skysight-inc/HackerNews huggingface dataset:
> This reminds me of a specific number that Americans have to give in plain text as proof of digital identity that they only get one of and can't change it ever. Lol.

You can get up to ten replacements of your card in your lifetime. They do all have the same number though.

[1] https://secure.ssa.gov/poms.nsf/lnx/0110205400
As an ancient imbedded system programmer, I feel your frustration… but I think that it’s misguided. LLMs are not “computers”. They are a statistics driven tool for navigating human written (and graphical) culture.

It just so happens to be that a lot of useful stuff is in that box, and LLMs are handy at bringing it out in context. Getting them to “think” is tricky, and it’s best to remember that what you are really doing is trying to get them to talk as if they were thinking.

It sure as heck isn’t programming lol.

Also, it’s useful to keep in mind that “hallucinations “ are not malfunctions. If you were to change parameters to eliminate hallucinations, you would lose the majority of the unusual usefulness of the tool, its ability to synthesise and recombine ideas in statistically plausible (but otherwise random) ways. It’s almost like imagination. People imagine goofy shit all the time too.

At any rate, using agentic scripting you can get it to follow a kind of plan, and it can get pretty close to an actual “train of thought”facsimile for some kinds of tasks.

There are some really solid use cases, actually, but I’d say mostly they aren’t the ones trying to get LLMs to replace higher level tasks. They are actually really good at doing rote menial things. The best LLMs apps are going to be the boring ones.
At the same time, RT permits some more offload to the computer.

More effort can be devoted to microsecond-level concerns if the microprocessor can have a 1ms buffer of instructions reliably provided by the computer, vs if it has to be prepared to be on its own for hundreds of ms.
Mine haven’t been that high but once you’ve dialed in a process a lot of post mortems do come down to the Law of Unintended Consequences. We changed this and now that breaks. Usually not a straightforward cause and effect like you’re seeing.

I do spend time trying to combine or automate steps by other mechanisms though, so I am always on a team where the growth rate of the burden of the rules is a little flatter than they otherwise would be. So the rate at which people get fed up and start rallying to delete things may be a little lower for me than the mean.
https://en.m.wikipedia.org/wiki/Wheeler%E2%80%93DeWitt_equat...
It is astonishing to me that people click ads in general, but especially ads in a game. At least ads on websites, you were probably just mindlessly scrolling…
If you can count the clock cycles it takes to execute your code and it’s the same every time then it’s realtime.
Guthib: GitHub, but Dyslexic
If your identity gets stolen, you should be able to sue all the companies that had a leak.
Really exciting stuff! I can clearly see from the GitHub issue list that you do NOT intend to repeat the mistakes of LangChain, i.e. minimize bloat and abstraction level.

How would you say this compares to DSPy? At first glance, ell is very application developer focused, while DSPy is more designed as a lower level framework on top of which others can build. Curious to see how this evolves for ell. Also, prompt "optimization" as per the docs is a fuzzy term - what is being optimized exactly? Basically, if I want to minimize my time doing prompt engineering (which I hate), is ell the framework for me?
Yep:

"Flipper Zero has a built-in library of signals for common TVs, ACs, projectors, and stereo systems brands. This library is regularly updated with new signals, thanks to the Flipper Zero community's active contributions to the IR Remote database."

(from the flipper zero homepage)

I've successfully used mine as a "TVbGone", switching off all the TVs in a bar...
I did not want Java-syntax, that was an order from management (Sun as well as Netscape; Bill Joy for Sun).

Java applets could not interact with HTML at all, just render within a rectangle. They were in the plugin prison, where Flash shanked them nicely due to better tooling and innovation from Macromedia (bought by Adobe).
I'm not sure if simply offering a brand's logo would be trademark infringement.

Years ago someone contacted me at the company I worked for claiming in some sorta pseudo legal language that we couldn't have one of our competitor's logos on our website. We had it on a promotional page comparing features across similar products.

Turns out we can do that in the US.
A “real” parallel port provides interrupts on each individual data line of the port, _much_ lower latency than a USB dongle can provide. Microseconds vs milliseconds.
Not sure if your car example was meant to be general or specific, but Lemon Laws are extremely common across the states and are very easy to take advantage of without needing to retain a lawyer. For example, in Texas you fill out a form, pay a $35 filing fee, then bring your evidence to mediation.
The adult educator figures in 1958's _Danny Dunn and the Homework Machine_ had a pretty similar conclusion regarding automation as a demonstration of domain knowledge. The interesting thing is that this view is pretty rare when it comes to business domains.
Yes they get reviewed with each update [1]. That is probably the reason why ublock origin versions are delayed on Firefox compared to other stores.

[1] https://support.mozilla.org/en-US/kb/recommended-extensions-...
The mystery of the cover letter – Why do recruiters still ask for them?
Ask HN: What apps / platforms inspire you? Who do you learn design from?
I'm trying to get better at design, which is really challenge for someone like me with limited aesthetic sense. It really helps to learn by example -- by studying what others have done. Most of the "Design Inspiration" websites seem to be aimed at marketing type sites, but I'm really looking for application or platform design inspiration. This is a community of builders who build just those types of platforms, so it's a logical place to ask:

Which apps, websites, or platforms do you look to for design inspiration? Who do you think really nails both user experience and visual design? Which platforms manage to both look beautiful and work great?
Firefox's reading mode is a godsend.
Nearly everyone's data has been leaked already. Any strong protections would only protect people who haven't been born yet imo.
There's only one a few projects I know of that provide formal proofs wrt their real time guarantees; sel4 being the only public example.

That being said, vibes and kiss principle can get you remarkably far.
Google basically destroyed itself when it decided to become an ad network rather than a dumb pipe you pay to access. You have to pick a base to sell to. Selling to two different bases at once (advertisers/seo and actual users) means both resent you and neither respect you.

When google gets split up the whole world will cheer.
I’m pretty sure in the grand scheme of things the Forbes family is still perfectly OK with the association
How to save your company with a license change with Tyler Jewell [audio]
Kernel compiled with the option enabled (vs needing to apply the patches yourself and compile, so much easier for a distribution to provide as an option), and then the usual scheduler tools (process requesting realtime permissions, or a user running schedtool/chrt/whatever to run/change the scheduling class for processes).
Yeah, if you have a shared secret, HMAC is the way to go.

It's also super simple: It's almost literally just concatenating the secret and the message you want to authenticate together, and take an ordinary hash (like SHA256) of that, the rest of it is just to deal with padding.

It's super intuitive how HMAC works: If you just mash secret and message together on your side, and get the same answer as what the other side told you, then you know that the other side had the secret key (and exactly this message), because there's obviously no way to go from SHA256 to the input.

HMAC is also useful if you want to derive new secret keys from other secret keys. Take an HMAC with the secret key and an arbitrary string, you get a new secret key. The other side can do the same thing. Here's the kicker, the arbitrary string does not have to be secret to anyone, it can be completely public!

Why would you do that? Well, maybe you want the derived key to have a different lifetime and scope. A "less trusted" component could be given this derived key to do its job without having to know the super-secret key it was derived from (which could be used to derive other keys for other components, or directly HMAC or decrypt other stuff).
> Khronos already mentioned in a couple of conferences that there will be no further work improving GLSL

Unfortunately, HLSL isn’t an open standard like GLSL. Is it Khronos's intention to focus solely on SPIR-V moving forward, leaving the choice of higher-level shader languages up to application developers?
It's 2024! Please avoid writing SSH commands like that.

Instead, configure your ~/.ssh/config with LocalForward, RemoteForward, and ProxyJump. This can save you a significant amount of time, especially when using ssh, scp, or rsync to transfer data from a remote server that requires multiple intermediate SSH connections.

e.g:

Host jump-host-1
HostName jump1.example.com
User your_username
IdentityFile ~/.ssh/id_rsa

Host jump-host-2
HostName jump2.example.com
User your_username
IdentityFile ~/.ssh/id_rsa
ProxyJump jump-host-1

Host jump-host-3
HostName jump3.example.com
User your_username
IdentityFile ~/.ssh/id_rsa
ProxyJump jump-host-2

Host target-server
HostName target.example.com
User your_username
IdentityFile ~/.ssh/id_rsa
ProxyJump jump-host-3
LocalForward 0.0.0.0:8080 0.0.0.0:80
RemoteForward 0.0.0.0:9022 0.0.0.0:22

# after this:
# - you can ssh/scp/rsync to your target-server via an alias
# - forward traffic FROM port 80 on your target-server to port 8080 on your local machine
# - forward ssh requests TO port 9022 on your target-server to port 22 on your local machine
# - remember, for LocalForward & RemoteForward :
# + left is target-server
# + right is your local
# + use 0.0.0.0 instead of localhost or 127.0.0.1
OMG! I was getting similar GitHub notification emails, saying detected vulnerability in your repo, but never figured it out as fake before this news, anyway I never clicked because I'm a lazy programmer :), once it's written it's written I do rewrite the code but don't find bugs and fix in my code. :D
You can’t generally change anything about this kind of culture unless you’re in charge of a large department, but it’s still worth understanding how it plays out because you’re going to be affected.

https://raw.githubusercontent.com/lorin/resilience-engineeri...

This one diagram neatly captures tension between infosec/devops/management/engineering/qa at most organizations. If you know who has the most power, how the executive suite evaluates liabilities, etc, you can guess which gradient has the most momentum, and maybe even start a countdown to disaster when deviance is too normalized for too long.

Anyway, grassroots “we need more tests” stuff can’t actually hurt, but other stakeholders can always make sure it won’t help. Safety/quality is an org responsibility, and it requires cooperation. Only someone who can hire/fire department heads can really create the necessary conditions. One of the biggest red flags is leadership that acts like it’s one group’s responsibility, because that’s such a naive POV that no one senior would really believe it, and most likely someone is about to be scapegoated.
How does 'moderate positions now would be extreme in the 90s' act to bolster that contention, without the unsaid requirement that 'any included tolerance or added human rights that didn't exist more than a decade ago means de-facto left-wing Overton movement', which precludes any democratic society from having the Overton move right?
The accounting people are annoying because they keep using confusing terms to explain math. Or it is a kind of gatekeeping.
Tiny Awards
> For my particular use case, the charting aspect left a few things to be desired - once I grouped campaign donations by contributor, I could only see the first 10 rows in the AI response, with no option to expand the output.

Insert it as a table on the page (you should see a button), it will then print the whole table result from that query into the spreadsheet. Also, you can check the SQL first and validate it, then print to table after that.

Try a few million rows and see what happens!
Most likely cities based on my reading of the report and then asking a computer model to verify (I grew up in TX)

Houston – Largest city in Texas (South Texas)
Dallas – Major city in North Texas
El Paso – Major city in West Texas
San Antonio – Major city in South Texas
Austin – Central Texas hub
Fort Worth – Large city in North Texas, close to Dallas
Corpus Christi – Major coastal city (South Texas)
Lubbock – Large city in West Texas
McAllen – Important city in South Texas (Rio Grande Valley)
Arlington – Substantial city in North Texas, near Dallas
The Paradoxical Efficient Market Hypothesis
A flight search engine that combines flights from different airlines? (2014)
Triplit Introduces Offline Mode
I have no misconception of isolation. I studied postgraduate marine biology before following the money into biotech, and have about a dozen friends in state environmental agencies.

There would be some consequences, but within limits. The earth wouldnt stop spinning and explode. There would likely be some marginal impact to migratory birds and local fishery, but it wouldn't cause mountainous in Tibet to go extinct or anything like that.

Anyways, Costal wetlands usually change constantly under natural conditions. Most of our static wetlands are already extremely unnatural, because cities and states have gone to great lengths to modify them in some ways and keep them from changing. They are about as natural as central park or a zoo.
Kunal Shah's Delta 4 theory of successful startups
>Course Start Date

>This year there are 14 classes scheduled (one per week):

>The classes start on Thursday, September 26th, 2024.

>The classes end on Thursday, January 9th, 2025.

Syllabus:

Introduction to the Class, Security, and Networking

Finding Computers, Scanning and Basic Network Analysis

Getting Access. From People to Vulnerabilities

Detecting Intruders in Your Server

A Game of Deception

Privilege Escalation, Persistence, Side-Channel Attacks

Virtualization and Threat Intelligence

Binary Exploitation and Fuzzing

Reverse Engineering

Automating Attacks with Malware

Manual and Automatic Detection of C&C Channels

Web Attacks

Advanced Web Attacks

Pretty interesting. I always wanted to know a bit more about CS. I think the opportunity just arrived. Thanks, OP.

https://cybersecurity.bsy.fel.cvut.cz/docs/syllabus/
I use mine to get into my friend's apartment building (after cloning his key fob) so he doesn't need to come let me in.

I would have expected the Flipper to be pretty good at that, but it manages to crash while emulating the key fob like a third of the time.
Lincoln Battalion
Alejandra: The Uncompromising Nix Code Formatter
I consider myself bit techsavy knowing Linux and basic scripting.

But does anyone have a resource or link that explains the idea to make a service which OP shared here?

Because frankly, I'd feel lost reading the code from one file at a time without knowing where to start.

Plus it's written in Go which I have I am not familiar with.
Have you tried photopea.com ?
You should send that teacher an email today! They don't hear often from their past students
FYI, a third party archive link is still preferable for some, as gift articles on nytimes.com still require javascript to be enabled.
Also keep an eye out on the limit - we default to 10,000 to keep it snappy but if you want to make it larger its a click away. The "summarize table" button should auto limit to 1B+ rows.
Whisper.cpp and ChatGPT === Interview Helper?
Using whisper.cpp's stream build I used a few keywords to decide when to send what data to chatGPT which is then written back to your terminal. Crazy with the $150 per Interview web application solutions I saw in the past.

It's as simple to use as running a build and run command.
Inter Font Update: Don't Rely on Google Fonts for Hosting
Wait, so should casual desktop Linux users try this out too? I assumed there must be some trade-off to using RT?
The site is broken for me on Safari (Mac), works in Chrome.
Thanks for reporting! Taking a look now.
> Null-routing Cloudflare is also going to do a fair bit of collateral damage to the people of the 7th most populous state on Earth though.

I wish... That sort of massive economic damage is exactly what this country deserves. It's gotten to the point I'm hoping Trump wins and sanctions this place for stealing millions from american companies via arbitrary fines.
DeafSpace architectural guidelines (Gallaudet University)
This is a simple overview of a concept many people here will be unfamiliar with. If you search DeafSpace, you'll find more, including some academic research papers.
Huge congrats on the Launch ! You guys crushed it with all the thought and hustle behind creating such a valuable tool. Wishing you nothing but success on the ride ahead!
> It also supports the conclusion that it is not actively transmissible between humans, yet.

Sorry, I'm not following. How does a high level of prevalence show a lack of virality?
Book is not enough though. Fundamentals is hard ! Knowing is different from mastering.
That depends on system design. Older systems tend to be combined systems, unless they've been reworked to separate stormwater. If you live in or near somewhere that often has sewage outflows in heavy rains, chances are it's a city that urbanized before WW2 and has combined sewers.

Sanitary sewers also tend to be leaky, rain will result in surface water entering the sanitary sewers and larger flows into the treatment plants even if storm drains are routed elsewhere. You might get some filtration from soil though. If your city only very occasionally has sewage outflows in heavy rains, it's probably from ground inflows rather than combined sewers and there may also need to be a second trigger such as power loss.
SSDs still degrade, though - Optane was mooted for something like this, but still ended up being too expensive and not good enough at either (unprofitable) in the end.

Pushing 10GB/s on an SSD with 1000TBW write endurance would kill it in ~ 100000s, or a little over a day of continuous usage - and I'd expect a GPU probably would come kind of close.
Me either :)

But it'd be nice to ditch the magnetic storage someday.
Skyvern is a great name, very evocative. Typical arrogant Google, downloading trash to the user without consent.
I'm struggling to think of definitions of these terms where this sentiment might seem coherent
How is this different or worse than any other social media platform? again, this feed is far easier to curate than any other social media app.
Why would a phone number be useful as a permanent ID for a pet? What if it is rehomed or the owner changes their number? A UUID with a central database or a public/private key with a decentralized database are much better solutions for that.
Apple Intelligence is now live in public beta. Here's something about it
Can you believe the polls? It depends
It doesnt appear as if the cops generated any sexually explicit AI images of an underage girl. Is this accurate? Is there any legal precedent about AI CSAM yet? While that sort of content is of no interest to me I've been wondering about the ethics of it. How is it different than reading Marquis de Sade or William S. Burroughs (both have written very explicit scenes of violent and sexual abuse of children). Try reading the most fucked up part of Naked Lunch in a Walmart Subway sometime. It's a hoot.
You are not wrong that this is puzzling, especially when viewed through the perspective lens of a professional with background in these areas (10 years).

There are many red flags which beg questions.

That said, I stopped taking them at their word years ago, this isn't the first time they've had dubious announcements following entirely preventable failures. In my mind, they really don't have any professional credibility.

People in the business of System Administration would follow basic standard practices that eliminate most of these risks.

The linked post isn't a valid post-mortem, if it were it would contain unambiguous details of the timetables and specifics, both of the failure domains and resolutions.

As you say, a network connector could mean any number of things. Its ambiguous, and ambiguity in technical material is used to hide or mislead most times which is why professionals detailing a post mortem would remove any possible ambiguity they could.

It is common professional practice to have a recovery playbook, and a plan for disaster recovery for business continuity which is tested at least every 6 months, usually quarterly. This is true of both charities and business.

Based on their post, they don't have one and they don't follow this well known industry practice. You really cannot call yourself a System Administrator if you don't follow the basics of the profession.

TPOSNA covers these basics for those not in the profession, its roughly two decades old now, it is well established, and ignorance of the practices isn't a valid excuse.

Professional budgets also always have a fund for emergencies based on these BC/DR plans. Additionally, using resilient design is common practice; single points of failures are not excusable in production failure domains especially when zero-downtime must be achieved.

Automated Deployment is a standard practice as well factoring into RTO and capacity planning improvements. Cattle not Pets.

Also, you don't ever wait on a vendor to take action. You make changes, and revert when the issue gets resolved.

First thing I would have done is set the domain DNS TTL to 5 minutes upon alerted failures (as a precaution), and then if needed point the DNS to a viable alternative server (either deployed temporarily or running in parallel).

Failures inevitably happen which is why you risk manage this using a topology with load balancers/servers set up in HA groups, eliminating any single provider as a single point of failure.

This is so basic that any junior admin knows these things.

Outlandish workarounds only happen when you do not have a plan and you are dredging the bottom of the barrel.
Rad! Yes, please keep me in the loop!
They published 2 of the packet captures from Wireshark on Github

https://github.com/GreyNoise-Intelligence/2024-09-noise-stor...
It's only ambiguous if you let it be. The rest is just implementation details.
I'm big on #2 and #3 myself. I'm willing to accept that there are windows of time they can travel to with little risk (timelines, people, events, etc.). Also, the idea that proving time travel is possible by visiting people in previous times would be potentially dangerous or impossible (any uncontrollable variables lead to disbelief of individual).
I think the npm repos would like to have a word with you. Sure glad we've never had a cryptographically signed malicious package delivered via npm install