skysight-inc/HackerNews huggingface dataset:
They often do. The value of those kinds of blanket security audits is questionable, however.

(This is one of the reasons I'm generally pro-OSS for digital infrastructure: security quickly becomes a compliance game at the scale of government, meaning that it's more about diligently completing checklists and demonstrating that diligence than about critically evaluating a component's security. OSS doesn't make software secure, but it does make it easier for the interested public to catch things before they become crises.)
Misses the point of the article, which is to explore far beyond that cost.
yes, they _definitely_ need to access flycass to achieve this. Almost certainly no other way.
What I mean is, the ivory-tower relational model is that each table (“relation”) represents a predicate (Boolean-valued function) accepting as many arguments as there are columns (“attributes”), and the rows (“tuples”) of the table are an exhaustive listing of those combinations of arguments for which the predicate yields true (“holds”). E.g. the relation Lived may contain a tuple (Edgar Codd, 1923-08-19, 2003-04-18) to represent the fact that Franklin was born on 19 August 1923 and died on 18 April 2003.

One well-established approach[1] to NULLs is that they represent the above “closed-world assumption” of exhaustiveness to encompass values we don’t know. For example, the same relation could also contain the tuple (Leslie Lamport, 1941-02-07, NULL) to represent that Lamport was born on 7 February 1941 and lives to the present day.

We could then try to have some sort of three-valued logic to propagate this notion of uncertainty: define NULL = x to be (neither true nor false but) NULL (“don’t know”), and then any Boolean operation involving NULL to also yield NULL; that’s more or less what SQL does. As far as I know, it’s possible to make this consistent, but it’ll always be weaker than necessary: a complete solution would instead assign a variable to each unknown value of this sort and recognize that those values are, at the very least, equal to themselves, but dealing with this is NP-complete, as it essentially amounts to implementing Prolog.

[1] http://www.esp.org/foundations/database-theory/holdings/codd...
I like your thinking. Deterministic replay with QEMU is supplemental to the larger goal of reproducible builds. The communities concerned with the topic of reproducible software not only expect cohesive human-readable code that runs deterministically to produce binary reproducible results, but their originally stated goals require it.

Deterministic replay with QEMU is a "power tool" in the larger picture of these efforts.
I'm working on a CLI tool which helps to generate and modify a codebase: https://github.com/gtanczyk/genaicode/

It is still a WIP, and pending a major overhaul (both implementation and the UX), but it works already, and helps me realise my ideas (games):

- https://www.gamedev.pl/games/monster-steps/ - source: https://github.com/gamedevpl/www.gamedev.pl/tree/master/game... (the idea and majority of code is AI generated)

- https://www.gamedev.pl/games/nukes/ - source: https://github.com/gamedevpl/www.gamedev.pl/tree/gh-pages/ga... (my idea for game, a lot of code is generated)

also the tool is developed using the tool itself

the difference compared to main-stream tools is that I can adjust it to my needs as much as I want.
If they’re using images you’re hosting you could always put in a rewrite rule to replace the images with goatse. I used to do this back in the day. It’s not going to solve the problem of cloning but it’ll give you so catharsis and get ‘em to stop it.
I've been using (and occasionally paying) Kagi on and off for a couple of years now. I truly think they're building something interesting and valuable! While I haven't agreed with every product decision they've made, the founder is very good at both understanding his business and also explaining their decisions. This is a well crafted explainer of the search business and the monopoly case-- much better for sharing with less tech-savvy peers than most mainstream media explainers on this subject!

Edit: wording

Edit 2: Can you imagine a world where Google's Internet Search Index is legally considered an "Essential Facility"!?
https://law.stanford.edu/publications/essential-platforms/
Ironically, Facebook was also involved with Google defederating from XMPP, according to an explanation I read many years ago (IIRC, from Larry Page when he was CEO). FB messenger could connect to Google Talk users, but not the other way around - so Google wasn't pleased about freely exporting users' "social graph"[1] to Facebook, and getting nothing in return.

1. The "social graph" was the new hotness then, everybody had to have it, just like AI now. An exec at Google convinced the company that Facebook was an existential threat, leading to some very questionable decisions bourne of a self-induced siege-mentality.
What constitutes "censoring all of them"
Personal POV:

I mostly read Fantasy books and a little bit of SF, but the main points I would say is better visualization. Reading textbooks gives you understanding, but being able to reconstruct scenes and characters just from a few lines is a nice plus. When reading story from a ticket, it's become much easier to visualize a concrete use case. Also empathy building. Manuals and documentation are very dry and text is more constrained bandwidth-wise than visual interactions. Reading fiction can help you interact better through text emotionally. And we respond better to stories than logical arguments.`
This is a great paper on how it doesn’t make reserve privacy in the way Google claims it will:

https://arxiv.org/html/2403.19577v1
LAX's most iconic image is a rotting building without a future
How do we get around labor being the primary cost eater when that has (is) the most expensive factor, depending on where you live?

I want labor to be paid, and I also want cheap clean energy. Help me square the circle.
looking at hetzner benchmarks i would say VPS are quite enough to handle Postgres for Alexa Top 1000. When you approach under top 100, you will need more RAM than what is offered.

But my point is you won't ever hit this type of traffic. You don't even need Kafka to handle streams of logs from a fleet of generators from the wild. Postgres just works.

In general, the problem with modern backend architectural thinking is that it treats database as some unreliable bottleneck but that is an old fashioned belief.

Vast majority of HN users and startups are not going to be servicing more than 1 million transactions per second. Even a medium sized VPS from Digital Ocean running Postgres can handle that load just fine.

Postgres is very fast and efficient and you dont need to build your architecture around problems you wont ever hit and prepay that premium for that <0.1% peak that happens so infrequently (unless you are a bank and receive fines for that).
Pi 4 is the smallest thing that would be remotely comparable to even a 14nm-era atom NUC in terms of usability as a fileserver etc
You claimed you’re “basically an LLM” so at this point it seems accurate. You’re mostly incorrect and spouting nonsense, nailed it!
Yeah, no moderation leads to spams, scams, rampant hate, and CSAM. I spent all of an hour on Voat when it was in its heyday and it mostly literal Nazis calling for the extermination of undesirables. The normies just stayed on moderated Reddit.
Yes I think that early post discussed about upcoming Pandas 2.0 which now realised 7 years later.
Asset seizure is not because the government needs the money. It's because you need the money to pay for lawyers, legal experts, etc., and if your assets are seized, you can't - so you are much easier to pressure into making a quick guilty plea and get another successful prosecution added to the list. Of course, the whole process is the punishment as usual, but the asset seizure also plays an important coercive role there.
If you could integrate R2 then it'd be possible to host the content without any bandwidth fees. https://developers.cloudflare.com/r2/

Or maybe it's already supported? Cloudflare's page states R2 is "S3-compatible".
> Some people don't worry much about that, but in some parts of the world it can be $5+/month more to run older machines!

California being one of the worst offenders, ironically. In SoCal my family and I pay (across several households) between $0.50/kWh and $0.99/kWh, so even a 15W idle can cost us at least $5 a month.
Actually the converse is true: Lean and other projects have formalized most mathematical theorems. But it is an "additive" process - it is easy to paraphrase a formal Lean theorem as colloquial mathematics, but it is hard to formalize colloquial mathematics in Lean. Some of this is due to Lean not being as developed as it could be, but also there is simply that some "theorems" in mathematics are simply "wrong" in that they make unstated assumptions and handwave away important parts of the proof. It is in this sense that programming is less expressive than mathematics, in that you can get away with writing things in mathematics that you can't get through a theorem checker. And this is conversely why I say that programs for theorem checkers are executable - the requirement to pass a theorem checker imposes constraints on proof structure and such that is not found in the "natural" language of mathematics. The lack of these limitations is what I would say the limitation of mathematics is, that even well-known proofs are not necessarily completely "true" due to unstated assumptions.

Now regarding TLA+ vs TLC, I am not clear what the utility of a TLA+ program that cannot be checked with TLC / TLAPS / etc. When you say "prove" a TLA+ program I first thought this was formally checking it with TLC / TLAPS / etc. But it seems you have a different notion of proof, some sort of handwaving "it looks right" notion. From my perspective this reduces a TLA+ program to a piece of writing, since nothing automated can be done with it. You might as well say "You can express every theorem in ZFC in Java by writing it in a comment" - it is not an informative observation. The interesting TLA+ programs are the ones that can be checked with TLC / TLAPS / etc., and to the extent one can work with these programs programmatically, TLA+ is a programming language.
I find it difficult to imagine that failing to submit a form that does not involve obtaining any kind of approval, would be something you get criminally charged for. To what end would criminal penalties be given for such a benign infraction?
Brazil blocks Starlink bank accounts
Rust only "really" has one loop, the one named loop. Loop is an infinite loop that you can break out of (using the break keyword of course).

All the other syntax, including both "for" and "while" loops and the related but technically different "while let" loop, while useful to humans to communicate intent, aren't semantically different - and so they're transformed early in compilation, they are just "syntax sugar" and are de-sugared into rather elaborate loops with their exit condition now a loop break condition etc.

But yes, as in C++ and similar languages, the iterators generate the same machine code as you'd have gotten for writing the C-style for loop from the 1970s, it's just that in Rust you literally can't write that loop.
I'm not sure if we are talking past each other or what.

1. Non-unsafe rust is memory-safe because otherwise unsafe operations (e.g. out-of-bounds accesses on arrays) are guaranteed to trap.

2. A typical C implementation on typical non-CHERI hardware is not safe because various invalid memory operations (e.g. out-of-bounds, use after free) may fail to trap.

3. A typical C implementation on CHERI hardware guarantees that all otherwise memory-unsafe operations trap.

I think we both agree on #1 and #2. Am I wrong about #3? If I'm not wrong about #3, then what makes you say that #3 is not memory-safe?
> you notice the wave is growing and about to flood everything around you, but there's fuck all you can do about it.

In terms of online shopping, if the distributor cooperates with the consumer then there is something to do about it.
One of the largest Swiss online shop started to share warranty statistics of all products. That information is quite useful to avoid the cheap and soon to break stuff. Of course it's not perfect, since it only tracks faults within the 2 year warranty period. But it provides a proxy signal for quality. But maybe that only works in smaller markets with less incentives to game the statistics.

See https://news.ycombinator.com/item?id=34536344
What about 0% margins? Is there actually enough money in social media to pay for moderation even with no profit?
Humanoid Robot Unitree G1
Bill Ackman Has Some More PSUS Ideas
Yes, you’re totally right. I’m aware of this (what artists do), and they are pulling the rug out from under these people by discontinuing Finale. Leaving new installs working beyond 1 year won’t actually fix that, for even most of the die-hard artists attached to Finale. That’s the part that nobody here is admitting, despite the fact that it’s true. The set of people who aren’t willing to move to Dorico or Sibelius or something else, and also who will be technically able to keep Finale running even if new installations are allowed, that set is near empty or empty. Keep it running with new installs allowed is almost as unrealistic as keeping it running without allowing new installations on new machines. It’s unrealistic to assert that allowing new installations will make anything significant better for a meaningful number of people. Finale is dead. In theory or in principle, abstractly, it does suck they’re disabling new authorizations in a year, but in reality it’s not going to matter. In the mean time, if that move enabled Dorico to feel good about offering a $450 discount, that might really help a lot of people. I’m just guessing, but it could help more people than will still be trying to run Finale next year.
Makes sense, and then you can split consumption (or production - arbitraging with a battery) into time-of-use buckets (a kWh of electricity already has different costs if you're buying during peak hours vs off-peak vs super-off-peak), or spot prices vs reserve prices. In commodities terms, I feel like it would be similar to futures and spot-price.

Those who can buy their energy in bulk and store it efficiently, or only consume when the price is lower than X, will pay a lower rate than those who cannot store energy, or who pay to have someone else store it (again, arbitrage)
An arguable disadvantage of full range voting is that it overweights people who vote binary 0/100 and underweights people who vote 80-100. Since the former is almost always strategically advantaged, it seems fairer to just cut out the middle.
Well, according to at least one online calculator, $1 in 2014 in the US would be worth $1.33 today. So perhaps the real price has gone down by over 33%?
This is absolutely true for engineering teams. While people overuse Goodhart law but the fault is in the foundation.

The Goodhart Law doesn’t really apply in sales or operations because output there is directly proportional to the business outcome.
The walrus operator is nice, except in comprehensions. f-strings are great, except for the `=` debugging operator. Dictionary merging and update operators contradict the "one way to do it" with weird and confusing syntax that's completely redundant to methods that already exist.

Type hints are a sore spot for me. They're good enough when you just don't remember whether an argument is an object or a string, for example, but once you start type hinting deep into data structures, your hints become a mangled soup of nonsense for basically no real benefit. Typing errors are a rare occurrence—perhaps once a year in most projects—yet we clutter our codebases with verbosity to satisfy type checkers instead of prioritizing clarity for developers.

There's a lot that's just straight up redundant. Dicts are ordered now, but is OrderedDict deprecated? No, because it's just slightly different in weird and mostly unimportant ways. `frozenset` is a builtin, for all 3 programmers worldwide who use it. Python resisted match/case syntax for decades, but when it finally arrived, it did so in a way that’s anything but standard—good luck figuring it out without consulting the documentation.

Obviously some improvements are real. Every new version of Python brings valuable enhancements. But just go back to Python as it used to be -- pseudocode that runs. That's just not true anymore. The simplicity has slipped away and will never ever come back.

And the standard library? A very real problem, right now, in computer security is the software supply chain. Remember polyfill from like, yesterday? This is the era when we should double down on having a million dependencies from all over GitHub, from unknown developers with no commitment, because ... npm's hellscape is a model to follow?

I would argue the contrary. There's dependency hell, of course, but there's also dependency risk. If you were evaluating a product right now, and you saw its lockfile depended only on a specific version of the Python Standard Library, that gives you exactly 1 product to evaluate, exactly 1 team of developers to depend on. pip is great and all, but dependency resolvers have quietly let in a hundred trojan horses and a thousand unmaintained dependencies into tons of projects, and no one noticed it was even happening.

Python in 2005, when everyone depended on the standard library, was a safer place than npm is today.
https://archive.ph/kKQNf
Unix History and the `DC` Calculator
Go to ebay.com. Search for Raspberry Pi 5 or 4. See actual market prices by filtering to sold listings. Add cost of case, power supply, storage, maybe even active cooler.
radicle + fleek for IPFS hosting
It’d be interesting to know what constitutes an “algorithm”. Does a message board sorting by “most recent” count as one?
This is one of the forces driving the shift from rooftop solar to utility-scale installations. A residential installation needs guys up on a roof to install the panels, and then custom wiring for each house. A solar farm can use robots to install tens of thousands of panels cheaply.

There are unfortunate side effects to this, even besides the attacks on net metering that have cut financial returns for existing solar customers. Distributed generation is more resilient. With a battery, you can keep your electricity during a power outage. Outages themselves are more isolated - with a VPP individual neighborhoods could keep power, while if a transmission line to a major solar farm goes down, a whole city could lose power. Large solar farms would be huge targets for warfare or sabotage, and wouldn't last very long at all. Transmission lines to them are vulnerable to natural disasters. Economically, large utilities have more market power and can capture their regulators, leading to higher prices and poor service for consumers.

But the economic benefits of scale make it harder to justify putting panels on each individual home, when the same generation capacity can be built much cheaper at a solar farm.
> 05/17/2024: Follow-up to DHS CISO about TSA statements (no reply)

> 06/04/2024: Follow-up to DHS CISO about TSA statements (no reply)

There should be a public Shitlist of Organisations that don't get the Benefit of Responsible Disclosure anymore, just a Pastebin drop linked to 4chan.
Show HN: Geppetto v0.2.5 Claude, ChatGPT, and Gemini OSS Companion in Your Slack
Geppetto v0.2.5 is now available. This update introduces supports for Claude, ChatGPT, and Gemini, all integrated into one Slack app (@Geppetto). It also includes image generation capabilities, with more features currently in development. We're actively using Geppetto across several of our companies, assisting teams in areas like software engineering and sales. All Slack channel members can partipate in threads.

Links:

⸰ GitHub: <https://github.com/Deeptechia/geppetto>

⸰ First Public Release: <https://deeptechia.io/blog/geppetto-v0-2-5/>

⸰ Docker Hub: <https://hub.docker.com/r/deeptechia/geppetto>

⸰ Previous HN Launch: <https://news.ycombinator.com/item?id=39280358>
Floss Weekly: Building the Rust Desktop with Cosmic [video]
And speech inciting violence is not protected speech under any interpretation of free speech.

Even Elon’s weird definition where you can say anything but you can’t criticize anything he’s ever said, thought, or done.
Having done software development with other federal agencies, they probably outsourced maintenance of critical national security mandates to Deloitte who has a team with managers in India running everything with a completely counterproductive culture of hubris solely to make the two managers look good, and anybody that questions that gets terminated in a week
There is an election process, and all core python team members vote on the SC (https://peps.python.org/pep-8105/#results) for a 1-year term.

Greg, Thomas, and Barry are all old guard (20+ years as core devs), Emily and Pablo are relatively more recent, but still have 5+ years as core devs and are I believe more actively doing python feature development. All of these folks have served on the steering council before, some for 3-4 years.

Guido has served on the SC before, but has been stepping back recently.
> hiding in Ukraine

Huh. Uh, weird choice, given, well, you know…
TSA is DHS, though. At some point, it's the same high-level manager...
Yes, I think you could use HumanifyJS for that. The way it works is that:

1. I ask LLM to describe what the meaning of the variable in the surrounding code

2. Given just the description, I ask the LLM to come up with the best possible variable name

You can check the source code for the actual prompts:

https://github.com/jehna/humanify/blob/eeff3f8b4f76d40adb116...
you are wildly conflating the difference between a naturally occurring evolution in a word's usage and meaning (ie: slang becomes canon becomes slang cycle), and intentionally misusing an existing, established meaning, and then pushing for that misuse (and misunderstanding) to become canon.

one is pragmatic, ergonomic, and motivated by advancing relationships between communicating persons in a naturally occurring way because the common denominator is a quick race to mutual understanding.

the other is manufactured, and not motivated by relation and advancing communication, but by how the shift in understanding benefits the one pushing for it, and often involves telling people how to think but is doing it through subversion.
There's someone saying they need Microsoft people like they need fleas. Ts'o works at Google, so it doesn't really make any sense.
You can do better than YC. It's a sweatshop hoping to turn out lottery winners by funding naive founders and their half-baked ideas, hoping they find something successful. Don't be a serf.
I would say it differently. Suprdeterminism opposes to the deeply ingrained assumption that we can design experiments in a way which removes influence of a measurement apparatus (including experementators themselves) on the measured process.
It's strange though. I'm sure I've done an interpay payment (using IBAN) to Australia in the past and they are not on the list there.
> hoping World Governments will use their Public Library infrastructure to train AI

Genuinely blown away the EU isn't doing this.

In the U.S., the solution may be in carving a legal safe harbor for companies that release their models per the OSI's draft definition of open source.
Nice comparison. Looking forward to the 4nm version
Sorry I don't know what to answer. I don't think what I do qualifies as "workload".

I have a process that generates lots of data. I put it in a huge multi-indexed dataframe that luckily fits in RAM. I then slice out the part I need and pass it on to some computation (at which point the data usually becomes a numpy array or a torch tensor). Core-count is not really a concern as there's not much going on other than slicing in memory.

The main gain I get of this approach is prototyping velocity and flexibility. Certainly sub-optimal in terms of performance.