skysight-inc/HackerNews huggingface dataset:
> It's not treated as a trade-off, outside Apple's marketing

It absolute is by anyone working in the field, and it’s not just Apple. A lot of places have been looking at ChromeOS for similar reasons, tons of people are running Kubernetes on trimmed down Linux systems which are far less “serviceable” than traditional servers because it reduces the attack surface massively.

> There are active zero-click exploits with various levels of persistence on the market today; you want to talk about relative scale in a post-Pegasus era?

Yes, actually. Your emotions are clearly strong on this issue but you really want to get some data and analyze it – for example, how long are users left vulnerable for traditional operating systems versus locked down ones or how hard is recovery?

Nobody is saying that there’s a universal optimum here but there’s clearly a trade off which people should consider when deciding what’s better for their situation. If you don’t need to run arbitrary binaries, can meaningfully segregate data between apps, etc. the benefits of breaking with tradition is pretty high and a high percentage of people will never hit a downside.
The newer version is 2021, not 2017, though the title on top of the site says 2017.
If you've got a couple hundred grant laying about, you could probably set up a shell company and acquire .intern through a several-year ccTLD acquisition process.

I'd like to think people learned from .dev and such. I doubt any scammer will be able to use it.
Standards, best practices, and copying.

I'm always looking for the hidden unofficial standard, or the option that has the best fit with either existing tech or the "Next Big Thing" people are moving to.

Like, if you ask me to choose a language, there's only about five I'm even going to look at. "more elegant code" isn't enough reason that I'd want to use some new language nobody knows, that half the IDEs don't support well.
The authors of Stuxnet were “motivated enough” and had the means at their disposal to do what they did. I’m just saying, where the motivate and means exist, it’s possible.
(2015) even
One of my more vivid memories from childhood was the guy who pulled up to the computer store in a Trans Am, walked up to the counter and said, "I want a Visicalc."

After the salesperson explained that it was a computer program which ran on an Apple ][, the guy said something to the effect of, "Set me up with what I need.", and the salesperson proceeded to put together pretty much one of everything in the store all of which was then loaded into the Trans Am, and after writing a check, the hopeful accountant drove off.

A while back, when I read the book _Diver's Down: Adventure Beneath Hawaiian Seas_ to my kids I had to explain what slide rules and adding machines and ledger sheets were --- it's really remarkable how we have finally reached Babbage's exclamation:

>"I wish to God these calculations had been executed by steam."
> There's way more to see and do than any one current lifespan.

Perhaps this a personal view but I had conversations with elder people and most will tell you the same, a very long life (even a healthy one) is quite boring and depressing, you start to see the same patterns again and again, everything and everyone you loved dissappear and the essence of humanity doesn’t change. Same play, different actors and costumes.
I remember many years ago when I used to read print magazines about programming and web development.

One of those magazines told a story about a web site that had lost a lot of data. What had happened? Well, somehow they had this page that

1. Required no authentication at all, and

2. Was using links like

<a href="/path/to/file?action=delete>Delete file</a>

And so the Google web crawler had come across this page and happily visited each and every one of those links.

That’s when I learned about the importance of using forms with POST requests for certain actions instead of using links that send GET requests.

And then some years later someone told me about this thing called HATEOAS and about RESTful APIs and that actually there are different HTTP verbs you can use other than just GET and POST. Like for example

DELETE /path/to/file

As for your question about how someone is supposed to learn that these days?

Ideally whatever web development tutorials or courses or books they are using would at some point tell them about the different HTTP verbs that exists, and of how and when to use each of them, and crucially to tell them about bad consequences of using GET for anything that has side-effects like logging out a session or deleting a file.
Thanks, but I've already evaluated JuiceLabs and it does not handle what I need it to. Plus with the whole project going commercial and the community edition being neglected I no longer have any interest in trying to support the project either.
Remember how tons of developers got surprised when Google got the .dev TLD, because they were using domains they didn't own to develop software? Well, now .internal has been reserved so developers and companies can safely use .internal domains without that happening to them.
The Magic Mountain by Thomas Mann is basically a fantastic account of this phenomenon.
> For one, perhaps because Telegram does not take sides and does not take down Russian content.

it does take sides, FSB can take down channels that are too concerning for them, but for the most of it they are pleased with just monitoring and getting user data they need
Will this work with Redshift via SQL interface? Or am I looking at this wrong?
I had a similar experience when i was in highschool and learning python. I wrote a image->ascii image convertor using PIL as you did, one image would take a few hundred ms and it was fine, but as i played with it and added more features/learned more i tried to do it on video frames extracted with ffmpeg and it would take atleast 4x the duration of the video or even more to convert it in ascii video.
Few months ago i coded it in go since i got back into programming and it was significantly faster(The overall code was also smaller but maybe that's just because i have a bit more experience now) even tho in both cases the implementations was the most naive one i could come up with, without any optimizations.

Edit:
I went ahead and tested both, took me 30 mintues to set them with identic parameters on 3602 frames(roughly 1 minute video)
Keep in mind that this is just a naive implementation with 2 nested loops itereting in a step of 12 over the pixels of the image, no fancy math or numpy used in the python version. Image for reference[0].
Also keep in mind that the step and length of the ascii charmap used affects performance but here i used a simple one "_^:-=fg#%@" so it's a bit easier for the python code, here are the results on my i7 9th gen laptop

1 Minute video 720p 60fps

GO - Execution time: 359647 ms, 5.9 minutes ("asciifying the frames") + 30~ seconds ffmpeg video conversion

Python 3.12.3 - Execution time: 0:16:25.002945, minus ~25-30 seconds ffmpeg

[0]: https://i.postimg.cc/CK30z1jt/frame-000039.png
[1]: Video using a more detailed ascii charmap(" .,:;i1tfgLCG08@#") in the go version -> https://streamable.com/7h8jc3
> I have to wonder what the difference is between a Tacoma sport and an AWD vehicle, I think it’s 2WD mode and maybe clearance

As a long-time AWD driver who entertains the idea of getting an offroad vehicle at one point, this is my current understanding:

AWD: If one wheel slips and starts spinning, all other wheels stop turning. You are stuck. Clever electronics applying the brakes on the spinning wheel can help to redistribute the torque to other wheels, you might get unstuck.

4WD: If one wheel starts spinning, only the other wheel on the same axle stops turning. The transfer case is locked, and the other axle still receives torque. If both axles have one spinning wheel, you are stuck.

4WD with one locker: If one wheel on the axle with a locker starts spinning, the other wheel on the same axle still receives torque. If both axles each have one spinning wheel, you can still move the vehicle with one wheel still receiving torque.

4WD with locker on both axles: If you manage to get stuck with all 4 wheels spinning you should reflect on how the heck you ended up in that situation.
You're welcome about the feedback.

As for contacting me, not really, I enjoy my anonymity of Hacker News and anyways, we are satisfied-ish with SendGrid right now. So even if you got the feature, we are not potential customer at this time. I'll keep your company in mind in case that changes with SendGrid or I change companies.

EDIT: When I say Ops person in charge of email, email isn't my sole focus, in fact it rarely comes up. However, when SendGrid misbehaves, I'm first one that is called.
Google analytics
Google search console
Leadfeeder / Clearbit for anonymous browsers

Those will give you data and let you build funnels to analyze, etc. the most valuable metrics depend on your product and team (plg and slg motions look at very different metrics)

Hope this helps.
Rogue BIOS always had total control of the system; it doesn't need exploits.
Okay, a mock H100 object would also save me money. I could pretend a 3090 is an A100. “The experience would be that a 3090 is an A100.” Apples to oranges comparison? It’s using a GPU attached to the machine versus a GPU that crosses a VPC boundary. Do you see what I am saying?

I would never run a training job on a GPU virtualized over TCP connection. I would never run a training job that requires 80GB of VRAM on a 24GB VRAM device.

Whom is this for? Who needs to save kopecks on a single GPU who needs H100s?
I have MS, where autoimmune processes deteriorate the conductive coating on the nerves (myelin), and fasting is known for greatly boosting myelin repair. In fact, the most effective currently known remyelination treatment is a fasting mimetic (metformin) alongside an antihistamine (clemastine). It also regenerates the immune system, with obvious benefits for optimal functioning.
> Is China or India any less represented at the UN because they have the same number of votes as Cuba and Micronesia

Yes, very much so. That’s part of why the UN is not taken very seriously and why the security council exists.

> The senate has plenty of representativity.

Debatable. It was certainly fit for purpose when it was set in place. Is it appropriate nowadays? Probably not, especially when you consider how it impacts the electoral college.

I tend to find the USA political system a bit dubious (I think the same of the one of my own country to be clear and I generally have a poor opinion of presidential systems anyway). Still, the country has been mostly stable until now so I guess it’s fit for purpose.
It isn't clear whether it was the milking robot or the farmer's computer that was compromised.
Bridging the gap between AI and data warehouses is crucial, but I’m not sure SQL is the best fit for AI engineers who mainly work with Python and AI APIs.

At DataChain, we are solving this by creating a Python API that translates to SQL under the hood, which is pretty easy now with Pydantic. https://github.com/iterative/datachain

WDYT?
It is not Open Source. But it is the best file manager on macOS.
elderly patients in care homes is a far cry from anyone attempting to do this on their own
Very recently we had Zerox [0] (Pdf -> Image -> GPT4o-mini based OCR) and I found it to work fantastically well)

Would be curious about comparisons between these.

[0] https://github.com/getomni-ai/zerox
Russia considers itself to be its own kind of civilization, separate from Western, Chinese and others. It's all in a doctrine "Russian world"
I don't know if this answers the question, but I think one of the big responsibilities of a leader is to make a decision when the decision isn't obvious and it's blocking you.

Someone: "And we're building that shed next week"

Team: <bikeshedding conversation>

Leader: "Let's paint it black, it's not that critical and we can always change it later"

It doesn't matter if its the best choice. Getting blocked on it is too expensive and other people are too worried about covering their own butts that they waste time on it.
Sorry, what happened with .dev?

EDIT: just saw your comment about Google here

https://news.ycombinator.com/item?id=41205394
Of course placebo is involved in everything, as you know, whether you are aware of it or not, but the results of fasting are well studied and only a web search away.
> the legitimate ones I’d initially generated still worked

This spooks me. I take this to mean either:

- They are still using the compromised key for validation, meaning if you have access to any old token, you can still mutate that, maybe needing to play around with the issuing times

- They built an allowlist of all permitted tokens, and check that list first. In which case, might as well use random session ids instead of JWTs, and at the same point where the allowlist is being checked, mutate the request to inject a JWT that the backend can use.

Also, kind of curious why the switch to RSA4096 instead of elliptic curves, since they are generally faster / smaller.
Interview with Scott Tolinski, LevelUpTutorials and Co-Host of Syntax.fm Podcast
I'm so sorry. I only learned about Jake due to his post the other day. I understood this was coming but still felt shock and sadness when I learned just now he has passed. Wishing you much strength.
(I assume you’re talking about loading Slack in the website? That’s the only WebKit surface you have that I know about.)

Let me turn the question around for you: why do you think shipping Electron will save you? Sure, maybe WebKit has a broken video decoder this year. What will you do next time when it’s the GPU driver? You already know what the answer is: you diagnose it as far as you can, report it upstream, and communicate the best you can with your users. You seem to have the mindset that every bug exists to be fixed, and that’s not true at all. They are all a tradeoff. It’s easy to go “oh if we bundle everything ourself we can shift more control to ourselves to fix bugs because more of the components are ours”. First of all, you actually have to do that: turns out plenty of companies operating at scale are unable to do that (have you looked at how often Discord updates their dependencies?). And even when you’re committing to doing this and follow up, you have to understand that you’re unconditionally shipping a worse experience to all your users in the hopes of solving saving some time for some small fraction of them. This isn’t something that I am completely against (for example, I advocate for shipping debug symbols to users-but that’s another long argument) but you also have to look back at yourself and go “ok we’re shipping 98% of the same code across platforms and supporting macOS Mojave takes an extra 2 engineer-days a year, maybe this is an OK state of things” rather than being absolutist about something you’re not achieving anyway.
That is understating the facts by quite a bit. The editor will usually do an initial cut without the director, but once the director is involved in editing the two of them work very closely, often sitting in editorial together making the changes in real time. If the director asks the editor to make a change, there is basically no chance that the director won’t subsequently review and approve the change.

The director’s cut may not necessarily be the final cut, particularly with newer directors, but for someone like Christopher Nolan it almost certainly is. So however the film was edited, it can be assumed that that is exactly how Nolan intended it to be.
Look at GenAI/LLM engineer reqs and job descriptions to get an idea what the skills and work looks like.
Regarding the alleged performance benefits of using a public CDN: if there ever was a cache hit because a user visited one site then yours that coincidentally used the same CDN and query version (pro tip: never happened), and in a short enough time to not suffer a cache eviction, the user did not notice.

When the CDN was slow, every user noticed and thought your website was slow.

You gave away free analytics and made your website worse, there wasn't even a trade off.
A number of compounding factors.

Work conditions for providers aren’t great. Cost cutting has driven more work to providers without increasing pay.

Hospitals are constantly cutting provider costs and increasing overhead burden. So doctors that used to get 10 min per patient to write notes now get 5 and a couple additional patients. Nursing staff available is low and so doctors have to do more. All this adds up to more suck and doctors quitting earlier.

Higher health care needs due to aging population, that’s kind of a given.

Also general lack of providers coming down the pipeline. Needs are up but the number of doctors are roughly flat. It’s also not the ticket to a good life it used to be.
You would make way more money as a tech bro than as a doctor and have better qol.
Bunch more discussion on the proposal earlier in the year:

Proposed top-level domain string for private use: ".internal"

https://news.ycombinator.com/item?id=39152306
I've got Chrome and Firefox both open and think the 'dying web' is a bit of an exaggeration - it seems to be doing fine. I tend to use Chrome more because it seems a bit smoother and the translate feature works better. It's developed a weird glitch with twitter/x though that if you scroll using the spacebar the thing keeps on drifting down. Dunno if anyone knows a fix for that one? That drives me to Firefox.
Right, I sense a lack of open-mindedness here, or curiosity, fasting is widely recognized as having unique effects on stem cells including the immune system.
To reduce hallucinations.

https://arxiv.org/pdf/2311.03287
I like it. I mean, I like the why. It's not so offensive as to make me turn and run from your site, but it's definitely odd. To me, it actually makes it feel as if the text is askew.

One of my eyes sees things kind of slanted when I'm not wearing my glasses - I felt like I was seeing that when I was on the mastodon thread and trying to observe the change the server admin suggested...
.local is in this weird state where it's _technically_ not reserved, but most PCs in the world already resolve it with special non-DNS software because of the Bonjour/mDNS protocol.

So you end up with the IETF standardising .local, because Apple was already using it, but ICANN never did much with that standardisation.

I doubt ICANN will actually touch .local, but they could. One could imagine a scheme where .local is globally registered to prevent Windows clients (who don't always support mDNS) from resolving .local domains wrong.
> People just don’t care.

Devs don’t care, because they aren’t being forced to care, and they have loaded M3 MBPs, so they don’t notice a difference.

I firmly believe that we’ll see more of a swing back to self-hosting in some form or another, be it colo or just more reliance on VPS, and when we do, suddenly performance will matter. Turns out when you can’t just magically get 20 more cores on a whim, you might care.
"the workers on the project are not, as a whole, sufficiently experienced or well trained"

Plenty of executives pretend that if you throw enough procedures and micromanagement at cheap entry-level employees then they can produce similar stuff as experts, and this seems to be evidence Boeing is trying and failing to do just that. Any executive can put procedures in place, and good training can do great things, but it's hard to say you care about quality then slash pay for good labor. Take this line from the actual report:

"Michoud officials stated that it has been difficult to attract and retain a contractor workforce with aerospace manufacturing experience in part due to Michoud’s geographical location in New Orleans, Louisiana, and lower employee compensation relative to other aerospace competitors... it is too early to determine if the new training alone will result in a notable decrease in nonconformances and CARs issued. According to a NASA official, further quality assurance challenges related to the workforce stem from work instructions that lack explicit details on how to perform the task and with what tools. Some technicians reported they had to hunt through layers of documentation to identify required instructions"
People were using .dev for internal things and acted surprised when Google decided to use it on the internet.
It can even go both ways: nothing prevents Telegram to be blocked in Russia, as well as being used to harvest potentially life threatening info about Russian citizens at the same time.

Same for YouTube. If it gets blocked for good, does not mean you can't go to jail for speaking out while on YouTube.

The obvious take away at the moment is to think twice what you write anywhere in the Internet, as well as to avoid doing things with such dire consequences, or at least not bragging about them anywhere on the net.
It's not the "brainstorming", instead it's the confusing, uncertain, complexities that are known to require extreme concentration and that still may not be enough to accomplish anything at all during the first session.

But you know you need to set aside a potentially lengthy session or nothing at all will be accomplished either.

And if you are not truly prepared for that you know it's not going to come out as good as it could :\

Too often the right thing to do at the time is not start right then.
I can't remember a single instance where Tg will take down a channel that is too concerning for FSB.

After all, Telegram is a worldwide platform and you can directly read Ukrainian news feeds there if you wish so. What would a concerning channel make compared to that?

YouTube was constantly blocking Russian channels and striking down videos, whereas I only remember Telegram banning a single channel in three years, due to a direct US sanctions hit.
I wish they'd gone with [Compact Tabs] a-la Safari instead of Vertical Tabs a-la Edge.
A unified tab and address bar is just so much more elegant and versatile.
After switching back from MacOS to Windows, it's only thing I truly miss.
Vertical tabs just seem like a transitional step.

[Compact Tabs]: https://9to5mac.com/wp-content/uploads/sites/6/2021/06/Scree...
DARPA wants to bypass the thermal middleman in nuclear power systems
Amateur hour. Real professionals use .int domains...

https://www.iana.org/domains/int
The only time I've had CL code break due to lack of versioning was when I was depending on stuff written by the author of Qlot, so I either avoid or locally pin stuff written by him.

Most of my dependencies are really quite stable.

[edit]

I thought of a place where things broke that aren't related to Fukamachi; sometimes foreign libraries have changed to the point where they won't grovel any more, but I don't think that's something that Qlot aims to solve.
To expand on my comment: Google bought .dev and started selling domains. In truth, developers probably only noticed because Google pre-loaded their .dev TLD into HSTS, which meant that any domain ending in .dev, even if it's a local one or one you own, must communicate over HTTPS if you want a browser to interact with it.

As a result, even if you bought steves-laptop.dev for yourself, you still wouldn't be able to run an HTTP dev environment on it, you'd need to set up HTTPS. I think that was probably a good move by Google, because otherwise it could've taken weeks for most devs to notice.
<https://news.ycombinator.com/item?id=9740876>