skysight-inc/HackerNews huggingface dataset:
>For example, I doubt anyone could explain this "type" without studying it for several hours

From skimming it for about a minute it seems like it's just a strongly typed way to generate HTTP requests? It really doesn't look too complicated
My first ever online project was creating a spider (bot) so that has been my username ever since.
Brain waves also synchronize to other brain waves; "interbrain synchrony"

- "The Social Benefits of Getting Our Brains in Sync" (2024) https://www.quantamagazine.org/the-social-benefits-of-gettin...
The jury should award punitive damages based on this tactic alone.
Obligatory PA Comic: https://www.penny-arcade.com/comic/2024/05/27/a-very-particu...
Anandtech mentions in their review [0] that AMD is shipping a scheduling driver for Windows, with a "game mode" that disables one of the CCDs to prevent games from experiencing high latencies due to threads being spread across dies. So, presumably: yeah, scheduling for this chip is hard and Linux is much better at heterogenous scheduling situations (having been used extensively in e.g. big.LITTLE and NUMA systems for many years certainly can't hurt)!

https://www.anandtech.com/show/21524/the-amd-ryzen-9-9950x-a...
Yeah, while this story is absolutely plausible, plausible does not necessarily mean true. OP is a new account with suspiciously few details that would permit fact-checking, and I think I'd call this one ragebait until proven otherwise. (That does not mean that this couldn't happen or that there isn't a risk of it happening, but everyone here hopefully knew that before this thread. I'm saying it shouldn't adjust your beliefs much if at all.)
That’s not how CISOs get promoted. If a CISO presented it this way, the very obvious next question is “and how much will it cost us to fix” followed by “and how much will insurance cover,” which are both going to blow the reputational damage argument out of the water.

CISOs get promoted by being willing to focus on compliance over security, so that they can cover the company if and when it inevitably gets breached by saying they “followed best practices” (if that’s true).

All of this is because resolving a breach and giving everyone a year of identity theft protection is a lot less expensive, short-term, than actually investing in a real security practice, and companies in the US think in quarters, not years.

Europe is better about this because they tend to think many years ahead rather than focusing on short-term results.
Separate conversations, I wanted to avoid any prehistory, though all under my logged in user so can't exclude any possible inference that way
The pikvm is great but it’s also very expensive, I’d rather bump my budget by half the price of the pikvm and get something with intel vPro, and get most of the benefits automatically
speedrun any%
U.S. Awards $1.6B to Texas Instruments to Build Semiconductor Plants
Presidents can only sign what is put in front of them. They have the option to veto, and sometimes do, but in many cases they may view that as the worst of two bad choices.
This principle also applies at the business level. I’m constantly dealing with business analysts who obsess with processes (code) but don’t first take time to understand the entities and their relationships (data). The result is that when it comes time to build something they cannot communicate with the developers about what the data model should look like. The processes get implemented and the data model is put together on-the-fly rather than being carefully designed.
I suppose. There are a lot of things I don't like or use on principle, even if it might appear to make my life easier in the moment. Things that push us toward, "you will own nothing and be happy," tend to fall into that category. Other things, like Temu, which accelerate the race to the bottom and promote mindless consumption of disposable goods, is another category I try to avoid on principle. Over time, I think both categories will make the world a worse place.

I can't get behind these things and I carry some animosity for people who support and spread them. In both cases, I think the people supporting/using these things are not thinking things through and are only thinking about today at the expense of tomorrow. I think this is the core of my struggle when I try to understand the other side.

On the one hand, thinking about ordering ink is a thing of the past (a fairly trivial task for a home user imo). On the other hand, when the internet goes down, or something happens which impact the user's ability to pay a monthly fee for ink, their ability to print is completely gone. Never mind that they have everything they need and have paid a lot of money over time for it. The printer then becomes e-waste, even when it should work perfectly fine under a different pricing or subscription model. A simple ink monitor with an auto-reorder based on usage patterns should be enough. That wouldn't require locking it down, the user could cancel any time and still use the printer/ink they have... then if/when they are ready to sign back up, they can. Or just order ink ad-hoc. I'd have no problem with this.
What would be the usecase for publishing events in a social media protocol (i.e. ActivityPub) with no information?
Super curious to know how many common access control solutions flag unbalanced entries/exits.

E.g. if "John" badges in... and then 10 minutes later "John" badges in again...

Will most systems complain?
Show HN: We are building Figma for developers
What is Symbols?

“The ultimate platform for developers & teams to build, test and document fully functional & reusable UI libraries on a canvas. Publish as a website or export to your existing tech stack with open-source development”

Currently in beta access. Comes with access to 900+ UI components
Build any website or add new functionality to existing web projects in minutes. From landing pages to SaaS applications.

Lifetime offers
We are currently running one off offers for the first 100 users from $49 USD, which includes unlimited projects or users for 1 project. Eventually charging $49 per month per user/project, as design system platforms charge a similar amount. So grab a deal!

Here is a quick landing put together, with a better one in the works :)

https://symbols-beta.framer.website/

Any questions let me know!
>You missed the point of my previous comment, so I'll be more explicit and blunt: if Valve doesn't care enough to prepare an NDA, why do you care? W

Because as you missed: I work in the industry.

I signed at least TWENTY NDAs for jobs I'd never hear back from after that recruiter call this year alone. I'd say 70%.of them didn't even tell anything NDA anyway. Because those employees don't want to risk their NDAs. Some are startups and there's not really anything to talk about, but gotta sign it anyway. I barely talk about western games because I could randomly slip some random irrelevant detail for an announced game and be in hot water. You like signing a bunch of gag orders just to be quizzed on random leet ode questions? I don't.

Games are so dang opaque with some of the coolest tech in industry because some Japanese executives from the 80s were afraid of secrets leaking or competitionor something. There were chances of open source gaming creeping up in the 90's with Quake's engine, but consoles really took off (and perhaps PCs became too expensive for a while) and it locked things down even harder. You can barely even say you have dev kits for released consoles.

So yes, it does anger me and affect my personal mission as someone trying to break that mentality. I'm working on a game with as many open source tooling as possible, open source engine, all the code available to view and modify, etc. and I want to actually help others make good games. Hard to do that when every line of code is apparently million dollar trade secrets.

The worst part is the lack of care or at least illusion of care. People make mistakes, I don't hold that against those willing to course correct later. This author just goes tongue and cheek and complains why their industry isn't as respected as proper journalism.

Hope that answeres your question.
During our initial testing, ~1m nodes on a local Docker container with 1G RAM and 1vCPU.

But here I mean "performance" in both retrieval time and the overall quality of the fragments retrieved for RAG compared to a `pgvector` only implementation. It is possible to "simulate" these types of graph traversals in pg as well, you'll have to work much harder to get the performance (we tried it first).
> they're building (what you consider to be) frivolous projects?

I don't think frivolity is necessarily binary — it's more of a spectrum. On one end of the spectrum you have tunnels that connect landmasses separated by massive bodies of water, and allow emergency services to operate efficiently (where the only alternative is a giant suspension bridge).

On the other end of the spectrum you have tunnels such as the LVCC Loop which help convention goers and tourists avoid what is effectively a brisk walk or bike ride (this is also largely a glorified Tesla marketing campaign).

> just like many other construction companies

I'm not sure I believe disfiguring blue collar construction workers is just standard business practice while building a small tunnel just because you posted a link stating that construction can be dangerous. Of course construction as an industry is going to be more dangerous than childcare for instance (and therefore over-represented as an industry in statistics), but that doesn't mean you waive off every accident and chalk it up to a business expense.
Characterizing the problem as "debt" is misleading. The real problem is the government printing money. What we call the "national debt" is just government printed money where whoever "has" it can only draw on a portion of it (the interest) until a certain date (the maturity date of the government bond). And "paying back" the "debt" just means moving the government printed money from one account (the "bond" account) to another (the "bank account" of whoever gets the interest or sells the bond). The actual problem has nothing to do with "not being able to pay back the debt"; the government will just print more dollars (or more precisely, just move more accounting entries from the "bond" account to "bank" accounts). The actual problem is how printing money skews the economy and transfers wealth to the financial system from everyone else.
”Hard drive manufacturers accused of using privacy to excuse ignoring child abuse material on their drives“

“camera manufacturers accused of using privacy to excuse ignoring child abuse material being taken by their cameras“
So ... "inertia". This book attempts to re-invent the word "inertia".
LLM and Bug Finding: Insights from a $2M Winning Team in the White House's AIxCC
Yeah, somebody wanted some internet points.
I totally agree, though this process isn't without its faults. One thing I've had to learn to be mindfull of is "type-crastination" -- if I'm not careful, I can really overdo it and spend way too much time and energy on defining types.
'Mistakes are romantic': the revival of point-and-shoot cameras
There are these books:

https://www.amazon.co.uk/Greek-Philosophical-Terms-Historica...

https://www.amazon.co.uk/Greek-Philosophical-Vocabulary-J-Ur...

I have the second one, which I found useful when studying ancient Greek philosophy in English translation.
Play by mail games: games one can play for years
Congress does the budget. The President just signs it (or not).
I think that the executive proposes the budget, though. Maybe where you end up has a lot to do with where you start.
We are trending #4 in Product Hunt today on our launch of Boggl AI: https://www.producthunt.com/posts/boggl-ai

Boggl.ai was born out of our own struggles with writing requirements and creating release notes from scratch. Staring at a blank Word document, trying to articulate complex ideas, and making sure everything was aligned with the product vision—it was frustrating and time-consuming.

That’s why we decided to build Boggl.ai, an AI-powered tool that takes the pain out of these tasks. With Boggl.ai, you can:

Speak your ideas: Turn voice commands into detailed product requirements

Automate the mundane: Generate release notes instantly, with zero hassle

Work smarter: Seamlessly integrate with Jira, Confluence, and more

Our goal is to make product management simpler, more efficient, and a lot less stressful.

I’d love to hear your feedback, ideas, and any questions you might have. Thank you so much for checking out Boggl.ai!

Please support our launch by upvoting or dropping a comment!
> There can be situations where debt is a good idea, and there can be situations where debt is a bad idea. In ~2010, debt financing was incredibly cheap, so if the USA was able to take out debt at that time and use it for productive economic growth that paid more than the financing cost, it would have been a good investment.

Sure, debt can be good idea when it's carefully considered and planned by a well run organization, preferably one where its leaders have their personal finances highly dependent on its success.

However the chronic issue almost every government has is that the government is neither well run, nor do the people running it suffer any financial consequences when things go poorly.

I don't have a realistic fix for this, of course, but it's fun to imagine annual performance reviews for politicians with guillotines available to HR.
SponsorBlock is 20-anonymous: https://github.com/ajayyy/SponsorBlock/wiki/K-Anonymity
I'm using the word "invest" in a pretty broad sense. I would consider, e.g. fixing the USA's disastrously undermaintained waterways, bridges, railroads, electrical grids, schools, etc. to be "investments" (and probably wiser investments than whatever it invested in instead)
So its kinda like cdk(tf)
So what do you want, the government to mandate every aspect of your life?

Obviously, the government should be offering constitutionally protected and inalienable electronic money accounts that pay the same interest the banks get paid.

But that is not in the cards right now, so spending a few minutes, or maybe an hour at most reading a couple websites about which bank pays the most is really not much to ask. It’s called shopping, and it’s how a market works. Markets don’t really work if market participants evaluating which sellers are offering better value.
Tarot meets tech for digital manifestation
Hey I created a digital tarot planner and vision board canvas. Check it out and let me know your feedback.
Thoughts on the BMW i4?
That would be a terrible user experience. Most places are not diligent about ensuring each employee separately badges past a barrier. Common to hold the door for Bob while he is juggling a coffee. Boom, missed badge swipe and now things are forever imbalanced.
Sounds more like a scam.
In the case of this attack, somewhere between 40s and 30min of physical access, depending on how the card was set up. In the case of a hotel, the spicy card to clone would be the cleaning staff's, which conveniently also admits a reasonable explanation for the card going temporarily missing (e.g. abandon it one corridor over, oops must have dropped it while doing the rounds).

Depending on the specifics of a deployment, I'm guessing you could also use the card secrets to mint new cards that authenticate correctly to facility readers, but contain different information? But I don't know nearly enough about how these cards get used to know how much flexibility you get there.
Most RFID card systems in the world uses MIFARE Classic due to its cost and long history.

MIFARE (not just the Classic family) have a UID (32 bits) and x blocks of encrypted data (12 for Classic). Each block is protected by a A key and a B key.

The earliest card system only uses UID for authentication ie. if the card says the right UID the card passes authentication.

Obviously, anyone can forge a card with said UID, so the latter system start to use the 12 encrypted fields for authentication. The card reader would challenge the card to encrypt the nonce plus stored identification. Only cards with the correct key can respond with the correct encrypted data + nonce.

The authentication uses symmetric encryption. Depending on how the system is setup, A key is used for Read only, Read Write, or A is used for read and B is used for write, or both A/B is need for read write.

The original Mifare Classic uses a proprietary crypto crypto-1. Due to various reasons (eg. weak PRNG, collisions, etc.) , it can be trivial to crack a traditional Mifare Classic key. However there are harden keys that still could not be cracked due to various countermeasures.

The paper seems to found a hardcoded A/B key A396EFA4E24F for a particular brand of RFID cards (I just skimped the paper and its been years since I worked on RFID. I might be wrong on the detail).
Local credit unions rarely are at the same level as HYSAs because they have physical infrastructure to maintain
I came here to share this quote because it's so true.

Except when the effort to change the database schema becomes significantly greater than the effort to change the code, and then application developers start abusing the database because it's faster and they have things to do.
Sure, some cell networks suck. That's not an immutable law of nature though. There is plenty of bandwidth available for terrestrial cellular networks. And backhauls can be point to point microwave rather than fiber.
They force their franchises to use the absolute cheapest materials possible? Have you seen their turkey breasts? Don't see their turkey breasts.

Their bread isn't even technically bread.

They also, somehow, against all odds, made the five dollar footlong, their most popular offering, NOT five dollars.

The stores in their network are usually gross and uninviting.

Meanwhile, Jimmy John's, which is only 20 years younger, has fresh (good!) bread that's baked on premise, decent quality meats and cheeses, and stores that are clean, welcome and well decorated.

Subway is the personification of "I've done nothing and am out of ideas!"

(Subway is owned by Roark who also owns Dunkin and Arby's, brands that are THRIVING.)
Sure, but for some reason we are assuming that people don’t believe their religions… if we apply that logic to Christians as well, I guess an excerpt from their book won’t be very compelling.
>Not to mention, every bank has a godawful shitty app,

Well, not my bank. In fact i stopped using a third party app to track my spends.
I do appreciate i may have struck gold with this particular app/ bank -
and should i wish to change bank i will insist on going thru any new app to give it a fair shot. If it's not up to the quality of what i already have...no dice.
I'm not wasting my time/ money tapping away on crap.
> Complete universal healthcare would save money

Health care costs were far, far lower when the US had a free market healthcare system (before WW2). The more the government took control of it, the more it cost.
Yep, developers have been making those mistakes for quite a while already (even if just with CloudFormation, CDK or TFCDK). The problem isn't really "HCL is icky", it's the specialisation and knowledge required to make safe, secure and reliable systems.

In a way, the public cloud and their APIs are what zero trust is to classic corporate moat networks. You used to be safe 'inside' your code, and now you're not. On top of the security issues, you're now also getting real time billed for your mistakes.

This is of course where platform engineering (and the gradient of development and operations) comes in: give developers the self-serve resources they need so they can own their stuff. That also means safe-to-consume pre-made sets of cloud resources. That way you're not expecting everyone to bear the same additional cognitive load, while still having major benefits from the resources that are available.

Essentially the same thing the industry has been refining since the time of sending a deck of punchcards to the mainframe operator who will deliver the results of your batch compute once it's done. No cognitive load added, only the job at hand on your mind.
A major caveat for folks in this line of thinking, though, is to avoid falling into the "one true schema" trap. Data can and will be duplicated in your system. A large part of the "consistency" battle people should be having is how long before a lot of that duplication is as expected. Not making sure it is never inconsistent.

That is, it is easy to see many junior efforts stall out during schema design thinking that you can solve all issues with a fancy method of storing the data. It isn't the schema that is important about your data, so much, but where different updates to it are known first and what they will need to go with it.
I wrote this in Crystal lang to learn more about it and the language: https://github.com/nolantait/disruptor.cr

There is a Ruby version that is also very readable: https://github.com/ileitch/disruptor
AIxCC is an AI Cyber Challenge launched by DARPA and ARPA-H.

Notably, a zero-day vulnerability in SQLite3 was discovered and patched during the AIxCC semifinals, demonstrating the potential of LLM-based approaches in bug finding.
I would argue the only reason that Linux phones have garnered any interest at all, and funding from tech guys is because they let people tinker and build. A dumb phone wouldn't hold much interest for people that are interested in linux
There are two types of applications: one where you know your data model from the beginning and one where you don't. Static types work exceptionally well when you're modeling something you understand pretty well; especially to the point where it is not expected to change significantly. On the other hand, a lot of programs find their data model while being made. This is fine too, what is expected from a program can change, sometimes a lot. I've built both types of applications in both types static and dynamically typed languages.

What your team knows matters more than either of these.
If you go to Amazon directly, this is great - you continue using our products and recommending them to your friends. Probably, next time you'll become our customer. For example, if you aren't satisfied with the support from Amazon, or there are some missing features at Amazon, or if you just switch department or company.

We develop open source products, we are profitable and we have good revenue growth rate. We make money mostly on high-quality enterprise technical support for our open-source products. Some of our products have enterprise-only features [1], but most of our paid customers continue using open-source versions of VictoriaMetrics products.

[1] https://docs.victoriametrics.com/enterprise/
The Bare Minimum Beats: Panasonic's RD-9844 Rhythm Machine
How long until dna tests become cheap and available enough to use for mushroom identification? I wonder what that will do to the hobby...
Iv started with learning python and java during highschool but python really stuck.

Now as I work on my degree iv started to try to learn C for reverse engineering and low level development. While I do understand some things its a big leap in terms of skill in python. I love how flexible it is and how fast it is. Recently I started a new challenge based on shodfycast's most recent video. ( https://www.youtube.com/watch?v=M8C8dHQE2Ro ) and currently am just focusing on single thread performance, and using array structures. Then I realized my random number isn't true random and debating if my prg is sufficient enough. I also debated generating all the numbers at once into an array, throwing it into CPU cache, then doing the logic for rolls using the faster memory so I'm not waiting for numbers to generate. Single core laptop time is like 56 minutes using wsl.

I'm tempted to try this on my dual socket system using tinycore Linux, so I can shave off some time from useless overhead and use some debug tools to find the slow spots.

Unsure how much time I should sink into this though.