skysight-inc/HackerNews huggingface dataset:
I am fairly convinced that this comment section is among the best demonstrations for "isolated demands for rigor" I have personally ever seen, especially paired with any comment section about an AI-related article

When we are trying to predict the implications of unproven technologies on complex worldwide economies, there is talk of "obvious inevitability"

When we express concerns that chemicals humanity recently started coating the entire planet with at an alarming rate seem to get really deep into every kind of living tissue and nearly everything else we've ever seen bioaccumulate like that has caused a lot of unforeseen issues that took a long time to suss out but most turn out to be at least somewhat harmful, there's all this "well we don't have longitudinal RCTs with enormous sample sizes showing the specific harms of every specific plastic published in prestigious journals yet so who knows really"
The trade-off is a bit of speed.
Meanwhile, African Dogs are not members of the genus Canis, like wolves and domesticated dogs, but a sibling genus Lycaon. Both African Dogs and other dogs are members of the Canidae family.
> open - in some sense.

The phrase that leaps to mind is "Open Beta."
The job these days is boring but secure. Tor stuff was more exciting, then I switched teams because grass-is-greener.

At least for the teams I have been on and my view of leadership, there is very little political talk.

But patriotism isn’t politics… lol. The higher you get the more “hoo rah America!” is a part of the motivational speech or report or whatever. Down here in the streets it’s just another job. Pride in the country isn’t much of a driver. At least for me.
Sturgeon’s law [0] apply to all sorts of things, including web visitors

[0] https://en.m.wikipedia.org/wiki/Sturgeon%27s_law
> was always subject to home ISP ToS limits on doing that very thing

Every ISP prohibition on self-hosting that I have seen specifies commercial use, not just hosting services (since obviously that could technically prohibit tons of normal and authorized uses like co-op games).
A bot trained on LinkedIn content. Good God.
I run an exit node, and I know several people who do, I dont suspect any of them to be anything but people who care about privacy, surveillance, and helping people get access to the free internet from restrictive locations. I admit, I bristled at your comment, because I do not like myself, the EFF, and many of my close friends being imagined as part of the US Government.
Yes, rga could support this in a more streamlined manner than rg, since rga has that extraction pipeline with caching. ripgrep just has a hook for an extraction pipeline.
I love BeOS.

I love Haiku.

I love them more than you do.

I love BeOS more than Jean-Louis Gassée.

If you already love and enjoy Haiku and an electrified loving and enjoying machine increased your love and enjoyment by ten trillion times, I would STILL love and enjoy it more than you do.

It (they) will amount to nothing more than a hobby project (which is ok, I suppose) until multi-user is implemented.

discuss.haiku-os.org: "i Am ThE oNlY pErSoN wHo UsEs My CoMpUtEr"

It's about security brah. This thing is going to be connected to the internet, no?

You're not smarter than the last 50 years of OS security development.
It makes US service providers, like Google and Amazon, very unattractive for businesses that require worldwide coverage - for example wikipedia.

I would argue that for unpaid services (for example serving up web content), we should not be applying sanctions. Those specific sanctions are so easy for the iranians to work around (VPN), and so damaging to our businesses (no worldwide service).
While you're at it, make sure to have them prohibit any encryption on top of HTTPS, or apps might just be hiding things in application-level encryption schemes!

Banning certificate pinning... Do we really need mandated insecurity by prohibiting apps from doing better than trusting all Apple-trusted CAs around the world?
As per article, they are firing in US and still hiring in India
There are multiple reasons.

1. Intuit discontinued QB desktop on may 31 this year.
2. Intuit recently raised prices.
3. QB online has terrible navigation. I can make invoice in my system in less clicks.
4. I needed a feature to optionally print supporting documents with the invoice while having the ability to arrange the order of those documents. I then can integrate with mailing service and have PDF ready to mail programmatically. Instead of having to join PDFs together. (this feature doesn't work cause I can't afford IronPDF, it's the only PDF package I would use).
5. I don't like any limits on users or numbers of invoices I can have in my system.
6. Excel is error prone for more than a few records. Drag and drop accidentally one cell to another?
7. Multi-tenancy. I wanted to manage multiple companies without logging out.
I think the solution to this is to:

a) run your own private root CA

b) install the public part of the root CA on your device and trust it (basically the same as many major enterprise end users of android and ios devices need to do already, so this functionality is extremely unlikely to be removed from the operating system)

c) use the root CA to sign a cert for your mail server

Yes it's a bit more hassle than just trying to tell the mail client to trust your self-signed cert that was generated on the mail server and signed by nothing, but I can understand why apple (given the population of hundreds of millions of NON TECHNICAL end users) doesn't want people just blindly clicking through "yes/I accept/trust this server" self signed cert warnings.
It's possible for this to be a real problem and for Republicans to simultaneously be full of shit.

The increasing debt represents a wealth transfer to asset holders. If you can exchange your dollars for things like houses, before those dollars are devalued, then you win. This is regressive.

This is not an argument for fewer social programs. It is an argument for more taxes.
LE doesn't need any A or AAAA record. The domain must exist in the DNS and you must be able to create records in the domain.

If you're using internet mail you have a domain, so you can do this. The time for self-signed certificates has passed.
They use sapling. An in-house clone of mercurial that was open sourced 2 years ago
Exploiting LLMs for entity and schema extraction from unstructured documents
I've been exploring ways to automate the extraction of structured data from unstructured documents like PDFs. This tool uses llm to identify relevant entities, relationships and generate schemas that can be used for database design or knowledge graph creation.

I'm curious about potential applications and improvements. Has anyone tackled similar challenges? What approaches have you found effective for handling unstructured data?
Good for mass communication as sometimes needed in emergencies situations , widespread floods , earthquakes, bush fires etc FM has much more limited range
Just to make it clear - the cutoff date on previously released software remains the same. So if you download it now and wait a few years, your software will have matured into its final form, the Apache 2 license.
> claiming that the critics were motivated by a desire to protect the established players in the underwater-tourism industry from competition.

At this point I suspect a great amount of reasonable engineering criticism has come from people who can't even name any of those "established players in the underwater tourism industry", let alone have a favorable bias towards them.
Then Twitter can migrate to AWS CloudFront.
Comparable, I guess. But the result is a lot worse compared to Sonnet for sure. Parts of the example code doesn't make much sense. Meanwhile Sonnet seems to have the latest API of Bevy considered, and mostly makes sense.
I thought it was GWS that originally started as a fork of boa.
this one?

https://ev-lectron.com/products/lectron-vortex-plug-tesla-su...
I think there's some misunderstanding? Sometimes parsing HTML is the best way to get what you need, however there are many situations where one must use something like playwright to get the HTML in the first place (for example, the html is generated clientside by javascript). What's the better alternative?
Sure we do, just look at the piles of clothing waste around the planet.
it's pretty absurd that cloudflare can just effectively cripple a cloud provider by tagging part of their IPv4 range as Iranian and not fixing their issues in over a year (and AFIK have no intention to fix them at all)

like I wonder if Hetzner has any way to legally force them to stop misclassifying their IP
Can I risk loosing access if any of my users write CoT-leaking prompts on the AI-powered services that I run?
I'm reading this as "Samsung charges a $10 monthly subscription fee to keep your phone up to date" and I already know how that would turn out.
"In some sense", any word can mean anything you want. "Open" carries with an accepted meaning in technology that in no way relates to what you're describing. You may as well call McDonald's "open".
A US forum talking about people they pre-consider terrorists of a country they surely can't pin point in a map. What can go wrong...
You realise that these things are completely different, right?

Stripping people from their citizenship as a punition for a crime has nothing to do with taxing people who renounce their citizenship. The only thing they have in common is that citizenship and taxes are involved. As an aside, because you mention France, there would be significant constitutional challenges to do this for something that is not high treason. It is not going to happen in the near future. The far right barks often, but when push comes to shove their only way to win votes is to soften their rhetoric and there is no support for this so they are not going to die on this hill.

> If you phrase it as "taxing expats" then, sure, no other country is proposing it.

That was the whole premise of the discussion, though.

> If you phrase it as "making sure the rich don't skip out on their taxes by moving to a low tax country" then it's going to be a lot more popular.

That's already being done. There is political will for that (though not from the fringe parties who'd be the most likely to go after expats, including the barking far right). It does not require sending a bill to people renouncing their citizenship, or taxing non-resident citizens.
Can you elaborate on what makes a criticism of Islamic extremism racist?
I thought I would hate it (voicemail is the worst thing ever) but this is strangely compelling
I think this is why you only see innovation via alternatives vs within a product.

E.g. Salesforce, Workday rising up to replace incumbents, but then themselves becoming stale.
Maybe they want to reveal it on the CCC in december?
Regarding "What makes people fat?", I feel like there are few charts as damning as the one [0] halfway through TFA showing a spike in obesity rates that coincides nearly perfectly with the introduction of the modern USDA Food Pyramid.

The quote below it sums things up nicely, imo:

> Dr. Michael Eades: “A few years ago, I went back and pulled some labels off some feed sacks in a farmer’s coop and ran them through my little nutrition computer and there’s virtually no difference in the macronutrient composition that farmers use to feed animals to fatten them up and that the USDA uses to tell us to supposedly slim down.”

It is truly insane how we continue to act as though anything other than drastic carbohydrate intake reduction will fix the American obesity epidemic. We've been eating way too much flour and sugar for decades now.

[0]https://substackcdn.com/image/fetch/w_1456,c_limit,f_webp,q_...
Renting space in a colo and running EBGP on leased dark fiber to HE is real self hosting. VPSes while more convenient are definitely nothing like running metal.

For a lot of stuff that doesn't need constant public network connectivity, I choose to run a home lab.
I think the scenario where only governments and mega corporations have access to super intelligence offers at least an extra three months before human extinction. So, that's arguably a benefit.
>Unfortunately they also frequently get non-profits to be their mouth pieces

Important to note that the EFF is also a nonprofit, which is funded by big tech.
Or is operating a local-only mailserver not connected to the larger internet? I guess that's a lazy or stupid thing too, these days...

I'm a fan of having TLS on by default for everything on the Internet, but I'm seriously annoyed by the collateral damage to local self-hosted services the implementation of that has caused.

It shouldn't be this hard to e.g. host web server on my local network that browsers grace with "trusted website APIs", but it really is. Why on earth do I need to set up Letsencrypt (and by extension at least DNS) on a local website if I want to be able to use a game pad on it, for example!? https://developer.mozilla.org/en-US/docs/Web/Security/Secure...

We absolutely need a localhost and local domain exemption for both TLS/X.509 certificate validation and web APIs. For example, TOFU seems like a much better model for that use case than trying to bend the "public Internet" model until it fits. SSH has had considerable success in that model, for example.
I mean, assume any time you're talking with the police, you're being interrogated. If you called them yourself for something, then you've decided to take that risk, but that's also a situation where you're less likely to be in trouble yourself, though there's still a risk.
Yep, the tech crowd sure did prevent Palantir and ClearView. Argue away.
I didn't say a "pinned self signed cert is insecure"

I said that self-signed certs are a lazy choice

I also said "allowing the end-user to confirm a certificate offers basically 0 protection"
If an average user get's prompted to trust a certificate they will do so blindly
At most, someone might look at the subject, but it's 0 effort for a malicious actor to generate a self-signed cert with the same subject, which will be sufficient to fool a decent chunk of users

Pinned certificates do relieve the above issue, but it is still a lazy choice that creates increased long term complexity in the configuration of multi-system environments
Presumably most services that you run, run over TLS, do you really maintain every certificate both on it's application and on everything which needs to connect to it? That's a huge amount more effort than signing all your PKI with an internal CA, the configuring your connecting applications to trust that CA
Using a CA also allows for use of CRLs or OCPS.
If you have 20 devices configured to trust a given self-signed certificate, and that certificate leaks, you now have to update all 20 devices to remove that trust. If you used a CA and implemented either a CRL or OCSP, then you only have to update the respective impelmentation and all of yoru clients will immediately stop trusting that certificate.

In Summary:
Using an internal CA offers all the potential protections of pinned certificate, with a number of additional useful security options like OCSP or CRLs
Using Self signed certificates creates more work when handling certificate leaks or certificate rotation
Using a CA is the industry standard practice, I highly doubt there is a single outward facing project by a major company using a directly self-signed certificate.
BUT
A self signed certificate is lower effort on the initial setup

Lazy
Yes. I've always loved my books but now consider them my most valuable possessions.
How many of these people are justified (by evidence, not merely paranoia) in thinking that Tor would circumvent whatever communications interception may or may not have been put in place?

And of those people, how many people have ever even heard of Tor, let alone know how to use it?
Wow, this is weirdly lovely. I don't think I would code with it (probably!) but it would look great for sort of blackboard-ish code samples in teaching materials.
They already do content blocking all over the world..

The precedent is already set, this is nothing new..
The /r/LinkedInLunatics/ subreddit is going to get swamped with all the new content this monster generates.
"pretty much every EU country" is not an example, so I guess no, then.

Anyway, this is not what was discussed here, and has nothing to do with citizenship. The example was a non-resident's business abroad being taxed when giving up their citizenship. As far as I know, there is no European country that does anything remotely equivalent. I am willing to accept that there might be some, but this is far from the norm.

Moving stuff across borders is something entirely different.
From what little I've heard, de-anonymization of Tor users is largely done by targeting their devices with zero-day exploits. That is still a valid method, I wouldn't trust Tor personally, but I'm with the Tor project that there is no credible evidence of a large scale de-anonymization attack.
Source? A new power train is not a defeat device for non-road vehicle because they only regulate the emission at the engine level for the use type.

https://www.thedrive.com/accelerator/2137/epa-clarifies-its-...
This page mentions Seventh Day Adventists only once at the end, and doesn't mention onanism at all ¯\_(ツ)_/¯
Did you buy your walkie talkie in a batch shipment with Hezbollah?
Must be a country where most trips are relatively short. ( a few 100 KMs or less ). A longer trip of a few 1000 KMs would need to stop for recharging several times.
I ran an exit node for a while, and found myself auto-banned from so many services that I stopped running the node and threw away my IP range (which now would be worth $$$ - oh well!)
IBM has largely retreated from consumer facing ventures but it's still a behemoth.

From the start of its Wikipedia page:

> IBM is the largest industrial research organization in the world, with 19 research facilities across a dozen countries, having held the record for most annual U.S. patents generated by a business for 29 consecutive years from 1993 to 2021.

I know that in semiconductors they're still doing bleeding edge R&D which they then try to license to foundries.
Their mainframe business is still doing quite well too.

And I'm sure they're active in many other niches that I know little about.
...do you really think that's what they meant when they took on the term?
Depends on where you travel, I travel a lot in the west. Gas stations are not as common. I'm glad and not surprised to hear denser parts of the us are getting reasonable charger density as well.
It's hard to tell, though. People have been saying my borderline autistic comments sound like GPT for years now.
I'm not saying it's fair or right. As with most things in life, the cost/benefit makes it likely you'll have to take some risks, but people need to understand that literally any interaction with any law enforcement without a lawyer present is a risk of things going horrifically badly. This is especially true if they show up and you do not know why. That is a massive set of alarm bells that should be going off.
Welcome to hell.
> There is literally no other reason why they would call this model Strawberry

I'm not particularly imaginary, but even I could imagine a product meeting/conversation that goes something like:

> People are really annoyed that our LLMs cannot see how many Rs the word Strawberry has, we should use that as a basis for a new model that can solve that category of problems

> Hmm, yeah, good idea. What should we call this model?

> What about "Strawberry"?
If you want this style but balanced slightly more utility, I love Codelia [1]. It's my main coding font. It is, however, a paid font.

[1] https://tosche.net/fonts/codelia
I think what is this ignoring is that "security updates" are generally corrections to defects in the original product.

In principle, a complete product would ship with no defects. You could run it for 1000 years unpatched and it would be no less secure than the day it shipped.

Manufacturers ship security updates because the original product was defective. So it makes sense that they remain on the hook for security updates -- we paid them full price up front.
How does an article about costs in the space industry discuss Boeing, Northrop Grumman, Aerojet Rocketdyne, and Lockheed Martin, but never mention SpaceX?
> Chinese equipment shuts down or starts exploding, that's fair game under the rules of war.

I am not so sure that it is fair game. Here is what Volker Turk, the United Nations High Commissioner for Human Rights has to say:

> "such attacks violate international human rights law and potentially international humanitarian law."

> if you're an enemy or adversary

You seem to have conveniently forgotten how backdoors work. They eventually leak, and then anyone can exploit and trigger them. No matter the original intended target, pretty soon everyone can become a target.
it's how institutions work and it's very alive anywhere with inclusion programs of any kind. to hire managers based to anything other than strict hierarchical domain competence depends on the premise that managers are generic low agency minders of things that are already creating value themselves, and a transferrable/interchangeable function. nothing outdated about that at all.
Sounds like an ad for passionate toilet cleaners, but people in that line of work actually do something useful.
Glad to hear that! Judging from the comments here there's a few people who like it, but also a few who really don't. So it's nice to hear you got something from it thanks.
I feel like this only works in small groups. Have you (repeatedly) done this in bigger groups? I feel like that's a great way to make everyone hate you. Although I must say that sometimes I have asked this question, and people seemed thankful because they also didn't understand a thing, but simply didn't dare to ask. This is a bit tricky, because if nobody asks questions, I feel like they all understand and I'm the only dumb one who doesn't get it.
they’re using probability correctly. if you have a critique state it clearly
Same as Google. Many internal tools have painful interfaces and poor or documentation because the hiring bar was high and it was acceptable to assume that the user's skill level is high enough to figure it out. That attitude becomes a bigger problem when trying to sell tools to the public (e.g. Google Cloud Platform).
It really only is for bad practical reasons, that all coincidentally make it harder and harder to self-host stuff locally without paying a few dollars a month or year here and there to various rent seekers.

"Just use Letsencrypt" really is the correct answer for 99% of use cases, but good luck if you find yourself with one from the 1%. You'll get an army of people mindlessly parroting "best practices" and will assume you're incompetent/lazy if you can't find a way to make them work for you.
Yes, and you still can. That's not broken.
"Hide the bad parts behind a good API... It works so much better than the bad parts being distributed everywhere!"

This doesn't work for the "bad things" I know of. All of the low-level bad parts which are truly bad/mucky, are bad because they can't be entirely hidden. They are leaky abstractions and by that fact, they ... leak. They impact every part of the system so they are "distributed everywhere" in the sense that the maintainer of a large program has to consider them everywhere even if they only directly show up in a few places.

Just as an example, programming languages are abstractions over the complex structure of "raw" memory. Pythons hide this abstraction more than for example c but once you reach a certain scale the use of python, you have to consider the details of its use of memory. And that's memory in general, which people work at to make reasonably regular as well as fast.

That's not saying you can't have an API that makes the low-level problems less.