skysight-inc/HackerNews huggingface dataset:
We most certainly do give kids the same or more freedom. The kids just choose to use devices with that freedom. Society is trying to reverse out of it the best way we know how. Schools are smothering phones so the teachers can get back a shred of dignity and the kids can get an education. Now, if we could just be done with this chrome book/laptop garbage.
There is a write up in the docs/AI_Whitepaper.rtf file.
Markdown is meant to be shown (2021)
I have been comparing TimescaleDB and my thoughts were it looks really nice and the fact that it is based on the solid foundation of Postgres is really good, but their clustering support was discontinued and they refer to some kind of vague "cloud native solutions" that should be used instead. Incremental backup is not possible unless using third party tools. I was unable to determine if I can write the same value multiple times without running into trouble. And from what I could find performance (both write and read) is worse compared to virtually any other dedicated time series solution out there.
But like the article says even if you never deliberately bake the clay tablets, accidents will do so anyway.

It's easy to imagine we don't have the first year of writing, maybe the first human lifetime of writing, but it stretches imagination to invoke a situation where somehow a civilisation is writing clay tablets for hundreds of years, decides they are not to be made into permanent records and somehow they're so lucky that there's never a house fire, a goof at the bakery, somebody's kid spills hot stuff on the tablet, nothing like that and so over that period every single tablet is destroyed/ erased as expected and leaves no trace.
> Because every word and every combination of hexadecimal characters is "potentially offensive"

No they are not. There are plenty of harmless combinations, like 0x1235679a or other with English words like 0xcafebad0.

Offensive was a bit of a strong word here, I was mostly paraphrasing the dictionary. However in male-dominated field, using an objectifying word targeting 50% of the world population is definitely in poor taste.

Most important of all, it looks unprofessional. It don't think it would look professional for HR to put jokes in our salary sheets, and I think the same applies to company code.
That looks crazy coming from statically-typed languages. So many hops, efforts, custom structures just to verify types. Come on, modern C# can do all of that out-of-the-box. You define a record/class for DTO and System.Text.Json will either convert it successfully or throw you an exception that will say exactly what the problem was and at what character/field. Combined with much more advanced IntelliSense, development comfort is so much better. But of course, whatever works for you.
Mini imported Japanese vehicles may soon be banned on Massachusetts roads
"Long ago Kujon a black bird, painted on the rocks. He struck his bill against the stones so that it Bleed, and with the blood he painted. He painted no animals, only human-shaped figures which probably represent spirits."

I like the way that ended. More traditional stories should contain vague words like "probably". It reminds me of the part in the book of Revelation where "there was silence in heaven for about half an hour".
Ask HN: What's a great AI focussed founder program you've heard of?
Looking to learn from any amazing programs you all love.

I’m bringing together 75 AI startups for a 6-week program (for the 3rd time) to help them through growth, product and financing strategy. Patrick Campbell from Profitwell gave a workshop on pricing last cohort. There’s no fee to be a part of it and we don’t take equity. Open to our customers and non-customers too.

If interested, check it out here:

https://www.paddle.com/ai-launchpad
You can run PHP in GitHub with the GitHub Actions to generate a static HTML site hosted in GitHub Pages.

So you can edit your HTML push and have a simple script to clean it before publishing it.

You can copy my blog is very simple and is generated with PHP

https://github.com/4lb0/blog
I've always enjoyed watching the show "Mayday: Air Disasters" about airplane crashes. This might sound more morbid, but it's actually quite comforting. The effort that the crash investigators go through to find the root cause, and the fact that aircraft manufacturers follow their recommendations to improve safety is nothing short of amazing.

I feel like Boeing's management these last few years has set back air safety almost 40 years.
What I learned from dogfooding a fair-source Gumroad alternative
Show HN: Open-source tools for devs who don't like ads
Hey HN, wanted to share a new collection of dev utilities that are ad-free, client-side (nothing leaves your device), with a command+k menu for fast search.

github.com/jamdotdev/jam-dev-utilities

Why? The sites we use every day for data conversion (e.g. PNG to data URI) are cluttered with ads, one of those mildly annoying things engineers deal with while writing code.

This came up at a recent team dinner, and we got interested in creating nicer, modern, uncluttered versions of these tools. Since then, every time we needed a util, we added it to our stack. Lots more tools still to add, but so far we’ve got 15 like JSON converters to/from CSV, YAML, etc.

You can check them out at jam.dev/utilities. It’s built with next.js, tailwind css, and shadcn/ui. It’s ad-free, open source, and all runs client side – data never leaves your computer. There’s a command K search powered by cmdk.paco.me.

Are there any other tools that you wish existed or are there any other tools that like you've made for yourself like this?

By the way, we’re hiring engineers and if you like building dev tooling, that’s our jam and we’d love to chat: jam.dev/careers
Ken Paxton berating anything as unlawful when he’s a career crook will always be humorous to me
Verbosity in Rust I think is natural because of what the language is trying to achieve. It's understandable that people would rather not bother with it and I definitely don't advocate everyone use Rust (and definitely not use Rust for all their projects). A lot of times it is because Rust isn't the right tool, but the article is just comparing languages and not really their uses.

If you build something in Rust and version lock like you would in any other package management system, why would you have issues with a dependency on something that is happily running and doing it's thing? If you must be on the latest version of everything, this is going to be problem in every language. I notice people tend to forget that not long ago everyone vendored their deps in Go for the same reasons and still do if stable is the ultimate goal. Save updating for when it's necessary, like security updates.

Be careful about just following the UUID anecdote. I actually did take a look at the commits for the Rust UUID crate. Frankly, it just seems to be popular and well maintained. Many commits are very small spelling and documentation updates. Rust has really great documentation features and the community is very good about leveraging those features. Go see for yourself.
I appreciate the effort, however that list of payloads is a great way to get your IP address banned by Akamai and others. There are better ways to discover injection points without poking trigger-happy WAFs.
Thanks for your insight, it looks like you've come basically to the same conclusions that I found during my own research as well, which is reassuring

For us it seems VictoriaMetrics is the most logical replacement at the moment, as like you say it supports line protocol as well
This amazing and great! I absolutely hate having to choose something to watch from an immensive infinite list, specially when I'm just trying to relax.
> GOV.UK Notify makes it easy for public sector service teams to send emails, text messages and letters.

Doesn't seem that critical to me. Important, but doesn't pass the sniff test of "is this a matter of national security" that would justify self-hosting ultimately slowing down development and making it more expensive and in effect less feature-rich for taxpayers

EDIT the API docs suggest this is used for sending formal Notifications en-masse rather than mission-critical comms
Feynman: How the train stays on the track [video]
Is the gov.uk website infrastructure compliant with their own Cyber Essentials requirements? I very much doubt it, as the anti-malware requirements applicable to cloud providers that are not using Windows or MacOS ([1], section 5, subsection "Requirements", option "Application allow listing" on page numbered 14 in the corner) are not implementable as worded. Using Azure instead of AWS could have helped here.

[1] https://www.ncsc.gov.uk/files/Cyber-Essentials-Requirements-...
3 months from now: how we spent hundreds of hours optimizing our AWS bill to save 10%

6 months from now: top ten reasons why it isn’t a problem AWS costs us twice as much as self hosting.

12 months from now: how we saved 75% by migrating our app back to our “legacy” data center.
Condemned through eterogeny. Very remarkable circle.
Did this app have anything to do with the huge QR codes which encoded far too much information? https://www.revk.uk/2020/09/how-not-to-qr-nhs-c19-app.html
Premier League Will Ditch Its Hated Var Offside Tech for a Fleet of iPhones
> Meanwhile everything from ubuntu's apt-get to my connection to HN is secured with 2048-bit RSA - an algorithm invented in 1977 and in widespread use since at least 1995.

That’s a bit misleading, considering RSA is only used for certificate verification. Key exchange and symmetric encryption is handled by somewhat more recent algorithms (ECDH / AES-GCM).
Some neutrino detectors can estimate direction, see

https://en.wikipedia.org/wiki/IceCube_Neutrino_Observatory

which should be able to spot a supernova in our galaxy easily.
First title is a bit misleading. ParadeDB is Open Core, which uses AGPL for Open Source version.

When you talk about traction I wonder how many external contributors are you getting ?
New Paint Tech Needs to Reach Production
>Avoid: HMAC-MD5, HMAC-SHA1 and such. The underlying hash function has to be safe.

Interestingly enough, there is a proof out there that more or less states the opposite for HMAC-MD5 and HMAC-SHA1:

* https://eprint.iacr.org/2006/043.pdf

The issue here is that MD5 and SHA1 are broken for collisions. But no one could figure out an actual attack for HMACs based on them. The linked paper is an attempt to explain that.
Credit cards do already skim a percentage off every transaction you make with them and, until very recently and an act of congress, actually did restrict vendors from offering a separate price for cash transactions. They were perhaps not so bold as to try and claim 15-30% of the gross. Notably stores accept (or refuse) various credit cards in part due to their percentage of the take, with AmEx being notoriously higher than others.
Missing source code? That's terrifying.
Multiple reviewers spot huge inter-CCX latency increase for AMD’s Ryzen 9000 Zen 5 CPUs – Bad news for gamers
That code block is in an "if (debug)" block, which is enabled if "settings.debug=true" is set.
Ego (YC W24, Gaming) Is Hiring Community Manager/Social Media Marketer
I’ll go with the obvious: scam phone calls and “your computer is borked, call 1-800-PAY-SCAMMER to fix it”.

There are a lot more boomer generation people out there that fall for this every day than complicated or highly technical scams. There should be PSA’s shown during Jeopardy! and Wheel Of Fortune commercial breaks that simply state: “The IRS will never call you. Neither will the USPS. Microsoft won’t either. They won’t text either. If you get something that says your computer is hacked and to call that is also a SCAM. Turn it off immediately and take it to a local professional.”

Edit to add: I know all of us in here will end up being the “local professional”, be nice and help the elderly.
Google is a monopoly – the fix isn't obvious
BulletML[0] (circa Java applet, AD) is a markup language to describe shmup bullet behaviours.
The Firedancer README says the project is "Inspired by BulletML".
Cool to see it living on, in a way.

But where is the toothpaste laser? What even is a toothpaste laser? I hear you cry, well...

Today in Search Engines: Software for No-one, I try (somewhat naively) to search for "toothpaste laser" in hope of finding an accurate analysis/explanation/implementation of the famous weapon/s from the Raiden series.

It won't surprise you to learn that this got me a grid of photos of toothpaste tubes and mechanically-induced fluorescent grins.
It might surprise you to learn that prepending 'raiden' to my query barely helped.
If only there was a search engine that allowed the user to decide what to search for.

Long story short, Raiden (series) is about as popular as the intersection of Raiden (Kharacter) and referring to electrical arcs as "lasers"[1].
Both of these topics are totally eclipsed by the Bend-Tech Dragon A400: The Essential CNC Tube Production Machine[2].

[0] http://www.asahi-net.or.jp/~cs8k-cyu/bulletml/index_e.html

[1] not that any of the toothpaste lasers are lasers

[2] it is essential, after all (https://www.youtube.com/watch?v=xMb9XZjK6m0)
Unfortunately this very application, Gov.uk Notify, is currently being used by Councils to send emails to residents directing them to an outsourced company's website, https://www.householdresponse.com, to input sensitive details about where they live.

The emails are phishy to the extreme and there's no indication or way to verify that it's an official service. See for example https://www.bleepingcomputer.com/news/security/uk-gov-keeps-...

While some parts of Gov.uk are done well, there are still terrible practices everywhere due to cheapness and ignorance and presumably because the Gov UK people can't do everything, unfortunately, even though it would be cheaper and better if they did.
The complete addition formulas part is indeed solved, and could have been solved much earlier if people had read Lenstra's 1995 work. The complete formulas we have today are based on Renes et al. from Eurocrypt 2016, but that refers back to "We're essentially doing Lenstra". The technical detail here is that it's impossible under certain circumstances to get complete formulas that work over extension fields, but that's not necessary to do it over the NIST curves where you're working over the base field GF(p, 1).

That said, I still think the finite-field inversion in ECDSA signatures (instead of doing vanilla Schnorr) is dumb and risky. (Bernstein's deterministic signature improvement is even better, and would probably have prevented the PS3 hack, but I can't blame NIST for this because it was not known at the time. I think you're allowed to do it with the NIST curves too nowadays.)

FIPS 182 gives a non-constant-time implementation of point multiplication with the note "The algorithm given below is for reference purposes. Other (constant time) algorithms that produce an equivalent result may be used." which should be a MUST not a MAY, and in my opinion the non-constant-time one should never have been in the standard in the first place because that (and the accompanying note's wording) encourages people to go with it.

Checking for invalid curve points is also a solved problem in theory, but as far as I know not always implemented correctly in practice.
The in-game help explains, which I have a copy here:

https://static.ddpoker.com/gamehelp/help/hostonline.html
Damn. We used to visit Hocking Hills here in a Ohio when I was a kid (I'm still obsessed with the place and visit often). The trails are usually a long a creek and have several falls at the trail waypoints. Everyone would stop and swim, the waterfalls would be full of kids and whole families. I would refill my canteen from the creeks.

Swimming is banned now and there are no people playing in the water. You hike your ass into the valley and walk for miles over rough terrain in god-awful heat. The kids hate it.

When I was a kid I couldn't wait to get back there and sleep in a wet tent all week in a primitive camping area so I could go on these hikes.
Ecs isn't exactly tying, because ultimately it's still docker containers, so moving out wouldn't be a tricky prospect. A cloud agnostic solution though would likely mean k8s and bring with it much more complexity and overhead (and is also a form of lock in).
At the Luton airport they have these big "mass casualty event" supply boxes on the walls. Presumably full of supplies to provide efficient first aid after such an event on the spot.

As I was writing this comment I learned that they were inspired by a bombing which happened in Brussels: https://www.shponline.co.uk/fire-safety-and-emergency/mascal...

One of those things you hope will never need to be used. But if it is ever needed it will be very handy.
This article argues that PMF doesn't exist. Oh and if it does exist, it's not clear when it is achieved. And if you have it, you can lose it. Oh and even if you don't lose it, it doesn't guarantee success.

Whenever I hear arguments for or against something structured like this, I'm immediately skeptical. You see this with people promoting vegan diets. It's better for the environment, and healthier, and meat is gross and gives you ED, and... Sure maybe all those things are true, but what are the odds the author doesn't just have a point of view that he's trying to sell desperately.

Product market fit obviously exists. In my experience, I was at a startup and we had pretty much no sales or usage for about 9 months. Then we pivoted and pretty much overnight we had a few users and 100k ARR within a month or two. Does this mean it would succeed or we couldn't fumble and lose it? Of course not, but that's obvious.

PMF a useful framework to think about your product and question the value proposition you're offering. Take feedback from the market. If no one is using the product, its possible the market has no need for your product.
When pressed, the expedition's Aboriginal guide explained their creation

As quoted third hand by Agnes Schultz in 1956.

It's far removed from the manner in which, say, Kumantjayi Mowaljarlai spoke directly first hand about the works he maintained.

https://magabala.com.au/products/yorro-yorro

There's much lost in translation.
facts.

anyone intentionally migrating infrastructure to the cloud in 2024 hasnt seen the bill, or is spending the taxpayers pound.

"Gov.uk notify" isnt a critical business service. it doesnt need multi-az or multi region failover. running a docker container itself isnt a feat of achievement.

you could save money over the longterm by running a pair of pizzaboxes in Cardiff and Edenborough running orchestrator. hell, you could arguably run notify in a pensioners basement off a pi powered by a solar panel.
Kim Dotcom's extradition to the U.S. given green light by New Zealand
Fun facts, there is an important Islamic tradition where group of people (tens or hundreds thousands of them) called Hafiz who can memorize and recite the entire Quran. If for example, God forbid, that the entire written copies either physicallly or digitally of the Quran are entirely destroyed, it can be recreated completely in no time. This practice is considered a living miracle since no other holy book has this special feature and it is also well known fact that even the Pope does not memorize the New Testament Bible let alone the complete Bible.
Composing a Flexible Dev Environment with Docker Compose (2023) [video]
Previous discussion - 111 points, 51 comments https://news.ycombinator.com/item?id=41243931
I've been running Gitea on my homelab for a few months now. It's fantastic. It's like a snapshot of a point in time when GitHub was actually good, before it got enshittified by all of the social and AI nonsense.

I've been moving most of my projects off of GitHub and into Gitea, and will continue to do so.
A number of US federal agencies still have astonishing amounts of it. The world’s largest insurer, Medicare, uses 10M+ lines of COBOL to process the claims it receives — total dollar amounts that make up 3% of the yearly GDP.

Maintaining and modernizing these critical systems is important work.
Yeah, I’m assuming that was the reason too.
gnus was pretty good for conversation chains
DHS plans to collect biometric data from migrant children "down to the infant"
I'm not the person you're replying to, but it looks like it's possible to carry around a finite state machine, hence get the power of regular expressions (with caveats). I made an example that should highlight quoted text: https://news.ycombinator.com/item?id=41254638

It doesn't check that there's a closing quote, but it should work for highlighting syntactically valid code (once you fix my mistakes). I don't see a way for a character to affect others arbitrarily far back unless some fancier features like ignoring certain classes can be abused.
To be fair, the criterias to decide on joining a contest were presumably developed by joining contests. At least, that's how I interpreted his ramblings through code and so on. I am more skeptical towards contests showing you the submitted jobs. Surely that is less frequent and an error (e.g. if a submission looks like copied, you'd assume it was but having shown these was on you as organizer)
I believe the author first started by making blog posts and then interrupted them to simply make a book about it
Yeah it has good times and bad times depending on the property market and the government laws of the day and also on the individual. Still over the long term there tends to be a transfer of wealth from the young and hard working to property owners as a class.
> Is WD-40 a lubricant? Apparently, again, it depends!

Yeah...

I love WD-40 and use it all the time but... For many use cases there are better solutions out there. For example the picture showing it used in a window (or door?) seal: you want to use a spray of silicone for that instead. For locks (inside the lock I mean) you want to use graphite powder (or teflon). Not WD-40.

WD-40 is amazing because one can can save your day. But the examples where something better exist are numerous.
I think it’s important to be explicit about whether or not signed integers are used. From reading the document it seems that they may be signed but they could not be. If they are signed then you could have multiple bit strings that represent the same date and time which is not great.
Maybe you mean this sort of thing (first image result for "raiden purple laser") https://gamedev.stackexchange.com/questions/29424/what-are-t...
The kinds of messages that get sent via email or text are usually pretty unimportant. Important things tend to be sent via letter or a phone call.

It's not likely to be anything critical.
AIUI part of the problem with size is due to hybrid setups. Size could probably be reduced if you only used a PQC algorithm instead of combining it with existing crypto.
Show HN: Product Feedback Widget via Loom
As a matter of fact this would not be a "major undertaking" in Python, unless your definition of the term is majorly loose:

@dataclass
class InnerCircle:
s: str

@dataclass
class NPC:
s: str

@dataclass
class Dissenter:
s: str

Committer = Union[InnerCircle, NPC, Dissenter]

class CocReaction(Enum):
DoNothing = auto()
ThreeMonthsWithoutHumiliation = auto()
PublicDefamation = auto()

def adjudicate(c: Committer) -> CocReaction:
match c:
case InnerCircle():
return CocReaction.DoNothing
case NPC():
return CocReaction.ThreeMonthsWithoutHumiliation
case Dissenter():
return CocReaction.PublicDefamation

Although in reality you'd likely model Committer as a product of a status and name, and adjudicate as a map of status to reaction, unless there are other strong reasons to make Committer a sum.