skysight-inc/HackerNews huggingface dataset:
> You don't think we have the technical ability to determine this, to some degree? We have self driving cars for crying out loud.

Depends on how granular the data is. If it’s second by second telemetry, you could tell this. If it’s an aggregate report for a month, you can’t.
If they have your address; birthday; and SSN a whole lot. Generally, they could apply for credit cards; loans; set something to bill to you; etc...

Fortunately, it's getting harder without previous addresses or other verification methods.

For non-Americans that don't know, our Social Security number is generally assigned at birth or when you become a citizen by the Social Security Administration. Social Security is a disabled or elderly benefit we all pay into (roughly 7.5% employee and 7.5% employer - ~15% total). It's the only number we all get, since not everyone gets a driver's license; ID; passport; or other identifier. Unfortunately, it's been used to identify us for everything, and until recently was typically in plaintext on most forms (medical; tax; student; etc...).

CGP Grey has a good summary of how it came about and why it's become a problem: https://www.youtube.com/watch?v=Erp8IAUouus
Related:

NASA says Boeing Starliner astronauts may fly home on SpaceX in 2025

Lots of discussion: https://news.ycombinator.com/item?id=41184359
Not even genetics, just simple population numbers. It takes 2 humans to make a new human. If each female human on earth isn't making, on average, 2 new humans (plus the .1 extra to make up for infertility and mortality) then the population of the world will shrink. Simple as.
Subject: Don't get all up in my grill
Time for the US credit bureaus to lock everyone by default.
Sqlite isn't a standard per-se, but outputting an Sqlite db file, if you're writing the export code, is easy enough, and enough of a standard that I dare say you'd be doing fine to output .db files marked as sqpite.
As a publisher you would prefer to work with people who don't make their own engines. As a developer you are kind of wary of the guy who wants to write his own renderer. That person is going to be bored scripting.

Plus, twenty five years ago a game developer could afford to hire the person with the chops to right a renderer. We used to be able to get people from Cal Tech rolling off aerospace companies after the cold war. Now people with those skills are way too expensive to hire.
Related:

NASA says Boeing Starliner astronauts may fly home on SpaceX in 2025

https://news.ycombinator.com/item?id=41184359
The myth of the 20000x farmer, debunked. Merely a 10x farmer.
He probably didn't need to shut down the APIs =)
> But the computer doesn't know if you accelerate and brake hard because you're an aggressive driver, or if your circumstances require it. Maybe you have to commute to your job in heavy stop-and-go traffic with difficult merges.

I would contend that this doesn't matter in terms of risk. It doesn't matter if the risk is caused by the person being a bad driver or if the risk is caused by the commute route that you take at a certain time of day.

In either case, there's risk that is shown by the data. If you are driving a route that is stressful and risky, it doesn't matter if you're a good driver or a bad driver - you're doing something that is risky.

In days of old this was done by looking at the commute distance and likely route (the insurance company has home address and work address).
I think it is normal to know popular libraries of a language. For python, django, drf, fastapi, pydantic or jinja are very common.

There are some people resisting type checks in python but I think fewer and fewer. I dont think people refusing to learn basic concepts and libraries are a reason to not use something.

Also, I am not a big fan of not doing something useful because we need to do a bit of learning. It seems like a variant of "we have always done it this way". Plus it is a strawman attributed to python developers, IMO.
You could have an O(N^2) algorithm outperform an O(N) on the scale of 10,000 (or whatever scale you want to imagine). The big-O notation compares only asymptotic behaviour, and sometimes the lower power factors are overwhelming.
On HN back in 2017, with 71 comments -

https://news.ycombinator.com/item?id=15688900
For sharing, I use diceware passphrases (with few words quickly typed in iOS keychain). With autocomplete it’s quick.

There is a good mobile app for Pass though (I don’t use it). I try to separate the systems, and not to share as much as possible. Otherwise, Vaultwarden would quickly sync, and is reliable.

Pass with Yubikey is more secure than other password managers in my opinion: You decrypt the password for a site and other passwords are not exposed. With other password managers, the whole vault has to be decrypted.
Hahaha this is great dude. Also your creative fae submission is fantastic. I can see why it didn’t win but it’s amusing.

The ElevenLabs narrator did say the faeries applied “Polish”. From Gdańsk or Warsaw? :)
I also didn't expect to find it, partially because I've had basically no exposure to it... I've heard about these formal verification tools but I never really grasped them or felt like they applied to any of the problem domains I work in.

But WOW did the example here really drove home how it could be a very useful tool for me. I can think of a few projects I've worked on or reviewed in the last year where I'd have considered using this, and still am.
Not impressed. That guy looks literally nothing like Bill Gates, and his cocaine-snorting is physically and physiologically very implausible.
as of 2011 they are fully random instead of being based on geographical region and groups

https://www.ssa.gov/employer/randomization.html
I love that 75% of the post was OP checking the math on whether or not he should join the contest.
I think it's just a branding thing. If you can give it a household name that sticks you'll be fine. Sodium bicarbonate vs baking soda, MSG vs seaweed salt, textured dairy protein solution vs milk. Impossible burger vs pea-protein patty.

All the cool stuff happening in food these days is more chemistry than cooking.
That is false; the license doesn't speak about any such right.

Rather, the copyright holder of the AGPLed work is exercising their right to dictate the following:

[Y]our modified version must prominently offer all users interacting with it remotely through a computer network (if your version supports such interaction) an opportunity to receive the Corresponding Source of your version by providing access to the Corresponding Source from a network server at no charge, through some standard or customary means of facilitating copying of software.

Under the AGPL, the visitors to the program need not request the source; it must be prominently available for them to obtain in a self-serve manner. No mention is made that they have any kind of right. They are not parties to the license at all. A copyright license can only grant rights to licensees.

By the way, "all users interacting" could be interpreted to literally mean all users, including users who visit the login page, but do not have an account (and are not authorized to have one due to not belonging to the organization that runs the service).
Enhancing Postgres to ClickHouse replication using PeerDB
The rules explicitly state that multiple entries are allowed.
They kicked the can down the road again at today’s press conference.
Yeah it seemed very hands on , running around finding issues, getting people on them etc.
Most times you don’t, though.

If I open a pull request on GitHub, the name of the branch is completely incidental. I already have textual descriptions for every commit. The pull request gets a title and a description. The branch name is there, but if it wasn’t (or if it was nonsense) don’t think anybody would notice. Once the branch is merged the branch name is lost to git. It might be recorded in the merge commit description but at that point it’s flavor text and not actually a pointer within git.

I have also fully converted to jj and yeah, it really does make you realize that branch names are often pointless for short-lived work in PR-based workflows.
Yes. 99% of the time “identity theft” means a huge company cut corners on their security policies and wants us to subsidize their negligence. Every so often there are cases like that guy who pretended to be his former coworker for decades but they’re rare enough that they make the news internationally. Most of the time it used to be things like instant credit applications where they didn’t “slow” purchases with ID checks.

The good news is that companies have lost the presumption of competence there. In the 80s if a company said they’d confirmed that an applicant was you using your SSN, a lot of people would falsely believe that was sufficient but by now they’re not going to get far if they sue you unless they can provide better evidence because everyone knows huge breaches have happened many times.
Nice read, I always wondered some items on the pages seemed "mixed up".
> The 2->3 transition happened a long time ago at this point and I still run into lingering effects.

Interesting. I read about this a lot and I feel like it's a gimmick at this point.
What lingering effects of the Py2->Py3 transition do you run into?
Man, there are people raking in hundreds of thousands, to millions, doing exactly the same thing on youtube.

They have tens and tens of (list) channels where all the vids are generated, AI voiceover, AI script, AI images, etc. - don't think OP hacking his way through a contest is too bad.
You don't have to be swimming in VC money to be an elitist.
I understand,I will learn it just after my current course then,thankss
The new CMS which is gaining traction – Contenthook
In the past month, a highly versatile developer and programmer tool, the Contenthook CMS (Content Management System), has been released and achieved remarkable success within the developer community.

Contenthook is a powerful new CMS packaged as an NPM module. Developed by Jonas F. Franke (known under the programmer pseudonym "BinaryBlazer"), Contenthook has garnered significant attention. A separate post will be dedicated to showcasing his impressive work.

Contenthook has seen rapid adoption on NPM, currently boasting around 4 million downloads the week and a total of 13 million within a short period. Developers are increasingly choosing Contenthook over alternatives like Contentlayer for their Next.js projects. Recognizing the need for backend support, Franke has thoughtfully divided Contenthook into two packages: @contenthook/browser for the frontend and @contenthook/node for the backend (Node.js environment).

Contenthook is a powerful CMS designed as an NPM package that interacts seamlessly with a dedicated cloud service. The provided Command Line Interface (CLI) simplifies local interaction with the cloud through commands like "contenthook push" and "contenthook pull." For more comprehensive information about the software, please refer to the official documentation.

The development team is currently prioritizing both feature enhancements and the introduction of new functionalities. Contenthook users eagerly await what the future holds for this promising platform.
> If the the market for insurance is "too efficient" at determining who is high-risk and who is not, then it is no longer fulfilling its social function.

Then we need to break whatever that social function is away from the umbrella of "insurance." Mandatory car insurance is predicated on the fact that you can pay enough on average to cover your damages to others but might not be able to do so in the worst case. If we're in a world where somebody's driving exceeds the external damage bounds they can afford _even on average_, subsidizing those people is no longer the job of insurance.
Fake reviews and testimonials constitute speech.... speech that involves the ability for corporations to sell products amd make money.

Meanwhile the speech of elected officials - and those running for office - is uncontrolled and they lie to the public with impunity.
we are using the nswag tolchain (https://github.com/RicoSuter/NSwag) for generating c# and typescript clients based on openapi specs generated by swashbuckle. you can tweak some details using config file too.
it works quite well and even has integration in msbuild to avoid manual cli steps.
> It's not courtesy if it's non consensual

Good, so you agree that explicitly refusing to call someone what they want to be called is against common courtesy, since you are using a word to refer to a person that they have not consented to be called.

> but pragmatism would make it as logical as making all cars fit for one-armed people

If you could make all cars perfectly suitable for one-armed people for very low effort and without deteriorating the experience for two-armed people, you'd be an asshole not to do it. Just like a person tends to be an asshole if they refuse to call a person what they want to be called.

I generally go by my middle name. I have done so since before it was even my decision to do so, my parents made that decision for me and I have chosen to remain doing so. I have had multiple jobs where middle management and even co-workers would steadfastly refuse to use my middle name, instead trying to call for me by my first name that I have never listened for in my entire life. This continued even after speaking to them about it after them complaining that I didn't hear them call for me because they used the wrong name. That is the same level of assholery.
Depending on the license of the compiler, yes, the binary is related to the compiler in some way. In practice it literally contains code from the compiler.
The Saudi Crown Prince Is Talking About an Assassination. His Own
Agile tends to fail because all-too-often the team's attention turns to the pomp and ceremony of "Agile" over getting the work done. I've met teams that believe they can wave their magic Agile wand and make the work go away. They tend to get a bit upset when I point out doing that work is your job.
Hope they open iPad too. Right now I am stuck reading/writing NFC tags with a Sony Felica USB terminal.
It's certainly an annoying future. I fully expect some sort of ASN-reputation map and service to become de rigeur in the next decade. Pretty sure heavier-duty SIEM/IPS systems already do that.
We had little strings that encoded call signatures, like "iiff" for int int float float. Someone cooked up a way to have typescript validate the strings at build time, but the way it does typechecks against string literals like that seems to cause every string literal in your entire compilation to get validated in advance to figure out whether it could possibly be that specific type. Each possible value - let's say we had 'f', 'i', and 'l' originally and then we added a fourth option for 'd' - caused the typecheck time to magnify by increasing the possible options. IIRC.
OpenAPI is just pointless abstraction like GraphQL
Certainly. MIT/BSD more or less says: steal away (but retain this license notice). In some cases that's desirable.
Apple opens up NFC transactions to developers. There will be 'associated fees'
Sugar, spice, and everything nice: Part 1
I've been building a novel JavaScript engine, Nova, with some friends, designed around taking data-oriented design to its logical extremes and seeing what comes out of the other end. The engine is still quite basic but it is not a complete toy either.

Using data-oriented design was originally my idea, and I wholeheartedly believe it to be a good idea. As such, I've started writing some blog posts on what sort of engineering decisions this leads the engine to take. This is the first instalment, though the idea explored here isn't strictly "data-oriented" yet.

Hopefully you might find this mildly interesting.
my understanding is that there's a bit of a catch-22 with data removal - if you request that a data broker remove ALL of your information, it's impossible for them to keep you from reappearing in their sources later on because that would require them to retain your information (so they can filter you out if you appear again).
One application I like is the use of the Seifert-van Kampen theorem to prove that the fundamental group of the circle (S^1) is isomorphic to Z. While category theory is not strictly needed to prove this (you can compute pi_1(S^1) using R as a cover in a way that is purely topological, see Hatcher "Algebraic Topology"), if one states the Seifert-van Kampen theorem for groupoids (this uses category theory through the notion of a universal property/pushout) one can compute pi_1(S^1) largely algebraically just from the universal property - in fact you can go through the whole proof without mentioning a homotopy once (see tom Dieck "Algebraic Topology" section 2.7).

This might not meet your criterion exactly, as one can extract a more topological proof and relegate the category theory to a non-essential role, but this requires some more effort and is a harder proof. So I do think it still illustrates that the category theoretic approach does add something beyond just a common language.
I have found that pandas is much better than the standard library csv library for just importing random CSV files and automatically figuring out what you would want to do most of the time, detecting column headers, dealing with quotes strings, etc.
I think you are underestimating python developers. When python became popular popular languages did not have such expressive type systems. Java and perl were popular then.

Also, here it is claimed the library should be part of the language, and at the same time it us assumed it is too complicated for the users to understand. It seems like the feature being a library solves this, if we let go of the self-imposed requirement of it being part of the language.
Show HN: Golpo - AI True Crime Podcast Generator (1-2 Min On-Demand Creation)
My brother and I, both Stanford CS students, built an AI True Crime Podcast Generator. Give it a prompt, and in 1-2 minutes, it will generate a podcast based on that prompt—no matter how recent, how broad or specific, or where the event occurred.

Check it out! For reference, this is a sample podcast I generated with Golpo with the prompt ("Bangladesh recent"): https://shorturl.at/eqr8O
First line:

> Benjamin Franklin wrote and published Poor Richard's Almanack annually from 1732 to 1758
>The "pure land" of democracy in North America was never pure

don't mix your pet grievances together, having full public knowledge of every person in your country is democratizing, frankly, an aid to democracy, not a hindrance. Not saying I want to live in that world, but it's not an impure democracy.

Norway (and others?) already publishes everybody's income statements. Not healthy imo but I guess would aid more accurate snitching (and envious resentment).
Odd. I didn't find it tedious at all
In the UK. I'm sure the US would create something similar but more obnoxious.
Finally, CA is acting on these unhealthy lab products masquerading as food. Only last year, CA signed into law an upcoming (2027) ban on brominated vegetable oil (BVO), potassium bromate, propylparaben, and Red 3.

Now, the FDA just last month revoked regulations allowing the use of BVO in food. It's been banned in most EU countries since 1970!
Simple Diagnostics for Common Diseases
We recently have had the technology to do this (I helped on a household robotics project last year where folding cloth was a task). As a ADHD afflict, I would love nothing more, but I didn't see a way to do it affordably. I fully expect it within a few years, though, perhaps with RFID tags for folding and cleaning instructions.
>and a universal menu bar equivalent

webOS, the poster child for simple and consistent UI, did all of this.

Much like the Amiga, this OS is always imitated, never copied, even though Android should have thrown out everything after Honeycomb to adopt what it brought to the table.
It is far more feasible to learn to save than it is to earn more than 150’000$ a year for most people. Hell, in Europe, you are way above 90%, of you approach 100’000$.
Like I'm going to believe some guy who doesn't even know how to spell "almanac"
I only did the top 3, haven't heard of "Chexsystems" before.
I’m optimistic for Harris, not just because she’s so much younger and less beholden to industry, but because she created an entire unit for privacy protection when she was the California AG:

https://oag.ca.gov/news/press-releases/attorney-general-kama...
> No, I dont think any of that. Why are you trying to pin me down on my opinion about emissions killing people?

You said neither, I thought you meant you disagree with neither, not "I'm phrasing it differently".

> You call the argument pointless, yet you are still replying!

That sentence started with a "then", and apparently the premise of that sentence wasn't correct in the first place.

Also it's perfectly reasonable to say "Oh, I thought the discussion was X, but it's Y, now I am leaving." "still replying" by making that final post is not foolishness.

> I am not arguing anything about opinions of emissions or how harmful they are. Just peoples use of correct language.

It sounds like you just hate the word "direct".

If enough people disagree with you about a word, then you're wrong. Words are defined by consensus.

That's all I have to say, I think. Sorry for trying to talk about the actual evidence since that's irrelevant to your argument.

-

Except, wait... the original post you replied to didn't even use the word "direct" even though half your posts are harping on that word. What is going on.

"Contributing" is still doing in this situation (unlike with the string). Why are you fine when that word is put in, but not fine when it's omitted? Especially when it's clear that nobody is blaming VW for all emissions. The contribution is implied.
“Rotting” has a connotation of uncontrolled decay; cheesemaking is a well controlled process that enhances the base material.
That's not what is in question. Of course if you someone has reason to comply with section 13 of the license, then users who download the code are having the code distributed to them.

The disputed claim is that users who interact with a remote program are, by that interaction, being distributed the program.

The GNU AGPL itself explicitly disagrees with this; check its definition of "propagate" and "convey".
Actually, not encoded slashes in the paths are not that unheard of as one might think. As an example, this is actual Wikipedia article about... the meaning of "two slashes": https://en.wikipedia.org/wiki/// . Also, encountering buggy concatenations like example.com//some-path or example.com/base//some-path is quite common.

Don't ask how I know.
IIRC the amounts involved were absolutely pitiful compared to the reputational damage-- they were being paid on the order of $10/car/year.
that bottleneck is a bottleneck specific to the GNFS. There are about a dozen pretty different factoring algorithms known to the public (e.g. trial division, Polard, ECM, quadratic sieve, GNFS). I don't think any mathematicians believe that the GNFS is the optimal factoring algorithm out there. GNFS has runtime L(1/3, cbrt(64/9)) if there is a known algorithm of say L(1/3, 1.5) which would be a pretty minor optimization equivalent to making the GNFS as good as the SNFS, or a bigger breakthrough of say, L(1/4, 2.5), 4096 bit keys could easily be necessary. For reference, this amount of improvement is about the same as the difference between the Quadratic sieve and GNFS.
the author literally picked random projects from github tagged as matrix, without considering their prevalence or whether they are actually maintained etc.

if you actually look at % of impacted clients, it’s tiny.

meanwhile, it is very unclear that any sidechannel attack on a libolm based client is practical over the network (which is why we didn’t fix this years ago). After all, the limited primitives are commented on in the readme and https://github.com/matrix-org/olm/issues/3 since day 1.