skysight-inc/HackerNews huggingface dataset:
Unrelated, but similarly, I am in a weird form of hell in the Nest/Google Home ecosystem, where trying to re-add a camera to my home fails because it cannot successfully connect with the "assisting device" in my home to fetch the wifi credentials from.

When you attempt to connect it to a _new_/unrelated structure/home, it connects fine, because the phone sends that information to the camera directly. When you try to add it to your existing Nest home, it attempts to be "helpful" by connecting it with an "assisting device," and invariably fails.

It fails with an arcane NC013 or NC024 error, and instead of falling back to a manual setup option, it just... cannot be added. They legitimately suggest that you add it to a new "structure" (which operates under a separate Nest Aware subscription), and then migrate all of the other devices over to the new structure. Which isn't reasonable, when I have a dozen of these things, some of which are mounted in very out of the way places.

And worse, it can still fail, randomly.

It's as if the "Nest network" becomes corrupted in some indecipherable way. This was exacerbated by Google murdering dead my Nest Secure alarm system, which was _also_ an assisting device, which took my locks offline. And when they shipped a Nest Connect wifi adapter, I _also_ couldn't onboard _that_ device to the home for the same reason, so I now have a separate structure called "Connect", which features... just my locks. And now, the camera I was trying to add back.

It's absolute unforced errors and complete madness.

My experience building out a Sonos system for onboarding wasn't too bad, but I have had Sonos Amps fall offline and do weird things, and it personally annoys me that TruePlay doesn't work on Android. This shift to a new app that doesn't hit parity, and seems to do the original things the S2 app did markedly worse... woof.
I am the self-appointed HN sales pitch for https://github.com/sigoden/dufs, a fileserver including webdav.
Vitamines cannot be patented by pharmaceutical firms. So their supplements could be made by anyone. Also having vitamine D deficit makes you potential customer of all kind alternatives made by pharma because of your weak immunity.

Agenda against vitamine D is strong and make me sceptical everytime I hear about danger of sun exposing or how vitamine D is not working.
Millets Market to Witness Widespread Expansion 2023
Millets Market Overview
The global millets market research report provides an in-depth analysis, including critical factors such as the overall size of the global market, in both regional and country-level terms, as well as market share, market growth, an analysis of recent developments, partnerships and opportunities, sales and competitive landscape analysis, expected product launches, technological innovations (both developed and in-progress), and market share values.

Request Sample Copy of this Report: https://www.regionalresearchreports.com/request-sample/millets-market/AS-1017?utm_source=free&utm_medium=harsh
at some point you are short handed enough that you’re combat-ineffective whether you pretend or not.
> Join table that maps to an entity in the middle.

I'm not not sure what you mean. Are you saying that instead of FK/PK relations like:

user.residence_country_id = country.id
plus user.citizenship_country_id = country.id

You would reify every edge like:

user.residence_link_id = link_user_residence.user_id
link_user_residence.country_id = country.id
user.citizenship_link_id = link_user_citizenship.user_id
link_user_citizenship.country_id = country.id

Even then, the reverse "I have a country gimme a user" request is ambiguous.
I noticed Teams unexpectedly started working in Firefox for me, a few months ago.
The metal cap does not do any radiation shielding. It is just for closing hermetically the cavity where the semiconductor die has been soldered, to prevent the entry of any contaminants from the atmosphere. The metal caps were usually cheaper to make, by stamping from a metal sheet, but there are package versions that used ceramic caps or glass caps.

It does not make contact with any pins. The ceramic package has a depressed cavity with a grounded metallized base, on which the semiconductor die is soldered. So the ceramic body is made of at least two layers that are bonded one over the other. On the inferior layer, there is the large pad on which the die is soldered and many small pads that are connected to the pins by metal traces, which remain enclosed inside the ceramic body after its layers are bonded. The pads on the semiconductor die are connected to the pads on the ceramic body by wire bonding, typically with gold wires. The die, the pads that lead to the pins and the bonding wires remain at a lower height than the upper surface of the ceramic body.

Then the metal lid is soldered on the ceramic body, closing hermetically the cavity, without touching the wires or the pads. All this is done because no plastic (i.e. polymeric material) is completely hermetic to gases, so if there are contaminants in the air they will pass slowly through the package, reaching the semiconductor die. Later, there have been developed methods of depositing protective layers directly on the semiconductor die, which have diminished the need for hermetic packages, at least in most milder environments.
> in a standard format with Y-M-D H:m:s

Make sure that has a timezone (or better still, is explicitly in UTC).

Also, bytes are cheap these days, let's have millisecond precision seconds there too.

Lets go full ISO 8601 and use yyyy-mm-ddThh:mm:ss.sssZ at least this way you have a recognised standard to appeal to if some other code or library can't parse your datetimes.

(One reason I'd accept _not_ using ISO8601 dates is if your database uses a datetime format that's equally human readable and unambiguous, MySQL users might use YYYY-MM-DD hh:mm:ss or YYYY-MM-DD hh:mm:ss.sss with an assumed and well documented UTC timezone.)
Microsoft Windows' notifications are basically all toasts. Horrible UX.

The all time you are actually interested in one and want to react to it, it doesn't stick around long enough.

I hate how the bubbles capture an area around them. If you need to click on something close to a notification, the click goes to the notification instead of that thing. That's sneaky and shitty. The border you see rendered in pixel should be the border and that's it.

This extra click area is not adjustable. There's an unanswered SO question about it:

https://superuser.com/questions/1490776/is-it-possible-to-ad...
In general? If you're looking for a jurisdiction where you'll be able to get away with saying things that upset others without limit then maybe a libertarian paradise like Somalia will suffice.
I told my child "Remember, they're all out to kill you."
'Black Myth: Wukong' Blows Past Elden Ring, Cyberpunk 2077 Steam Records
Ehm... The semantic web as an idea was/is a totally different thing: the idea is the old libraries of Babel/Bibliotheca Universalis by Conrad Gessner (~1545) [1] or the ability to "narrow"|"select"|"find" just "the small bit of information I want". Observing that a book it's excellent to develop and share a specific topic, it have some indexes to help directly find specific information but that's not enough, a library of books can't be traversed quick enough to find a very specific bit of information like when John Smith was born and where.

The semantic web original idea was the interconnection of every bit of information in a format a machine can travel for a human, so the human can find any specific bit ever written with little to no effort without having to humanly scan pages of moderately related stuff.

We never achieve such goal. Some have tried to be more on the machine side, like WikiData, some have pushed to the extreme the library science SGML idea of universal classification not ended to JSON but all are failures because they are not universal nor easy to "select and assemble specific bit of information" on human queries.

LLMs are a, failed, tentative of achieve such result from another way, their hallucinations and slow formation of a model prove their substantial failure, they SEEMS to succeed for a distracted eye perceiving just the wow effect, but they practically fails.

Aside the issue with ALL test done on the metadata side of the spectrum so far is simple: in theory we can all be good citizens and carefully label anything, even classify following Dublin Core at al any single page, in practice very few do so, all the rest do not care, or ignoring the classification at all or badly implemented it, and as a result is like an archive with some missing documents, you'll always have holes in information breaking the credibility/practical usefulness of the tool.

Essentially that's why we keep using search engines every day, with classic keyword based matches and some extras around. Words are the common denominator for textual information and the larger slice of our information is textual.

[1] https://en.wikipedia.org/wiki/Bibliotheca_universalis
I’ve seen these people commit felonies, I want them in prison.
Brave now has split tabs in the latest nightly iirc.

Not sure about workspaces, is it like profiles?
Show HN: Webaggr – handpicked collection of landing page design
One of the many reasons I selected Supabase/PGvector for RAG is that the vectors and their linked content are stored with row level security. RLS for RAG is one of PGvector's most underrated features.

Here's how it mitagates a similar attack...

File Upload Protection with PGvector and RLS:

Access Control for Files: RLS can be applied to tables storing file metadata or file contents, ensuring that users can only access files they have permission to see.
Secure File Storage: Files can be stored as binary data in PGvector, with RLS policies controlling access to these binary columns.
Metadata Filtering: RLS can filter file metadata based on user roles, channels, or other security contexts, preventing unauthorized users from even knowing about files they shouldn't access.

How this helps mitigate the described attack:

Preventing Unauthorized File Access: The file injection attack mentioned in the original post relies on malicious content in uploaded files being accessible to the LLM. With RLS, even if a malicious file is uploaded, it would only be accessible to users with the appropriate permissions.
Limiting Attack Surface: By restricting file access based on user permissions, the potential for an attacker to inject malicious prompts via file uploads is significantly reduced.
Granular Control: Administrators can set up RLS policies to ensure that files from private channels are only accessible to members of those channels, mirroring Slack's channel-based permissions.

Additional Benefits in the Context of LLM Security:

Data Segmentation: RLS allows for effective segmentation of data, which can help in creating separate, security-bounded contexts for LLM operations.
Query Filtering: When the LLM queries the database for file content, RLS ensures it only receives data the current user is allowed to access, reducing the risk of data leakage.
Audit Trail: PGvector can log access attempts, providing an audit trail that could help detect unusual patterns or potential attack attempts.

Remaining Limitations:

Application Layer Vulnerabilities: RLS doesn't prevent misuse of data at the application layer. If the LLM has legitimate access to both the file content and malicious prompts, it could still potentially combine them in unintended ways.
Prompt Injection: While RLS limits what data the LLM can access, it doesn't prevent prompt injection attacks within the scope of accessible data.
User Behavior: RLS can't prevent users from clicking on malicious links or voluntarily sharing sensitive information.

How it could be part of a larger solution:

While PGvector with RLS isn't a complete solution, it could be part of a multi-layered security approach:

Use RLS to ensure strict data access controls at the database level.
Implement additional security measures at the application layer to sanitize inputs and outputs.
Use separate LLM instances for different security contexts, each with limited data access.
Implement strict content policies and input validation for file uploads.
Use AI security tools designed to detect and prevent prompt injection attacks.
That is the point: suck it up with pay rises ever, and a toxic environment to boot, unless you want to starve or exit the industry.

Makes the -plantation- er I mean business owners very competitive.
ASMs would not be very useful. First submarines have piss poor detection capability outside of their sonar which severely limits the range at which they could launch them. Then they already have torpedoes which are effective against ships and can be guided from the range at which a submarine would be likely to want to fire.

SAMs have been considered mostly to fight against their natural enemy: the helicopters but I don’t think it has ever been actually fielded.

The issue remains the same in both case. Submarines are slow and firing is loud and basically broadcast your position to everyone.
Cursed Andy Warhol MSPaint 1.0 selfie
IMO the only chance for redemption here is opening up the devices to open source projects.

It’s good hardware, just let us use it.

(Also please ship a PoE++ adapter.)
People would accept all of that as a "fact of life" if a healthy market existed and we noticed this was the best we could do.

People are not fine with an arbitrary number of 30% and no serious competition to go to to find a better service.

If Google finds the demands unreasonable they shouldn't have put themselves in a monopoly position that'd allow them to become gatekeepers
> On Arxiv you could be reading the ramblings of a random person on the internet with zero relevance to the real world.

The current model for traditional publishing vets each paper that is published; arxive vets each author[1] once, and then their papers can be published.

So, sure, you could be reading the ramblings of a random person, but it is quite unlikely.

I think what is more valuable is looking at the citations to the work you are reading; unless you are reading something very very new, if it is valuable at all it would be cited.

[1] When I last looked at publishing (maybe a decade ago?), arxive was vetting authors, not individual papers.
There is value-add if you can prove whatever content you are producing is from an authentic human, because I dislike LLM produced garbage
I use Vivaldi too. Will try this one out to see how it compared to Firefox
It's just familiarity. I use Firefox on macOS and I always think the fonts look fuzzy on Chrome when I'm occasionally forced to use it. I spent a few weeks on Arc (Chrome-based) earlier this year, got used to the fonts, and then they looked a bit weird when I came back to Firefox.
The format really isn’t much of an issue. From an information point of view, the content of the different formats are identical, and translation among them is straightforward.

Promoting JSON-LD potentially makes it more palatable to the modern web creators, perhaps increasing adoption. The bots have already adapted.
> Nobody understands SAML because it doesn’t really exist. It’s not so much a standard as a bag of standard parts from which a protocol can be assembled. It’s possible for two implementations to be fully compliant and yet incompatible.

I die Not make this experience. The specs exist and are detailled. I'm Not convinced your Last sentence ist true.
How does Product Chart use LLMs?
Your self-driving car is so unreliable you have to manually disable it 10% of the time to stay safe?
This is a really good summary of what's technically changed inside the Sonos system, and how it's caused a lot of these problem: https://www.linkedin.com/pulse/what-happened-sonos-app-techn...

Essentially they replaced the 15 year old, and incredibly robust network based on UPnP, with a new system using mDNS+HTTP+Websockets. And at the same time stuck their cloud in the loop for connecting to third party music services.

It's resulted in a much more fragile networking stack, far more prone to incompatibilities with users WiFi configurations. Which due to being so much heavier, some of their older hardware may struggle with. And that's all before you consider the UX changes in the app, and the missing functionality (how do you release a forced upgrade before finishing all old, and essential, functionality?!)

I assume that they have started removing some/all of the old code from the speakers which makes the old app incompatible.
If destroying Gaza was the goal, it could be done far more cheaply with dumb bombs or artillery barrages of old weapons. The use of weapons that can be substantially aimed is evidence that destroying Gaza isn’t the goal and we are expending billions of dollars to reduce casualties.
we had quiet quitting now we have quiet layoffs /s.
"We and our 843 partners store and access personal data .."

I never saw a page with 1000 or more "partner", but can't be long ..
Where do you find these fellow programmers? Are they working on the project with you, or their own things?

I work with oodles of software developers and almost none of them program on the side.
fireproofing was a priority

(Note: the SS America and SS United States shared the same designer - William Francis Gibbs). Not sure about the SS America, but at least on the SS United States, what wasn’t metal was heavily asbestos - which is the primary reason they had to completely strip the interior fittings on it. It’s mostly an empty shell now. That lack of interior decoration could be considered a significant reason it won’t likely be adapted/reused, which is a shame; it’s a beautiful ship.
I hadn't heard of either PCIe auth or USB-C auth. Thanks for sending me down that rabbit hole!
Maybe a cross-timezone interaction? 23:00 pacific is 02:00 eastern (most days)
how is it different than [floorp](https://floorp.app/en) ?
As someone who recently bought a house (and used to live in an apartment), those were some of the reasons why I opted out of apartment life. I would prefer to live in a denser urban area if other amenities and quality of life benefits came with it, but they don’t in my city. Even if you live close to the city core, there are either extremely limited or entirely nonexistent options for groceries, fitness and recreation, coffee shops, affordable eateries, non-alcohol entertainment and art, etc in most neighborhoods. You would still have to drive most of the time anyway. Most of the denser areas closer to downtown can also be quite dangerous for pedestrians after dark. The few places that have denser housing with those amenities within (safe) walking access are exorbitantly more expensive. Meanwhile apartment and townhome developments are now springing up everywhere in my area of town, but without any amenities to go with them, leading to even more vehicle congestion on the local streets as people try to escape the neighborhood and reach the highways.
I run a self hosted server of Squeezebox and have 10+ players around the house.
The hardware is long discontinued, but can be bought second hand.
I can stream Spotify and internet radio. Very happy with it. Connect the Squeezebox Touch via toslink to active speakers etc.
NOTHING BUT THERE'S ALSO NOTHING WRONG WITH LOWERCASE
one trick is to let it come up with what it wants (lots of functions, no texture), then run the code, give it the errors until that's fixed. then ask it to inline them, then add the texture, etc.
https://old.reddit.com/r/firefox/comments/1bsm9lu/im_doing_a...

Reddit launch of the project about 4 months ago.

Fantastic project and already very polished browser. Really enjoying it!
it's not fair game if you're working for a nation that openly calls for the destruction of your own. The name for it is treason.
> with a native GUI

This means 100x more effort in the long run for a cross platform editor. Maybe if developers lived for 200 years, this could be possible. Will need to solve human ageing problem before the cross platform "native GUI" problem.
I hope the game starts with a fake simulation and then weird things start happening and the real game begins, otherwise what the hell is this
I’ve also burned my Google system.

In my case, I use a Google Apps email account so my family has a shared email domain (and I can better handle tech support and manage my kids’ use). That’s slowly become completely incompatible with nest and any consumer hardware or services, and that process of integration degradation was incredibly frustrating.

Google consumer software/hardware is dead to me now, I just can’t use it even if I weren’t holding a grudge.

Though it still has warts and opportunities for improvement, our house mostly runs on Unifi (for networking and security cameras.)
I rode a scooter in Phnom Penh, Cambodia, for about six months. It was fascinating because the road traffic controls are largely ignored, in favour of communicating via body language with the vast numbers of other scooters around you, pretty much treating the odd car as a stationary obstacle. There's also a strong feeling of "we're all in this together and we co-operate to keep things moving and get where we need to go".

Crossing the road there is a matter of slowly and clearly walking into oncoming traffic, trusting that they will stop or go around you [0]. It kinda works the same on a scooter - you slowly and clearly do the utterly illegal thing that you want to do, and everyone will stop for you or go around you. Riding the wrong way up one-way streets, or on the wrong side of the road, is common and perfectly safe as long as you take it slow and keep your eyes open.

I think this concept of clear communication works better than the conventional system of road traffic controls. IIRC there have been tests done in the UK where removing road traffic controls led to people slowing down and communicating their intentions more, with greater flowthrough and reduced collisions.

Automating this will be interesting. Yes it'll probably work, and accidents will be reduced. But it moves us further into making the act of driving illegal. If we are all safer when the robots drive, then it's reasonable for humans to be disallowed from driving. But is the world a better place if we don't drive our own cars any more?

[0] I have had to explain this to very confused German tourists a few times. "The light is green for me to walk, why are they not stopping?" cries a worldview being shattered.
i like this take a lot, what I get is hacker = infinitely curious individual
The good thing here is that other databases like MySQL, TiDB, SQLite etc also support this. so this. And even recursive CTEs are well supported.

https://modern-sql.com/caniuse/with_(non-recursive,_top_leve...
I suppose it doesn't have a name I'd be embarrassed to tell my grandmother about.
Good points regarding test quality. One takeaway for me from this paper is that you can increase code coverage with LLMs without any human checking of LLM outputs, because it’s easy to make a fully automated checker. Pure coverage may not be super-interesting but it’s still fairly interesting and nontrivial. LLM-based applications that run fully autonomously without bubbling hallucinations up to users seem elusive but this is an example.
Per letter, capitalization doesn't take much longer, but over the course of an entire sentence or paragraph, having to reach for shift can potentially add up. Sure, it's still small overall, but I think it's reasonable to give the benefit of the doubt to a stranger about whether the extra effort for them to type them is more than the amount of extra effort for you to read it.
What I mostly dislike about toasts is how they can obscure other elements (actions or information).

On Android, toasts often obscure the keyboard making it hard to type while the toast is being displayed (and still no way of swipe dismissing it after all these years).

On Gnome, various notifications get displayed as central top toasts which obscures the window directly underneath. No swipe to dismiss either, and only by putting the whole system in 'Do-not-disturb' mode do they go away.