skysight-inc/HackerNews huggingface dataset:
Show HN: Entertrained – practice typing by retyping books
Hi guys,

Entertrained lets you type (or read) the most famous classic, as well as some modern books. I'm far from done with the app, but the core functionality is completed, and a selection of 100 books is ready to be typed!

Here's what you get in the current version:

- selection of 100 books to choose from, in various genres,

- typing and reading mode (for when you're done typing for the day, but still want to enjoy some good literature),

- optimized desktop and mobile experience,

- extensive customization,

- progress tracking and statistics.

The app doesn't require creating an account, all your progress is stored in the browser, and you can export and import your save, in case you want to switch browsers/devices (or make a backup).

---

On a more technical side, the app is made with SolidJS + Solid Router and vanilla CSS, all components are custom made (except Chart.js for charts). The app works purely client-side, with the progress being stored in IndexedDB using localForage.

---

All feedback is welcome. If you have questions, or suggestions, or have found some bugs (there may be some, as the app is still in its initial stage), leave a comment and I will try to respond to all of you.
Seems like a ridiculously sliver usecase to advocate for giving away your genetic data to the government.
If you want to use your own GPUs or cloud accounts but with a great dev experience, see SkyPilot.
Okay, but your GPUs are in ECS. Don't I just want this feature from Amazon, not you, and natively via Nitro? Or even Google has TPU attachments.

> 1. If you're actively developing and need a GPU [for fractional amounts of time]...

Why would I need a GPU for a short amount of time during development? For testing?

I don't get it - what would testing an H100 over a TCP connection tell me? It's like, yeah, I can do that, but it doesn't represent an environment I am going to use for real. Nobody runs applications to GPUs on buses virtualized over TCP connections, so what exactly would I be validating?
(Author here)

Yes that's the point. Tried it on a lark, and it created weird feelings so I leaned into it. This is my personal website, and I've been trying to make it more deeply personal lately.

Talked about it a bit in this thread: https://mastodon.social/@spiralganglion/112747815905067127
I thought about it but it’s not really an option if you need certain apps / push notifications. If the options are Android without google play services vs iPhone, the realistic option is iPhone.
I was thinking through, what are the benefits of coding up your agent system via a pregel-like graph, instead of just doing function calls? Or versus the actor model? The execution trace of a (concurrent or serial) computer program is a graph. And the actor model lets you do message passing between "nodes/actors" without having to predeclare your graph structure.

The three reasons I can think of:

1. by predeclaring the structure, you can show debugging UI of the full graph, even if you've only executed part of it
2. Pregel can make it easier to reason about global state transitions (you can accomplish this in other systems too, if you set it up right)
3. by enforcing heavier structure on your program, you can ask the AI to reason about the whole graph or generate new graph parts

The downside is that this is an abnormal way of writing computer programs, originally designed for high-scale processing (Hadoop, Apache Spark, etc.). If you want to dynamically change the control flow of your program or special case control flow at various points, you'll wrestle against the up-front graph structure.

I personally have more of a preference to write normal-looking code, without having to predeclare my execution graph.
This feels like one of those questions where the answer is obvious. You tell us. It seems like people are just jumping on the bandwagon without even realizing it’s a bandwagon, let alone understanding what it looks like or how it operates.
I’ve owned multiple AWD and 4WD vehicles.

4WD will bind and hop, but it will not cause the spinning that happens with AWD. The binding and hopping really only occurs at extreme turning angles and is extremely minor.

Torque vectoring is very good, but it’s not perfect. It require slip to detect and react. The problem is you cannot detect slippage when a wheel is completely stopped, so you have to let it spin at least a little bit. This is what causes excessive single wheel rutting.

It can also create unpredictably since you need to wait for a wheel to spin before it can kick in. Notable, if you need a lot of power, this can cause and extremely harsh jerk that does not happen in a 4WD system.
If you get code execution in SMM you can flash the BIOS on the motherboard. You'd be junking the mobo (unless it has one of those "BIOS Flashback" setups), not the CPU.
Oh my god, is this a level headed comment based on the actual technical merit?!
putting this in this context was helpful, thank you. I have a few chronic medical conditions that when people learn about it sometimes remark “i dont know how you deal with that” and the answer really is a shrug and “there’s no choice.” humans are good at adapting for sure
Not exactly. It opt outs of respectful web crawlers by any name, or if you specify it, by some name in particular. Misbehaved ones requires a bit of more effort.
Plane crashed in Brazil with 62 people on board
And battery life with most laptops (even the Framework) is pretty horrible on Linux compared to Windows without excessive tweaking (and even then).
We need more details before claiming that the sky is falling. Many exploits that are theoretically possible have so many pre-requisites in practice that they don't matter. We need to see if that's the case here.

Intel CPUs have been self-destructing, so you need to throw away CPUs even if they aren't pwned. They have also had far more security vulnerabilities than AMD, some of them cannot be patched, and operating systems had to work around them. Heck, the Sinkclose name came from 'Sinkhole', which was an Intel vulnerability.

No manufacturer is perfect.
Very informative! I tried doing something similar to these sites months ago after getting multiple text messages from them, but didn't really get anywhere. Very cool to see a professional walk through what they did!
The theory doesn't make any sense; unlike The Sixth Sense, the main character in Interstellar interacts with a lot of people. If he's dead, so are they (or they're just figments of his post-death experience).

The journey doesn't make any sense as a post-death experience, since none of the events are tied to his life (before the events of the movie), so there's no deeper meaning to the wave planet, or the ice planet, or falling into the black hole.

Also, Nolan doesn't do meta-contextual films. His specialty is the technical aspects of storytelling (see, e.g., Memento, The Prestige, Dunkirk, and Tenet), not in imbuing deeper emotional meanings into his works. Indeed, one of the big critiques of his films (excluding Dunkirk and Oppenheimer) was that they generally lack any emotional depth.
Where would exploit code persist? In the BIOS EEPROM? Are Dual-BIOS motherboards such as from Gigabyte (which can re-flash the BIOS from a read-only copy on a second chip) a viable recovery option for a system which has been infested using this attack?
Indeed something could be inspiring without being meaningful, but that isn't what I am talking about- I am talking about ideas that are specifically useful insights- inspiring because they pointed me to a useful solution to a real problem, or to navigate a technical problem in a different way that led to a solution.

For me his most functionally useful and inspiring ideas have been in the realm of philosophy of engineering- he has a process for thinking about problems that avoids a lot of pitfalls that cause people to reject new or weird ideas.

His ideas are concrete, specific, and very well thought out- he is a brilliant guy. If you've read his books and they seem like Chopra mixed with math jargon, and you can't see how they are useful for real world engineering problems, you are simply not understanding him.
I'd really like not to see Rust-can-do-it-too mentioned in each post just once these days. After all it's using webview, which has its limits no matter what sugar you lay on top, not to mention, Wails with Go is 10x easier to code than Rust if you must use webview.
Pull Requests via `Git Push`
Getting into SMM means you can circumvent flash protection, which means you can rewrite the firmware to backdoor the OS on every boot without needing to leave any evidence in the filesystem, which a normal compromise of ring 0 wouldn't. I don't think most people need to worry about this, but if the claims are accurate this is a genuine circumvention of a privilege boundary.
This isn't catastrophic this is clickbait bullshit. The attacker needs ring 0 privileges, this enables someone with kernel level access to right to the firmware. That's not good, but it's not catastrophic either
1. Buy .intern TLD

2. Sell to scammers.

3. Profit.

(I want to appreciate how hard it probably is for ICANN to figure out proper TLDs.)
While it may not be quite the same answer you're looking for, I'd suggest the OWASP, and at least their top 10 for sure. Learning about SSRF may not have stopped this behavior (it's coming from the authenticated browser), but if you're doing CSRF checks you won't get logged out by random links on other peoples sites, and that whatever logged you out was a legitimate action.
Have you done a Show HN yet? If not, please consider doing so!

https://gist.github.com/tzmartin/88abb7ef63e41e27c2ec9a5ce5d...

https://news.ycombinator.com/showhn.html

https://news.ycombinator.com/item?id=22336638
Are you going to pay for the extra RAM I need to run your VM too?
Can you give an example of an event that's not part of a span / trace?
Yes, since the guy who made the writeup, has exactly 0% opsec. -> ridiculous. But I would be more scared of 3letters.
Right now it's more for data analysts who's data eng team doesn't have the capacity to support all types of data processing requirements. Data analysts can just do it themselves simply with SQL! But we are also open to explore the opportunities for the data eng teams if we see a strong use case of automating their data pipelines.
Not by ICANN? https://www.iana.org/domains/root/db
needful status: do it please
Totally,
I'm chilling with a 2016 skylake i5 and have no desire to upgrade whatsoever.
The "NSA backdoor" is the vulnerabilities we found along the way. It's almost certainly either bad firmware code or bad hardware design. Well, to be clear, SMM is bad hardware design, but still...
> information transduction in chemical waves has never been shown before

I'm surprised they put that in there. Astrocytes use calcium waves for internal signaling, within processes and across the entire cell.
Can someone explain how the persistence can work as described here? I thought the CPU microcode was stored in the BIOS, and the CPU itself doesn’t have a persistent memory. Wouldn’t I have to exchange the Motherboard and not the CPU if I was infected by this? Or just reflash the BIOS, assuming the corrupted BIOS doesn’t somehow prevent BIOS flashing?

Edit after looking it up (leaving this comment in case someone else has the same question): Apparently microcode is in fact stored in the CPU itself and it does have permanent storage. The BIOS is only used for updating this internal memory and doesn’t transfer the microcode on every boot. I still wonder if the microcode patches are somehow validated/signed though, otherwise everyone with a kernel exploit could issue update commands to the BIOS with malicious microcode content?
>Somehow, despite insurance fraud being far easier to perform in days gone, the insurance industry has persisted and remained not only viable, but highly profitable.

This line of argument makes as much sense as "cars were deathtraps in the 60s, yet they still sold like gangbusters and cities were built around them, why should we make them safer?". Insurance fraud being endemic in the past doesn't mean we should accept insurance fraud today.

>Or, to put it more succinctly: is AI, the expensive technology that's only really available to large corporations, going to be used to fuck over both parties of this, equally, so that both are now doing business more fairly? Or is it going to be deployed as all previous technological advancements have: which is to say, as tools for corporations to fuck over consumers?

>I have a strong feeling it will be the latter.

1. Your claim that AI will be "tools for corporations to fuck over consumers" isn't self evident. Mind explaining why? Technologies like AI are inevitably going to cause false positives. Where do you think is the line between "fuck over consumers" and "helping consumers by fighting fraud"?

2. If you think corporations are just itching to fuck over consumers, what makes you think that they need AI to do that?
The Wisdom of the Skinned Knee
Hybrid Teams Are the Worst
isn't that docker is for?
Zscaler uses a similar approach in their remote browser. WebGL in the local browser exposed as a GPU to a Chromium instance in the cloud.
There are some products that turn MF lenses into AF, primarily targeted for video shooters. I haven't tried them though.

https://www.pdmovie.com/products/liveair3smart
wishing you much strength! even though there may be no way out, your composure remains a valid demonstration of fortitude, imho. god be with you!
Clearly you don't understand Chinese mindset, do you think he has no ethics? He has a lot of ethics, because he wouldn't dare to hack Chinese citizens, we know why :) but everyone else (except Russians, of course) are open-season for them.
How are you running the pipeline exactly? I'm new to AI dev and when I hear pipeline I think either CI/CD or something like Apache Airflow or Kestra.
https://www.ietf.org/archive/id/draft-davies-internal-tld-00...

There are certain circumstances where private network operators may wish to use their own domain naming scheme that is not intended to be used or accessible by the global domain name system (DNS), such as within closed corporate or home networks.

The "internal" top-level domain is reserved to provide this purpose in the DNS. Such domains will not resolve in the global DNS, but can be configured within closed networks as the network operator sees fit.

This reservation is intended for a similar purpose that private-use IP address ranges that are set aside (e.g. [RFC1918]).
Yes, I originally thouoof building AI workflows with an existing DAG package or creating my own.

But I think DAGs don't scale, or rather, as you point out, it quickly becomes easier to reason about code than about a graph.

I thought, maybe a setup like pytorch that let's you code it normally and once you run it or compile it creates a graph for you to see. But I remain unconvinced.
Tooling that enforces strict whitespace/formatting rules is a huge pet peeve of mine. It breaks my iteration flow because I have to stop thinking at whatever abstraction layer I'm working at to deal with the minutiae of formatting. I dislike automatic reformats as well, for much the same reason I hate webpages that jump around after loading. Just let me see the code I'm writing without it whizzing off onto adjacent lines because I'm going back and forth over column limits.
earlier post with comments: https://news.ycombinator.com/item?id=41204148

Other HN posts without comments:

https://news.ycombinator.com/item?id=41204153

https://news.ycombinator.com/item?id=41204825
When setting up local networks people commonly use a top level domain like 'my.lan', 'my.network', 'my.local'. Instead of using one of these non-reserved domains that may one day end up as a TLD, it is recommended to use 'my.internal'.

If the 'private' TLD you're using suddenly becomes real, then you can ship off data, every possibly unencrypted data and connection requests to computers you do not control.
Here's a real, actual bug that we had in the old Slack for Mac app (which was Webkit-based, so effectively the same approach as Tauri et al) - some users, only on older versions of macOS, report that whenever they paste in a YouTube link, the embedded video has a pink tint.

Tell me, how would you fix this bug?
The helix editor [1] allows you to navigate and select code objects, I use Alt-o all the time which expand the current selection to the parent syntax node. As mentioned by sibling comments, there are also a bunch of diff tools that are syntax aware instead of operating on plain text. All of these are backed by tree-sitter.

[1]: https://helix-editor.com/
I have an MRI for two suspicious masses on my pancreas and liver tomorrow. Fear for my wife and toddler more than myself.
It is true that as a GUI toolkit Electron as at least as complicated and quirky as everything that came before. I would argue more, but I'm willing to chalk that up to unfamiliarity. The thing about apps, though, is that the frontend isn't the only end, and in web dev your backend is also radically different and likely more complex.

Now it's a good thing that there is an architectural boundary between the frontend and backend. God knows not every desktop app is good about that. But the problem in web dev is that it is a complex architectural boundary that has its own footguns. Suddenly you have to do everything concurrently and securely. And on the backend, you can no longer just serialize to a file in a known directory. You have to learn securely connect to a database, be competent in a query language, and be able to manage all the infrastructure or sysadmin work that comes with databases. Oh, and you can no longer just distribute your application as a binary or with an installer. Now you have to be a master of all the sysadmin and process work that comes with deploys and cloud infrastructure. Debugging is no longer just gdb and depends on competent logging, you're likely to have to finagle calls to several REST APIs (all with slightly different auth) instead of just linking in a library, you have a hell of a lot more things to mock when you're testing...

The list of added complexity goes on and on and on, and all of this is on top of whatever complexity is inherent in the problem domain to begin with. Web dev adds just adds a ton of complexity.
The trouble is that the o11y costs in developer time too. I've seen both traps:

Trap 1: "We MUST have PERFECT information about EVERY request and how it was serviced, in REALTIME!"

This is bad because it ends up being hella expensive, both in engineering time and in actual server (or vendor) bills. Yes, this is what we'd want if cost were no object, but it sometimes actually is an object, even for very important or profitable systems.

Trap 2: "We can give customer support our pager number so they can call us if somebody complains."

This is bad because you're letting your users suffer errors that you could have easily caught and fixed for relatively cheap.

There is diminishing returns with this stuff, and a lot of the calculus depends on the nature of your application, your relationship with consumers of it, your business model, and a million other factors.
Commander One is kinda barebones, QSpace looks like Finder plus some bonus stuff. Compared to godly Total Commander (on windows), everything else is very shallow. Double Commander tried to replicate it, and kinda succeeded, to an extent. It's not about big shiny features, it's about all the small nitpicks you do regularly.

Example:
move file panel cursor on a file (as example, big text file), press F3 to open it. Built-in preview opens first page very fast even if file is 1GB+, by not loading anything except the first page ;) scrolling also works without visual lag even on slow HDD. Now press ESC and focus is back on a window you came from and can continue navigation.

Something as simple as focus thing is regularly broken on oh so many file managers
Yes, probably - but don't forget that the normal user way of 'reflashing the BIOS' is to tell the BIOS to reflash a new image; so in theory (but hard) a malicious BIOS could keep itself in there. If you used JTAG etc to reflash the BIOS externally then yes you could probably clear it out.
A few questions:

a) You're dismissing OTel, but if you _do_ want to do flame graphs, you need traces and spans, and standards (W3C Trace-Context, etc.) to propagate them.

b) What's the difference between an "Event" and a "Wide Log with Trace/Span attached"? Is it that you don't have to think of it only in the context of traces?

c) Periodically emitting wide events for metrics, once you had more than a few, would almost inevitably result in creating a common API for doing it, which would end up looking almost just like OTel metrics, no?

d) If you're clever, metrics histogram sketches can be combined usefully, unlike adding averages

e) Aren't you just talking about storing a hell of a lot of data? Sure, it's easy not to worry, and just throw anything into the Wide Log, as long as you don't have to care about the storage. But that's exactly that happens with every logging system I've used. Is sampling the answer? Like, you still have to send all the data, even from very high QPS systems, so you can tail-sample later after the 24 microservice graph calls all complete?

Don't get me wrong, my years-long inability to adequately and clearly settle the simple theoretical question of "What's the difference between a normal old-school log, and a log attached to a trace/span, and which should I prefer?" has me biased towards your argument :-)
an excess of syntactic sugar leads to cancer of the semicolon.
What do you mean by technical aspects of storytelling?
No really. There's been endless research on this, and increasing the magnitude of the punishment does very little to deter unwanted behaviors. Increasing the likelihood of getting caught does, though, even when the actual punishment for getting caught is relatively minor.

Which would seem to suggest that stuffing even more people into prisons may not help much; what we really need is to dial back some of the gutting of regulatory bodies that's made it so easy for corrupt behavior to flourish in the first place. Sunlight continues to be the best disinfectant.

And you can kind of see it on an international scale? The "better regulation" approach is favored by places like EU countries, while the "throw the leaders in jail" approach is more favored by places like Russia and China that don't exactly seem to be ideal role models for how to keep corporate corruption in check.
Hey Jed, yes! Visualization dashboards is one definitely something we would like to introduce ASAP. For the time being we've added a quick little widget that allows you to embed code from 3rd party sites. I personally use that for custom widgets we've setup on Posthog.

But definitely we would be open to including additional widgets that could import data from different analytical tools.

In addition to this, there are plans of making public dashboards that you can access through a personalized link. A use-case that comes to mind is to have a status page for your product.
I need an offline client side db/ fts (for this language learning app: https://reader.manabi.io )
Appreciate the clarification, that makes sense. Maybe we'll get more details on potential persistence methods from the talk they'll give tomorrow: https://info.defcon.org/event/?id=54863
It's correct, now.
"The same principle" as the first of the harder drives. There are several drives presented.
Gtk4 does not really do Macos these days, Qt costs a leg when you go commercial, Wxwidgets might be the only one left but its community is still quite small. Others(C# based, Flutter based) are not that great either. So yes for cross platform commercial desktop GUIs, Electronjs really has no competitor.
I really like the "remote"/ "on-site" / "hybrid" filter. Good job!
SMM shouldn't let you modify any persistent CPU-level state - SMM is slightly magic, but not that magic. It could absolutely allow modification of motherboard-level firmware, but that's repairable given enough enthusiasm.