chaiwithjai
The raisin de etre for upper management is pointless bean counter driven metrics.
I know nothing of the sort. I'll stop arguing now.
You don't need to be more good in math than in high school. AI is a chain of functions and you derive over those to get to the loss-function (gradient) to tell you which parameters to change to get a better result (simplified!).

Now this structure of functions is different in each implementations, but the type of function is quite similar - even though a large model will combine billions of those nodes and weights. Those visualizations tell you f.e. that some models connect neurons back to ones earlier in the chain to better remember a state. But the activation function is usually a weight and threshold.

KAN changes the functions on the edges to more sophisticated ones than just "multiply by 0.x" and uses known physical formulas that you can actually explain to a human instead of the result coming from 100x different weights which tell you nothing.

The language models we use currently may map how your brain works, but how strong the neurons are connected and to which others does not tell you anything. Instead a computer can chain different functions like you would chain a normal work task and explain each step to you / combine those learned routines on different tasks.

I am by no means an expert in this field, but i do a lot of category theory, especially for the reason that i wanted a more explainable neuron network. So take my pov with a grain of salt, but please don't be discouraged to learn this. If you can program a little and remember some calculus you can definitely grasp these concepts after learning the vocabulary!
Eventually, it might be. Currently, the US airspace system could handle ~10x the GA traffic we have today (I'm basing this on the fact that when we were building it up in the 70s, we were selling and flying ~10x more airplanes than we do today).

However, as we get to much larger scales, we can start using our aircraft to actually augment ATC to help handle the traffic. the airplanes can have more intelligent communication systems to coordinate with each other and the pilots and automatically send and receive data to/from ATC with digital comms rather than voice radio. That's an entirely separate project and company though when Airhart is a huge success and we hit this problem :)
They didn't read the memo.

"Mynd you, møøse bites Kan be pretty nasti..."
The moment I tried typing on this keyboard in an Apple store, I knew it would cost Apple a ton of money.
I'm also everybody's "fren", and WAGMI...
These are not mutually exclusive positions, but afaik visual studio isn't part of the os. As another commenter mentioned, the builds are all 64bit as well. Sure you can always find a 32bit app to install, but the point is a beginner may not do that and be disappointed when the registers they see on their machine don't match what they read about.
CDK does two things:

- It provides a library in your favorite language to map objects -> CFN YAML

- It provides a command line to deploy that CFN YAML + any needed resources, like Lambda payloads. This is done with `cdk bootstrap` [0]

Mapping objects to YAML is straightforward -- every language has some way to serialize arbitrary objects to YAML. CDK provides level 1 constructs [1] with the allowed CFN types. I use TypeScript, so these types are _super_ helpful, especially with Intellisense. I'm not sure how helpful they are if you're using Python.

Once you have those level 1 constructs, you can build abstractions on top of them. That's what the more complicated L2/L3 constructs are.

Because the end result is CFN YAML, you do still need to understand CFN. CDK just makes the authoring experience significantly more pleasant by eliminating the need to write CFN YAML. You still need to know how to deploy CFN YAML.

[0]: https://docs.aws.amazon.com/cdk/v2/guide/bootstrapping.html

[1]: https://docs.aws.amazon.com/cdk/v2/guide/constructs.html#con...
> Of a sample size

Well, actually it's extremely obvious there you aren't actually attempting to understand my argument.

The other person noticed it as well.

Notice, how instead of going on about this, you could have instead gone back to my message and actually tried to figure out what my argument was.

But you didn't.

Because you aren't interested in understanding what my argument was.

> that a 50% failure rate

Oh you still aren't getting it.

It's not a 50% failure rate. It is a 0% failure rate. Instead it is that someone else noticed they you werent even trying.

Of course you aren't going to admit that.

But if someone else backs me up, thats really good evidence.

I am fully confident that the success rate is 100% and actually you could understand the argument if you stopped doing what we both know you are doing right now.
Low-hanging fruit of dodgy medical claims aside: why would you post this as a response to someone announcing that they are shortly going to die from cancer? Is the intent to make the point that this person's current situation could likely have been avoided if they had simply followed a particular diet regimen? Or perhaps as a PSA to others who may currently be facing cancer themselves?

Irrespective of the value or veracity of the specific advice offered, to comment something like this here is supremely tone-deaf. Read the room.
I imagine they are counting object literals as one line of code, I'm inclined to agree. Maybe they could have said in "3 statements of code".

> import { ISO20022 } from 'iso20022.js'

> const iso20022 = new ISO20022({ /.../ });

> const creditPaymentInitiation = iso20022.createSWIFTCreditPaymentInitiation({ /.../});

> console.log(creditPaymentInitiation.toString());

Now are we counting the import and not counting the log statement, or are we counting the log statement and not the import?

I'm not too worried about it.
It's the import, the "const iso20022 = new ISO20022" line, and the "const creditPaymentInitiation = iso20022.createSWIFTCreditPaymentInitiation". The big data chunks are being counted as one line.

I will admit I'm usually very skeptical about "Do X in Y line" claims because usually you can do anything in one line by shoving the entire codebase behind a "DoIt()" call. But I'll actually give them this one. I'm not even worried about the data taking up so many lines as clearly the data is necessary. If they were full of mandatory function calls or something I'd ding 'em too, but they're not, it's just the data you need.
The Ruhrstall X-4 [1] had five and a half kilometers of wire 80 years ago, along with a 20kg warhead and an acoustic proximity fuse.

1: Never deployed operationally Luftwaffe wunderwaffen, first tested in August 1944, wire-guided air-to-air missile.
I don't feel like this article illuminates anything about how noexcept works. The asm diff at the end suggests _there is no difference_ in the emitted code. I plugged it into godbolt myself and see absolutely no difference. https://godbolt.org/z/jdro5jdnG

It seems the selected example function may not be exercising noexcept. I suppose the assumption is that operator[] is something that can throw, but ... perhaps the machinery lives outside the function (so should really examine function calls), or is never emitted without a try/catch, or operator[] (though not marked noexcept...) doesn't throw b/c OOB is undefined behavior, or ... ?
Geothermal concentrates the thermal flux to the geothermal energy site.

What happens in practice is that such sites end up being rate-limited by either the thermal flux of the surrounding rock, in the case of dry holes which are bored and take out heat directly, or by depleting the groundwater and/or hydrothermal reservoir which feeds a "wet" geothermal project (as with California's Geysers).

Dry holes end up having a limited effective life of a few decades, based on what I've seen, after which there's insufficient thermal energy to drive electrical generation (though it may be suitable for other lower-grade heating applications). Wet holes vary in response depending on how rapidly groundwater is replenished. I believe that the Geyers has dried up numerous wells. In places with ample water infiltration (e.g., near coastlines or in wet climates), I speculate that intrusion of fresh cold water might cool the geothermal reservoir somewhat.

But the source heat, which is radiating from the Earth's core though the mantle and crust, has an effectively fixed flux. There's only so much heat radiating outwards, and a few localised pinpricks and steam generators won't effect that measurably. Volcanoes are far larger and similarly have little overall effect.
If you succeed in making this all easy, won’t these small airports fill up with planes?
Yes, I think you have it exactly right.
No, you're most certainly not alone. Very few icons are intuitively understandable, although even the folks at Nielsen Norman have trouble backing that up with data (as linked below).

What immediately came to my mind was Autodesk Maya, where they have similar menus that use text only labels (see the screenshot from their manual). They have a lot of very abstract and complicated features, so every bit of usability counts.

https://www.nngroup.com/articles/icon-usability/

https://help.autodesk.com/view/MAYAUL/2022/ENU/?guid=GUID-8B...
I don't think I made a false equivalency. What I'm trying to say is AI can't be perfect or always produce state of the art results. Bad outcomes can always occur, so we should remain vigilant, but not let perfection be the enemy of useful.
Does anyone know why Apple switched to the butterfly keyboard? Was there some kind of tangible advantage or design constraint? Was it cost-based?
It's not the complexity (IMO), it's the cost. A hobbyist can easily set up NAT gateway but very often the NAT gateway is the most expensive part of the entire cloud bill. So the hobbyist is left with paying it or exposing their server to the public internet. It is very expensive for what should be something that is a built in part of VPCs.

Heck, even if you're not a hobbyist, I've worked with companies that have dev environments that mirror production (except smaller instance sizes) and now all the sudden you have a ton of NAT gateways eating money for providing a basic networking service.
Speed up your GitHub Actions by runnig them on high-performance gaming CPUs
You import the library, initialise an object and call its method. I think it's fair enough to call that example three lines of code.

The bigger question of course is what do you end up with. Clearly that method call isn't going to actually send an instruction to your bank to debit your account and credit somebody else's. I guess `creditPaymentInitiation` is an object that has can be converted to a properly formatted message that can then be sent to your bank using an external tool?
I hope this is an appropriate place to ask.

Say I am eating well, exercising consistently, getting enough sleep.

For a male in his 40s, what are the best bang-for-the-buck ways to detect cancer before it becomes life-threatening?
That's persuasive-enough data to make me convinced. Thanks.

I'll still use kosher salt in my ferments because...well, just because. For one thing, the larger salt corns dissolve more slowly, and this gives me a longer period to work before chunks of chili pepper react with salt and start producing liquid. I've been surprised before by how quickly this can happen.
(Slower/less-liquid-ey is easier for me to handle with my particular (cheap, Aldi special) vacuum sealer.)

But if I get to that point in the process and discover that I don't have any kosher salt today for some reason, then: I'll have no reservations about using regular iodized table salt instead.
This eReader firmware has a built-in VNC application - https://inkbox.ddns.net/
I found your opinion, expanded: https://www.computerweekly.com/news/366598838/Why-is-CrowdSt...

According to former Windows developer David Plummer, Microsoft does, in fact, offer a number of APIs for third-party antivirus security. “CrowdStrike defaults to kernel mode, presumably because it needs to do things that can’t be done from user mode,” Plummer said in a YouTube video.

“And to me, that’s where Microsoft could be responsible, because on the Windows platform, to the best of my knowledge, some of the CrowdStrike security functionality requires deep integration with the operating system that can only be currently achieved on the kernel side.”

Microsoft has a number of APIs including Windows Defender Application Control API and the Windows Defender Device Guard, which Plummer said provide mechanisms for controlling application execution and ensuring that only trusted code runs on the operating system.

He said that the Windows Filtering Platform (WFP) allows applications to interact with the network stack without requiring kernel level code. However, quoting sources within Microsoft, Plummer claimed that the company had actually “tried to do the right thing” by developing an advanced API designed specifically for security applications such as that from CrowdStrike.

“This API promised deeper integration with the Windows operating system, offering enhanced stability, performance and security,” he added.

But the EU 2009 ruling effectively prevented such integration as it could potentially have given Microsoft an unfair advantage.

However, Ian Brown, an independent consultant on internet regulation, argued that Microsoft should have better security controls, rather than attempting to put the blame of the CrowdStrike crash on the EU anti-competition commission.

In a blog, he wrote: “For technology-dependent societies’ resilience, OS kernel-level software and equivalents on socially critical infrastructure systems (like travel, healthcare and banking) need to be very carefully tested (and ideally run on top of a formally verified microkernel) and controlled. But OS monopolists shouldn’t be making the final decisions about precisely what those controls look like, where they have implications for competition.”
Google Violated Antitrust Laws in Online Search
Relevant subthread: https://news.ycombinator.com/item?id=36805571
I simply don’t understand how these types of diversity initiatives are legal. They are explicitly discriminatory and violate the fundamental principles underlying laws. And I agree with you that placing these social justice restrictions on a critical element of national security is incredibly irresponsible.
It takes a while to design, manufacture, and test/validate new silicon. There is also a very elaborate software stack on top of it. This is a multi-year effort to reproduce for an extremely talented, nimble engineering team. And by then, Groq will have even more refined and powerful systems available.

Also, when an end market is growing as fast as the AI compute market is, multiple players can do very well for years at a time. I think Groq also has a high probability of being acquired by Google/Microsoft/Apple/Meta if the FTC allows it. But they are probably better off following the hockey stick growth for a couple more years before doing that.
Visual selection of elements to block has been available in plenty of Safari extensions over the years so what's the complaint?
thanks for the feedback. companies that need to programmatically send payments via bank need a corporate bank account that allows them to send programmatic payment instructions. i'll make this more clear in the docs!
Google loses antitrust suit over search deals on phones
Yeah that’s it. Probably just wasn’t supported in the rust age library when I used it. Will double check.
> I'm probably about 50% into my collection and I now buy a lot from Bandcamp, but also iTunes... I feel like I'm seeking absolution from the music industry, or something like that...

Go see those bands live and buy something from their merch table, they'll make a lot more money than if you just buy albums.
I haven't given my email address to any websites that are involved with pornography or other disreputable things, nor have I given my email to any website with connections to illegal activities.

The number of leaks with my specific email address doesn't really matter. The point here is that there are thousand and thousands of data breaches happening all the time. These all affect real people. These all have wronged people, and these people have no redress.

Your gut reaction of "there's a problem, let's criminalize" seems to match the general consensus here in the USA. We'll criminalize and jail endlessly, but it's not working, the problem is getting worse, more data breaches happen all the time, airlines cancel all flights, hospitals cancel medical procedures, all because we can't build secure IT systems. The problem keeps getting worse despite our criminalization.

One thing we wont try is expecting competence and accountability (financial liability) from our wealthy and powerful organizations. Nor will we try empowering upstanding security researchers, and meanwhile criminal hackers continue to act with no regard for the law.
> the top jobs usually comes with required work to train the next generation

Not for free. The reason the system worked back then is that apprentices were basically just a source of extremely labour if not indentured servants outright. They were entirely dependent on their master if they wanted to advance their career.
Well, why not?

I don't understand this prevailing perspective in highly individualistic societies that pain is good. If you can achieve the same result without the pain why is that so bad? When does it become progress?

If I can be healthy just by taking a pill a day as opposed to dying, what's the harm? Lives are saved and that's... bad... somehow?

If I can get my nick nacks without going to the store what's the harm?

Sometimes things are too good to be true. But most of the time, things really are just good. They are just better. You do just progress forward. That's why I can write you this comment instead of writing a letter and waiting weeks for a response. Why did we give that up? Isn't waiting painful, and therefore good? I don't think so.
Ignoring the fact this isn't even true, you're completely misunderstanding my point.

As I said, Google does not prioritize for technical expertise, primarily because that's quite individual-centric. They're a large organization and their goal is to make sure people are formatted and replaceable.

They hire generally smart people and mold them to solve problems with the frameworks that they've previously built, with guidelines that are set such that anyone can come and pick it up and contribute to it, in order to facilitate maintenance in case of turnover or changing teams.

They also hire a lot of people straight out of university, with many people spending large portions of their career there without seeing much of the outside world.

As a result, their workforce is not particularly adept about using third-party tools in a variety of situations; they're optimized to know how things work at Google, which is its own sub- (or arguably mono-)culture.

Being an expert requires using a tool in many diverse codebases for widely different applications and domains. A large organization like this is not a particularly good data point to assess whether people can become good experts knowledgeable about the gotchas of a programming language.
If someone says they're immune to RF jamming, I naturally interpret that from the perspective of blocking communication. I don't necessarily expect that they're claiming to be immune to EMP blasts straight-up destroying the electronics.
SiFive's P670 Cores do: https://www.sifive.com/cores/performance-p650-670
If and when they are available, I don't know, Sophgo licensed them: https://www.cnx-software.com/2023/10/21/sophgo-sg2380-16-cor... preorder is here: https://arace.tech/products/pre-order-milk-v-oasis-16-core-r...