skysight-inc/HackerNews huggingface dataset:
Iron is not precious. Marked to market, 100 tons of platinum is worth $3.2B. That’s a bit more than half the annual world production, so the price would fall significantly, but still easily be more than $1B.
Why internet searches are serving up 'AI slop'
Last week I made my first contribution to an open-source LLM vulnerability scanner Garak: https://github.com/leondz/garak

I'm working on adding some more probes checking for package hallucination in ruby gems and npm packages

I'm also starting my final year of engineering at the University of Waterloo :)
Black Myth: Wukong ASI plugin support ultrawide and graphical tweaks
8XX where X = X
> Shouldn't c_str() be null terminated?

Yes, by definition.

> Then if it must point to the actual backing store, then that must also be a valid null terminated C string as there's no other way to use them.

No, this doesn't follow. The buffer could leave room for the terminator but not actually write the terminator until c_str() is called. That's why the C++11 standard had to explicitly require that the string always be null-terminated regardless of whether c_str() is called.
I drove by Wheeling on my way to Texas from Maine. Literally looked like a city that was one great but is now dying. Very sad stuff. Apparently they are revitalizing downtown though.
The more important thing is that I don't have to be. Multi-Sig is still far less risky, complicated, and/or costly than the capriciousness or really -- let's just call it what it is -- outright criminality of fiat institutions. Some could try to explain behavior of fiat institutions as incompetence, but then we're just back at criminally stupid (courts are consistently clear that negligence is a form of criminality).

By professional crypto groups and smart users, for high dollar accounts Multi-Sig with hardware wallets from diverse vendors are used. None of them are by Ledger, because Ledger's firmware is closed source.

For Ledger specifically, I already do not trust Ledger.

Trezor is fine.
I've been working on a better spreadsheet for a while now. https://rowzero.io is 1000x faster spreadsheet than Excel/Google Sheets. It looks and feels like those products but can open multi GB data sets, supports Python natively, and can also connect directly to Snowflake/Databricks/Redshift.
NASA Says SpaceX Will Bring Boeing's Starliner Astronauts Back to Earth, in Feb
No, but from a quick glance it looks like an alternative to git? There might be value in studying their approach. But any solution I’ll be working on will have to fully work/integrate with a regular git workflow.
> Was hilarious in one case to be called a racist by a white fella for pointing out how indians only hire indians, and then later seeing him get laid off by said indians.

Maybe I'm missing something but is this antidote to show you're not racist? What were the other cases this was hilarious?
Few doc choices are as annoying as using GIF to show code that i should read in 2 seconds.
"Groundhog day" of course

most of Schwarzenegger movies because he is cool

Back to the future trilogy

Fight club

Some of the best soviet ones (Kin-dza-dza, Garage, Mimino, Irony of fate etc.)

Rocky

Forrest gump
I don’t usually rewatch movies on my own, so this is mostly a list of movies I thought were special enough to show other people.

Eighth grade

Mother!

The Thing

Rosemary’s Baby

Hereditary

Dead Ringers

Happiness

Synecdoche, New York

The Triplets of Bellville
You should not think that LLMs are a good fit for anything. You should check if they are, and then try to guide it to be better at the task.

You should do this because AI is a jagged frontier where humans can't predict if AI is good at something or not.

>AI is weird. No one actually knows the full range of capabilities of the most advanced Large Language Models, like GPT-4. No one really knows the best ways to use them, or the conditions under which they fail. There is no instruction manual. On some tasks AI is immensely powerful, and on others it fails completely or subtly. And, unless you use AI a lot, you won’t know which is which.

https://www.oneusefulthing.org/p/centaurs-and-cyborgs-on-the...
Msdn should still have isos. I still have my installer archive from 98 till 10 thou as my windows machine is a vm it just exists. I have a backup from just after a fresh install I can restore a new machine from if I need be
Super excited to share one of my side projects that’s finally ready for action! Meet PowerTiger—a powerful, open-source energy monitoring solution built around the RPi Pico W and a custom built PCB. It’s perfect for tracking power consumption in real-time across 16 power terminals. Installed it at home to collect power consumption metrics using Grafana and Prometheus running on RPi home server.

https://github.com/codetiger/PowerTiger
and the search is still awful. In the world of tags, AI, and fuzzy search you still have to remember the -exact- name of what you're looking for
Heh. Not in a city per se but I helped a friend with mapping Harold and Maude locations. http://www.boffo.us/haroldandmaude/

I'm sort of a map geek and know how to do old USGS stuff.
Also:

https://en.m.wikipedia.org/wiki/Shenzhou_(spacecraft)
Signal offers all of those things and the creators, developers, and operators are thus far unmolested.

They have de-emphasized the built in token and payment features, and Mobilecoin has tanked in value, but it’s still there and still works and nobody has been even detained over it, much less prosecuted.
Myself. Getting over a burnout and nervous breakdown.
> the laser tin-zapping thing ASML uses.

The Science/Engineering to make this work is nothing short of magic! There are actually two lasers; the first one to reshape the spherical tin droplet to concave shape and the second one to vaporize it to plasma generating EUV range light.

The Extreme Engineering of ASML’s EUV Light Source by Asianometry - https://www.youtube.com/watch?v=5Ge2RcvDlgw
Evaluation by reputation and metrics is the norm. Evaluation by the quality of your work is the exception. You have to be particularly good by reputation and metrics in order to reach the stage where your work may be evaluated.

And even when your work is evaluated, it's based on superficial reading. The people reading it (who are hopefully experts in the subfield) don't have the time to become experts in that specific niche to judge it properly. What they do is similar to peer review. And like all peer review, it's far more useful for spotting weak points and suggesting improvements than for ranking people/works.
I think you’re being pretty flippant yourself with the claim that it doesn’t explain anything
I like leaderboards, and its a bit sad that Redis is the only optimal database for leaderboards. So, I'm attempting a drunken version of a statistic database that tracks stats and leaderboards in realtime. I guess the only major defining quality would be that in one step I can get both the sorted scores + entire row of linked user data.

For redis this is two steps: `ZRANGE leaderb 1 100` + `GET x1 x2 x3 x4 ... x100`.

It's mostly a refresher for deep C++ doodling, but maybe I'll use it in production for kicks.
That is beautiful!.

One of my favorite design elements is the Guilloche patterning on currency, along with the history behind the use of Guilloche as a form of anti-counterfeiting.

Your site is very simply visually appealing.

Also - I like to order $2 bills from the bank. You can order then, mine delivers them on tuesdays - and they give you a stack of brand new $2 sequentially serialized bills. They are great for tips and gifts.
Huh, that is super interesting, are you 100% certain it wasn’t torrents and thus including distribution? Hundreds of euros is crazy, that’s what people pay for distribution.
And even if other threads are contending for the page table lock, the kernel doesn’t hold that lock for the entire duration of the I/O. Only for the tiny fraction of that duration where the kernel is spending CPU time doing bookkeeping. For the rest of the time, during which the system is just waiting for the disk, the thread that triggered the page-in is still blocked, but other threads can do whatever they want, including page-table modifications.

From what I’ve read on LWN, contention on the page table lock (mmap_sem / mmap_lock) has been a real and perennial issue for Linux, especially on servers with huge numbers of CPUs; but it’s a far smaller effect than what this post is talking about.
Ugh…

> Telegram offers end-to-end encrypted messaging […]

Yes, just like McDonalds offers salads and other healthy food options.
I'm sure the astronauts would much prefer to have a Dragon available, but I don't think NASA's "cleared for human flight" means much. After all, 4% (14/355) of all the astronauts that flew on the space shuttle died when their vehicles exploded.
It's not revenue. I wasn't in the US. People sink money into high performance athletes. They lose money. In Australia only the AFL and Rugby League make much money. That is also only at the high levels.

There are places in Australia, such as Sydney, that have a network of selective high schools for kids who do well. But outside of Sydney it's much weaker.

There is more effort put into kids who are not doing well at school to improve their performance than in getting the most from kids who can do well. Perhaps it makes sense.
Sad to see such comments on HN.
Supply chain contract negotiations?
My best friend, basically my brother of 15+ years is indian. I don't really care that you think I'm racist.

This case in particular was just great because it was some liberal white guy calling me (a minority) racist for pointing out something clear as day. And then he got his karma.
All text in Brooklyn
I'm working on my email forwarding app https://mailwip.com to enhance and control my email.

Working on adding many small features such as webhook, email parser.
It explored an idea that ended up being a dead end. But we only know it in hindsight. Decisions need to be judged given the information available at the time. Was there a consensus that shuttle was a bad design at the time? Was it obvious that it will be the case?
That would require moving the entirety of serde and its traits (or equivalent) into the standard library. Considering how long it takes to stabilize basic things in the stdlib, I think that’s a terrible idea.

IMO Rust has the best tradeoff between stdlib and ecosystem libraries I’ve ever seen in a (compiled) language, and that includes serde/serde_json.
This is VERY cool. What made you pursue this instead of other energy monitoring solutions?
Here are some not-too-mainstream I'd really liked:

Second hand lions (2003)
Hidden Figures (2016)
Donnie Darko (2001)
This Beautiful Fantastic (2016)
Les émotifs anonymes (2010)
It's Kind of a Funny Story (2010)
The Lunchbox (2013)
Le fabuleux destin d'Amélie Poulain (2001)
Angel-A (2005)
Warrior (2011)
Welcome to the Rileys (2010)
Tigerland (2000)
October Sky (1999)
Arlen Faber (2009)
Joueuse (2009)

And some mainstream:

The Shawshank Redemption (1994)
Edge of Tomorrow (2014)
The Thomas Crown Affair (1999)
Down Periscope (1996)
Spy Game (2001)
Drive (2011)
The Guard (2011)
V for Vendetta (2005)
Lost in Translation (2003)
Into the Wild (2007)
The Big Lebowski (1998)

And some animation:

Megamind (2010)
How to Train Your Dragon (2010)
Up (2009)
WALL·E (2008)
Ratatouille (2007)

Have fun :-)
Seems like that's just become up for legal clarification.
Stunning.

That site needs to be seen. Thats great.
Can’t comment on csam but telegram has and does take down channels/accounts for many reasons including as “light” as copyright infringement.
High performance garbage collectors are typically written in assembly because of the intricacies of the cache hierarchy.
Uh, if you say so. I'm sorry about your neighbors. Mine are pretty great.
nice! i need to learn SEO too. how are you doing it?
Idk 2015 was when I had to use Firefox for Dyanmics CRM, IExplorer for several specific things, and Chrome because it was faster for the rest.
Woah! I knew it was improv, but didn't know it took just 5 days! I'm convinced Coherence trivia is as interesting as the movie.
I’m really curious how this works! Obviously I don’t want you to disclose anything you don’t want to.

I assume its some sort of ML? Are you using an external LLM? Any insights into building recommendation systems would be awesome!
X-37 is too light to carry humans. X-33 was a good idea... with less than adequate implementation, I guess...
That is what I dislike about Computer Science course ( BSc ) and much prefer Computer Engineering ( BEng ). There are far too many abstraction involves that most people just remember or know the skills set of the abstraction layer without ever understanding how that abstraction comes into the field in the first place.

Over the past 10 years the media has have popularised the term First Principle often spoke about by Elon Musk ( He didn't invent the term but media help to spread it ). And this is precisely it.

And this isn't just computer but literally every single subject taught are now about the grade and not the "WHY". We just dont know how most things are derived from. We just memorise it and society will reward you with Certificate and a "Smart" status.

In Maths Richard Feynman [1] explaining mathematics in 4 pages from algebra to calculus. As the saying goes, I dont have time to write you a short letter, So I wrote a long one. Getting something simple and concise in 4 pages is the work of genius and takes a lot of time. I only wish something like this exists for all other subject with video course, completely free of charge in dozens of languages to kids all around the world.

[1] https://www.feynmanlectures.caltech.edu/I_22.html
>Spoofing TCP is useless - you actually need to receive all the packets sent to the original TCP

What do you mean "original TCP"? I'm talking about an attacker creating a new TCP connection with a spoofed source address.

> which means either you are already on the receiving path

Yes, I believe that's the threat model under discussion here. Tepix mentioned an attacker who can intercept a packet, which I believe means the attacker is already on the receiving path.
I've been messing around with an e-ink Spectra 6 full colour display. Colours are so much better than Gallery, but the contrast isn't as good. Still makes for better looking photos. I'm merging support in my DIY smart picture frame project this weekend (https://github.com/DDoS/Cadre).

I'm trying to get my hands on a larger display, but man does the e-ink public documentation suck. Still looking for some actual complete documentation and sample driver schematics for the 13" and larger models.
Love this one - I've done mortgage software in the past and there is so much room in this industry for improvement. Good luck!
Have been working on a protocol library [1] meant to be a substitute for "JSON-RPC over HTTP/WebSocket". Part of the goal is to more natively support byte-oriented data structures and reduce overheads. It supports a bidirectional HTTP2-style "channel" concept, but without making any assumptions about how they're meant to be used. It also can be configured to require authentication of the client and/or server, but punts secrecy to a lower-level transport protocol. It uses Rust macros to generate traits and wrappers to make the ergonomics fairly easy.

Currently I've built a call/response RPC abstraction with it to use it for another project that I'm working on. Eventually I'd want to add a streaming message system beyond the basic call/response pattern. I also might like to ship some easy setup to bridge between these protocol abstractions and ZMQ, JSON-RPC, be able to behave like inetd, etc.

It's functional enough to use in non-production environments but not completely seriously yet. I'm working out the kinks and improving the DX by using it for that other project. There's still some easy improvements around the byte encoding that I still haven't gotten to yet.

[1] https://codeberg.org/treyd/ecksport
I love how well Intel's Arc iGPU and AMDs Strix Point iGPU are doing. I am planning to get an iGPU laptop with 64 Gb RAM. I plan on using local llms and image generators and hopefully with that large of shared RAM that shouldn't be too much of a problem. But I am worried that all LLM tools today are pretty much NVidia specific, and I wouldn't be able to get my local setup going.
This is assuming people don’t abuse it and pass around raw references/pointers to it (they will). The safest construct, though with definite performance impact, is std::shared_ptr but people think they are smarter than they are and don’t use it.
Except we are talk about iron and gold not osmium or iridium. Iirc carbon ceramics like hafnium carbide have melting points significantly beyond the vapor point of iron?
My pleasure! I've got a few more thoughts that came up.

It would be nice to know more about how I would interface with your product. It's not clear if it's a daily report, if it's a text box where I ask "What did Intern #3 work on last week?", if it's a chronological page, or something else.

Do different people get different answers? Would a CEO get a different answer than an engineer if they asked what the devops team worked on? Basically do you offer different levels of granularity for different user profiles.

Love the project and looking forward to watching it grow!
Scrolling shooter "clone" of Strike Gunner S.T.G game.

https://github.com/thebigG/Gunner

It's got long ways to go before being "complete", but I'm enjoying the heck out of working on this. I like working on things that aren't tied to money/serious job because they remind myself of the joy in programming :)
Oh, if operating within git boundaries is a requirement, then a different version control system is no good.

The claim is, that pijul's merge of code is much better and simpler than git. Merges are idempotent and associative if i remember correctly. It cannot get much better than that.
I'm a software engineer with a passion for pencil portraits (https://bpsagar.github.io/sketch). As an artist, I've often thought that a companion sketching app could help beginners and intermediate artists improve their process.

I'm currently working on an app that provides a step-by-step guide to drawing from a reference photo. My goal is to make the sketching process more accessible and enjoyable for everyone.
Simple Tips for Bug Bounty Beginners: Finding API Key Leakage Vulnerabilities
I meant the series, which BTW is on Youtube:

https://www.youtube.com/watch?v=2Ld2X0Fvypw
I never said that I think you're a racist. The fact that you think I did is telling.

Does your best friend of 15+ year also consider you a friend? Is he also able to capitalize proper nouns without trouble but can't seem to extend that same effort to americans?
The Winter Soldier is probably the most rewatchable movie I've ever watched. You know exactly what's gonna happen, but you're hyped up regardless.
Catching up with the most recent versions of Minecraft for my Prometheus exporter mod, and adding support for more modding APIs.
If they were functionally encrypted, how could he possibly provide them?

Since they’re not, this doesn’t seem much different from e.g. an email provider refusing some court access to somebody’s mail archive (i.e. a very bad idea if your executives ever want to set foot in that country).

I’m really having a very hard time finding much sympathy for an operation that kept endangering users by spreading misinformation about its own security model, while at the same time building a jurisdiction-hopping warrant evasion machine to protect data they arguably shouldn’t even have if that security model were accurate.
Or sci fi holograms?
I watch movies with intensity - 110% pure focus (and never, ever with any distractions). So, it's extremely rare I watch any movie twice. Maybe a total of around five movies ever, usually viewed years apart. Pulp Fiction is the only movie I ever watched twice on consecutive days. I saw it in the theater the first week it came out and went back again the next night.

Of course, it's obviously an incredible movie but the key reason for my immediate rewatch is that the film's structure is just so fascinating. BTW, Blade Runner is the only film I've watched five or more times.
No, there is no spectrum when it comes to Free Speech. Free Speech is an ideal that promotes total freedom to say whatever you want and is against all (state) censorship.

(And btw, I'm unaware of anything that exists that is a 'spectrum' apart from the electromagnetic spectrum. To have the quality of being a spectrum, the subject must continuously span a 1-dimensional space. It's a way overused metaphor, in my opinion, especially for political positions which are anything but 1-dimensional.)
TF1 was the primary source for this news apparently.

Maybe it's best to keep the original one. I think everyone here knows how to use Google Translate or ChatGPT.
Fun trivia: so is /lib/ld-*.so*. I busted that out in an interview at a FAANG when the question was "how could you recover from accidentally running 'chmod a-x /bin/*'"? My answer: '/lib/ld.so /bin/chmod a+x /bin/*'. The interviewer paused to get out his laptop and confirm it because he had never heard of it. After a fun detour of geeking out over something new an interesting, the followup question was modified to "How else would you do it?"

It's spelled "/lib/ld-linux-aarch64.so.1" on my nearest Linux box but is still executable today.
and probably whatsapp, viber, signal, discord too?
I didn't say "native Windows", I said cross-platform. The kind where the tooling you use works on every OS. Cross platform is literally the opposite of "anything-native": you workflows and tooling are OS-agnostic, even if the end results are binaries specific to all major OSses (and of course, a lot of dev work never involves generating binaries)
I think the main problem is that most organizations put security at the end of the budget list.
I'm one of the people working on Prodigy Reloaded (https://prodigyreloaded.com), recreating the Prodigy server to work with the client software in DOS and Mac. The new server software is written in Elixir.

My part has been to generate news headlines and weather maps using current news and weather information. The most interesting part for me has been deciphering the 1980's era graphics format, NAPLPS, which Prodigy uses and making a library to write files in the format. I treat the file format as a data transformation, taking the NAPLPS file generated so far and appending more commands to the end of it. The commands naturally pipe into each other in an idiomatic way in Elixir.
Likewise:) But the more I watch it, the more I understand why it was labelled as 'pretentious' by first-time watchers.
bencode was designed to solve the canonicality problem. so is asn.1 cer. but it is sufficient to have an unambiguous encoding to prevent the vulnerabilities in this post; nonunique encodings will only produce interoperability problems, not security holes
I'm curious, how does one buy stock in SpaceX? Is this opportunity only available for wealthy individuals or people who can put down 6-7 figures towards it?
This is helpful to me (and many others, I'm sure) and I look forward to reading more. Subscribed.
This book probably has some interesting insights:

"You Can't Order Change: Lessons from Jim McNerney's Turnaround at Boeing" - December 26, 2008

https://www.amazon.com/You-Cant-Order-Change-Turnaround/dp/1...

Probably mostly of the "do the opposite of whatever this guy says" variety. ;)

The top review on this book says:

The author credits James McNerney for turning around Boeing. He
neglected to say which way they were turning. For example, he
credits JN for outsourcing so much of the 787 -- which included
the wings, perhaps the thing Boeing did best. The 787 ended up
way over budget and three years late. That's good management?

This seems like a good follow up book too:

https://www.amazon.ca/Man-Who-Broke-Capitalism-America_and/d...
Nice! I'm a fan of SF Funcheap https://sf.funcheap.com/ and always miss it when traveling to other cities. Another up-to-date local resource is something to look forward to.