skysight-inc/HackerNews huggingface dataset:
I agree with what a lot of folks here are saying around knowledge transfer is a continuous/on-going process.

Any one-off knowledge transfer will most likely fail. People can't learn actionable knowledge with doing the actions. - That's why we need continuous sharing and doing.

People only look for the artifacts of a knowledge transfer when they need it. When resolving unfamiliar issues, people's first question is: "Has this happened before? How did we resolve it the last time?" It's a simple question but most often its very hard to answer.

The knowledge needed to answer questions like the one above, is mostly manually compiled together and often from memory.

Finally, actionable knowledge is hosted in the same tools as product specs, meeting notes, press releases etc. As a result, creating, finding and following such knowledge is quite hard.

Disclosure: I'm building Savvy(getsavvy.so) to fix a lot of these issues for developers.
A credit card number is a symmetric secret that's printed on the outside of something that you hand to strangers all day. That's not exactly best practice.

If we moved to a PKI where the private keys live in secure enclaves, you could cut that fraud down significantly. But that won't happen, because then how would they justify the fees?
Is that in the US? Europe hasn't used the magnetic strip on cards for years. It's all chip based and those payment terminals all take NFC / Apple Pay.

It would be suicide for a shop not to take it, I know many people that don't carry their bank card at all. Only their phone for Apple pay.
I use it to inspect video frames by frames, particularly being able to go back one frame. VLC doesn't support it, this thread about the feature is hilarious https://forum.videolan.org/viewtopic.php?t=120627
Greetings fellow feline, I am a microbiologist not IT. In that capacity, the only general suggestion is to have redundant authentication measures that cannot all be crippled by one source like this. I can't imagine it's popular, or easy, for a company to want to be able to use multiple authentication schemes, but this sort of situation shows why lock-in is a bad idea.
It wasn't just US. The hidden politburo of capitalists decided and the nations followed orders.
A lot of monitors these days support a kind of variable refresh rate like Freesync, so this should be possible. I've never actually got it to work with AMD, Linux and mpv, though.
What the hell is o11y? It's so annoying when people use weird abbreviations rather than just typing a few extra characters.
You're ashamed to be an EU citizen because the EU is asking X to take down posts instigating racial violence? Well, good riddance is all I can tell you...
>That brings up an old question: who gets to decide a job is terrible?

Them market. If your job provides value, then you shouldn't have problem finding people to pay you to do it. If you can't... maybe we shouldn't keep it around.

>Maybe someday, someone in power will decide a job you gain fulfillment from is a terrible job.

What are you trying to get at here, that because losing your job sucks and anyone's job could be at risk, we shouldn't be eliminating jobs at all?
The most ironic thing thing is that Python, is named after Monty Python, which was quite controversial in it's time. For example, Monty Python The Life of Brian makes fun of both Christianity and LGBTQ folks.

https://m.youtube.com/watch?v=Dgp9MPLEAqA

Best to kick out Guido since he clearly enjoys "problematic" content. Also, they must swiftly rename Python to "Grey Box Lang" or something totally inoffensive.

The most offensive thing is the PSF's power grab vote so they can fire Python Fellows behind closed doors, which previously required the community to vote. This board is out of control and has to go.

Also, if the board can muzzle a giant in the Python community with such vague and wispy allegations, they will have no problem silencing anyone else. This dispute should have been handled by a third party, rather than relying on inexperienced volunteers who are hopelessly too involved to be impartial.
So I'm not informed about this particular case, but DOMPurify does work correctly AFAIK.

It's an old project though and I've always refrained from using it in favor of sanitizing user input in other ways (or letting library code do it for me).

It might be that they used this library wrong. It might also be that it's more of a research project.

There's a reason I guess that none of the popular UI frameworks/libraries have DOMPurify as a dep.

It boils down to a separation similar to prepared statements.

Disallowing direct string interpolation into DOM subtrees is the way to go, esp when user-controlled data is involved. You can't achieve XSS by assigning .textContent on a DOM node, for example.

That's why the DOM API is a thing and innerHTML is equivalent to eval regarding security.
Reminds me of working with Japanese teams.

Some of these guys hated each other, but, when the boss said "Go!" they put their differences aside, and all gave 110%, to meet the goal. They helped each other out, shared information, and never sabotaged anyone else's work.

Japan has the strongest teams that I've ever seen, but there's cultural reasons, and it would probably not scale to many other cultures. There's also tradeoffs, and many people would not be happy with those.

If you want a culture that is really good at ganging up on a problem, then Japan is a good bet.

They wouldn't dream of testing for "cultural fit," because that is assumed.
> You could eliminate a lot of the fraud by moving off a mostly-static identifier to merchant, amount and time-limited tokens the user generates with their bank (or the merchant redirects them there). This would address a lot of the issues - the tokens are useless when leaked...

This almost sounds like a subtle recommendation for the Lightning Network. It's based on single-use invoices that are locked to a specific recipient and is usually limited to specific amounts.
I agree there is no company culture, unless it is really small. Culture of a team, of a department - sure, but not a company, especially if they have offices around the globe.

There could be company values promoted by CEO, but they are marketing bullshit created to look good for the shareholders.
To me, the funniest thing about AI Seinfeld is that 30 rock called this back in 2007.

Seinfeldvision! https://youtu.be/FVeigNzjXO4?t=42
It can be a bit of a stretch but maybe the pettiness often seen in HOAs is being expressed in something like a Code Owners' Association, when it devolves from complete focus on the common welfare.

Some people just love being annoyingly influential with undue power in their little fiefdom.
I feel the question on what to do is an interesting one, but a thread that satirizes the problem is not an appropriate venue to resolve that question.

People have warned that ssns arent "secure or supposed to be used in the manner that they are" . What does that even mean, there's been a huge leak, ignore your previous quarrels and respond to the specific incident, nobody cares what people were saying about ssns before, wait for information and respond accordingly.
>just dump everything it generates into a bloom filter

AFAIK bloom filter doesn't work for fuzzy matches, so any sort of light editing would defeat this.
If I recall correctly, for a brief time mplayer disappeared from Debian. At the time I evaluated various alternatives and mpv was one of them, but I switched back to mplayer as soon as it made its way back to the distribution. For me, mplayer is the standard media player. I guess I just don't see any reason to switch to mpv or to any other player.
> You need two to tango [...]

> Anyone only blaming one side need to stop for a second [...]

When it comes to military coercion (wars, threats), and imperialism, it only takes one bad actor to cause problems.

When there are two sides, or three, it just means more actors willing to push around everyone else.

Albeit, they amplify each other. Their respective needs to dominate encourage each others' aggressive tendencies. And it is much easier to justify/ignore/repeat misbehaviors when there are other aggressors to point at.
I use PayPal for my tiny business. On the one hand, I'd rather not pay them 3% of my sales. On the other hand, if the features of PP (security, buyer protection, ease of use) increase my sales by a palpable amount, then it pays for itself.
I live in Baltimore, home of Philip Glass (as far as I know, he still lives in Baltimore) and a lot of my friends went to a famous Peabody conservatory. Even after graduation, a lot of them either entirely left music or struggling musicians, who have blue collar jobs.
I remember going to one the local bars and saw a girl working as bartender(she quite attractive), years before that, I saw her playing cello in one of the concerts.
So true. A solution presented before the problem, IS the problem. Goes for kids and adults, and entire organizations! Quote mine.

Also, this todo system is basically what I apply on chaos-days, but with the addition that I preferably start next days list at end of day, as to remind me of momentum and focus.
Software Development Is Hard
The point is you should be able to operate you own paywall. The tech is mature enough in 2024 to make it work.

Make the browser store you credit/debit card info, make the browser handle the payment UI, make the browser expose JS apis to invoke payments and receipt fetching against pluggable payment providers.

My ideal world looks like this. New html button element:

`<pay amount="1.00" currency="USD" reference="my-article-123" checkoutUrl="https://...">Unlock for $1.00</pay>`

Clicking it opens browser checkout flow. The url you get from stripe/paypal or another whitelisted payment provider that has implemented the spec, some flow similar to OAuth. On a successful tx, a signed receipt (something like a jwt) is returned from the provider and saved by the browser, on disk on your computer.

The webpage can then load signed receipt references from the browser api, sends it to the backend which can return the article content if the receipt jwt is valid.

It can be fixed if the right people from Chrome and Stripe got together in a room and brainstormed for a bit. Then everyone else would follow.
Eric Schmidt's AI prophecy: The next two years will shock you
My two cents: monitoring RAM usage is completely useless, as whatever number you consider an “used/free RAM” is meaningless (and the ideal state is that all of the RAM is somehow “used” anyway). You should monitor for page faults and cache misses in block device reads.
this is great information, thank you!

unfortunately, no, i don't have a specific source making the argument that many texts were lost because they only existed on papyrus. to me, it seems like an almost inescapable conclusion from the widespread use of papyrus, its short lifespan (particularly in anything other than the driest conditions), and the limited supplies available of animal parchment—but i'm aware that many conclusions that seem inescapable are in fact wrong, so i too would like to see a deeper investigation

i concur that roman and clerical lack of interest in both science and other branches of philosophy was a causal factor. but i don't think such works were ever branded as heretical, at least by the organized church; no classical philosopher ever made it into the notorious index librorum prohibitorum

metzger also mentions some other media used for books: stone, bone, leather, and ostraca
Well, it exists, but it's not exactly compelling content. AI Seinfeld wasn't either, but at least it was a relative novelty.
In this case "red shirts" isn't an illegal reason for firing because people in red shirts are not a covered class. You can fire for any reason except those related to covered classes so it's fine to fire with reasons. "You stole from us so you're fired!" isn't any risk because people who steal are not part of a protected class.
Presumably users that inform themselves wouldn't take something that's approximately named "brain dissolvent" anyway.
3DS exists and it is widely supported.
I'm not sure why you've just restated the first paragraph of the article.
The fees are bad, but I think the attack surface is worse. The easiest way to shut any business down is to go after its ability to collect payments.
Dupe: https://news.ycombinator.com/item?id=41277484
"This exercise helped me to understand how language models work on a much deeper level."

I'd like to hear more on this.
Do they post aggregate stats about takedowns there? It seems like they just post ad-hoc information, which leaves a lot of room for editorialization. For example going into great detail about the Brazil situation, while on the other hand posting this extremely vague statement in response to Pakistan blocking X and then never following up with any further context about what's going on there.

https://x.com/GlobalAffairs/status/1780676243538452680

Have they ramped up censorship in Pakistan to appease the government? Who knows, they're not telling.
It does have a GUI in the form of video overlays. For me it's perfect. By default it just shows the video which is both necessary and sufficient.
Just back from Poland- they have a great system 'BLIK' that sounds like iDeal...

Most merchants have a BLIK button... you click it, enter a 6 digit code created on your banking app. Purchase complete. Takes a few seconds. No card numbers, CCV etc..
What about Google itself? Store content from billions of websites in your own index without permission and show snippets from those sites to your own users, making yourself into “the source” of all answers when, in reality, it’s all just scraped from other people’s sites? Imagine pitching that idea to copyright lawyers back in 1999.
Depends on the assets that you have or how public of a figure you are really, being targetted for kidnapping, break n enter, or home robbery is no joke. Especially if you have a family.

You need to take the backseat and let the grownups deal with this stuff.
Compiler designers don't have a choice. Their skill and intelligence is not evidence in either direction, because they're not the ones adding null to the language.
libmpv is also amazing. It's a simple C API that allows you to render each frame into an OpenGL framebuffer or pixel array, using a fully hardware-accelerated path for the former.
The one provided in the original post.
I know, but most people want to pay with their credit card and not a volatile altcoin, and they do not want to switch browser.
Here's my interpretation.

He's been asked to predict what will happen and is saying that AI will fundamentally change things.

Silicon Valley will iterate quickly, not just products but startups, and the effort will become trivial.

"That's all within the next year or two."

I think this is a prediction, more of a "anyone can clone your business model, get moving"
Pursuit of the truth can also be a distraction from what’s actually truly happening in this moment. Emotions aren’t arbitrary — they contain immense amounts of information. I’ve found that “controlling” emotions doesn’t work for me. What works a lot better for me is to acknowledge and accept my emotions, care for the part of me that is feeling that, and then let the emotion fade naturally. I’ve learned to more gently ride the waves and shifts of feelings that move through me, and it’s really made a big difference in my life.

There is more to life than pursuing truth. Ultimately, it is impossible to fully attain, so striving for it at all costs is a battle that cannot be won.

Ask yourself what does it mean to live a good life? And then continue to ask that question as you live and experience new things. And don’t forget to touch dirt now and then. We are much more than thinking machines.
> where it's possible to hold someone in jail before trial

Honestly, what did you expect? "Pretty please turn up for the trial and not kill anyone else while we're waiting?" Every country allows this if the crime was severe enough or the person is likely to be dangerous to others in the meantime. Usually there's a threshold to do that, but it's going to happen.
It's not out yet, but the light phone 3 might fit what you're looking for.

Although, it uses an e-ink display, so things like texting and gps may be a bit weird to use. Not sure if you'll get guaranteed updates for an extended period of time like 7 years though.
Great job, is there something similar but for SwiftUI?
You can quit anywhere you don't have a contract to keep working. That's not some special "TEAM USA!" feature.
I think that I saw a news story, that it was closed, now.

Doesn't mean the trademarks aren't valid, though. Here, there be [legal] dragonnes...
> what would they gain from doing "enterprise"?

They are valued at 3.4 trillion dollars with a P/E ratio of 34. They can give a lot of that up, or they can continue to grow, as their current valuation demands.

> Further: please define "enterprise market".

It's simple enough to think of it as some thing they are not doing, but can do, to make money. It's much less of a stretch than cars, which is one thing they've explored.
Their tech is years ahead of US.

Can you elaborate? (Am new to the topic, so your perspective would be appreciated).
Love the use of one of the best Kubrick scenes IMO on the main site
This series by lecturer Frederic P. Schuller is astounding work of thorough mathematical exposition delivered with clarity and charisma. This body serves as an exemplary introduction and tutorial on mathematics spanning propositional logic, topology, multilinear algebra, and differential geometry, towards the fundamentals of Quantum Mechanics and Gauge theory.
Observability.
It's hilarious that you think an armed rebellion in the US would stand even the smallest chance of success against the US military.
Got 8/15, best AI model got 7/15, and unigram got 1/15.

Finally a use for all the wasted hours I’ve spent on HN — my next word prediction is marginally better than that of the AI.
I'm not sure about Chinese law, or any other law, but GDPR for sure does not require that. The fact that the US is not an option doesn't mean you cannot store data in any other country, just that the safe harbour and then the privacy shield were considered inadequate. For example, storing personal data in the UK is just fine.
To send a file from one computer to the other by internet (although often internet should not be needed for this), I think netcat should do. Use tar or something else like that if you want to send multiple files. Use programs to calculate the hash if you want to verify the hash of the file. For large files, it does help to make resumable transfer; fortunately, that can be done easily, too (you can see what the file size is and use the "tail" program to skip some).

You should not need HTTP, FTP, etc. You should be able to use something which can work on any computers, such as just TCP/IP. Unfortunately, some systems (especially some Windows systems) will make that difficult. Using the more complicated such as Magic Wormhole and other programs means you will need two computers that support such a thing. I did once try to transfer a file from Windows to Linux, and had to install ncat to do so but Windows deletes it by default if you try to do that, but I was able to make it to not to do that.
This is a very interesting idea. I didn't know you could query a partition directly!
Neurosama is a very popular vtuber and runs on Twitch without any particular controversy about the fact that she's an AI, I believe an artist even made her model for free.

I think she even became the most popular "female" streamer on the Twitch platform for a while.
In my experience those are unlikely events and you save a ton of time by asking directly.

Especially if you make X and they reply with X - 20% (or worse).
Manifesto: The New Needs Friends
On an unrelated note, is anybody else getting AI-fatigue? It’s even becoming difficult to avoid in real life
Apples products aren't suitable for enterprise. They aren't repairable, aren't easily deployable, they make poor engineering choices which put the integrity of their hardware at risk, they don't run most business software, their security and update posture is a complete joke, they nerf products just to bleed more money out of consumers, they treat their employees and b2b dealings like sht. I can go on, the list is borderline endless with Apple.

Just all round dealing with Apple and their products is a effin nightmare. It's impossible to explain ethics to Apple users too. They literally have their head in the sand. Apples so crap to service and work with its gotten to the point where I just double my rate to 160 an hour if you want to bring an apple device anywhere near me just to discourage it. Please if you have apple take your business elsewhere. But alas they keep coming and I keep replacing macbooks with real work machines.
you: 8/15
gpt-4o: 2/15
gpt-4: 4/15
gpt-4o-mini: 4/15
llama-2-7b: 5/15
llama-3-8b: 5/15
mistral-7b: 6/15
unigram: 5/15

> You scored 8/15. The best language model, mistral-7b, scored 6/15. The unigram model, which just picks the most common word without reading the prompt, scored 5/15.

(In I think 120 seconds - didn't copy that part).

Interesting that results differ this much between runs (for the LLMs).

Surely someone did better than me on their first run?

Ed: I wonder if the human scores correlate with age of hn account?
> Completely undocumented password requirements that you just have to figure out by trial and error.

My favorite is:

1. I go to a website I haven’t used in a while but know I have an account on

2. I sign in with my email and what I’m sure is the right password for that site (algorithmically generated from site URL)

3. Password not valid

4. Ok, maybe this was an older version my my algorithm from way back

5. Password not valid

6. Fine, hit password reset

7. Get reset email and click it

8. Enter algorithmically generated password as new password

9. Error, can’t have that special character

10. Fine, per my rules, replace that special character with next one

11. Sorry, can’t reset password to your current password

12. Aaaaaargh.
Nah, that's just because in the US people usually buy with credit while in Europe is mostly debt.

If you buy with credit you are using the bank's money, with debt your own and you have less protections in the second case.

Trust me, i have meet my fair share of adults who don't own a credit card and if they want to buy something online just charge a prepaid card with the needed amount.

American express is not accepted in a lot of places because it is only credit and the processing fees are double that of debit cards.

Visa and mastercard debit cards are accepted just because you can't only accept debit cards, a lot of vendors fought for the ability to do so.
Cold air holds less water than dry, AC is great for drying, also saunas are super dry. Heating up ACed air would be ultra dry.

You mean that the wet rainy Seattle weather combined with jungle like south east make a bad moisture combo, right?
Nah, not retro. How/when did you implement the actions observed during retros? What was the average delay in terms of number of sprints?
DataChain: A Pythonic data-frame library for artificial intelligence
Elon Musk says X will pull operations from Brazil after 'censorship orders'
Looks like it's still open, at least based on Google Maps.

https://maps.app.goo.gl/cE9MCA7TZAdwYSkB6
Part of my motivation for writing a 28 minute-long thought piece was due to AI fatigue despite working in the industry.
Yeah as someone who only gets more or less 1 offer per few months while job searching, I'd rather take the possibly-shitty job while continuing to hunt for a better one if it comes to that than risk draining the rest of my savings with no further (or possibly worse) opportunities
I added a hotkeys for change subtitles scale...well worth it
Inductive or Deductive? Rethinking the Fundamental Reasoning Abilities of LLMs
Does anyone here know more features that MPV offers that VLC and MPC don't, considering they are all free and open-source?
You reminded me of this short film by Sean Buckelew:

https://www.youtube.com/watch?v=RubSLGTrdOA