skysight-inc/HackerNews huggingface dataset:
Is there any possibility there is a problem with the 429 response? So something is converting to say a bad gateway error because it doesn’t like the 429?

Not trying to criticize if this was already checked. Just something I’d try to double check out of being overly cautious.
There's so much saturation in the SaaS/"indie hacker" space, basically anything that could be done is already done. The nicher you get, the easier it is to either implement yourself or build an actual consumer app around.
>Not too mention the bribery that some members engage in and an unwillingness to abide by any ethical standards.

I agree. The behavior that Justice Sotomayors staff have exhibited in regards to prodding public institutions to buy her books (a practice that has earned her over $3 million since she was appointed to the court) is downright shameful.
Theoretically? Sure. By holding your response to a fixed deadline, you're still using a variable time operation under the hood, but turning it into a fixed time operation, being careful not to leak that timing information to an external observer. So, no problem.

Practically? It's a whole lot harder. Having done exactly this in a non-cryptography related situation (sleeping a timer while trying to get time bins as close as possible to a fixed size for binning events without special hardware), you run into all manner of interesting sources of variability. Using hardware is often far simpler if it's available.

Back in a cryptography context, it is exponentially harder yet because you now have to worry about what other side channels are exposing your timing information. For example, if you're "letting the OS do useful work with the rest of the time" - what is it doing? If it's off doing anything else that I can observe, then I can time that instead. And we're back to square one.

Eliminating side channel leaks is entirely non-trivial.
This is so cool, I can still remember the days where I installed Antutu and altstore for getting some apps for free. And now, I can actually download AltStore as an official third-part store without worrying about apps getting revoked again.
There are a lot of 45-year olds that won’t need RLE until 65, if ever. Why do they need to travel to Mexico to get ICL instead of doing it in US? Same thing with modern multi-focal RLE lenses. They got approved in US just couple years ago, and people used to go to Tijuana just to get access to them for years before that.
The same is true for scientific grant applications.
Just got addicted to Ch 12 which is a bunch of interviews and talk shows. Never knew this was what I was missing to go off in the background at an isolated work place.
yeah, that's basically what these companies are building. i guess i left calcium, magnesium, chlorine, selenium, and sodium out of my list of essential trace elements; any others?
> You want to hurt the company and it's owners...

The owners of big companies include lots of pension plans, index funds, etc. Hurting those owners, who didn't have any say in the bad decisions, is probably not what we want.

Jail for executives who approve or have knowledge of illegal activities sounds good to me.
I've seen https://npd.pentester.com/ floating around
Hang up dirty version is a good incremental product.
Fines should be.
Everything after the plus is considered a sub address and is just an arbitrary tag. You can include any text there and it’ll get delivered to the primary address. It’s useful for filtering emails, and is part of the email spec.
If I'm not mistaken, it's a Gamil specific feature. Any combination of words or numbers between + and @ is seen as not part of your email address but can be used by filter received emails.

See this link for more information: https://gmail.googleblog.com/2008/03/2-hidden-ways-to-get-mo...
> Many experts don't trust OpenBSD's security implementation...

Does this distrust go to the extent where confronted with a public Internet-facing, stock OpenBSD with a TLS-secured SSH connection, and a GSA hardened RHEL 8 [1] with a similar SSH configuration, they’ll pick the RHEL instance?

[1] https://github.com/GSA/ansible-os-rhel8
> “Sorry #5, but a toaster is an electrical device, not an electronic one, and I’ve already soaked an electrical device in a fish tank for several hours, while it was running.”

Not entirely true. Most modern toasters have some sort of electronics in them
No amount of netflix or bars can replace single hug from my 4yo
So you perfer your phone to track you rather than your car
> If you meet all the requirements to identify yourself to the bank, at what point does the bank have to say "this is that person, and that transaction is legal".

Our current system is entirely built on ridiculous levels of trust, mostly for convenience / cost saving reasons. I've made payments over the phone with nothing more than the information found on the bottom of every check I've ever sent. I routinely hand my credit card to waitstaff making 7.25 an hour and in that moment I'm handing every last one of them the ability to snap a photo of my card on their phones and go on a shopping spree at my expense.

As insane as our system is, it's mostly worked. Even though I've been made to pass around my account info countless times, I've never once had my accounts cleaned out. If a single mother with less than 1k in her account gets robbed, I have a hard time blaming her. She had zero say in the design of this system, and she's the person least able to deal with the cost of the consequences of it.

On the other hand, I have very little problem putting the blame on the banks which do control much of the system and who can more than afford to cover the costs of such incidents. This puts a small amount of financial pressure on them to improve the systems they've created and forced the rest of us to use in order to participate in society.

There are all kinds of things they could be doing to reduce fraud, but they don't. Mostly for convenience / cost saving reasons. I consider their refusal to take even simple steps to improve the security of their systems as their implied consent to continue accepting the responsibility for the still rare instances where criminals take advantage of their inaction.
Instagram tried this with IGTV. I actually liked the format too but they did shutdown due to lack of interest
https://www.theverge.com/2018/6/20/17484436/instagram-igtv-v...
"Identity theft" is just fraud, rephrased to make us the victims instead of the defrauded companies.

That's why SSNs are still such a big deal. Why fix the problem when you can just make it someone else's problem?
Yes we'd love to allow for sharing and we've got some ideas for that already.
Grok's AI image chatbot serves up Nazi Mickey Mouse and Taylor Swift deepfakes
Mandatory car insurance is essentially a welfare benefit. The benefit is just administered by insurance companies, because they are believed to be more efficient than the government. (This is pretty common for all kinds of benefits around the world.) Mandatory insurance is not a private contract two parties have reached at their own initiative, and the usual business considerations don't apply. If an insurance company wants to provide mandatory car insurance, they must follow government policies, not their own policies.

If someone drives recklessly and causes excessive damage, the government has other tools beyond insurance premiums. They can, for example, revoke the license and confiscate the car. Or issue a fine or put the driver in prison.
It isn't great, but I don't think there's much risk there. There's not really much of a motivation for some random person to get into my utility account. The balance is never positive. Utilities are physically bolted to my house. They're pretty heavily regulated too. If someone wanted to steal electricity from my house, they can use the outlet on my patio that has zero authentication whatsoever.
A lot of household appliances use potted relays and conformal coatings. If you pull the control board out of your clothes washer you'll see what I mean. It's particularly important because the control board is often within spitting distance of a solenoid that's holding back 60-80 psi of water.
by the time Trump made that statement, there were 60 million views, which is a different metric than the active viewers.
The core technology fee is just so ridiculous. I'm glad it's being funded, but the fact that it exists angers me.
Scapegoating isn't just spouting "redheads are horrible" it's identifying some common problem and giving that fake but easier outlet for it "the only reason you don't all have jobs is because the damn redheads came here and took them". The more apt the problem is to people the more likely they will go along with blaming a group for it.

After a good long while of deep acceptance of fascism this can start to evolve into an ever wonkier list of reasons as ever more wood is needed to stoke the fire but at the core it's usually built around a very apt summary of the biggest unsolved problems of the time.
Visualizing Water Consumption from the Colorado River Basin
So don’t buy it?
> In settings such as this, at a company as large as Disney,

Except in this case Disney is just the landlord. The pub in question is in a mall Disney operates and is run by a different company unrelated to Disney.
What reputational damage?

I know it's a number that gets calculated on cybersecurity assessment sheets, but I've never seen it being in any way connected to reality. Best I can tell, the actual reputational damage is almost universally $0. Security breaches are non-actionable oopsies - unless your product is literally preventing such breaches[0], it's going to be seen as a random event that has no bearing on customers making their purchasing decisions. After all, it could've happened to anyone, and might just as well happen to any of the competitors, and it doesn't even impact any of the subjects directly.

--

[0] - And not even then - see e.g. CrowdStrike, who're busy turning the greatest security fuckup to date into a net positive event for them.
I am just dreading the day when a near simultaneous cyberattack on a high number of(more vulnerable like middle-lower income individuals) start in a DDoS fashion:

1. Credit histories will be(unlocked) used to file multiple credit applications and tax credits will be applied for.

2. Multiple Cell phones will be hijacked through Sim Hijacking or other zeroday attacks to make it very difficult to get back in.

3. A person's profile will be used to attack the most vulnerable things:
- Their families will get fake calls to create confusion.
- Their financial services will be frozen or worst weak 2fac auth ones will be compromised.

4. Deep fake image and videos will be created from compromised accounts to sow further mayhem.

This already happens in targeted and one startegy of teh other fashion. Imagine what one could do with a bit more compute and completed profiles and orchestrate this kind of terrible vengeance.
Yes. The point is that it's not just soap but soapy water that has just washed off all kinds of gunk and dirt off your hands or dishes. It's a good idea to rinse it off. But, apparently, that's not the done thing in certain sectors of British society, e.g. see:

I wash up like a normal person: I fill a sink with hot water and washing-up liquid, and scrub the dishes in order of what needs the least attention. Glasses need a quick wipe and then they’re put aside, while the cutlery has a nice little soak at the bottom. You finish with the pans. If at any point the bubbles are not sparkling white, the water is dirty and needs to be refilled. I then move the dishes to the drying rack, without rinsing them off. In my opinion, this is the cleanest, most hygienic way of doing things, because everything has a little bath in the sink.

https://amp.theguardian.com/lifeandstyle/2022/may/06/you-be-...

To be fair, dish washing turns out to be a very controversial thing. When I was doing my degree I lived in a shared student house with a British girl who was muslim, a Chinese girl and a British girl of unknown religion. The Chinese girl and I always insisted on re-doing the dishes after the second British girl did them the "normal" way as above. Then the muslim girl did them all over again with her own sponge to make sure they hadn't touched pork. But nobody picked up the used loo roll tubes from the bathroom. They piled up like abstract art :D
Don't ever get a cocker spaniel then
Fair enough. I'm enough not-a-mathematician that I didn't know it was well-known, and wouldn't even have known how google the proof! (Nor have much confidence I'd understand the real thing once I found it, lol.)

Anyway, I love that concept, and enjoy being on either side of the exchange. Thanks again.
Ok? I dont see why thats relevant to what I said and what you initially responded to.
Maybe won’t tick all your boxes, but the ‘Little People, Big Dreams’ books are age-appropriate and our nearly eight year-old is delighting in building a collection of them. See https://littlepeoplebigdreams.com
They already do. The IPv6 public routable prefix is the first 48 bits, so a /48 is what ~everyone uses as the analogy of the v4 /32, for rate limiting purposes.
> The author's key takeaway is "flow is king"

Which usually doesn't exactly happen with ED.
The only way to fix things is to drag the occupants of the c-suite into civil court and start dropping massive fines on their heads. Do that, and this type of behavior would vanish within days.
Fascinating. TIL about `override-colors` in CSS. Now if we can automate the generation of color alternates and run it through a bunch of TextMate grammars to generate a font, this could be even more awesome.
See how credit cards work (at least where I have lived). Someone fraudulently cloned my card after a petrol station visit and I got it fixed as soon as I noticed the weird transactions. The bank or VISA footed that cost. UK has statutory law on this. Probably because of how CCs used to work with that carbon copy crap.
Right now, yes. My hypothetical grand-children would be 30 around 2060.

With the disastrous predictions for basically everything, and especially climate, I would not to be at my peak at that time.
Women are using ChatGPT to catch men lying about their height
> how do you know it is really dangerous? How do you know it will electrocute you?

It is possible to learn from others. In fact, our society's entire foundation of knowledge comes from building on the knowledge of past generations and others in our current generation. Not everything needs to be verified from scratch by every user of the knowledge, and if it did we'd never make it past roman tech levels.
COLMAP to generate pose data using structure-from-motion; if you use Nerfstudio to make your splat (using Splatfacto method) it includes a command that will do the COLMAP alignment. This definitely is a weak spot though and a lot goes wrong in the alignment process unless you have a smooth walkthrough video of your subject with no other moving objects.

On iPhone, Scaniverse (owned by Niantic) produces splats far more accurately than splatting from 2D video/images, because it uses LiDAR to gather the depth information needed for good alignment. I think even on older iPhones without LiDAR, it’s able to estimate depth if the phone has multiple camera lenses. Like ryandamm said above, the main issue seems to be low value/demand for novel technology like this. Most of the use cases I can think of (real estate? shopping?) are usually better served with 2D videos and imagery.
I'm a bit confused by your question, but we do not plan to charge any AUM fees.

By direct indexing you get a lot more flexibility to customize the index on a stock/sector/factor level.

Thanks for checking us out.
Except the reviewers don't usually read it either
I understand that the email server has digression on what to do with the local part of the email address. For instance a mail server could take mail to anyaddress@mydomain.com and put it in the "wildcard" box.

I was a qmail fanatic circa 2001 and back then qmail was often configured to put emails to "you@yourdomain.com" to the unix account you and also send "you-*@yourdomain.com" to the you account (anything that starts with "you-")

Of course you can use this to tag email address so if you subscribe to Facebook using "hn-fb@myqmail.com" then emails from Facebook are sent to "hn".

I think the people at gmail thought this was a good idea but that it was better use + instead of - so there you go.
It, among other things, is being investigated by the EC. I wouldn't expect it to be deemed acceptable under the spirit of the DMA, it's just Apple throwing a fit and making their compliance as painful and slow as possible, perhaps in the hope that sentiment towards the new rules will grow sour before they actually have to open their platform.
It isn't, and the payment services regulation of EU actually might make this use case completely impossible here. All the payment apps that worked like this (on Android) were scrapped because of the regulation, and it's all through Apple/Google/Samsung Pay only now.

I really would like if Apple found a legal workaround, but I'm not hopeful.
In the US you're also allowed to use an ungrounded GFCI if you need to retrofit an existing electrical circuit and the ground wire wasn't provided originally.
New Book on Writing with a Zettelkasten
Took four years hanging with the zettelkasten community, looking at the system from every angle, in the hopes of answering as many questions and clearing up as many confusions as I could. This book is the result of that work. In the end, I tried to write a book people would feel confident recommending. Hope you enjoy.
Show HN: Turning a Live Video into Instant Purchases Using AI
Hi HN

I am the founder of Cerebrium (https://www.cerebrium.ai), a serverless AI infrastructure platform.

We released a demo showcasing a live shopping assistant - it allows you to monitor any live stream and picks up items instantaneously so that users can search/buy them. We wanted to showcase a use case for how you can extract data from a video live and deliver value to the end user immediately.

It would be great to get the community to give feedback on what we could do to improve the demo (besides those mentioned below) as well as extend the demo to be much better. More importantly, if this sparks you to create something better please share it with us!

You can see more in depth information here:

Live Demo: https://live-stream-shopper.cerebrium.ai/ - this is very basic right now.

Tutorial Blog post: https://www.cerebrium.ai/blog/building-a-real-time-shopping-...

Code here: https://github.com/CerebriumAI/examples/tree/master/27-ecomm...

Basic Flow

We use a variety of tools in order to achieve the end-to-end functionality.

- *Daily* - We use Daily to extract video frames from the live stream every 150ms. This allows us to run object detection and our search function on each frame.

- *Yolov8*: We use a custom trained Yolov8 model to detect objects in our live stream that we must search for.

- *Turso*: We store our product catalog in Turso's embedding database that searches for matches against the detected objects.

- *Supabase*: We use Supabase to store detected images and we store items found via our search function in a database that allows our client application to update with the results in real-time.

- *Serp API* (Bonus): We use the SERP API to search Google for a product match using only the image of the detected item.

- *Cerebrium*: The entire solution is hosted on Cerebrium serverless CPU/GPUs. It manages all auto-scaling and orchestration.

### Things to improve

- Instead of only detecting a class image once and never again, I would store the embeddings of previously searched items and if an image makes it through the search criteria you can compare it to past embeddings. This means you could search multiple books, cups etc.

- Train a better model. We trained our model on 6 classes (book, shoe, watch, cup etc) and about 40 images. Depending on your use case, I would train it on a lot more data for your use case to get more accurate.

- Facebook recently released their SAM 2 model that can follow items through a video. It would be very cool to incorporate this, showing a user what items have already been searched as time progresses.

- If a user has a bad camera, the accuracy of the YOLO model is much lower. I would recommend training on a diverse set of data across different quality cameras.
Two requests!

1. unique urls per channel so I can send it to a friend and say "check this out"
2. up + down keys for changing channels
The comments show a lot of confusion about what Tesler invented. Other industries did indeed use cut/copy/paste and older editors had ways to do these functions. But the cursor in these editors normally indicated a character. Larry figured out that if instead the cursor indicated the space between characters and he sometimes had a second such cursor to indicate all characters between them then he could do what previous editors needed various commands with a single operation: replace the selection with what has just been typed and move the cursor to right after that. "paste" would the just the equivalent of retyping a previous selection that had been either "cut" or "copied".

If the two cursors were at the same spot (just a blinking vertical bar) then you are inserting text as you type it. If there was some selected text then you are replacing it and then inserting anything more you type. And so on.

Both at Xerox Parc and at Apple he actually tested his ideas on potential users and often found he guessed wrong about what would work and what wouldn't. He would then try something else.
Ahh probably a Xeon CPU, they don't have an iGPU.
Good tip, I'll try and do that in the future.

Is there a best practice for developing rules that match randomized class names? There's a web app I use daily at work with obnoxious upselling banners that always come back if the page is refreshed and it's the only place I've run into this annoyance so far.
Optimistically. If you're interested shoot me an email jmaxwell at double dot finance
Can confirm, I like it.
This is really, really cool, but I'm a little disappointed that there's no credit for the channel / video you're watching when you click on the (i) icon—only a link to your own credit. I think if you're going to credit yourself, you have a moral obligation to credit the people who made the content you're highlighting as well.
Nothing has “happened” yet, seeing that Hunter is still not in the slammer. Moreover, nothing is going to happen. Nothing ever does.
Say's Bezos is getting the prototype. A public one is planned for Ely, Nevada.
Most ISP customers get either a /48 or a /56. The IPv6 equivalent of a random 1.2.3.4/32 consumer IP address would be something like 2001:abcd:1234::/48 or 2001:abcd:1234:ff::/56 in IPv6.
Completely agree. The fine article discusses the attack issues with most PoW. The problem is that even the threat of such attack makes success more likely. I don't know that there aren't other issues, but it seems PoS at least has a less obvious failure mode (if you need short term control of $80B ~25% rather than $30M/day or <3% for bitcoin). That could frankly even be a profitable short play.
WHO Declares Mpox Global Health Emergency
Yes we handle corporate actions and index additions or deletions and weight changes over time for you.

The guts of this get a bit complicated and I want to make a blog post about how we achieve this for adjustments.