skysight-inc/HackerNews huggingface dataset:
Show HN: I built a tool to help you build interactive demos for sales team
Hey HN!

My team and I have developed a tool called demoshake, designed to help you create and leverage interactive demos in your sales process. You can create unlimited demos, organize them into groups, and let your sales team use them during their calls.

You can also embed these demos directly into your landing pages (iframe style).

We’ve completely revamped our landing page since our last post here. If anything is unclear, I’d love your feedback - it’s incredibly valuable to us.

Looking forward to your suggestions and critiques!
"OOP solution is to use inheritance. Typical ML solution is to use type-classes."

Yes, type classes can "work" to help a NonEmptyList degenerate to a normal List of some sort, if the function accepting the list accepts the type class instead of a hard-coded List. Unfortunately, at least for this exact task, taking hard-coded types is pretty common. I've sometimes wondered about the utility of a language that provided all of its most atomic types solely as typeclasses within its standard library, so that calling for a "List a" or "[a]" automatically was turned into the relevant type class.

Inheritance doesn't actually work here. I assume you mean inheriting a NonEmptyList from some sort of List, from the perspective of a user facing a language that has a standard List and they want to create a NonEmptyList that things taking List will accept. Unfortunately, that is a flagrant violation of the Liskov Substitution Principle and will create architecturally-fragile code.

Compilers can't enforce the LSP (with anything short of the dependently typed code you mention), so you can bash out a subclass that will throw an exception if you try to take the last element out of a NonEmptyList or violate the rules some other way, and if you pass your new NonEmptyList to something that happens to not do anything broken, you may get away with it, but by the standards of OO theory you're definitely "getting away" with something, not solving the problem.

I haven't studied this extensively beyond just thinking here for a moment, but I don't think you can LSP-legally go the other way either. A subclassed List can't revoke a parent's NonEmptyList property that the list is guaranteed to not be empty. Again, you can bash the methods into place to make it work, but as this is a very basic standard library sort of thing for a language it really needs to be right.

Edit: Yes, it's certainly illegal. You can take a List inherited from the NonEmptyList, have it be empty, but you have to be able to pass it to something accepting a NonEmptyList, but it will then be empty. So you can't LSP-legally inherit either way.

(This is one of the "deep reasons" why inheritance is actually not a terribly useful architectural tool. It technically breaks really, really easily... like, probably most non-trivial uses of inheritance in most code bases is actually wrong somehow, even if never happens to outright crash. We tend to just code past the problem and not think about it too hard.)
And it all makes sense if Durov is in fact working for the French secret services and his "arrestation" is just a way to protect him from novichok or a balcony fall, and a cover story for how France got hold of the keys to Telegram.

I mean, he got French citizenship despite not fitting any legal requirements, and nobody in the French government has given any explanation on why he got it.
I just checked and YT is normal for me in FF 129.0.2 (64-bit). YT specific add-ons: uBlock Origin, Nova YouTube (userscript with dozens of modules to fix various YT behaviors and UI annoyances), and Enhancer for YouTube (adds more playback speeds, fixes default player size & volume levels).

Since YT in my FF is heavily modified to be not awful, maybe the regression is in something my add-on stack is blocking.
LLMjacking: Stolen Cloud Credentials Used in New AI Attack
We are supposed to believe Google hires some of the most brilliant minds on the planet, but I've yet to see evidence of this. YouTube has been unusable for years and is only getting worse. When one of your flagship products is unusable for both technical people and novices alike, in my mind you have failed as a company. The front end is what the user sees and what matters. YouTube was a better product 10 years ago and they know it.
Show HN: Shed Light on Your Go Binary Bloat with Go Size Analyzer
I've created a powerful tool to help Go developers uncover the hidden giants in their compiled binaries. Go Size Analyzer is like an X-ray machine for your Go executables, revealing:

Which dependencies are eating up your binary size

Unexpected bloat from standard library or vendor packages

Size changes between binary versions with a visual diff

Key features that set it apart:

Interactive treemap visualizations (check out the demo: https://gsa.zxilly.dev)

Slick terminal UI for deep diving into package hierarchies

Cross-platform support (works on Linux, macOS, and Windows binaries)

Export to SVG for easy sharing and documentation or just visualize the CI process

Whether you're optimizing for edge devices, reducing Docker image sizes, or just curious about what's really inside your Go binaries, this tool provides detailed insights.
.
Crackers, Phreaks, and Lamers
I've never seen SSH attackers probe a space of user IDs in such a way that they would eventually find a user ID like Z@an4ar. In fact, they just stick to standard user IDs like root, and probe only the password spaces. If your super user account is not named root, or not available by that name via SSH, it is safe from attacks which only try that name.

sshd can be configured simply not to allow root logins. To use root, you log into some other account and then su. That other account can have a name that attackers will never try, and a decent password.

Then, if you happen to be using a log based banning system, since you know that no legitimate user would be trying the name root, you can impose an instant ban on such an IP address, with a long duration. It's really just for reducing traffic more than anything.

Regarding aliasing root, you can create an alias for the UID 0 user simply by editing your password and shadow files to create duplicate entry. If the root entry appears first, then that name is still used whenever a UID is resolved to a user name, like in your ls -l and whatnot.

The shadow entry for root can have a star in the password field so that it cannot be used for logging in by any means; only the alternative name can be used via the other entry that has a password set up in its shadow entry.
Lire is hands down the best reader on iOS, and a one-time purchase too. I really love it.
But you're just making that up. It evolved almost instantly after the US Civil War as a way to employ newly released slaves without paying them. It was described as a "new idea that had just come from Europe."

https://www.usatoday.com/story/news/factcheck/2020/12/16/fac...

https://www.cbsnews.com/news/tipping-jobs-history-slave-wage...

https://www.nytimes.com/2021/02/05/opinion/minimum-wage-raci...
Probably not, since carbs have always been the easiest food to get and they didn't have this problem. Protein, and especially meat, was always rare and a minority of diet. But greens, fruits, nuts (ish, they have fat) are plentiful.
I always go back to the Tyson Chicken raids a few years ago to show just how broken this is.

ICE officials raided a few facilities a few years ago, and actually found about 900 undocumented workers.

Many of them gave evidence to officials, including written instructions from the company that advised them how to fill out employment, banking, taxation paperwork if they "didn't have documentation", i.e. Tyson didn't just know this was the case, they were actively enabling it.

And in press conferences, when journalists asked "Are there any plans to investigate the company or issue fines or charges?", the response? "We are not considering that at this time."

What it actually ended up looking like, with some other safety issues raised around that time is that Tyson perhaps decided their undocumented workers were getting a little too angry about poor safety standards, and making waves. It would be entirely unsurprising if Tyson made a sweetheart deal with ICE that said "Hey, if you come to these plants, you'll get to make this big stink about undocumented workers" (and remember, this was during the Trump administration), "but in return, can you leave us out of it?", shades of "Won't someone rid me of these meddlesome workers?"
I’m a few days late to comment here but I’ve been creating metal furniture again this summer. Mostly tables, end tables, night stands, some benches and stools. It’s a hobby thing and my house is getting quite full, but I’ve also had a few commissioned pieces.

I like to mix different materials into the designs I cook up. For the tops I use cut stone which is prohibitively expensive for most hobby stuff but works really well for commission work because of all the different types (marble, granite, composite) and styles/ colors you can get. It gives it a very high end look and feel when combined with a sturdy metal frame. I’m also really into 3D printing so I try to incorporate that into the work as well. Using different pattern schemes to make inserts and accent pieces.

I’ve also experimented with incorporating IKEA furniture pieces into metal frames because I love the idea of doing modular furniture that can be swapped out for different colors and textures. I use the same idea for my 3D printed work.

I love the creativity and flexibility this gives me and my welding skills have ramped up significantly. It’s been years since I welded seriously and I really lost the techniques so getting that confidence back is great. I’ve been approached to do some big 5-6 figure home design jobs through the connections I’ve made acquiring stone pieces but I’ve only consulted on advice. I still feel a bit insecure about putting myself out there in structural work. I see how successful different design firms locally are building this stuff for tech companies and I’d love to eventually have my work featured like that but taking it slow for now.
> I always find these comments a bit rediculous. You think that big corporations are incapable of having accidental bugs?

I didn't say they that they couldn't have accidental bugs.

I did note that they'd normally be able to rollback a deploy with problems.

Why do you say that's ridiculous to comment?
Folding electrodes could reduce surgery to treat brain conditions
People don't want to here it, but meetings are where "it" happens. You simply must have it. That is that. That is not this, it is it. Simply, it's that.

The truthing the matter relize on meetings to do buisiness. No meeting, no work. Simply, it's that. If you let engineers spend their time, they playing with their tinker toys. Sometimes trains. Simply, it's that.

It's not Christmas times when a nice train would be welcome into the office. For now we do buisiness work accordingly the schedule (which is posted). In the meaning times we have meetings. We still doing the work. Simply, it's that.
ATC does have access to radar that locates aircraft via skin paint. TBH, I’d push that back on ATC. If I’m confused about my altitude, it’s not because I suddenly can’t read the numbers on the dial. ATC should understand that the confusion can be resolved by checking with an outside source.
Not the ideal court I'd like that split to go up to but that's not changing any time soon and maybe they'll surprise me in a good way this time.
A proper arch shape supports its own weight and the load above it because of its shape, without needing any mortar or cement.

https://en.wikipedia.org/wiki/Arch
That sounds right to me. I don't work in physics, but have many colleagues who have left it for that reason.

~The said, I think Dune still does seem useful. Hard to say whether the cost overruns are a lack of good management or if the experiment is just a quagmire, though. Guess I lean towards the scientists here that it's the former~

EDIT:

Doing some research it seems the Hyper K experiment might just be better, and funding might be better directed there than Fermilab.
It’s not guaranteed to be accurate, but tracing using the UDP/dublin strategy with a fixed dest port and varying src port per round can help to identify and visualize valid ECMP flows. I recently wrote some guidance [1] on using Trippy in this way.

[1] https://github.com/fujiapple852/trippy?tab=readme-ov-file#ud...
MIT these days is about half men and half women undergrad. Pretty consistently, about twice as many men as women apply. So you can do the math. There are some other factors like I believe a slightly lower percentage of women accept than men and, of course, you don't know the relative quality academically of the applicant pool (which MIT doesn't publish any data on).

However, it would be really hard to believe the curves for the two populations are that different even if I can certainly believe men are a bit more likely to roll the dice by applying just in case they luck out.

I suspect an admissions officer, if they were candid, would probably say something like: Look, all the students with absolutely impeccable credentials applying are probably getting admitted. Those that are unqualified are not. So we're now figuring out what's most important to us as an institution from the middle tier of applicants especially given that we're dealing with a lot of noisy signal. And, yes, one of these things is that MIT decided years ago it wanted a reasonably balanced gender ratio which we didn't used to remotely have.
I know that, but "public keys" is long enough on mobile without typing "public user-authentication keys."

Anyway, I think it is reasonable to assume that if you're using the "escape hatch" as mentioned by /u/nine_k, you may well not have your .ssh/known_hosts file on your client. In which case public user-authentication keys minimizes your blast radius of a MitM host.

Also, a compromised (but legitimate) host could still grab your password and try lateral movement (mitigated if you don't reuse your break-glass password, but you get it for free with public keys).
> it looks like a perfect example of why we need a standard

A standard wouldn't fix mistakes in the manpage. What is your proposal?
We could establish UBI, and then we wouldn't need a minimum wage. We could decide as a society that we want everyone to have a baseline level of support, rather than doing it indirectly (and less effectively) by forcing the nonexistence of low-paying jobs.
You’d be shocked how shitty the development practices inside a bigco can be. Working at a FAANG-level company is profoundly disillusioning.
AI chat bots are usually more coherent than this
And yet, Linux gaming is largely dxvk and proton.
The Reddit /accounts were talking about this earlier this week and I think most of them had a pretty reasonable take.

1. If one uses an asset as collateral for a loan (be it stock or whatever else), for tax purposes treat that asset as sold, then immediately repurchased at the same price.

2. From there all of the usual tax laws can apply.

So in theory this should get at the core of the actual problem, while avoiding at lot of the messiness of taxing un-realized gains.

It's not perfect, but I think it helps align incentives well. Whoever is lending the money probably wants to know the value of the collateral. Lender and borrower are now both incentivized to come up with the real value at the time of the loan.
The Real North Korea, by Andrei Lankov
That sounds like a good thing to me. I would prefer the people who hold power in our society be the ones democratically elected, not the ones who lucked into a leviathan amount of money and can now buy Twitter for fun.
Thanks for responding. I only gave Mailchimp a brief glance, admittedly they're no longer a favorite for me, and the pricing page was confusing, but I also don't want to spread misinformation. I'll update again.
I’ve been trying to understand how the budget proposal process works, including how it is voted on and approved, but I couldn’t find much information.

For example, with FY2025 starting on October 1, 2024, does this mean any proposed tax rate hikes would take effect on that date, or would they start on January 1, 2025?

Additionally, since Trump’s tax cuts are set to expire on December 31, 2025, does this guarantee that tax rates will remain unchanged until that date?
Why is this silly, again? It's indistinguishable from a non-modulated SYN, if that's your concern: the eavesdropper can't even distinguish such port-knocking SYN packets from any other random SYN packet that happened to be routed to the host (there is e.g. a lot of port scanning going on around the Internet). It's encrypted, so even if the eavesdropper could distinguish such a packet, they can't learn the requested port; and they can't even replay this packet, so... what's exactly wrong with it?
I expect that pushing myself will just lead to worse performance that I’ll need to fix later. Do what I can, and not feel bad about it.
> It makes me wonder if humans are just next moment prediction machines, with just a little bit more memory built in.

This, to me, seems extremely reductionist.
Like you start with AI and work backwards until you frame all cognition as next something predictors.

It’s just the stochastic parrot argument again.
Not sure what you've used it for but Powershell is about the best thing to come out of Microsoft in the last decade. Very useful and extendable - useful anywhere bash is. It's also the scripting engine of choice for Azure and Entra ID too which is far from Windows Server Land.
In English, route is synonymous with 'path'.

Feel free to submit a PR if you disagree:

https://man.openbsd.org/traceroute
What does a "Hello World" for something like this look like? Is it a API, do I push a docker image to it or something? How do you interact with this sort of system?
Hey there,

Got any questions? Just drop them here! Whether it’s technical or functional, I’m happy to help.

Cheers,
Harun
In North America the growth of Square has pushed things the other way; tips are front and center for the most limited of "tippable service" - starting at 18% and up from there. Tipping on fast food or something like a latte were the extra labour is already priced in is ridiculous.
There are a few things here. You are correct that this is for external processes. You are further correct that you can push the heavy part of a diff and such to an external process.

At that point, you have the textual output in a buffer and you want emacs to simply render that buffer in a "pretty" way. This is done for many things, grep being one people are most familiar with in emacs. It can recognize each match with enough detail to let you jump to the file it is in. I don't know how magit renders diffs, but I'd imagine it should work roughly the same way. Probably leaning on some other elisp to allow common editing.

My point holds that more and more languages have server protocols that would be akin to an external process, now. In this way, there is little benefit in reimplementing a ton of stuff in the emacs process. Especially with the standardization of leaning on json, the link to the external process can be a textual buffer just fine.
PR Focus: a macOS app that tracks pull requests across GitHub repositories
Is Square popular and/or growing? This is the biggest change I've seen in Canada and the US
I likewise really miss that. Some early USB drives actually had those too, but it's been a really long time since I've seen one.
Show HN: Every open source tool from the "What's HN working on" thread
Orin Kerr's analysis of this new ruling, which is linked from the Tech Crunch article, helps break down where the specific splits with other courts lie. This is useful even if you don't agree with Kerr's analysis of the validity of any specific courts' decisions: https://reason.com/volokh/2024/08/13/fifth-circuit-shuts-dow...
My understanding of the proposal is that households worth more than $100 million would pay an annual minimum tax worth 25% of their combined income and unrealized capital gains. This doesn’t seem insane? In particular, that’s a hell of a residential property
I'm in the UK and we have this system too, although half the time the servers will just press 0% for you before they even hand over the terminal just because tipping isn't really a big cultural thing over here (at least compared to the states).
Especially when the stated concern is actual income already realized. Why not just tax the income?
One more followup.

I don't think we should be organizing our society in such a way that "staying alive" is considered a "benefit" that is largely at the whim of employers who can revoke that "benefit" at any point.

The corporate world has bugged me for years with the "get a good job with good benefits!" then people somehow thinking they "deserve" those "benefits" from an employer. The employer relationship has amplified the brokenness of the insurance systems in place (however useful they may have originally been).

I've got a similar bugbear with the word "scholarship" as a shorthand for "money" when... there's usually nothing "scholarly" about it. Yes, it's typically used for attending a university with nominally scholastic aspects to it, but "getting a scholarship" because... you hit a baseball X number of times, or what not... the language bugs me more than anything (as with "benefits").
Ask HN: The Why Now Question
I'v been looking for startup ideas lately, and a thing that came up was that I need to answer the question "why now?"

Q1. Is it fair to assume that if a startup idea could of been made 10y ago and hasn't then it's just a tarpit idea?

The next thought that I had in order to answer the "why now?" Q, is that your answer could either be 1. A social trend, 2. Some new tech paradigm

And the only new tech paradigm we have right now is Gen AI, so that means you just have to come up with ideas that use GenAI, but doesn't that just mean that your SISPing -> solution in search of a problem?

Would love to get insights on my thoughts and Qs, thanks!
"Volt Typhoon" sounds like a shonen anime villain.
It's not a strawman. They were specifically answering your question of "Why would it be illegal?" and not delving into the specifics of what the law would look like. And the answer they gave is that it's bad for a manufacturer to retain control like that of a device you own. Also that it's a consumer rights issue, basic enough that nobody should need to ask why.

I guess the shouldn't have used the word "full" but that's pretty picky.

It looks like a pretty reasonable argument to me. They didn't discuss the basis but "consumer protection" seems to me to be sufficient basis. For impacts, I'm not sure what you're looking for; without being an expert it's hard to go beyond "companies stop doing that". But either way, replies don't have to answer every question you asked.
> simply giving nutritious food to all kids

That's becoming more common. My school district just announced they have funding to give all students free breakfast and lunch for the next three years. They got that funding through the government (and I think it may have come all the way from the feds). We're not a low income district, so I assume that funding is easily available.

Even before then, it was mostly a "pay if you can" policy. The kids have accounts and they punch in their ID number when they go through the lunch line, but it would never refuse even if the account balance was negative. They'd ask parents to bring the balance positive, but it was never revealed at the student level that someone did not have adequate funds.

Slowly but surely we're trying to make sure students can focus on school. Hard to make everyone's home life ideal, but we do what we can. Hopefully this translates to their increased success in life and each successive generation will improve.
Longest Medically Documented Repeated Fasting History: A Case Report