skysight-inc/HackerNews huggingface dataset:
I use it all the time in house because we have in house, air gapped systems

I know some people feel strongly about this one

But the only time it could lead to a problem is if you pass user/pass and you have a MITM situation.

So maybe only allow it if not passing user and pass

If it’s just a download and we know we aren’t on a TOR node situation then privacy isn’t that great of a concern

My two cents! Open to changing my mind
Port knocking only handles authentication (it's basically a crude password). It doesn't ensure the integrity (tamper prevention) or privacy of your connection. You would need to set up SSL certificates to handle that. You also need to get the TV to accept those certificates, which would require either a public DNS record (which exposes your server's IP via the certificate transparency log to any client that can issue a DNS request), or you would need to modify your friend's router's DNS resolver (which is even more complicated than installing a VPN, and assumes the TV uses the router's DNS server). A TV isn't going to have an /etc/hosts file that you can use to point a domain at your server's IP address.

So instead I would go to my friend's house, connect to their Wifi, and accept incoming connections from computers and TVs over the local area network and forward them through WireGuard. The TV would connect to my device via plain HTTP (which is fine since it's all happening locally), and then my device would be responsible for securely connecting to the server via WireGuard. This also has the benefit of implicitly revoking access as soon as I leave their house with my device.
Goosebumps
And libgen?
Whether this is valid in humans likely depends on the Alzeimers mouse model. Some of the mouse models are really good because we can inject the mouse with something humans get and they suffer a similar fate. But for a lot of these complex diseases the analogues can be very unrepresentative or require genetically modified mice and they tend to translate less well.

"researchers used mice that were genetically modified to have symptoms of Alzheimer’s disease" is what I am concerned about. I remain hopeful it translates across and IDO1 has been implicated in a bunch of conditions so such a drug might find some other uses.
I didn't realize they had reverted it, I used to run RHEL builds on Pi systems to test for 64k page bugs because it's not like there's a POWER SBC I could buy for this.
If you have a copy of the game there's still playable servers using Openspy ( http://beta.openspy.net/en/server-list/ut2004 ).

I play regularly and the couple of servers I play on get full to the point nobody else can join...
The linux kernel already works perfectly fine with various base page sizes.
> They believe that Agile promotes bad-quality work

Whether or not that is true, why would they care? They'll be gone.

> Agile's focus on delivering high-quality, useful, and timely, product to end-users.

I tend to agree. As managers are removed from the picture, there is no manager to hide behind. You're working directly, each day, with those who are going to hold you accountable.

> We need more examples of the Agile process doing really good work.

To be fair to the managers, are there any? Even the C3 project that gave birth to Agile is widely regarded as a failure.
Which is exactly what I said two posts up. https://news.ycombinator.com/item?id=41329065

Now, RST attacks are still a thing, but mostly irrelevant to this port knocking alternative.
One of my grad student colleagues once asked a faculty member whose specialty was discrete-event simulation what he knew about garbage collection. The prof was taken aback and said, “almost nothing”, until the student clarified that he was asking about simulating waste management pickup.
Yep, imagine if Bell could ban you for life back then just for any reason they felt like it.
> remembering what curl options to use when they just want to download the contents of a URL is hard

Which curl options do they mean? "curl -O URL"?
Because we don't know or understand what a better state would be and so by far the most successful attempts are with architectures with as clean a slate/free of bias as possible.

There's nothing wrong with blank slates. It's not a problem, whatever that means. It just is.
Yep. And macros for logging are already the norm in Rust.
> - Auto follow HTTP redirects by providing -L option by default

The script already passes "--location", the non-shortened version of the argument.

For the other things maybe the both safer and more scalable approach is the script should see if it's being run interactively and default to interactively prompting the user for what action to take on detectable things (like missing basic auth or invalid certs for secure domains) or logging an example version of the same command to run as part of the stderr output otherwise. Apart from avoiding debate by taking a stance on what the default should be this will still be allowed by e.g. the Debian repo maintainers.
I mean dynamic price control works in most French cities. The exception is Paris, but they tried a static price control for no reason (also, non-market housing supply is diminishing, which is a bad thing. Capitals with 30 to 40% non-market housing are doing extremely well usually)
Setting up and maintaining along the happy path is not an issue, it’s well-documented and has existing automations if desirable so you can set up a cluster in just a few minutes (if you have the experience already).

And YAML files are nearly trivial in most cases. Boilerplate is not pretty but it’s easy.

The only Problem (with a capital P) with K8s is when it suddenly and unexpectedly breaks down - something fails and you need to figure out what is going on. That’s where its complexity bites you, hard - because it’s a whole new OS on top of another OS - so, a whole new giant behemoth to learn and debug. If you’re lucky it’s already documented by someone so you can just follow the recipe, but if luck runs out (it always eventually does) it’s not a common case you’re going to have some very unpleasant time.

I’m a lazy ass, I hate having to debug extremely complex systems when I don’t really need to. All those DIY alternatives are there not because people are struggling with NIH syndrome but because it is orders of magnitude simpler. YMMV.

Or if you want to make K8s do something it isn’t designed or not presently capable of, so you need to hack on it. Grokking that codebase requires a lot of brainpower and time (I tried and I gave up, deciding I don’t want to, until the day finally comes and I must.)
They would certainly welcome a patch from someone motivated, though I suspect this first one was driven by a desire to make a pun out of the milestone.
Deeply check out the story of Steinway if you respect their instruments.

It's not publicized but there was a documentary about how they almost lost far too much of their raw abilities gained since the 19th century when it comes to institutional knowledge which had always been essential to the way they had made pianos in a less-then-fully documented way, that had been passed on through generations.

Most likely some of the most talented builders at earlier times were not very literate with paperwork anyway.

The modern company dropped the ball for quite a while through attrition, until an urgent effort was undertaken to preserve what they had and uncover any little tidbits that were inadvertently lost. A lot of careful measurements were taken like never before, and documentation produced.

I doubt if the pianos are the same, but don't think I would be able to tell the difference either.

This page has some excellent little videos itself:

https://www.steinway.com/news/features/inside-the-new-york-c...
Good. It's about time. 4KB pages come down to us from 32-bit time immemorial. We didn't bump the page size when we doubled the sizes of pointers and longs for the 64-bit transition. 4KB has been way too small for ages, and I'm glad we're biting the minor compatibility bullet and adopting a page size more suited to modern computing.
I'll be honest, I think you've got an uphill battle to convince so many of us that are concerned about accidental pricing that this is exactly the thing we actually want, vs. what we feel we want. This position parrots what Vercel's leadership said when someone had a massive surprise bill, and the story made the rounds both here and elsewhere.

To be super honest, you might be right too. You might go down a huge engineering effort to build this in only for 5% of your customers to ever engage it. I think the real question is what percentage of your customers will feel better knowing that the have the choice to set those limits, and how will that comfort actually improve their trust with Fly, and cause them to choose it over another cloud provider.

It may end up being a lot like this feature we had in a platform that I used to support. It had a just-in-time analytics pipeline that at one point required tens of thousands of dollars in compute, storage and network hardware alone to function. Based on our analytics, it was barely used compared to the usage of the rest of our app, which made the zounds of resources and fairly frequent support attention it needed feel silly in comparison, so I advocated to sunset it. Product assured me that, regardless of how silly it might be to continue supporting this feature, it was a dealmaker, and losing it would be a dealbreaker.

So yeah, y'all might be right in that the majority of your customers don't actually want it. But maybe what they do need is to know that it's there, ready for them if they ever need to engage with it.
How would that complete the ship of Theseus?
This is pretty much exactly what an oauth2 flow is. You generate a single-use-specific token and constrain it with the limited permissions you choose. If a site wants to offer an oauth token flow where users can put a time or credit usage limit on the token they absolutely can do so.
There was always a lot of evidence to suggest that Amyloid plaque was not the cause of the problem but a sign of the activity causing the issue and the fact it was the only pursued strategy for years speaks to a problem in medicine and research funding getting very railroaded at times. Many diseases have many potential causes but once a favourite gets selected there is a real tendency for all efforts to go towards that theory and even when early signs are its wrong it continues for years. Alzheimer research went seriously wrong for multiple decades.
I agree with this, but I also think that while we're not at 100% general AI, we are experiencing a gradual continuous approach towards it. The problems start now, and we have the opportunity to solve them while they're not as serious.
Configurable warnings as webhooks would be pretty cool. Then I can automate whatever needs to happen on my side.

I already automate apps, machines, etc with the machines API and GraphQL, so my big worries in this area are:

- Woops, some bad logic deployed too many machines (sounds like this policy helps)
- Some kind of mistake or attack that just explodes bandwidth usage suddenly
No offence but you are mixing socialist policies, socialism and communism - very different things; I'm unaware of any communist country which goes soft on crime.

I also fail to see how premise leads to conclusion.

If you want another wacky theory here's mine: imho capitalism unleashed (extract every single penny) leads to less time to be active in a community because people have to work more.

On another hand loss of religion leads to hedonism - satisfy the immediate needs.

Combine the two and you get what we have today.
You can download a sample file. It's a standard macOS package (https://developer.apple.com/library/archive/documentation/Co...).
Sweet Home Alabama grant will pay entrepreneurs to live rent-free for a year
The author himself notes paying at least a $100K global salary as of 2019, which implies he does engage in outsourcing. As such, the article is self-contradicting. Maybe the author should go back to writing about Javascript since javscript-scene is in the URL.

You can get bad engineers anywhere, including in the US. It's up to management to enforce a sane engineering process, although being the parasites that they are, they never will.
curl -LO url
They have a cvsweb instance on their website, but the UI is a little more old school than github, so the github mirror is often good for browsing anyway.

https://cvsweb.openbsd.org/
to counterpoint the surrealism of the underlying metaphor
Send them a fax with a QR code of an URL that points to the letter they requested (e.g. on Google docs), two can play those games.
Was just talking with a microbiology researcher yesterday about ChatGPT. They use it for helping to write code for analyzing their lab data and they were surprised I said it's likely to lead them astray at times, especially if they don't know the code well enough to spot the errors it might generate.

Despite my PhD being in NLP, they still seemed incredulous at my assertion. I truly think the general public have not been adequately warned that they cannot trust the outputs of LLMs. I wonder how long until that fact becomes commonplace.
In countries where this does not happen, the TFR has nevertheless fallen. I believe this is a case where people are overindexing on something specific to Japan in order to explain an effect that is far more general.
The piece of code to keep the screen turned on is my guess of the app's deletion. The re-uploading the app (since they asked me to send a new compliant version of the app) was what I think was the cause of my account's closure.
Even the latest UT on UE4 had like few hundreds of players at best.

Seems like the genre is just not popular.
Benchmarks show even an old Nvidia RTX 3090 is enough to serve LLMs to thousands
there's the ad element but also one notes social media seeks hegemony over an individuals political beliefs and values. UPvotes and downvotes may be used to reward rightthink and punish wrongthink. No reason why AIs can't (or don't already) upvote or downvote.
I could well see radical liberal ideals pumped into these AIs. (so as to boost corporate ESG score, which boosts the stock price, which boosts the CEO's bonus)
why is this unnerving? fog isnt transparent while air is and since these are gases they are "emptier" than solid things. the emptiness properties is disconnected from visual or tactile properties.

i cant understand what you mean by knowing reality. reality is sui generis and knowledge is a relational concept.
I've been self-hosting a lot of things on a home kubernetes cluster lately, though via gitops using flux (apparently this genre is now home-ops?). I was kind of expecting this article to be along those lines, using the fairly popular gitops starting template cluster-template: https://github.com/onedr0p/cluster-template

I set one of these up on a few cheap odroid-h4's, and have quite enjoyed having a fairly automated (though quite complex of course) setup, that has centralized logging, metrics, dashboards, backup, etc. by copying/adapting other people's setups.

Instead of weechat, I went with a nice web based irc client (the lounge) to replace my irccloud subscription. kubesearch makes it easy to find other people's configs to learn from (https://kubesearch.dev/hr/ghcr.io-bjw-s-helm-app-template-th...).
I don't know if this fits but I've seen code that allocated say 32 bytes from a function that allocated 1meg under the hood. Not knowing that's what was happening the app quickly ran out of memory. It arguably was not the app's fault. The API it was calling into was poorly designed and poorly named, such that the fact that you might need to know the block size to use the function was in no way indicated by the name of the function nor the names of any of its parameters.
In government, good managers ensure the myriad roadblocks that inevitably surface are properly dealt with before their direct reports even know it existed.
I'm not sure you can say if the trust is overestimated or not based on the fact that "yes/no" decision are close to 100% in favor of trusting each study.

Let's imagine you distrust a lot: you believe that a study has 45% chance to be fraudulent.

You have 100 studies S1, S2, S3, ..., each saying that a process is better than another.

You take study S1. It concludes you should do G1 and avoid B1. You have 55% chance doing G1 will save life and doing B1 will kill. Conclusion: let's do G1, doing B1 would be stupid: 55% chance of killing instead of 45%.

You take study S2. It concludes you should do G2 and avoid B2. You have 55% chance doing G2 will save life and doing B2 will kill. Conclusion: let's do G2, doing B2 would be stupid: 55% chance of killing instead of 45%.

...

So, at the end, you will follow the conclusion of 100% of the studies, even if you only trust 55% of them. You end up making 45% of errors, but 55% of good choice.

Now, let's say you want to follow a ratio of conclusions that is similar to your level of trust. You want it to be following 55% of the conclusions. Which one do you follow? If you pick 55% at random, let's say studies 2, 3, 6, 7, 8, ... What is the probability that those are the correct studies? If you do a quick simulation, you will see that you end up making 49% of errors, and 51% of good choice.

So, still accepting that you will follow a bad study is still better than randomly discard a study "just so I remove some studies that may be bad".

You may say that you will discard the studies that look bad, not take them randomly, but the trick is that you cannot tell which study look bad. Poldermans study looked convincing at first, and it's few years later that problems were found, and they were found by people having the means to properly investigate (they had access to insider info that you will not have access to). Possibly there were more good studies that looked worst than Poldermans'.

edit: also, a large fraction of fraudulent studies is done to hide "non conclusive" results, which means that a fraudulent study that concludes that G is better than B does not mean that B is better than G, it just means they have no idea which one is the best. So, you cannot also pretend that a fishy study implies that the opposite conclusion is proven.
Humble advice for those who want to switch to game development
There are a lot of questions and intentions to move into gamedev from developers who are burnt out at their jobs. And that’s okay. From my own experience, I have a couple of pieces of advice that are not very professional.

1. It won’t save you from everything you’re so tired of.

Firstly, game development, like other areas, is full of its own nuances and pitfalls. And given that a person gets used to everything, you will soon find yourself in the same position. It’s better to look at game development as a hobby, a distraction from your main job. Moreover, for the first few years you will still not be able to earn enough to support yourself and your family.

2. There are no universal tools.

The main question in any field of programming today is which framework and programming language to learn. Here everyone will choose their own - what they can master. But it’s worth noting that in game development when switching, for example, from web development, you need to understand that you won’t be able to use React or even JavaScript if you want to become a real pro. You have to be willing to study hard. These are low-level languages - C, C++, Rust, and the basics of mathematics and physics, and possibly machine learning. It won’t be easy, you just have to keep going. Take a break and study further. There is no need to strive to immediately choose the top and most complex tools; the main thing is to start somewhere.

3. This is a market with tough players.

If you think that you can create a game in a couple of months and immediately start making money, then this is not so. Of course, you can try, but the network is already full of low-grade content, and sometimes you just wonder about the mental health of the “creator”. I think it’s better to create one project, but ideal, adequate and interesting.

4. Hype is temporary, and you only live once.

Lots of technologies, engines, etc. surrounded by a lot of hype. This is not bad for the creators of these things, but if you run after the clouds, you will never get anything done. Let your achievements be modest, but they will be yours. This will save you from burnout at your main job, otherwise there will only be dissatisfaction with yourself.

Add your own…
Nah, I meant the Japanese style katsu. There's "katsu", aka cutlet, and it's basically a Japanese style schnitzel (I use the German word only for humor and to emphasize the cross-cultural nature of this food). It's traditionally served with raw cabbage, maybe pickled vegetables, and usually a thick Japanese sauce that is a distant relative of Worcestershire sauce; it's a lot like A1 steak sauce. And then there's katsu-don, which is same cutlet served atop rice in a bowl (hence the -"don"), now generally with more of a Japanese-curry sauce. But alas the latter dish seems to be outstripping the former in popularity, to the point that one cannot be sure that "katsu" without "-don" is being used to refer to the former!
This is a good point; I agree that it's good that we have a nuanced and realistic (as opposed to pessimistic) view of the situation. As someone else pointed out regarding the Dunning-Kruger effect, the less knowledgeable we are the worse we are at understanding our own level of knowledge. Regarding your comment, not understanding the "unforeseen or unknown problems you encounter once you are going" could be catastrophic in certain fields.
The Navy can only afford to spend what it has been allowed to spend.

“Nobody wants to work anymore” is a pejorative phrase meant to denigrate workers.

Nobody is denigrating mariners, from the Navy to analysts to me, they are just expressing the reality of the situation and attempting to adapt.

I don’t understand why a lack of effusive praise is taken as negativity.
> Competitors can converge on a higher price instead of a lower price. It's not just one direction. They just need to do it via public price signaling to stay out of legal trouble.

I don't understand what you're saying. Are you saying that companies are colluding, but not really because the prices are public? Most prices are public, just walk into any supermarket or open Amazon.com and you'll see public prices. If a company bases their price on a competitor's price, that's not collusion, that's just a pricing strategy. If a company is able to price a product above their competitors and still succeed (e.g. by investing more in marketing), that's legal too.

> In 2022, Apple Music raised their subscription from $9.99 to $10.99. Spotify then followed them and also raised their price to $10.99. By 2023, they both converged on $10.99. I think right now in 2024, Spotify is $1 higher at $11.99. Nobody should be surprised if Apple Music also raises its to $11.99.

Streaming is not an example of a healthy market IMO. I don't know the economics of it all, but I know all the streaming services need to pay the same record labels. Whatever is going on there, it's weird that they all cost the same. I currently pay $10.99/month for Tidal, which is the same exact price as most other services. I wouldn't be surprised if there was collusion going on there, maybe even something like RealPage behind the scenes. There's also the factor of Apple and Google's monopolies over apps, and I wonder if undercutting Apple/Youtube is bad for business.

> But the airlines are also doing the opposite of your scenario: they also raise prices instead of lower them via legal "price signaling" via publicized fares[1] in the global reservations system.

The link you posted seems to be a google search page? Not sure what you meant by that.
I almost agree with you; I would support that we do not currently have GAI, but I think we are near it, and regardless of how close we are to it, we currently have a lesser version of the same thing, which means a lesser version of the same problem.