skysight-inc/HackerNews huggingface dataset:
I’m sure it’s a complicated situation, and with this exploit alone being on the order of tens of millions of dollars, the attackers would have secured their transaction flow from the West
Seems to me like you have an opportunity to develop a couple SDKs in your customers' favorite languages (probably python and typescript) and a simple "Get Started" template that could alleviate a lot of these requests. Show them the base case, let them figure out how to work with your api via an SDK instead of directly with an API and let the advanced users build their own SDKs in whatever language they prefer. Since its, as OP claims, a simple HTTP API, the SDK could be generated with OpenAPI client generation tools.
How sweet the late 90s would have been with BeOS on a fast PPC!
The "new" way of doing this would be using systemd-cryptenroll [0]. I did this recently on Ubuntu 24.04. I actually tried the default LUKS+TPM shipped with Ubuntu 24.04 at first [1], but it was a bit disappointing because it locks you into using snap-based kernels. This means you cannot install custom DKMS modules (which I needed). Although Clevis is very interesting software (you can even unlock based on some other computer in your network [2]), it's not absolutely required anymore for LUKS+TPM.

[0] https://fedoramagazine.org/use-systemd-cryptenroll-with-fido...

[1] https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-c...

[2] https://docs.redhat.com/en/documentation/red_hat_enterprise_...
Yes, it’s the result of a doctoral degree.[1] It was never meant to be simple in the first place.

[1]: https://edolstra.github.io/pubs/phd-thesis.pdf
wait, pruning and distillation in practice? sounds like my kind of gardening technique! but seriously, compressing models to 4B and 8B parameters using depth pruning and joint hidden/attention/MLP (width) pruning? that's some next-level data dieting right there, count me in for a taste test!
For those who do like to modify their OS and appreciate the beauty of BeOS, there is a merge of Haiku with Genode [1]. It is pretty active and has much promise.

[1] https://chiselapp.com/user/ttcoder/repository/genode-haiku/i...
NASA wants clarity on Orion heat shield issue before stacking Artemis II rocket
Nothing. They are just long and have the same meaning. The Latin opposite of "trans-" prefix is "cis-". See the use in terms like cislunar vs translunar.
Japan warms to Canadian bid for 7-Eleven operator
Data Protection Officer (DPO) guide (2021)
I'd love to see what'd happen in a non profit casino where the wagers were exactly equal to the winnings less some modest operating expenses. Such an enterprise would address most of the inequity concerns in the article.
Mine works great for my Boston sidewalk.

Give battery tech a few more years on its growth curve and it’ll handle your 300ft driveway no problem.
It's the advertisers that don't like discussion of death near their adverts. So services can say "we don't monetise content that mentions death" and then their algorithm downranks that content because it's unprofitable
iti's so frustrating how social media companies censor indigenous creators who are just trying to share and preserve their culture. hopefully, we can see a change soon that allows them to showcase their traditions without fear of being taken down.
New Silicon EV Battery from CalTech Spinoff
Congress already granted retroactive immunity for telecoms acting in cooperation with the US government with the FISA Amendments Act of 2008. I don't see why they couldn't do the same for Microsoft (assuming the law doesn't already apply to them).

> Release from liability - No cause of action shall lie in any court against any electronic communication service provider for providing any information, facilities, or assistance in accordance with a directive issued pursuant to paragraph (1).

- Section 702, subsection h, paragraph 3;

> Release from liability - No cause of action shall lie in any court against any electronic communication service provider for providing any information, facilities, or assistance in accordance with an order or request for emergency assistance issued pursuant to subsection (c) or (d), respectively.

- Section 703, subsection e.

https://www.govtrack.us/congress/bills/110/hr6304/text
yes, and saying the n word is deeply offensive but ginger is not even though it contains the exact same letters. very deep, very smart. soon you'll figure out that all words are arbitrary sounds we assign meanings to
Seems like a good way to have a bunch of new products to also support
I currently pay for:

- Apple devices because while they are getting bad with advertising, they aren’t as bad as Google

- Hulu, Netflix, Disney, Max, Paramount+ and AppleTV as part of the bundle - ad free

- Slate podcasts, Stratechery, and Downstream

- I refuse to use any app/game that doesn’t have an option to turn off ads.

- I use an Adblocker for the rest

- I don’t use YouTube, I pay for training content when I need it.

It’s not that I’m militantly opposed to advertising morally, it ruins the enjoyment of media.
> After mice had abstained from food

Yeah, right, mice abstained from food.
Mice don't abstain from food. You didn't feed them!
who knew css could be this fun! but seriously, starting each day with some css grid jokes is the best decision ever. canva, you've officially made spacing cool again!
> there is also a difference between finding an answer to a particular question and finding web pages around a particular topic.

That's exactly the Gessner's problem and unimplementable so far solution: we have information packed in various form, when we want specific bits it's hard do narrow enough available information packages (books, articles, post etc).

For common stuff in the vast see of the web we tend to end up very frequently on exactly or nearly exactly what we want, but for less common stuff there is a big problem. Just knowing the historical temperature of a small place where many have recorded temperatures, but still no one have create a table and a graph or daily minima and maxima for let's say the 10 years period we want it's hard to find an answer. For some kind of data we have wikidata, for some others we have public datasets from various sources, but still no easy way to locate and narrow them.

LLM are in theory an answer, unfortunately not in practice first for freshness problem (you have to train a model, ingesting new information is still training, far longer than a search engine crawler) and training itself witch is like the opposite of semantic web: instead of having the author prepare the information for machines we have third party who do it en masse, unfortunately they tend to be even less precise than semantic web mean authors PLUS models hallucinations and essentially no ability to tell where their answer came from.

That's why we still miss semantic search...
Although you could say the same about an "English accent" as well. Which particular part of England do you want this accent to be from? For example, https://www.youtube.com/watch?v=tb63PdPweDc is a fine example of an English accent.
thats not always the right thing to do. drugs can mess with what you feel/want for example. we meatbags do have really bad sensors at times.
The website states it's using the "langcss.fast" model, which made me think it's a custom-trained model. But if you can just easily switch between Groq and OpenAI, that makes it seem like there's no fine-tuning happening. Could you shed some light on this?

I like the website and my first prompt to create a modern table worked reasonably well, but if it's just a re-skinned ChatGPT, I probably wouldn't wanna spend extra money on it.
If you're looking for a open source version of the same, check out https://github.com/abi/screenshot-to-code
Y Combinator will continue to exist in a post-attention-economy world. They have proven themselves to be quite adaptable.
75% of adult in the west are obese or overweight because they listen to their body...

What we call fasting today was the defacto lifestyle for hundred millions of years. The current three meals a day pattern doesn't even register on that scale
High sales != quality. Maybe high sales ~= lowest common denominator?
Wasn't it the FISA Amendments Act of 2008? Or did the Protect America Act of 2007 also have immunity provisions?

edit: oh I see, the immunity provisions were first introduced with the Protect America Act of 2007 but they had a sunset date under that law so they were later made permanent by the FISA Amendments Act of 2008.
Makes me think of the very relevant Dezel Washington clip: https://www.youtube.com/watch?v=U3pV_Mw4mrM
Highway – Portable SIMD Library
I'm pro legalized gambling, anti-gambling advertising.
as a software engineer, i see covid brought some surprises to birth rates. some blame the economy or politics, but i think we all just need better parental leave policies and work-life balance. let's make baby-making fun again!
Ubuntu regularly locks up and black screens when I try to sleep/hibernate. It's a very common problem that has nothing to do with Windows or Microsoft. I also have had 0 issues with dual booting for roughly 10 years now. HN wouldn't be HN without some baseless MS bashing.
Put an aircraft carrier into Lake Constance.
This is your friendly reminder to never clear a jammed snow blower with your hands (or any other part of your body).

Even with the engine stopped, there can be enough energy stored in the drivetrain to make a mess of your fingers when it's suddenly released.

This reminder is brought to you by the guy I knew who had two deformed fingers from two different snow blower jam-clearing incidents.
It's still expensive relative to batteries. If you think about it, a steam turbine has a lot of water that needs to be heated before you actually get any steam and a lot of heavy, moving parts that need to start spinning. Once all that is up and running it's fine and you just expend fuel to maintain the steam pressure.

But this takes a while. And to heat things up faster, you simply burn a massive amount of fuel; which is costly. And until you generate steam, it's not actually generating any power whatsoever.

Any thermal plant has this overhead that makes starting them expensive and stopping them undesirable because the shorter you run them, the more inefficient they get. You amortize the startup cost over the runtime. The longer it runs, the better it gets.

A battery provides power within milliseconds and it can switch from charging to discharging on a moment's notice as well. That's why batteries are displacing gas plants as peaker plants in a lot of places.
I have a diesel tractor and a 4WD vehicle. But I'd argue my carbon footprint is a hell of a lot smaller than most Americans (unless they live in a city, take public transport, don't own a car and don't travel by air often).

I don't leave the house much, haven't driven to work for over 10 years, have planted thousands of native perennials and trees over the years, and seeded acres of native prairie.....

I agree with you, mostly, but life is nuanced.
I enjoy being able to shoot the breeze with clients etc, and relate to each other. That's not to say I haven't worked for folks that I genuinely winced when they'd ask to jump on a call: it's more a matter of whether the relationship feels adversarial.
Ditch Mozilla. Full stop.

They are hand-in-hand with Google - Bought and paid for.
> using native JavaScript without all the BS that comes with TypeScript

do you think javascript was just too easy and people had to invent some bs to make it more interesting for no reason? You don't even know what you're talking about when you make the connection from ts to oop.

My experience comming into javascript is that it's a garbage language and the web stack was a joke, everything was hard for the wrong reason (css centering things kinda stuff)

All these modern tooling, though complicated, is not new in NORMAL programming and makes sense, so you cow boys learn to deal with it.
> yours was checked at runtime. Frankly, I have never heard of a term for what you have shown, so I don't know what to call it.

Surely that's not the first time you've heard of run-time type casts? Well, in any case, they are colloquially called "type casts" and/or "type conversions".

To be more pedantic, Java calls it "casting conversion" [0] which, in this specific case, allows one of the "narrowing reference conversion" [1] to happen.

Go calls their version "type assertion" [2] but if you read what it actually does ("If T is an interface type, x.(T) asserts that the dynamic type of x implements the interface T") and compare with what Java does ("Such conversions require a test at run time to find out whether the actual reference value is a legitimate value of the new type"), I hope you would agree they are essentially the same.

We can also take a look at C# [3]: it has "cast expressions" which work like this: "A cast-expression of the form (T)E, where T is a type and E is a unary-expression, performs an explicit conversion (§13.2) of the value of E to type T". And in this example, the exact kind of conversion to be performed would be 13.2.3, "Explicit reference conversions" for which the following is stated: "The explicit reference conversions are those conversions between reference-types that require run-time checks to ensure they are correct".

So TFA could be written in any of those languages (or even in C++ with its dynamic_cast<T>) and look almost exactly the same because all TFA does it takes some objects, converts them up to Object type that subsumes all other types (in Golang's case, this type is called "any"), then tries to convert them down to some interface types which those objects may or may not implement, and blows up. But neither Java, C#, nor C++ have neither structural nor duck typing so TFA's claim that somehow this example shows that Go has duck or structural typing is simply baseless.

[0] https://docs.oracle.com/javase/specs/jls/se6/html/conversion...

[1] https://docs.oracle.com/javase/specs/jls/se6/html/conversion...

[2] https://go.dev/ref/spec#Type_assertions

[3] https://www.itu.dk/people/sestoft/ecma/Ecma-334.pdf
Do you dual boot? That's what mine did when the efi partition was too small for grub and windows' bootloader
Probably because Denmark is a very old country, it predates most nation states, and the word originally referred to the tribe. Same with "Swede". They correspond to "Angles" I suppose.
In this specific example, I am pretty sure margin-right: auto on left and margin-left: auto on right in a flex-box does what you want.
Is-Is
Why are you taking it so personally, I was simply responding to snark with snark.
> Short version: Secure Boot Advanced Targeting and if that's enough for you you can skip the rest you're welcome.

Based. Unfathomably based.
Seems ironic to me but I’m not going to listen to the podcast to confirm.
neuralink be like "we fixed that messy implant issue with alex, watch out for more computer geeks with brain chips soon!" let's hope we don't end up in a cyborg vs. human war over who plays counter-strike better.
Maintaining an OpenAPI spec when you make changes to your API and regenerating the client SDKs through CI is really not a ton of extra work. A template to show a dead simple usage of your API can pay dividends as it lowers the barrier to a customer adopting your product over a competitor's.
Welcome! I've been here my entire life. That strategy has worked for the past several years, but it wouldn't have worked when I was a kid.

The average number of days with snow on the ground has been decreasing by about 5 days per decade since I was a kid:

https://glisa.umich.edu/resources-tools/climate-impacts/prec...

In the 70s, we had about 75 days each winter with more than an inch of snow left on the ground. Last winter, we had barely 20 (El Nino made it extremely warm) but the average over the past decade is currently about 45. It snowed a few times, but always melted shortly thereafter. That's a new trend.

I recently got a 36" HDPE blade shovel and will just walk my 400ft driveway for 4 or 5 passes in each direction, holding the shovel at an angle so the snow rolls off to the right like a snowplow - it's really slick (pun intended) and way easier than the old scoop-and-throw technique when there's less than an inch on the ground. Once a month, I have to start up the snowblower and clear a heavy storm and cut back the banks left by the shovel, but those are rare. If you just expose a bit of pavement, the whole thing is likely to melt in a couple days.
I hadn't seen this before, it's fantastic! Thanks!
In my backyard there is this ugly situation

https://www.ithaca.com/news/tompkins_county/bipoc-community-...

where some people have opened a BiPOC garden and faced persistent harassment from a neighbor.

As somebody who goes to museum ships and stuff like that I like the idea of a garden that interprets the impact of colonialism (people in Canada have to fight "Canada Thistle" that was brought by settlers) and features plants that were important to indigenous people here and to black people when they lived here and when they were in Africa and that are important to people in the global south now. I even like the story about the person that its named after:

https://www.rootworkherbals.com/bipoc-community-garden

So far so good, I'd like to see it, am I welcome?

As a space committed to healing from legacies of colonial violence on
land and the liberation of all people, we believe the garden must center
the needs of the most marginalized among us in overarching white supremacist,
capitalist systems. We center and celebrate our Queer, Trans, Disabled
Chronically Ill, Mentally Ill, Femme, Poor, Immigrant, Refugee, Fat and
Darkskin community.

So if I showed up the first thing I'd try is "Fat" because even though I wear it well my BMI is a bit in the "obese" range. I suspect I'd be told I'm not fat enough so then I would go the "chronically ill" category because I have a few of those starting with the easy ones like hypertension and working towards the embarassing ones like an enlarged prostate and problems related to that which I hope would be good enough. Then I would try "Mentally Ill" because my schizotypy has sure screwed up my life at times.

Is "gay" or "lesbian" good enough or do you have to be "queer?" What exactly do they mean by "Femme" (e.g. presenting the image of a women?) What about immigrants and refugees who come from places with conservative values?

I get the inclusion of "ill" because of their emphasis on herbalism and healing, but according to the government about 73% of people are fat and about 52% have a chronic condition

https://www.niddk.nih.gov/health-information/health-statisti...
https://www.cdc.gov/pcd/issues/2020/20_0130.htm

When a list like that gets longer and more complicated it becomes less meaningful and it's a problem for movements like that which are going to discover that skinny Queer people don't give a damn for straight fat people, no refugees show up and nobody in the group has a good idea of the challenges they face in the community, etc. They'll show up and hold a banner a few times but when the barricades go up they'll scatter, I wouldn't even count them to show up and vote because they think the Democrats are fascists because they support Israel or they funded a police department or something.
This is ideology masquerading as data.
TLAs from major powers probably have backdoors in your UEFI, mainboard or OS. But even if they do that doesn't mean they will use them on everyone, they probably keep the good stuff for the most valuable cases. Each use of an attack carries the risk of the attack vector being discovered and prevented in the future. And besides, there are threat actors besides TLAs of the USA, Russia and China.

If you use full disk encryption secure boot is pretty essential, otherwise an attacker can modify the code that asks for your credentials to also log them somewhere easily accessible, circumventing your entire encryption. If you don't do full disk encryption it's still a decent protection against some bootkits.

It can absolutely be more trouble than it's worth. It's not that useful in most desktop computers. But if you are traveling with a laptop it's probably worth some effort to keep secure boot working on that system (and make it more difficult to disable)
Power cables are a wee different than communications cables.
How long the drug dog needs is irrelevant; if they want to use a dog without consent or probable cause to search, they need to get it there while they still have legal grounds to detain the suspect. A traffic violation is grounds to detain someone long enough to issue a citation, but not longer.

The judge won't be amused if the police say it took them 45 minutes to write a speeding ticket.
I'm fine with sports betting being legal. If people want to gamble that's their decision.

But I believe any kind of advertising of it during a game should be made illegal. It is ruining the broadcast, with updates on the betting line and worthless statistics to non betters.
This is from 10 years ago. I would be curious to know where they are now and how they feel now about this career decision and blog post.
When you interrupt mental work, you just doubled that person's effort. At a minimum. Now tell me it's not worth it. Managers don't care because it"s not their effort.

Don't be fooled by the use of the word "optimize" which suggest some minimal gains over the current situation. In the short term you double the effort of that person/team, in the long term you will get frustration, people asking for huge raises (to reflect the effort) and then people just quit.
ultimately we have to overthrow capitalism via a revolutionary workers party.
But to me (not a native speaker), "person of color" is vague and misleading. I didn't even automatically know it's about the person's skin color. First I thought it means a flamboyant, over-the-top person.

If I think about colors in the scientific sense (black: lack of light, white: mixture of lights from all colors), the "person of color" expression would include everyone except black people, but how it is used, it includes everyone except white people (wherever we draw this "white-enough" line, depending on the context).

Why not just use "non-white person"?
High-Risk Vulnerability of Spring Cloud Data Flow Lead to Compromise
The blog post discusses CVE-2024-22263, a critical vulnerability in Spring Cloud Data Flow. It explains how the Skipper server's insufficient file path sanitization allows attackers with API access to write arbitrary files to the server, potentially compromising it. The post also covers exploit details, mitigation steps, and patch recommendations.
As for the n+1, does the sequence stop?

Does the same happen for the government and other organizations, or just natural persons? Are there other organizations besides the government you will exempt?

After everything has been equalized, how much (about) will everyone have, and would that be enough to invest in something as simple as an ice cream machine?
Using overwrought rhetoric doesn't help to make your point.
Why would an agency wanting to MITM you publish data about the MITM certificates?
I thought it was 2018, it was 2014 instead.
> Heck, it's still an issue today. Worse in the sense, that diets are under nourished and packed with sugar.

The passive voice is always an accomplice in deception, have you noticed? "Diets" are not under-nourished. People choose to purchase unhealthy food. Progressives insist that food stamps should pay for sugar water, candy, chips, etc. Meanwhile in the real world, 10 pounds of rice costs less than a bag of Doritos. Four pounds of lentils costs less than a 12 pack of soda.

If progressives were interested in good outcomes for the poor, they could radically improve the lives of the poor overnight by enforcing healthy standards of food stamps spending. But outcomes aren't the point--the point is to buy votes--so don't expect it to change any time soon.
What would be the point in running such a casino?
Is this tied to a specific framework like pytorch or an inference server like vLLM?

Our inference stack is built using candle in Rust, how hard would it be to integrate?