skysight-inc/HackerNews huggingface dataset:
> Mandatory password change intervals.

Hasn't been best practice for a decade.

> Insane rules for constructing passwords.

There needs to be a minimum standard. Generally length is enough, but the special character type stuff is annoying.

> Completely undocumented password requirements that you just have to figure out by trial and error.

I haven't come across this.

> Complicated error messages full of security jargon. "Secret Questions" that you can't remember the answers to.

That's a you problem.

Y'all complain about password breaches but want to use Mypassword69! for everything. Pick a lane.
It's a 29 year old language. It has done an amazing job adapting over time and is a technical marvel (and I still think it is a better than average language overall) but there are tons of valid criticisms of it and I don't begrudge someone not loving the language.
Vibrations from "Interstellar Meteor" from Local Truck
Glanced at the title and clicked, expecting this to be EE related.
I've spent my career on the opposite side of the fence. I work for a tiny company, and I report to "mostly" no-one.

I add value, I choose (mostly) what value to add, and my division is profitable.

I recently did some consulting for a large company. It reaffirmed for me that my path was right for me. I haven't made as much money as my corporate brethren, but the endless treadmill of meaningless work, manager meetings, measurement-by-jira and so on would have spit me out early.

I enjoy the creativity of my work, the direct interaction with customers (especially when they like me :) - the intuition to see how things could be better, and the freedom yo execute on it.

My path to joy is not for everyone, others get joy from bringing on a large team - that's OK- each person needs to find their own path.
If Microsoft cares about the environment and becoming carbon-negative by 2030, why the seemingly arbitrary hardware restrictions that are pushing consumers to replace hardware that's still modest today?
Yes, these things have come up quite a few times. Regarding Radon there are unfortunately no 3rd party sensor modules available that we know off (and are reasonably priced). If you know any, please let us know.

Regarding PoE, we have made a survey some time ago and less than 5% of the users were interested in PoE. However, the hardware integration is not straight forward and it would increase the price of the unit for all customers. This is the main reason we did not do it yet.

However our open hardware has an extension plug and this could be an excellent community project for somebody to develop this as an extension card and then share the design.
Look at major cloud providers and what they offer in monitoring such AWS CloudWatch, etc.

Be warned though there are a ton of monitoring solutions already. Hopefully yours has something special to bring to the table.
I just got a pi zero w and a adafruit spg30. Not perfect, but good enough, I own the data, and I send it to grafana for alerting.
Show HN: A better interface to edit written text with LLMs
Editing essays or other text through existing LLM chat UI's feels clunky and doesn't give you much control. Inspired by the collaboration features in Google Docs that allow you to suggest edits that the original author can either accept or reject, as well as the ability to comment on specific portions of text, I built this small web-app to allow for a similar experience with LLM’s. Just input a valid Anthropic API key to start using the editor.

How it works:
I'm using Claude 3.5 Sonnet with a prompt to output simple mark-ups that are parsed and displayed by the front end. A limitation with the current approach is the fact that 3.5 Sonnet only allows for a maximum of 8192 output tokens, meaning editing larger texts may result in an incomplete review.

Let me know what you think!

Code: https://github.com/VijayGKR/LLM-Peer-Review
From the news report I saw, it looks more like the window opening mechanism isn't strong enough for high winds.
Show HN: DIY Wedding Portraits – Create Art, Save Money
We’ve built a web app that lets couples create beautiful, artistic wedding portraits without breaking the bank. Key features:
* Upload your favorite wedding photo
* Choose from 15+ artistic styles (e.g. oil painting, watercolor, pop art, caricature, line drawing, …)
* High-resolution output suitable for printing
* Fraction of the cost of traditional portrait artists

Try it out: https://portraitart.app/wedding-portrait

We built this because professional wedding portraits can cost thousands, but everyone deserves a special memento of their big day. Would love feedback from the HN community!

Note: The service requires email sign-up to use. I know this might not be popular with the HN community, but it helps us manage user accounts and provide better service, including server-side processing status notification.
All right, I have a suggestion.

In the modern day, nobody should be able to be put in jail without a jury.

The amount of times people go to jail based on somebody just literally, waking up on the wrong side of the bed is a lot higher than you’d think.

For example studies show that the time of day your sentencing occurs is a factor on your punishment.

The problem with letting judges throw people in jail for any reason is simple:

I watched a sniper movie. The young junior sniper who had never killed asked the older experienced guy what it feels like.

He said at first he felt awful. But as he killed more, he said “what’s even worse is I don’t even feel anything at all”

When you have people who are allowed to imprison humans and they do it regularly, they will inevitably lose the same feeling that a regular citizen goes thru. You should feel something very deeply because you are about to do something very big.

So I recommend reform such that only a jury who doesn’t have experience imprisoning people have the ability to do it.
Real life usefulness, money, time investment for future use, learning prerequisites for the things you are interested in, etc. There are so many reasons...
I don't know that sounds very optimistic. I'm 10 in tech and L6 now. I'm definitely not set for life, like, not even close.
A issue with this is favicons. Which take up loads of space since they are tiny (usually losslessly compressed raster) images. You can simplify them or make them smaller or in ycombinaters case turn them into SVG. But without _changing_ the image itself it's still around a dozen kilobytes in some cases
Take a look at vector, I personally prefer it over fluentd and don't think you'll need a custom monitoring agent with it.
There is, in principle, no difference between controlling what people are allowed to say and controlling what people are allowed to hear, including controlling any middlemen who are involved in propagating speech.

In the USSR, you could say what you wanted inside your own home, to your own family, but were you to speak it where others could hear it, or publish it so others could read and share it...

So, no, you are wrong: the ideas are not different at all, and if you are against one, you are against the other. You judge yourself to be worthy of deciding what others are allowed to hear. Would you allow me to judge what you are allowed to hear? If you would, I would feed you a steady diet of history and philosophy until you discarded such ideas, ideas which enabled much oppression and suffering in the 20th century.
> stuff is more likely to work.

Yeah, that's the essential mechanic of it. When "stuff is more likely to work" then everyone can build upon it.

Though at some point(s) that stable foundation needs updating too, so new stuff can be built upon it. That's where the choosing the right balance for the right pieces needs figuring out.
Not sure, but looking at the interface myself just now, it seems like it's always possible to see the latex of a math field by either
1) right-click > show math as > tex commands (which you can copy/paste), or
2) hover over the field and see the tex commands show up as hover text (but can't copy/paste)
No, I just thought the article was intellectually lazy and picking on strawmen.
speaking of “blinkers the size of titanosaurs” as you put it, I don’t understand how you possibly cannot know this very long list:

https://en.wikipedia.org/wiki/Territorial_disputes_of_the_Pe...

And again, I’m not saying the US are not imperialists, and they were the most imperialists for a very long while, but I really think China beat them. They still have less means to their imperialists ambitions, but their ambitions are by far bigger than these of the US nowadays.

In the end the conversation is a bit ridiculous, they are both very much imperialists, and it also depends on how you measure it. Russia is, from a political point of view, probably even more imperialist, they just have less means. The ratio means/ambitions of china is what put them at the top of this very sad list for me.

I didn’t know about the syria oil fields, I can’t even say I’m surprised though.
A similar thing has happened with Twitter. After the Musk takeover and the removal of SMS for auth something has changed they keys of the 2FA authenticator. My old keys don't work and my "ticket" has been waiting on Twitter support (which were probably all fired) for resolution.
- who checks the Supreme Court there?

In theory, the Senate can check the Supreme Court by impeaching the judges, the problem is that the Supreme Court checks all the senators and congressmen, by being the only one who can prosecute them.

9 out of 11 Supreme Court judges were indicated by the Labor Party (Lula and Dilma) in the last 20 years, some closely related to Lula. They can do anything they want, without worrying about elections. The president of Brazil doesn't matter anymore, at least for the next couple of presidential elections.
My reply was not that I did not want to think about it! I thought that the article was bad at thinking about it. I like philosophy, but there's still such a thing as bad philosophy and this is, imo, it.
I own my email domain, and I register for each service with a different address. For example, flightaware-20240817@mydomain.net. This way, I know where my email addresses leak from.
Terrible analogy. I’m not sure if this is troll bait.

A better analogy would be:

> Brain tumors are like dumping a whole load of construction equipment, controlled by insatiable and sleepless toddlers that steal your food, on your property.

Cancer acts the way it does because it the cells that drive it are intrinsically out of control. “Reprogramming” those cells to “follow simple rules” would just make them… normal cells.

Edit:

Assuming your comment was made in good faith, you will likely be interested to learn about ongoing stem cell and organoid research. The first part of this recent lecture by Michael Levin may pique your curiosity [0].

[0] https://youtu.be/9pG6V4SagZE?si=vc1-_TCQJpYFLqPe
Some people want to win bigly again. Nukes have been stopping that.
Intel GVT-G
Default locking every process onto a random chiplet doesn't sound like a great plan either.
Magnesium glycinate not very effective for being a laxative. Magnesium citrate is probably what you want.
Can you send me some of these results? I am pretty skeptical of such dramatic algorithmic improvements.

I don't think the point of an encyclopedia is to cover every single topic, as nice as that would be. If you're in the market for an encyclopedia, you are probably looking for a starting point, survey, or summary of stuff that's good to know. The algorithms you're thinking of are probably in very dry papers and monographs, accessible only to experts. If you were writing a commercial-grade generic MINLP solver, you would surely be looking at the latest papers for ideas, or you simply won't be competitive with existing solvers.
> I think caused public opinion to shift is when people started realizing how truly massive they had gotten.

I'm personally more of the opinion that Google has caused enough serious issues for enough people - with famously no way to get the issues resolved - that they themselves seeded or caused the negative public opinion.

Combine that with Google behaviour of clearly doing things in their own interest even when not to their user's benefit (manifest v3 proposal is a good example), and many people are like "screw Google". ;)
Some choice excerpts:

- Since Reagan’s SDI program, the Republican think-tank Heritage Foundation (wrote Project 2025) has advocated for spaced-based weapons to “ensure peace through American strength”. In 2024, Heritage issued video clips and new publications calling for a spaced-based interceptor “overlayer” as part of an “impenetrable missile defense shield” based on Starlink. In 2022, the former Trump Administration director of the Central Intelligence Agency, Mike Pompeo explicitly called their new effort for space-based missile defenses “Strategic Defense Initiative II”.

- Gwynne Shotwell, was asked at a U.S. Air Force symposium in 2018 whether SpaceX would launch offensive weapons into orbit, to which she answered, “If it’s for the defense of this country, yes, I think we would”.

- President Donald Trump has strongly encouraged putting offensive weapons in space. As part of his 2024 reelection campaign announcement, Trump said “the United States must also build a state of the art next-generation missile defense shield to protect from the unthinkable threat of nuclear weapons.” and he said that “we actually have the technology and we’re going to build it.” Trump has also said that space-based interceptors will be a “very big part of our defense and obviously of our offense.”

- Mike Griffin, offered the SpaceX CTO role by Elon, was previously the Deputy of Technology at Reagan's Strategic Defense Initiative. he created the Space Development Agency which funds satellites focused on communication, missile detection and tracking, Griffin and others have said that including space-based interceptor weapons in later layers will be "relatively easy" as he now works with SpaceX employees and major primes on re-entry warheads. The SDA expects to field and maintain a constellation of at least 1,000 satellites in orbit by 2026.

-
Mine start with very feint blurriness in my peripheral vision. Then I get almost a vibration of light across the main part of my vision, pulsating in both eyes simultaneously. It’s hard to see anything at this point. I can see the light streaks with my eyes closed, and it usually moves across my vision until it goes back to peripheral and fades out.

All in it lasts around 30-45 minutes. I actually don’t get any sort of physical pain from them, just the auras. Typical triggers are fatigue along with a rapid changing of light source and focal distance (e.g a led display to looking out a window to bright daylight and back). Also led lightbulbs that strobe imperceptibly trigger them for me too.
These are well-lit paths, that try to make it easy to take a server you want to run in production, and give you reasonable releases/monitoring/canarying for free (e.g. no one should have to configure something that stops pushes that are causing crashes of the updates tasks).
What? Especially at Amazon a Principal engineer (equivalent to Google L6) is a pretty rare beast in some areas of the company. Sure there are some hip orgs with a lot of senior engineers, but in general it's not a common position at all. Isn't L10 a VP at Amazon? Never heard of one doing any real engineering work.
What in God's Holy Name Are You Blathering About! - my reaction to most of the ideas coming from SRE like 'class SRE implements interface DevOps'
Locales are so much more than character sets. E.g. an Arabic locale changes the direction of writing, it also changes the characters used for numbers, and completely changes the way numbers and dates are formatted. This is where the C locale functions are problematic.

Character encoding is the easy and safe part.
Depends.

In my culture, there's a strong push against being constantly online.

Phones must be kept in a backpack or otherwise stowed during social occasions, unless absolutely necessary.

Ideally, you turn them off, stuff them in a Faraday bag, and leave them in your car. Or just leave the phone at home.

Correlated to this is a focus on rebuilding some atrophied skills: getting around without Google Maps, being alone without needing the constant distraction of Youtube, etc.

The idea is that humans are not meant to live a life constantly mediated by an electronic nanny, and that you also need to maintain the skills to get along without one.

Related to this is a preference for physical media, or at least digital media over which you can exercise some control.
> Conversely, the study found a positive relationship between high levels of magnesium and those of folate and vitamin B12.

Magnesium is known to be involved in "activating" riboflavin[1] into FMN, which then is involved in "activating" folate and B12 (and B6)[2][3] by transferring the methyl group back and forth to form methylfolate and methylcobalamin. Homocysteine level is often considered a useful measurement of vitamin B12 status.

[1] https://www.uniprot.org/uniprotkb/Q969G6/entry magnesium is also involved in ATP production, zinc is also a cofactor in this reaction

[2] https://lpi.oregonstate.edu/book/export/html/99#:~:text=Ribo....

[3] https://lpi.oregonstate.edu/mic/vitamins/riboflavin
> Who said EV was suppose to rescue PRC economy?

"How are China's 'new three' export pillars powering the economy?".
https://news.cgtn.com/news/2024-03-07/How-are-China-s-new-th...

EV is literally one of the key pillars championed by the Chinese government as part of its 'new economy' initiative, straight from the horse's mouth.
Q1: Can some ELI5 when you’d use:

- nagios

- Victoria metrics

- monit

- datadog

- prometheus grafana

- etc …

Q2: Also, is there something akin to “SQLite” for monitoring servers. Meaning, simple / tested / reliable tool to use.

Q3: if you ran a small saas business, which simple tool would you use to monitor your servers & services health?
How can I use the new Llama models through an API?
I'm seeing a lot of options to use the new llama models through an API endpoint but which is the best way? For my use case I would want to first test the different models to see which is best and then ideally be able to use one of them at a large scale for cheap.

I may also need to fine tune some of the models so something that also provides an easy way to fine-tune one of the llama models and then serve that fine-tuned model would be nice. Looking for the most cost-effective options for now but would be interested in understanding features that more costly options would offer.
I encounter some bogus undocumented password constraints probably half the time I create an account. Usually it is a maximal length requirement that is not mentioned in the error message.

Don’t defend these idiotic practices.
Yeah, a whole load of construction equipment, in your living room. Which keeps multiplying by itself, and gonna take up so much space that it squeezes you to death against the living room wall.
Thanks in particular for the second example: it's a precise idea which can be studied (the former still is too abstract).

> managing the state manually would have been a nightmare

Now, of course, the annoying follow-up question would be "why?". For sure, there are poor ways to handle complex states without React, but that doesn't mean it's impossible to do it fairly well either.

For example, a divide and conquer strategy might make the situation less miserable already: associate "components" (DOM nodes) to relevant portions of the state only. But it's still too difficult to get a clear idea without actual code (hence my original question: most of the discussions about this are either objectively too hypothetical because they deal with complex/private codebases, or unconvincing toys)
i can imagine how it would be annoying in a system that is designed to process live streams as opposed to one that is designed to have random access to the stream via persistent storage.

if the target frame were not an i frame, you'd have to dig up the preceding i frame and replay everything up to the target frame. pretty easy for random access, not so much for a monotonic stream of frames.
Why not indeed? If there is an orchestra's worth of musicians available and an audience there with the taste and curiosity necessary to support avant garde performing arts, anything can happen. It's easier now than ever to put a band together in your college town or even record and release music without ever leaving your bedroom, but beyond that scale you still need a critical mass of creative collaborators all in one place to pull it off.
Remodelling of the translatome controls diet and its impact on tumorigenesis
Speaking for myself, the only "superpower" I got from a tumour near my brain was not being able to fully rotate one of my eyes because of pressure on the nerve that moved it. While this was a fun party trick that caused my brother to laugh uncontrollably and brought much joy to the neurology ward, I'm glad I got it removed.

I will also note that the tumour, being a tumour, had blood flow that was seriously messed up. The thing was mostly dead when the surgeon removed it, as it had suffered something like a tiny localised stroke. The idea that it was going to contribute anything sounds like bullshit.
Okay, and supposing an artist doesn't want to be a hobo or a hermit?
> Riots characteristically aren't a messy case

Riots are characteristically very much a messy case, because not everyone joins a protest with the same intentions. Some will join a protest intending a purely peaceful display of dissent, while others seek violent confrontation.

On top of that repressive regimes will routinely declare otherwise peaceful protests a riot at the first sign of violence. Sometimes there are even saboteurs within the protest that try and lure out violent incidents in an attempt to get the protest to be declared a riot.

Finding the right balance between allowing demonstrations and keeping the peace and order is one of the most challenging aspects of democracy.
This is a very broad generalization and not a good one either. Particularly in this context. It's obviously not possible to do it for all video formats in a consistent way. I haven't read through all of it yet I could tell all the proposed solutions are hacky ones. Your scenario doesn't apply here. Businesses are different. This is on open source project. Anyone can work on it.

What are you even saying about the choas of the world?! Every dev knows how work is. You are just describing every other software job. Somehow it sounds like you are boasting how matured you are just because you do what your client asks/needs. Even then, many business/software make a concious choice to support or not support something based on some guidance. The guidance could be some core principles or just some product managers whim.

It's highly likely that VLC developers chose not to support the feature for the very reason(s) that's described in the post. It's a concious choice they made. I don't see anything wrong in that. They definitely are not some school kids with some daddy issues to hide behind some code. They clearly have answered all the questions from a technical stand point.
In case of Google, it's not just the size of company. It's the fact that the company makes it's money from selling ads. No matter how well you do your job, the end result is only that more ads were sold.

Programming is a superpower that can change the world. Yet the best paying jobs for programmers are at FAANGs building systems to peddle ads. .
Prety neat! Looks like AMD might be possibility as some folks are trying to run it: https://github.com/chrxh/alien/issues/99
Unlikely. You might as well ask if we will get back to hand writing physical correspondence. It will be trendy to avoid being online (or at least give the appearance of doing so) but it'll never be a widespread phenomenon.
All in the name of audit check boxes.