skysight-inc/HackerNews huggingface dataset:
True. When I generate articles with LLMs I do two things:

1. I seed it with a conversation thread like this one, with many points of view grounded in human reactions, and

2. I ask it to give me 5 different styles, just one phrase for each, then I choose the style I prefer. You can also ask it to imitate known authors.

The result is a combination of grounded analysis (and debunking) formatted and compiled in a nice style. LLMs are great at doing this, the resulting text is better reading than the comment thread or the original article. I don't rely on the model for debunking and debiasing the source, but it is a good wordsmith.

Here I prepared a sample written in Onion style, made me laugh once

> Amazon's Alexa now responds to all queries with, "I'm not an AI, I'm just a very small woman living in your speaker. Please don't leave me."

https://claude.site/artifacts/24cd0c1b-2077-4220-a845-cf371e...
A kind suggestion - add links to Apple / Google Store so apps are easier to find and download
#APIGovernance #AIIntegration #EngineeringLeadership #APIDevelopment #AIinAPIs

This piece explores the impact of artificial intelligence on API governance and examines potential AI applications for enhancing the developer experience.
Discover the rich world of Eastern web novels through our AI-powered platform. Enjoy seamless translations of popular genres from China, Japan, Korea, and more. Immerse yourself in Eastern literature with cultural context and personalized recommendations.
I remembered European Southern Observatory employing optical interferometry on the ground. And indeed it does: https://www.eso.org/public/news/eso1905/
Do you mean, don't consider accessibility, security and privacy because statistically speaking your 100 customers won't care about those things?
When you have more micro-services than users.
For B), in addition with the fact that a company can't reduce your title or compensation as agreed in your employment contract without your agreement, I can easily guess that in this case it was a proposition of change to accommodate for his health condition.

That it looks like that he refused as the proposition looks unsolicited.
Did you read the article ?

They were severely understaffed, and essentially were forced to do a half-assed job because of a storm. Reading the article, it feels as if they didn't even know if the explosives were going to destroy 1,2,3 or all pipelines. They were just 6, with only 4 divers, one of which was a 30yo woman.

They didn't have a large enough time window, they didn't have enough funds, so they did something halfway.
Or like the actual title of the blog entry?

> We have lift-off! Element X, Call and Server Suite are ready!

Just some url/tag parsing/generation gone wrong.
> I think is designed as purely like a "don't forget about this" type of measure

I believe this to be the correct way to see the "feature". While annoying, it's not bad to be reminded of sensitive shit you have installed. A month seems reasonable to me, but perhaps and override ("don't ever remind me any more") should be available.
Red flag #3: "Github Security Team"

A legitimate GitHub email would never mis-capitalize the company name like that. It would be GitHub, as shown in the footer that the attacker does not control.

OTOH, this is a very common mistake. The article alternates between the correct GitHub and the incorrect Github. So it would be easy to not notice that error.
Seems like you've saved me listening to a bunch of garbage. Thank you, kindly!
I just use the github registry, but I've been paying for their personal pro subscription for years now so it wasn't really an "additional" cost for me.
Guilty! I spent so much time recently asking myself and trying to optimize my app and stack:
- what if people upload files that big, what about the bandwidth cost?
- what if they trigger thousands of events X and it costs 0.X$ per thousands?

Fast forward months, it's a non issue despite having paying customers.
Not only I grossly exagerated the invidual user's resources consumption, but I also grossly exagerated the need for top notch k8s auto-scaling this and that. Turns out you can go a long way with something simpler...
Now that I've seen the wording of this prompt, it sound like there is another API that can be used that will not trigger this prompt?
The "system private window picker"? Sounds like a way to allow an app access to a record a single window, but built into macOS, is that true? I can't find anything about it with this wording.
Not disclosing this only really benefits them if it's a viable means of detection and they expect to use it in anger one day.

(viable in the sense that it's no use if it only works when a stealth plane blocks line of sight between ground detector and satellite)

By disclosing it, they reduced confidence in the military of multiple adversaries in the public eye and potentially caused them to spend to money to investigate/fix.
https://archive.ph/fNpSR
At my cottage... Used to pay $60 for 30 Mb/s fixed LTE. Now I pay $60 for min. 80, usually 200 Mb/s.
> Consuming berries, tea, and red wine may reduce the risk of dementia

"some drink to remember, some drink to forget" Hotel California
It would help if you tried Notebooklm by Google. It does this, you can upload a document/PDF whatever, and ask questions. The model replies to you giving also a reference to your material
spicymaki's comment is just pointing out how some people who talk big about equality can be pretty crappy themselves, which kinda makes it hard to take them seriously.

We definitely need rules against discrimination at work and ways to deal with it when it happens. People should absolutely speak up if they see or experience discrimination.

But the thing is, real kindness and respect should be at the heart of all this. We need both the rules and people actually being decent to each other. It's not one or the other, it's both; hence the false dichotomy.
If that optimization is mere hours of work, I would go for it outright. BTW when you have an overwhelming wave of signups, you are likely to have more pressing and unexpected issues, and badly lack spare hours.

Usually serious gains that are postponed would require days and weeks of effort. Maybe mere hours of coding proper, but much longer time testing, migrating data, etc.
The Swedish visa system is a compromise, at least when I moved here 10+ years ago.

My first work visa was tied to the company who sponsored my move, it lasted for 2 years and in that period if I changed jobs the new employer would need to sponsor me as well. After 2 years I renewed my work visa, this 2nd visa is not tied to an employer and I could freely move jobs.
On clusters of non-uniform machines, running some benchmarks could be interesting to inform workload placement. I suspect the more useful info will be aggregated CPU, file, and persistent storage performance, but depending on use case, you might want to go deeper.

Canonical's MAAS (disclaimer: I worked on it) could select physical nodes by GPU presence for some workloads.
I like it much. It goes well with Premature celebration from startupers. "We raised 100M USD, we made it!", when the company is on the verge of collapse every day and is losing 100M USD per year and has no business model rather than buying something 2 USD and selling it 1 USD.
So how exactly do I get ESS running on my TrueNAS? Cant seem to find straight answer on their page.
[caveat: not read the text because if you click the partners link onthe nag box, it looks like I need to object to each “legitimate interest” separately and I've not got time for that – congratulations darrenhorrocks.co.uk on keeping your user count lower, so you don't have to design for higher!]

The problem often comes from people solving the problem that they want to have, not the ones that they currently have. There is a pervasive view that if your site/app goes viral and you can't cope with the load, you lose the advantage of that brief glut of attention and might never get it again, if there is a next time some competing site/app might get the luck instead. There is some truth in this, so designing in a way that allows for scaling makes some sense, but perhaps many projects give this too much priority.

Also, designing with scaling in mind from the start makes it easier to implement later, if you didn't you might need a complete rewrite to efficiently scale. Of course keeping scaling in mind might mean that you intend a fairly complete redo at that point, if you consider the current project to be a proof of concept of other elements (i.e. the application's features that are directly useful to the end user), the difference being that in this state you are at least aware of the need rather than it being something you find out when it might already be too late to do a good job.

One thing that a lot of people overengineering for scale from day 1, with a complex mesh of containers running a service based design miss, when they say “with a monolith all you can do is throw hardware at the problem”, is that scaling your container count is essentially throwing (virtual) hardware at the problem, and that this is a valid short-term solution in both cases, and until you need to regularly run at the higher scale day-in-day-out the simpler monolith will likely be more efficient and reduce running costs.

You need to find the right balance of “designing with scalability in mind”, so it can be implemented quickly when you are ready, which is not easy to judge so people tend to err on the side of just going directly for the massively scalable option despite the potential costs of that.
Plus it also supports federation. Oh, and it's open-source.
I read it just now because of this comment and it was a joy! I recently read the history of the mbta book, which helped me understand the old names of lines and stations. The fictional network has a few connecting lines that never existed, but every line they actually ride and every station they visit is (or was) real.

The story is very short, highly recommend.
Looks crisp on my iPhone SE 2020, and scrolling does not make it lag - something that happens frequently on HUGE images encounter. Didn’t look at the media queries but I’m happy the default/broken state is the one easily accessible.
I wanted to improve my communications. I took a class in Coursera, and it had a test. I did the test myself, and then asked a friend to do the test exactly like this (as if it was me). I also asked him to NOT be nice and/or diplomatic (truth-beauty-goodness <--just pick truth). We got very close marks, which meant that a) I know myself pretty OK, b) my friend has identified me well/hasn't misunderstood my intentions in life, etc. c) I'm an asshole :) (on the truth-beauty-goodness, I go 100% truth).

In a tangent of that tangent, I was listening to a podcast, and someone said something along the lines of: "love is when you want the other person to end up in Heaven". For me, truth is the path. Beauty with lies, and goodness with lies are the short-way-home.
> Same addr and routes as before

But same addr is the problem we are trying to solve in the first place. Using your IP-new proposal (let's call it IPv5): If every IPv5 addr is just a padded version of the same IPv4 addr, then once IPv4 addresses are exhausted the IPv4-mapped-into-IPv5 addresses are also exhausted.

At that point you need to start handing out IPv5 addresses to hosts without an IPv4 address. And then, how does a IPv5-only host talk to a IPv4-only legacy host? That's the fundamental issue!

The same addr thing only buys you time until the address exhaustion becomes real.
AUB Medical Center switched all Pagers before Incident
I’m curious why this is a separate app and not an update to the old app?
You must have read a different blog post because I don't see anything arguing agsinst accessibility, security or privacy in this one?
Sometimes it can be like "our file sizes are larger, but look at this big list of cool features".
Their website has a good few images: https://cavernautes.nxigestatio.org/10-aout.html
totally agree with your view,

the big design upfront moment again, maybe because of the current economy, we need focus more on be profitable in short term, i think it's great and always focus on optimize for now, and test for specs (specs in sense of requirements of customer)
There are already cases of Internet connectivity issues due to overloaded CGNAT. I know for a while I could only visit IPv6 websites, IPv4 technically works but the amount of packet drops meant that my IPv4 internet speed was only about 15KB/s!

It's the whole reason why I discovered a DNS server that synthesizes AAAA records, for websites that actually support IPv6 through their CDN. [0]

> As you said though, those users can reach v4 websites.

Therefore, the question is: Can those users really reach IPv4 websites?

Mind you, I don't expect the CGNAT-overloading issue to relieve over time -- unless we deploy IPv6 everywhere ;)

[0]: https://gitlab.com/miyurusankalpa/IPv6-dns-server
I'm glad that they've managed to find another corporate sponsor (as well as fly.io returning).

Gleam is such a lovely language to use, and I really hope it catches on.
Regain Lost Android Data with FoneDog Android Data Recovery

FoneDog Android Data Recovery is a comprehensive tool designed to retrieve deleted data from Android devices. It offers a straightforward solution for recovering a wide range of file types, ensuring you can reclaim lost information with ease.

Message Recovery: Recover deleted text messages, SMS, and WhatsApp messages, with the option to save as CSV/HTML files.
Call Log Restoration: Retrieve lost call logs, including details like phone numbers, names, dates, and duration, and export them to CSV or HTML formats.
Photo Recovery: One-click recovery for photos from the internet or those taken with your device's camera, supporting various formats like .jpg, .png, .gif, .bmp, .webp, .tiff, and more.
WhatsApp Data Recovery: Quickly restore deleted WhatsApp conversations, photos, audios, and videos to avoid data loss.
Video and Audio Recovery: Get back deleted videos, songs, recordings, and other media files.
Document Recovery: Recover deleted documents in formats such as Word, Excel, PPT, PDF, HTML, Zip, and RAR.
Step-by-Step Usage Guide:

Launch the Software: Open FoneDog Android Data Recovery on your computer.
Connect Your Device: Connect your Android device to the computer and wait for it to be recognized.
Select File Types: Choose the type of data you want to recover.
Scan and Preview: Initiate the scanning process and preview the recoverable files.
Recover Data: Select the files you wish to recover and save them to your computer.
Technical Specifications:

Supported Devices: Compatible with a wide range of Android smartphones and tablets.
Supported Data Types: Text messages, call logs, photos, WhatsApp data, videos, audio files, and various document formats.
Homepage: https://www.fonedog.com/android-data-recovery/
Element X is a totally new implementation, done in Rust. It's fast and nice but for now some features are missing compared to the old one.
No, your only 100 customers. And here your customers are not huge corporations with thousands of actual users each, but just individual users.

But certainly, you should care about security and privacy even if you have just one customer.
Mine is dead simple. I just have a repo with all my ansible in it, and have a nested module called "service". It takes in an app name, domain name, backup schedule, and a true/false on whether it should get a public nginx setup.

Then it finds the compose file based on the app name. It templates in the domain name wherever needed in the compose file, and if it's meant to be public it'll setup a nginx config (which runs on the host, not in docker). If the folder with the compose file has a backup.sh and restore.sh it also copies those over, and sets up a cron for the backup schedule. It's less than 70 lines of yaml, plus some more for restart handlers.

The only bit that irks me is the initial tls/ssl setup. Certbot changes the nginx config to insert the various certificates, which then makes my original nginx config out of date. I really like nginx and have used it for a long time so feel comfortable with it, but I've been considering traefik and caddy for a while just to get around this.

Although another option for me is to use a cloudflare tunnel instead, and then ignoring certificate management altogether. This is really attractive because it also means I can close some ports. I'll have to find some time to play around with traefik and caddy first though!
Show HN: Free Chrome extension to bring your knowledge base where your work is
We have built a free extension for Chrome that integrates with your knowledge base on Zendesk, HelpScout, or HelpCenter.io so you can access your content from anywhere and integrate it with OpenAI for instant answers. The extension also works inside Gmail to automate writing emails and email replies using the content of your help center.
Apple presumably knows their own apps aren't malware?

If Apple wants to record your screen they don't need to use Quick Time Player to do it. They can bake it into the firmware.

If you don't trust Apple not to randomly record with Quick Time Player, you shouldn't be using macOS.
You assume the scammers want everyone to fall for this trick.

The reality is different - they leave these huge red flags so that people who aren’t very bright or careful will fall for it.

That is the same reason why scammers put spelling mistakes in emails - not because they don’t know how to use spellcheck, but because they want to filter out those who would spot these mistakes.

They want to scam careless, gullible, „stupid“ people, not someone who is careful enough to spot security red flags.
Indeed, which makes their failure even more glaring, strengthening the argument that the mobile OS market is now an impenetrable duopoly.

Nokia and BlackBerry found that out as well.
I want Apple to have competition, but I also don't want Apple to lose its unique advantages, which mostly come through the tight vertical integration between hardware and software.

If I don't want tight vertical integration, I could easily buy any number of Android devices.

EU regulators want to compromise vertical integration, which means depriving consumers of a legitimate choice many of them make.
It can get minified/optimized by a tool. The "source code" is what you immediately edit, but you might not distribute that version, only a "binary" derived from it.
I really hope they can reduce the amount of time it takes to start a "room" / add a person to contacts. Its really a deal breaker only those with strong federation desires will wait for element to load.

Matrix is mostly a victim of the government forks taking up their time in different directions instead of having just one app like signal.
This topic lacks nuance.

I agree in focusing on building things that people want, as well as iterating and shipping fast. But guess what? Shipping fast without breaking things requires a lot of infrastructure. Tests are infrastructure. CI and CD are infrastructure. Isolated QA environments are infrastructure. Monitoring and observability are infrastructure. Reproducible builds are infrastructure. Dev environments are infrastructure. If your team is very small, you cannot ship fast, safely, without these things. You will break things for customers, without knowing, and your progress will grind to a halt while you spend days trying to figure out what went wrong and how to fix it, instead of shipping, all while burning good will with your customers. (Source: have joined several startups and seen this first hand.)

There is a middle ground between "designing for millions of users" and "build for the extreme short term." Unfortunately, many non-technical people and inexperienced technical people choose the latter because it aligns with their limited view of what can go wrong in normal growth. The middle ground is orienting the pieces of your infrastructure in the right direction, and growing them as needed. All those things that I mentioned as infrastructure above can be implemented relatively simply, but sets the ground work for future secure growth.

Planning is not the enemy and should not be conflated with premature optimization.
- sorry, replied to wrong comment...
It's also on FDroid :)
Hey, I've heard of Element X forever, time to try it :)
I can do neither.. that's kinda my point.

I have super powers on both sides, one can influence the policies and politics of my country much stronger than the other[0].

Why would I choose that side, they don't give me more rights and they don't give me any capacity to complain.

[0]: https://news.ycombinator.com/item?id=15920618
Seems like this is a paid product meant for enterprise use.
It would make sense because theyre hiring based on networking being a higher priority than qualifications.
It's a browser (chromium based) with a really nice UI that people love, I am intrigued but haven't used it because I find the requirement to create an account off-putting.
> You can disable "Require Attention for Face ID" under Settings > Face ID & Passcode. That makes Face ID far more reliable and consistent in my experience (assuming you're okay with the reduced security tradeoff).

I have had it in this mode for years. It's still very fragile and/or skittish regarding making me use my passcode. Intuitively, it feels like about 10-15% of logins require the code rather than my face.

> If you have an Apple Watch, you can also configure it to unlock your phone automatically when an obstruction prevents Face ID from recognizing your face.

That's a very expensive solution.

> Face ID works in the dark, at pretty much any angle, and requires zero interaction.

All of which apply to TouchID too.
Want to make account, no idea whats wrong because of the app forbidding landscape mode.
https://imgur.com/a/spFQ1md
> It's pretty weird that SHA-256 has been king for so long, when SHA-512/256 (which, as I've noticed people don't understand, means SHA-512 truncated to 256 bits) was there from the beginning and is immune from this attack.

A bit of a tangent, but I didn't know this, so thanks for pointing this out. It's insane to me that there's two SHA hash algorithms that result in a 256 bit string, named nearly identically, but the one is vulnerable to a length-extension attack but the other isn't. I had simply assumed that SHA-256 and SHA-512 are the exact same thing except the length of the result. Wouldn't anyone? The length of the result is right there in the name! I mean why does SHA-256 even exist when SHA-512/256 is what we should all use? Why does a single library implement an algorithm that everybody in crypto land, apparently (if you're right), already knew was broken from the start? Give the good one the short name and keep the bad one out of codebases! Come on! Crypto is hard but crypto people keep making it harder and I hate it.
I really don't think that's the case. If you ask a CEO/CTO of a startup, he would fire the guy who did the latter instead of the middle approach. Longer term stability and development velocity are very important concerns in engineering management. This is pure inexperience - it wouldn't take too long to setup for an experienced engineer anyways, they probably did it 5 times last month and have a library of knowledge and templates. I can't call a guy who isn't capable of setting up a project this way swiftly without seeing it as a problem "senior".
Encode binary data into a wildcard sub domain
Usually a good trick is to run small deployments at high logging levels. Then, as soon as there are performance issues, you can dial down the logging and get the hours of respite needed to actually make a bigger algorithmic improvement.