skysight-inc/HackerNews huggingface dataset:
> You see, there is a 1.5m-2m new car market right next to China, completely abandoned by western players

Which one? If you mean Russia (which by the way is only 600-700k), then those Chinese players face secondary sanctions in most markets which settle trade in USD, along with a lot of politically connected domestic players.

If you mean India, most Chinese players have been chased out or forced to transfer technology and majority ownership to Indian companies (eg. SAIC MG Motors India now being majority owned by JSW Group). Also, the dominant foreign players are Japanese and Korean with massive Indian government backing.

If you mean VN, ID, MY, or PH, then it's South Korean and Japanese JVs that have a dominant position along with govenenent backing.

> another 500k-1m market in Central Asia

Which is dominated by a mix of American (GM) and South Korean (Hyundai) JVs with UzAutos, Russian automotive players, and Japanese JVs with Pakistani+Indian players (eg. Toyota x Pakistani Army)
Huh, interesting. Not exactly conclusive, though. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3841993/
I think they even robocall stores with something similar to Assistant to check if they're open on holidays, which is definitely something that would be difficult for a smaller or community-run database to accomplish at scale
I mean plenty of TV shows claim to know how these people respond, I'm sure there are current docs that render my satire obsolete - but until its packaged neatly in less than 200 chars who cares /s
> Have you heard a similar argument to “we don’t need authentication to this application because it’s only accessible on the VPN”?

Not personally. I've only read anecdotes like these online.

But that's not even the point.
People make stupid arguments about everything all the time.
Have you heard a similar argument to "We don't need regulation because the market will take care of it"? Surely you don't hear that and conclude "let's get rid of the market"? (Or, I guess this is HN, so maybe you do...)
ASP.NET Core + ecosystem of packages for it are likely more comparable to Active-J and Vert.X in terms of focus on reducing boilerplate and offering good performance. There are more similarities in the API esp. with minimal API within the former. It is a much more focused package and Spring Boot performance really isn't up to par vs all these.
Pretty much, yeah
Sort of.

My issue with using closures as your functional option implementation type (i.e. "functional options" is "call this function to get an opaque arg" which does not imply that you need to use a closure, it's just a common implementation strategy) is that when a library does it, it prevents anyone from writing middleware that is interested in argument equality. Among other useful desires.

That's quite common in my experience, and working around it on the library-user side is rather painful, as it often requires reimplementing roughly the entire API so it can be controlled.

The alternative is to have your return type be an opaque interface, which can have any implementation (including closures):

type Option {
apply(...) // privately implementable only
// or just have an empty `private()` or something
}
type someoption string
func (s someoption) apply(...) {
// whatever is needed, it can be changed any time
}
func SomeOption(val string) Option {
return someoption(val)
}

wrap(thing, SomeOption("arg"))

^ in this, the wrapper can check if options include `SomeOption("arg")` if that becomes useful for some reason. Quite often that reason is "tests", but I do keep running into other scenarios where it'd be useful too. I've helped multiple people work around it by reflecting on the function's signature, constructing the private arg type, calling the func, and comparing the mutated private apply-arg-type to a known value, but this isn't always possible and those cases are stuck either not doing the thing they wanted, or writing tons of code to wrap the types completely.

Using a more concrete type also logs/prints/debugs usefully by default in most cases, giving you `someoption{"arg"}` instead of `(fntype)(&0x3768dh893)`.

As a library author you generally cannot predict this kind of need, and using function closures is by far the least flexible and least-user-friendly option for your users. So I recommend not doing that.
This isn't engineers doing that. It's CYA IT cyber policies.
1password lets you see it after you've saved it too.
> What are you on about? The explicit purpose of a license is that it's users do not have to worry about anyone else's "explicit intent". A license needs to be unambigious about it's terms, else it's just not a good license, hence see the discussion in this thread about the meaning of derivative works.

Even the most carefully written license has ambiguity, and that's for two reasons. First, we want to cover situations without exhaustively enumerating and
describing them in great detail. Statutes and the Constitution run into this all the time, but no one's like "don't start a business in the US, their Constitution is ambiguous and courts have to clarify and interpret it all the time" because courts (except for this one, I'll admit) do things like take reliance interests into account when adjudicating cases. It works well enough in contract law that we've built the most advanced economy in history, so I wouldn't poo-poo it.

Second, and I'll echo Dijkstra here [0] our languages aren't precise. They're bad at the thing you want them to do. Your argument argues against all contracts and licenses everywhere, even laws themselves.

Finally, (A)GPLv3 don't refer to derivative works. That's a GPLv2 thing.

> I'm surprised that people on an US centric site believe that intent in US jurisprudence matters, because in a legal system largely based on precedence, it really does not.

Again, happy to read any case law you can find on this.

> You have to do the same thing in order to use API's. I'm sorry, unless I don't understand something here, this doesn't make sense.

I'm starting to believe people here don't know what linking and incorporate mean. Linking is using a linker--like ld--to build an executable or library. It's not some abstract idea of linkage. Incorporate means pulling the source code into your own. It's not some abstract idea of building a larger system. You don't pull the source code to Minio into your code to use its API.

0: https://www.cs.utexas.edu/~EWD/transcriptions/EWD06xx/EWD667...
The Oldest Ecosystems on Earth
I Went from Foster Care to Yale. This Is What I Learned About 'Luxury Beliefs [video]
Yes. I buy moderately cheap ones, which I find work just as well as expensive ones.
I don't think that's true anymore. I was born in the same state as my wife and we have different 3-digit prefixes. But I agree that there are some rules about the different parts of the number that further constrain the theoretical one billion limit.
Show HN: Typescript library for editing videos with code
Today we launched a Typescript library for building video processing applications that can run completely client-side

This project has been started in March 2023 with the mission of creating the "video processing toolkit for the area of AI". During an extensive research period, we quickly decided to fully embrace WebGPU, which offers a substantial performance improvement over its predecessor WebGL and technologies alike.

In combination with WebCodecs, these two technologies lead to unprecedented rendering capabilities on the web and pave the way for the next generation of video processing applications

Would love to hear your feedback!
So what do you propose? We can't just shut off the Internet?
They employ a lot of people. This could be concerning, or it could not. I honestly don't even know what my gut feeling is.

(Removed an incorrect comment about a lack of comparisons.)
Funny aside. Anytime my CC has been stolen the thieves always go grocery shopping first, I assume for alcohol.
In New York particularly this could maybe work. They have strong blue collar unions so benefits and pay would be actually livable. Plumbing anywhere is pretty viable. Faulkner worked in construction and did a similar thing. I am working in tech to fund my creative pursuits, an industry on its way to being blue collar
When I read 'unordered list', I was thinking it was more than 3 things:

- Keyword and default arguments for functions
- Nullability (or nillability)
- Ordered maps in standard library

It's was a play on the hash map iteration.
IA into BS, BSDF LJL your AJS IoK. From NJBW Chinese UAU in BA PFF‽
There are two servers. The "mailbox server" helps with handshakes and metadata transfers, and is super-low bandwidth, a few hundred bytes per connection. The "transit relay helper" is the one that handles the bulk data transfer iff the two sides were unable to establish a direct connection.

I've been meaning to find the time to add NAT-hole-punching for years, but haven't managed it yet. We'd use the mailbox server messages to help the two sides learn about the IP addresses to use. That would increase the percentage of transfers that avoid the relay, but the last I read, something like 20% of peer-pairs would still need the relay, because their NATs are too restrictive.

The relay usage hasn't been expensive enough to worry about, but if it gets more popular, that might change.
> From a regulatory approach if they ever approve a new GA powerplant and something happens, they'll be considered responsible.

I don't think this is the problem. GA is a fringe phenomenon anyway. Look at what happened with the 737MAX. The FAA hardly got any of the flak and they didn't even care enough to certify it themselves, they just let Boeing sign off on their own product.

If something happens with a GA powerplant no way anyone would blame the FAA. It didn't even happen for the 737MAX where hundreds of people literally died. And for GA the damage/life-loss impact would be much much lower.

It's just the cost, if you make 1000 jet engines a year that sell for $10 million each then yeah it's easily justifiable. If you sell 500 GA engines for $100k it's much harder.

Look at Rotax for example. They're doing good business, their engines are much more modern than Lycoming and the like, they run on unleaded petrol, and they are reliable workhorses. But the ultralight market simply has much lower regulatory requirements. This is why innovation still happens.

I think it's time to stop holding a 4-seater 100 knot cruise aircraft to the same standards as a 300 seater jet airliner. It'll be good for safety because people will actually use things designed in this century, good for the environment and good for aviation in general.
SSA implemented randomization in 2011 to remove that artificial constraint.

https://www.ssa.gov/employer/randomizationfaqs.html
Except that if you’re an exceptional candidate you might get uplevelled or they might find money in the budget for you that didn’t previously exist for the role (more so if it’s a small company)

By asking these questions up front you might weed yourself out even though the role might have been a good match.
If you or I started a similar company, we'd be shut down. Apparently the difference between "violated the rules" and "illegal" is how many billions you have backstopping your efforts.

American laws have enough loopholes that a convicted felon running for the highest office in the land is a "legal gray area".
The relevant comparison numbers from the article:

> In 2018, a freedom of information request from the GMB union found that a Tesco warehouse in Rugeley, near Birmingham, recorded only eight ambulance callouts in three years versus the 115 logged at a nearby Amazon site. Both warehouses employed large numbers of workers at the time – 1,300 at Tesco’s site and around 1,800 at Amazon’s.

Not enough for me to get a conclusive picture. But sounds like it would make sense to take a deeper look.
I googled that recently, and it sounds like:

They don't get reused.

There are about 70 years left.

The government is punting the problem to future people and there's no solution yet.
Targeting Amazon's a pretty sure-fire hit with many Guardian readers. I don't think anyone's going to question this.
> I just went grocery shopping. VISA was involved and took a few percent. Why??

Because you paid with a VISA card instead of paying by cash. Hint: it says Visa on the card.
I've been using this for years. Also, GPU host Runpod uses it in their CLI tools to easily transfer large files to host.
Good question and I think you're making a valid point.

I think overall on average they would do a decent job of explaining it in writing to equally brilliant people. Not so sure about "dumbing it down" for the "others".
Nobody uses physical cards anymore... even my kids pay with their toy watch when playing restaurant

Edit: Tap pay is ubiquitous in the EU
Book smarts vs. street smarts and/or common sense.
EU caps interchange fees at 0.3%, which is probably still too much. The 3% is mostly to finance the various gimmick programs that make naive people think they are "gaming the system" with their 20th card in wallet (and because they can, of course).
There is absolutely no detail here. Tl;dr maybe Ryzen CPUs are a handful of percent faster when testing under the admin account instead of non-admin. Is it reproducible? Who knows. What does Windows 11 have to do with it? Who knows. We know nothing after reading the article.
Because it's too easy to not bother checking that, whereas you can't avoid noticing that you got the "sentinel" tube. You might still not bother exhaustively checking the cupboard but that's fine - it just means you order more toothpaste slightly too early rather than slightly too late, which would be much worse.

Still I think this is a stretched analogy. Decent strategy in real life, but programming is not the same and in my experience in-band signalling like this generally leads to fragile code. I mean nobody would recommend null terminated strings as a sane design today...
It’s really not abnormal. GrafanaLabs does this all the time with their IaaS product.

There’s nothing wrong with exposing Grafana as long as you’re following security best practices.

It’s 2024, zero trust networking is where you want to be. Real zero trust networking is NOT adding a VPN to access internal services. It’s doing away with the notion of internal services all together and securing them for exposure on the internet.
It took this far down in the comments to get to some inkling of the meat of this.

It relys on some singular or small set of donated servers?

NAT <-> NAT traversal is obviously the biggest motivator, since otherwise you just scp or rsync or sftp if you don't have the dual barrier.

Is the relay server configurable? Seemed to be implied it is somewhat hardcoded.
Not with 100% tariffs they won’t
In Norway most in store purchases go through a system run by the Norwegian banks which have much lower transaction costs: Bank Axept https://bankaxept.no/hjelp/priser-for-bankaxept

The fee is 0.135 %
Not xitter (and more context): https://substack.com/@techemails/p-94286303
unless your resources not an ephemeral resource, then not needed to push metric data to somewhere.
Kim Dotcom made the mistake of not knowing when to quit. Napster shut down when it got told to shut down. Megaupload hopped around hoping to outsmart the law after it was told to shut down, and the executive branch doesn't let that go.
unless your resources are not the ephemeral resource then not needed to push data to somewhere. collecting is more makes sense
> It’s a clear no-brainer at this point

Of course. All compiler designers, outside a select few, are clearly wrong and have given the problem absolutely no thought.
That does make me think if perhaps the same mechanism occurs in humans.

I have had bowel cancer twice. Both times, it has occurred during particularly stressful times in my life.
I don’t understand how anyone ever thought this could be a workable idea.
There is an attempt to satirize, to position oneself on a level of higher understanding than those who are concerned by one of the biggest leaks in history.

It reminds me of when people used to make fun of covid and cough in each others faces before they knew shit was real.

Of course it isn't a list of ssns, it's a list of ssns attached with names and addresses...
All these apps are just a symptom of there being oxygen wasters employed that rely on “growth & engagement” to justify their careers.

There is no reason an EV charger can’t have a card terminal to take payment like all gas pumps and call it a day, except these people would be out of a job if they no longer have any "engagement" to report on or user data to trade.
This article is all kinds of wrong.

"Left" is a relational word, in both its spatial and metaphorical senses. Left of what? Left of whom?

Claiming that LLMs are "left leaning" is like claiming that Tide gets clothes 20% cleaner. Cleaner than what? Beating them on a rock?
For those not aware, the end result of this was a $415M settlement paid out to ~65K tech workers, for an average of $5800 a pop.
None really, I had an idea that my friends could check it out if they notice a service disruption. They don't though, so it's just for fun!
To be honest, 8 million of java code lines is equivalent to like 50 thousand lines of code in other languages
Can you have your billionaire friend contact me, I’ll take the job.
What exactly about grasshoppers? I like them hopping around and their gentle sound, started appreciating it after being traumatized by loud cicadas in Southern Europe.
Vector is GOATed, also reccomend.
Absolutely not true. Some places still don’t even take tap to pay and still use chip.
> As long as debit cards have a magnetic stripe and have their full number printed on them, and that information is useful, this problem remains.

Which the EEA/UK has also (partially) solved by enforcing Strong Customer Authentication (SCA) that mandates that (most) transactions require MFA.
> Unless I'm missing something, this would make it nearly unusable for almost all applications - as soon as you've used your email for one site you wouldn't be able to add it for any others?

Yeah, something is not making sense here. I've got multiple accounts with the same email and just compared the codes from Authenticator, which is my backup TOTP app, with the correct codes and Authenticator agreed.

I did find a UI problem that could lead to a user getting the wrong code. When the first few accounts are on the screen and it is time to refresh the codes the ones on screen refresh every 30 seconds.

The ones offscreen do not. When I scroll to bring offscreen codes into view they show an older code. In one case the code that scrolled in was 4 codes behind the correct code.
I wonder if magic-wormhole could be implemented as a layer on top of Syncthing:

- Generate a short code

- Use the code as the seed to deterministically generate a Syncthing device key + config

Since the Syncthing device key could be generated deterministically, sharing the code with both sides would be enough to complete a dir/file transfer and then discard the keys.
They got me. I first checked my own and my wife's SSN - neither was there. And then I checked the script.
there would be a bunch of holes and a ccd at the back, just no growths of bulbous lens.
> I don't understand how this is ambiguous.

It wasn't an attack, but a genuine question, for which I provided two possible interpretations. I was (am) interested in what you were saying.

> That's why they don't have any kind of RBAC or MAC, just plain old DAC. You get root, you get everything - pledge and unveil won't help too much there.

Thanks for explaining.
I have more mongodb experience than postgres but my impression is that a lot of the json handling I ended up doing in mongo would have been easier/reliable in postgres
> Instead of making buildings from new concrete only, this technique could offer a way to recycle old materials while also trapping carbon dioxide in the process.

Carbon sequestration, an improvement over concrete, and recyclable material all in one. Nicely done.
I have worked with 3 companies that had more than 5 years of Rails and I never had the pain people say it here. It continues to be easy to add features, grow the codebase and understand what is happening.

I wonder how people don't understand the codebases they inherit to be honest.
From the article it’s not clear how the friend being a billionaire is relevant.
> on another note, it seems silly to have both firefox and safari. perhaps there is some unificaiton strategy that we can get these two to pursue. combined, they certainly have enough marketshare to drive webmasters.

Was 2005 really such a different time with respect to monopolies that someone like Brin would actually think it's "silly" for more than one browser to have significant market share? Wasn't Microsoft punished also for bundling IE with Windows?
Show HN: Color.lol – Fun AI coloring page generator for adults and kids
I built Color with my wife Jessica, who is trying to break into the AI scene as a product designer. This is her first AI product, and she designed it from the ground up to be fun for non-technical folks who don't have any experience or interest in AI.

There's WordMode, which is your traditional text-to-image image generation prompting experience. Then there's KidMode, where you create new coloring pages by selecting a series of image icons like "Bear", "Baseball Hat," and "Glasses".

It's super fun to try with littles (2-5 years old), they love it. There's something magical about selecting a few icons, clicking generate, seeing a unique coloring page on the screen, printing it, and coloring together.

You can generate 10 coloring pages for free, so if you give it a try please share what you made, and let me know if there's anything you'd like to see improved. We'd love to hear any feedback or feature requests!

--

Also if you or someone you know is looking for a product designer for an AI project, hit up Jessica's website for contact info: https://www.jessicagillis.com/
Why is this better than rsycn or scp?
I'm being critical of laws that allow governments to censor and invade privacy of their citizens. "If it's legal then it's okay" is a non-existent standard. By the same logic one would support stoning homosexuals to death in Iran (it's done legally!).

Additionally, do you think I'm in favor of the Patriot Act? Does its existence invalidate any belief I hold that privacy is important? Being subject to unjust laws motivates my beliefs, not undermines them.
Don't write Rust like it's Java: https://news.ycombinator.com/item?id=41198358
If the article is correct then Amazon has a substantial number more calls than comparable facilities.
incidentally, I had trouble running webots on a virtual x server, but plugging in a fake hdmi monitor allows it to work fine over vnc.
It's not about islamism, it's about power. Musk has met Erdogan in person multiple times, and took his son to meet him when he came to the States. How many other heads of state did Musk take his son to meet?

Musk's whole schtick is quid pro quo and thin-skinism. He complains about Chinese EVs, then dashes on a jet to fly to China to meet Xi and scores a deal for Tesla -- no more whining about China. He publicly entertains Jewish conspiracy theories, claims he's pro peace in general, then gets on a jet to meet Netanyahu and the next thing you know he's clapping Netanyahu's speech in Congress.

His whole transition to his current persona can be traced to when is son announced their own transition and disowned him. His bumbling political outbursts are all self-serving garbage all the way down.
Yea I’m not proposing to replace low security credit cards with low security debit card this is a silly strawman.

EDIT: I see the general problem of origination fraud. But that can be mitigated by imposing limits and requiring extra levels of authentication for bigger payments.
I wish this wasn't a joke, we need more things to be open source so everyone can share things for full transparency.
I love croc