skysight-inc/HackerNews huggingface dataset:
Jesus, there's a balanced and nuanced take!
I've been working a lot of some games in Python and Panda3D. I want to make somethingusing the joy cons as motion controls. Also been looking into stackless Python for a text based multiplayer game I'm working on.

I need to update my website at some point its been a while.
Doesn't sound very useful to me.
I tried entering something like this:

sed 's/y/i/g' <<<'xxyyzz'

I was not satisfied with the explanation.
I settled on a very simple approach to window management: workspaces.

My sway setup has 20 workspaces on the main monitor and 10 for each other monitor.

Most workspaces are dedicated to just a single window, some have more as is their purpose.
What are you curious about?
> non-standard scripting language

I agree with the other reasons, but Godot fully supports C# and C++; GDScript is something you can ignore entirely if you feel like it.

Indeed, one good reason to use Godot over Unity is that you can write (and debug) your game using the latest .NET SDK.
Curious if you generally lack empathy?
https://pr0gramm.com/top/birds%20aren't%20real%20/6025041
Sure, and if we’re still at ten completed charging stations in a few years, I’m happy to criticize.

I think that’s unlikely.

Phase one is “submit your plans”. Phase two is “we review, approve, and fund your plans”. I’m not surprised these have taken a while to coordinate across 50 state governments.
A VR game. Still in the concept phase though. It'll be free as it's only a hobby project. It might never materialise but it doesn't matter. Most of the reward is in the process and the learning opportunities.

For work I'm working on AI implementation. Because the vendor does all the technical goodness I'm kinda bored. It's also quite a crap solution IMO and we're kinda forced to be all positive about it because the vendor is closely watching and they have a lot of buyin from the top.

I set up a local LLM server too just to feel like I'm actually doing something.
OTOH, if you leave US contiguous waters by boat and sit out in international waters for the month of April you have certainly left the country, even if you never entered another country.
If he's taking a privacy stance then it's bloody stupid since he's protecting an insecure app. In contrast Signal would've cooperated and provided essentially nothing useful.
It's vapid because it's largely non-actionable advice. To a large degree, we don't get to pick whether or not we are stressed, the world picks that for us, and at the same time it's highly personal, so what worked for one person may have the opposite effect for another.

I see it as almost equivalent to saying that the key to your long-livedness was that you ate food and drank liquids. No shit sherlock, you'd have been dead a long time ago if you never ate any food or drank any liquids.
You have to use the Search built into Telegram and you can find illegal stuffs within seconds.

Search for any of these phrases and it will return tons of channels to join:

- Combo lists
- Check fraud
- Redline Stealer
- Bank logs

There are tens of thousands of channels on Telegram w illegal content and material.

I really do hope they dont shut it down bc it's an extremely valuable asset in terms of intelligence and monitoring criminals haha

Source: I work in CTI and actively monitor and scan thousands of Telegram channels.
Lead is much heavier than iron. A uranium asteroid is pretty bad too.

But that aside, we have plenty of iron right here on earth. There is zero reason to mine iron in space unless you need it in space. An asteroid of pure gold on the other hand…

But setting all that aside, you get to choose the size! And the trajectory! And the arrival point! Like if you toss a 100kg asteroid and get 1kg of gold out of it, no you won’t kill the planet. You get to choose all the variables.
I'm working on converting a jukebox to use a raspberry pi. I want to keep using the numberpad to pick the tracks and none of the existing solutions that i've found seem to do that. I don't have any experience with python and very little with linux so it has been an experience.
Working on a game that parents of young gamers can play together without the child being frustrated or the parent being bored :)
The problem with the general assertion, "don't roll your own crypto", is the potential for implicit-misconstruction-by-contrast of professionally rolled cryptography being a pluggable, install-and-forget black box solution.

This is of course bunk, because the boundary layer and level of abstraction matters, and the apparent target audience for this content marketing piece is any developer that might fall into the trap of assuming otherwise. The selection, integration, and configuration of cryptographic elements into an application carries as much significance for the strength of the resulting cryptosystem as the cryptographic qualities of the elements themselves, especially when considered by an attacker that seeks to drive a wedge into any gap available.

The article is obviously far from a comprehensive survey on the topic but does zero in on a few of the practical cases for hash functions, although you're not obliged to necessarily draw the same conclusions since (as the comments in these threads reveal) there are more alternatives than those directly discussed.
A .NET MAUI travel app that uses GTFS data to present transport info to users and also includes interactive 3D graphics.
Not on Play Store yet because the app is too big, still figuring out how to solve that.
Romeo that.
Here’s a simple rule, based on the fact no one has shown that an llm or a compound llm system can produce an output that doesn’t need to be verified for correctness by a human across any input:

The rate at which llm/llm compound systems can produce output > the rate at which humans can verify the output

I think it follows that we should not use llms for anything critical.

The gunghoe adoption and hamfisting of llms into critical processes, like an AWs migration to Java 17, or root cause analysis is plainly premature, naive, and dangerous.
I imagine Firefox would die instantly if it moved to a restrictive license. It would be too easy to simply switch to a popular fork, and Firefox's userbase are the type that would be compelled to follow through with it. Even ignoring FOSS principles reasons, most folks are browser-savvy enough to understand the implications of such news -- their favorite browser is about to kill itself so they have to pick another one.
Also consider that Firefox would no longer be the default browser in most Linux distros, and likely prohibited from official package repositories entirely.
This sounds fascinating and I'm glad you found a niche that you enjoy!
Telegram is one of the last remaining bastions of free speech and the internet as “Wild West” in the world, where nobody cares about “intellectual property” and shares the digital files and infinite information we’ve been so fortunate to have as widely as possible. This is saddening to see. I’ve made a lot of friends on Telegram with people who are into the same hobbies as me, and it’ll be disappointing if it ends up the same as Facebook or YouTube. At least there’s Yandex but it doesn’t have curated collections of content for us data hoarders (I know of a place with over 100 terabytes of high quality STL files, for example).
Do you think this still applies?

My take as an attacker: it goes directly against the security 101 of "defence in depth". Sure, we only have to win once for a specific step, but then there are more steps to complete for us to reach our goal. This is the same for most occupations that I can think of anyway, no one reaches their goal with one step.

I understand that this can be taken to mean there are multiple avenues to achieve a certain objective (e.g. I can find a password on disk multiple ways), but I still wouldn't agree. Develop a defence that makes sense (e.g. MFA is a good mitigation for password theft). Detect / alert on the usage rather than the endless list of methods to retrieve a password.
My intro to systems course did something similar with shared memory calls if I recall correctly
The original Taking of Pelham123. I grew up in NYC. I rode the subway to high school (Brooklyn Tech) every day. The movie is technically accurate and pretty close to the technically accurate book.

BTW - a friend 'in the system' explains the twisting action necessary in today's subway cars would make "The Gimmick" worthless.
What will you do when you find them? if you find one in say France, the French will deal with it and attacks stop. However most attacks are tracedto North Korea or Russia where they don't care and so you can't do anything.
(desirable coastal cities with young people and vibrant entertainment)
Exploring adding the (novel?) concept of forward and backward packet loss heuristics to Trippy [1] as discussed here [2].

[1] https://github.com/fujiapple852/trippy/issues/860

[2] https://news.ycombinator.com/item?id=38591945
Why not automate verification itself then? While not possible now, and I would probably never advocate for using LLMs in critical settings, it might be possible to build field-specific verification systems for LLMs with robustness guarantees as well.
I'm working on a web scraper to assist myself and a friend in booking courts for our sports activities. It helps book the courts when they are released at 12am. This means we can get back to sleeping at reasonable times. We have a long term booking, but don't always require two courts.

On other things, I've been playing with rustlang. Looking to build something with it.
> Generally the assumption is that userspace will treat -EIO as fatal

A single bad disk doesn't make the situation fatal (unless that's the only disk in your system, in which case you're not even guaranteed to have your signal handler code in memory).

> ENFILE is easy to deal with in a fatal path, by closing stdin so fd #0 can be reused

That's assuming you have stdin open, which again, may work for 95% of your usecases, but isn't universal.

> It's either -EIO, or it's writing beyond EOF

That's an unfounded statement. A quick search of the kernel code will show that there are other reasons for getting a SIGBUS, which are unrelated to mmap (non-disk hardware failures, certain CPU exceptions, to name a few). So yeah, if you know that apart from the disk (or filesystem, at any rate) your hardware is in order, and that the only reason for SIGBUS could be a failed I/O through a memory mapped file, and you know that all of the code in your process is well behaved, writing a SIGBUS handler that terminates the process with a message indicating an mmap I/O error might be reasonable, but that's not the reality for every process, and likely not even 95% of processes.

Regardless, my main point wasn't that lack of file descriptors makes your suggestion problematic, but that your description of it as trivial is an oversimplification at best. mmap has its uses (as does writing a SIGBUS handler to deal with errors), but that doesn't mean that it doesn't have issues. Highlighting them doesn't mean that plain read/write are perfect and free from issues either, and certainly code that isn't ready to deal with EIO will have a bad time when a VFS operation fails. But there are cases where making I/O explicit is better, and I'm not sure why you seem to be making blanket statements that trivialise the issues with mmap.
Interesting note: Durov was flying to France from Azerbaijan where he was staying at the same time when Putin visited the country. There are rumours that Durov wanted to meet with Putin but he allegedly refused [1]. Those rumours are based on a publication of a Russian Telegram channel allegedly related to law enforcement agencies and have no other confirmation.

[1] https://turan.az/en/politics/putin-refused-to-meet-with-pave...
Since it's NK responsible for manufacturing the meth, I'm sure they have established easy methods to get it into SK, China, and shipping out of ports in NK and into other countries.
I create mobile drawing app, work same as old snagg.it/sk.itch
https://play.google.com/store/apps/details?id=app.ngockhanh....
While the general point the article is making is correct there are some issues.

- (minor issue) async example is artificially limited to 1 thread (the article states that). The issue is comparing 8 OS threads no async to 1 thread async is fundamentally not very useful as long as you didn't pin all threads to the same physical core.. So in general you should compare something async with num_cpus threads vs. num_cpus*X OS threads. Through this wouldn't have been that useful in this example without pinning the tokio async threads to CPUs to forcefully highlight the page issue, and doing it is bothersome so I wouldn't have done so either.

- (bigger issue) The singled thread async "traditional IO" example is NOT single threaded. Async _file_ IO anything between not a thing or very bad in most OSes hence most async engines including tokio do file IO in worker threads. This means the "single threaded" conventional IO async example is running 8 threads for reading IO and one to "touch the buffer" (i.e. do hardly anything).

To be clear the single threaded not being single threaded issue isn't discrediting the article, the benchmarks still show the problem it's that the 8 threaded conventional and 1 threaded async conventional are accidentally basically both 8 thraded.
I refuse to accept that we must tone down irony/sarcasm because of dumb people, we as humanity have had this problem for a long time, see: Lucian and his trip to the moon. Yet we've never had to do this. People will actively choose to believe any sort of nonesense (will avoid naming stuff but we all know what written nonesense people believe in) regardless if it is written or done in irony/sarcasm or not.
Agreed. But you don't need git to bisect, any version control system can do that, especially if you're talking about a single file. Git probably makes it easier than some others to bisect the entire project.
I and a friend are working on Elixir Emporium [0], a single-player crafting RPG that uses layers of generative AI to create and inject new game data as you play.

It started out as just a prototype asking what happens if you task an LLM with generating crafting recipes for every combination of items in a game (which was already super fun), but it's exploded into all kinds of crafting, harvesting, and item manipulation systems that literally weren't possible in games just 5-10 years ago.

Now we're working on NPC simulations based on last year's Generative Agents: Interactive Simulacra of Human Behavior [1] paper. Dialogue and persistent memory are obvious, but we're also using the ReAct pattern [2] to give NPCs an influenceable decision loop that dictates what actions they take throughout each game day. And there's some other fun stuff like quest generation and using LLMs as a decision engine to determine if certain player actions complete these dynamic quests.

There's still a lot of work to do to make it feel more like a polished game, but we've been focused on the underlying systems and getting them feeling great and I'm really excited to see the game come to life.

[0] https://store.steampowered.com/app/3039840/Elixir_Emporium/

[1] https://arxiv.org/abs/2304.03442

[2] https://react-lm.github.io/
Why are you disappointed in flutter ?
Terminator 1 & 2, Predator, Ghostbusters, Office Space, Step Brothers, Idiocracy, Monty Python and the Holy Grail (I find comedies the most re-watchable)
Making swim baits. I started carving and paints fishing lures during Covid. It’s easy to knock out something that looks like a lure, but it’s surprisingly nuanced to make something that behaves in the water as you want it to. Mass production is absolutely the correct way to go about this, but - you know - it keeps my hands busy in the evening and I’m improving my carving, airbrushing, weighting/buoyancy, etc with each one.
Trying to figure out how to disappear into the ether.
A desktop app for analyzing Node.js heap dumps. I've had to hunt down some for work and I feel like the tooling could be improved.
Mind sharing a link to the STL place?
I don't disagree at all. My comment is about paperwork and selling to the government ("operating in the FIPS world", as the post has it, where NIST enters the conversation). I'm sure you can get away with tacking PBKDF2 onto Argon2 here, but those are hoops you don't need to jump through.
I enjoyed Lights Out: Pride, Delusion, and the Fall of General Electric by Ted Mann and Thomas Gryta
[dupe]

https://news.ycombinator.com/item?id=41341353
Asymmetry of defense, if you will.
A nocode web app builder, all included, frontend, backend.
Yeah, I'm flying a super basic drone with none of the built-in crash avoidance / navigation / etc. stuff for now. I'll upgrade to something fancier later, but for now I'm totally satisfied with something I can crash repeatedly and when it breaks, throw it away (or salvage parts from it to build another drone).

I'll look into the simulator thing. I didn't even realize that drone simulators were a "thing" so I had not gone looking for anything like that.
First being X months apart isn’t how you calculate risk. What matters is total failure over total flights and there’s a gap between the last crash and the fleet being grounded where that risk kept on going.

~2 years * 2 flights per day * 365 days per year * ~350 aircraft would be 511,000 flights but it’s / 2 because aircraft where being delivered over time that’s 2 crashes per ~255,000 flights or 1 per ~127,000. (Edit: Actual numbers were less than half that at 3 crashes per 1 million flights.)

By comparison someone living to 80 is 80 * 365 days = 29,200 days. Meaning the average day would be more than 3x as risky as taking a flight on a 737 Max. It’s not actually that simple as hospitalized patients are unlikely to fly, but you get plenty of elderly people dying from hart attacks etc on aircraft.

I don’t mean to suggest the aircraft was safe compared to other commercial aircraft, (edit: it beat the DC-8 and 707 which was still in use at the time) but general aviation in the US for example is 5.3 fatal accidents per 100,000 flight hours not flights. https://www.ntsb.gov/safety/data/Pages/GeneralAviationDashbo...
Wow, this is fascinating, my family is originally from Cumberland (actually Frostburg, but...). My mom was born and raised there, but left as soon as she could. Everybody did, and I don't think anyone from my family has been back there since my grandmother died decades ago.

It's really the eastern edge of Appalachia, but also very much a rust belt relic that depended on industries that are long, long gone (at least from that region). I think Kelly tires had a plant there when my mom was younger.

I've always wanted to go back and see it, just to compare it with my memories. It was in pretty steep decline already in the 70s and 80s, as even a kid could tell. I remember reading that they built a number of prisons nearby, also some across the border in Pennsylvania, but clearly that has not done enough to revitalize things.
> Materials that require more time and effort to 'get'

They really don't. Each rung in the ladder takes about as long to step through as the previous. The challenging/annoying/discouraging aspect is that a lot of research (especially in pure math) has so many rungs to step through.

The truth is many of those aren't useful at all - distinctions invented purely for the sake of being able to say you invented something. Even when I was doing really "deep" research I could explain it to anyone by just dropping all the technical jargon and using goal oriented language instead. When I would do this most people would naturally try to reason about it in exactly the same way "researchers" would. The proof is they'd come up with the exact same solutions to the problems that were legit solutions, they had just already been discovered ie the low-hanging in fruit solutions.
Nothing interesting. But it pays the bills and doesn't demand much of my time.
I would love for LinkedIn to be banned. I just play along there because it's the only option if you want to get a job.

But the people repeating sickening corporate PR and marketing crap there making me nauseous. It's 100x more fake than Facebook. I really hate it.

If it'd be banned I could do without it because nobody would have it.
Www abdi com this petition for freedom in the classroom
Folks let's be real. While the tech industry borrows terms and procedures from mature and inherently riskier industries like Aviation, 99% of the tech companies don't share the same risk profile.

This means that in most cases, these RCAs are the output of a long and over engineered incident review process that was designed to impress the higher echelon.

The problem is, that in a decently sized corporation, you have tens to hundreds of daily fuck ups (also known as "incidents") that completely suck out the free time out of engineers that have to navigate the long game of post incident management process.

The utilisation of LLMs on these cases are just engineered solution to the problem of organisational bureaucracy.
Even with CORS, DNS rebinding may be a concern here. I think HTTPS may prevent that as the cert wouldn't contain the original site but in this setup where you want "no other security" it would probably work.
-- Suavemente, dame tus columnas, mi estrella
Think you missed the implied /s here :-)
I've never seen an LCD screen in an ATV; my neighbor repairs small engines and stuff like riding lawnmowers and ATVs - i hang out from time to time and he's said more times than i can count "i got no idea what's wrong with it, probably a wiring issue somewhere i gotta track down" or somesuch. Some of the machines he's repairing cost upwards of $40,000 so i'm not sure it's a price thing.

My point is, i'm sure he would have mentioned how great or how awful such a debug console was, at least once, in the decade i've known him.
I also did a road trip and had a lot of mapping ideas. I collected a few links on my own website at https://culi.page/maps/. The page asks you for your location and then plugs your lat/long into the url parameters of various useful mapping sites. Here's some of the maps I used

* GasBuddy's gas price heatmap: https://www.gasbuddy.com/gaspricemap?lat=LAT&lng=LNG&z=8

* iNaturalist to find what species are found in a radius near you: https://www.inaturalist.org/observations?lat=LAT&lng=LNG&pla...

* A map of all co-op grocery stores: https://grocerystory.coop/food-co-op-directory

* NYTimes extremely detailed precinct by precinct political map of the 2016 election: https://www.nytimes.com/interactive/2018/upshot/election-201...

* Windy.com for really detailed weather: https://www.windy.com/?LAT,LNG,5

* ProPublica's extremely detailed map of long term production of cancer-causing air pollution chemicals: https://projects.propublica.org/toxmap/#location/LNG/LAT

* EatWellGuide fills a similar niche you do: https://www.eatwellguide.org/listings?myLat=LAT&myLon=LNG

* National Wild and Scenic River System's map of rivers: https://www.rivers.gov/apps/map

Ofc there's a lot more and many more I haven't added to the site yet, but hopefully you get the idea. I have a very large collection of maps/sites that can maybe possibly be useful or interesting and would like to have a single directory to easily access all of them from.
Which is why I really like Oxide's approach even though it is aiming at the enterprise market. Where they design the whole Rack as a single computer rather than our current server which is as small as 1U and could have 2 Node inside it.

On another note I just looked up the non-Hyper Scaler cloud hosting and DigitalOcean is now worth $3.5B market cap. They are doing much better than I thought. Compared to Linode which was acquired for $900M in 2022.
I noticed my 2.5 year old niece likes zooming into photos of bugs on her mom's phone. I'm making her a little "game" where she can flip over rocks and find different bugs and other weird surprises.