skysight-inc/HackerNews huggingface dataset:
For inserts yes, but for updates I've frequently seen cases where people just stuff the whole request into their ORM or document store. It is pretty easy to think "the owner can update the document" without realizing that there are some fields (that the official client doesn't set) that shouldn't be updated (like the owner or created timestamp).

The correct solution is likely default-deny auth for every single field. Then you at least have to explicitly make the owner field writable, and hopefully consider the impact of transfering this object to another user.
We can also pick other moments in time, such as the 1910s ...

Or we can look at the bigger picture. Countries vary a lot by their taxation rate, but it seems to have no correlation to their debt levels.

It seems that you can always spend a lot more than what you have in hand. The demand for public money is insatiable.
To add to u/ibash's comment, mitmproxy correctly implements a macOS network extension: https://mitmproxy.org/posts/local-redirect/macos/

I assume you'll have to install a root cert in order to introspect HTTPS traffic though.
You want the curve of total attention to be always above a baseline human in an unassisted car. The car can do some attention and the human can do some. But if the sum of the two falls below the threshold, you’re in trouble.
At work, we recently started conducting retrospectives using Miro, but I found it to be a bit inconvenient for our needs. About a month ago, I stumbled upon Reddit post where someone shared an interesting tool for retrospectives. Inspired by that, I decided to create something similar but with a key difference—making it open source.

I'm excited to introduce Scrumlens, an Agile Retrospective Tool. The project is still in its early stages, with about a month of development behind it, and there's a lot more to come. I'm passionate about continuing to build and improve this tool, and I’d love to get your feedback and contributions.

Check out the project on GitHub: https://github.com/scrumlens/scrumlens
The Guide to Prompting
First one did the work, second one is the professor of the lab they are in.
From my understanding this is using the input images to render a new image from an arbitrary viewpoint. There may be a 3D reconstruction in the pipeline but this package produces a rendered image as the output. Anyone else see it this way? It’s very fast and cool for sure.
Similarly, this article starts with this weird disclaimer:

>We realize, however, that [vendor] neutrality can have its limits when it comes to real-world use cases.
So you are saying there is another Google API which provides the same functionality? I don't understand. If there is, why isn't this article simply suggesting people use that?

(Otherwise, I feel like you are just muddying up the discussion by trying to focus on the branding of specific APIs on different platforms rather than on what functionality is being offered, as if it matters what the APIs are called. Again: if I want to run an app--as many people do--which can incrementally slurp up all of my photos from Google Photos to store elsewhere, I should get to do so, the same way Google writes an app that slurps up all photos in my iOS photos library. If Google wants to shut down access to photos stored in their system without at least acknowledging the hypocrisy, that's pretty awful of them.)
How would GitHub ensure that when it does not have a clear idea of "building" an arbitrary project?

You get those with publishing platforms which have semantic "build" steps (eg. F-droid, Debian, RedHat, and certainly newer things like Nix).

As a public service, Launchpad.net has been doing this almost since inception, but especially since PPAs were created.

But this is easily beaten: witness all the binary blobs inside automatically built packages. As long as maintainer controls the build recipe, and that recipe supports usual build functions (like "add this file to package"), they can simply insert a binary blob without any source code for it.
The Snake Oil Salesman's Promises for Tesla's Full Self-Driving AI
No, the laws putting people in prison are not vague.
Why would I drive 6.5 hours when I can just get dropped off by the airport, whiz through Clear + TSA Precheck, hang out at the Delta lounge where I get free food and alcoholic drinks, hop on the plane and be there in an hour and a half?

Especially since it is essentially free?

Besides I work remotely and we have been down to one car since mid 2020. If either one of us are going by our self, we wouldn’t want to leave the other without a car.

As far as price insensitivity , what are the chances that the cheap routes are going to be available when and where the business traveler needs to go?

I assure you that the travel policies that your company uses for you aren’t the same ones they use for their executives.

I doubt very seriously that Andy Jassy or Bezos had their expense report rejected for a $3 stick of deodorant they charged to the room like what happened to me when I was at AWS (cloud consulting department - ProServe).

But even Amazon didn’t make you choose the cheapest route and I could always choose thier “most preferred carrier” - Delta - even if it did cost more.

I could also choose non stop vs layover if it costs more.
I think one thing this blog post did not mention was the historical context of moving from uncompressed to compressed traffic (using zlib), something I worked on in 2017. IIRC, the bandwidth savings were massive (75%). It did use more server side CPU, and negligible client side CPU, so we went for it anyways as bandwidth is a very precious thing to optimize for especially with cloud bandwidth costs.

Either way the incremental improvements here are great - and it's important to consider optimization both from transport level (compression, encoding) and also from a protocol level (the messages actually sent over the wire.)

Also one thing not mentioned is client side decompression on desktop used to use a JS implementation of zlib (pako) to a native implementation, that's exposed to the client via napi bindings.
> as opposed to a bulky ugly opaque plastic box

I've never heard a single person complain about wall/ceiling mounted WiFi access point. Do you really think this is something that justifies the added complexit
Surfers in a Soldiers World
One thing to note about authentication in DH-like systems is that you can derive symmetric key without authenticating the parties, establish secure (but unauthenticated) channel with the resulting symmetric key(s) and the do authentication inside that channel in a way that will only succeed if the symmetric key used by both parties is the same (this is called channel binding). For example SSH2 and many Active Directory related protocols do this.
This was a very interesting read. I have read a bit about the 4004 before so I knew it was strange. But the level of obscurity is mind-blowing. Now I just got the urge to see how well I would be able to make a CPU with the same transistor count. It's not that much fewer than a 6502. 8 bit would make it so much easier to program.

Thanks for documenting your work so well!
Rodney Brooks comments:

>It's getting laughable. Elon says the same thing again and again and again and again, and his system is not improving at all. He's not in the top 3 and has no chance of getting even a testing license for robo taxis.
They’d have to standardise the build system, wouldn’t they? And disallow building binaries for publication on anyone else’s infrastructure?
This zombie trope gets temporarily beaten to death in the media as a wedge issue every few months. Schools are sucking more and more selectively by demographic and generally for average Western pupils. Most people who read HN likely had or have access to private and excellent public college-prep schools. If not, then perhaps we need to steal ideas of French and Finnish schools, pay teachers more, and perhaps get boys to play outside, exercise, and socialize more.
Hard disagree given the constraints. Every bot is also consuming the Discord API and forcing 3rd-party devs, many whom aren't particularly advanced coders to suddenly deal a binary wire format would be painful especially if you needed to constantly update a proto file. Their API is also part WebSocket part HTTP and many methods doing double-duty.
Entry level retail jobs typically don’t need a lot of stuff on your resume. I remember when I was applying for my first job my dad would tell me to note things like having a reliable car. It’s mostly about if you’re actually going to show up, and if you don’t steal from them, that’s a bonus.

But don’t give up on software just because of some bad articles. Trends are trends, you only need to get one job. A lot of companies like to bring in college grads as a way to save money as they push out more seasoned people, while also bringing in new ideas and more modern approaches (for better or worse).

Also, think beyond “tech” companies. Nearly every business out there could benefit from a developer, and most don’t have anything at all.
> The extreme suspicion of commercially introduced anthropogenic agents seems a bit ridiculous in both natural ecology and the human microbiome. Prove this compound conclusively safe, but not these other ten million compounds we're just going to allow to run wild.

With endemic organisms (or viruses) they just are going to run wild regardless of how we feel about it. There's no point in banning a naturally occurring algae because excluding it from the environment is not a practical option.

The only time when we have any strong control over what organisms are in an environment is when they don't yet exist there, but we have the ability to introduce them. This is our only technical choke-point, so it makes a lot of sense to make a big deal of that decision, and probably to be quite conservative about it. You can always let the cat out of the bag later, but you can never get it back in.
Eh. It's been a minute since I worked even retail-adjacent, but nothing I've seen leads me to believe people have learned to behave themselves better in the interim, and especially not after the pandemic.

It'd be one thing if I could blame The Youth, I suppose. But mostly what I see is people my age and older, acting in ways my mother did not tolerate in me by the age of five, nor need; I had pretty well learned my manners by then.

I could credit an argument from incapacity, although I would find it as frightening as compelling. Other than that, I see no excuse, and I also had to learn young the sovereign counterargument to a bully. To see it applied in so extremely indirect and gentle a fashion, and in cases where some response evidently is due, outrages me not even slightly.
> Nuclear fission is safe, clean, secure, and reliable.

I never understood the hysteria of the anti-nuclear people. I mean, the stats are out there for everyone to verify. Even the worst nuclear disaster killed no more than 100 people[1]. Plus, the new generation of the nuclear reactor can auto shut down when the temperature keeps rising. As for the nuclear waste, we need just one football field to store all the waste even before the recycling, which can recoup 90% of the material.

I'm also aware of the argument that even one death is too many. But if we follow this argument, wouldn't we need to account for the deaths caused by the alternative energy source, like coal? And the death would be in the thousands, right? And why won't we protest that?

[1]https://en.wikipedia.org/wiki/List_of_nuclear_and_radiation_...
The 2mb case is pathological - an account on MANY servers with no local cache state (the READY payload works to only send data that's changed between when you've reconnected by having the client send hashes of data it knows.)
While the chances of getting caught are low, I wouldn't want to risk this for insurance. If you are involved in a crash for any reason I don't think they are going to cover it if you modified this stuff on purpose.
> I don't see how it changes the situation.

That's precisely my point. Mentionning someone else's "privilege" is a meaningless ad hominem.
That is interesting information.

Perhaps the answer is that both events happened - the furin cleavage escaped the lab on a precursor, which found BANAL-52 in the market.
Full story https://archive.is/Osz41
At least with Amex you can transfer to airlines and you will almost always get more than 1 cents per point by transferring to an airline.

Unfortunately, Amex’s hotel partners - Hilton and Marriott are usually horrible redemptions.

Chase -> Hyatt is the gold standard. But Hyatt has a small footprint
Windows Server 2025 previews security updates without restarts
Last I checked podman's support of docker-compose.yml was very limited to say the least. Has it changed?
Yup, IDK abt any significant aerodynamic advantage, but there is definitely an advantage in preparing for road-rash. When you get it, you won't have to go through the pain of shaving in and around your ground meat to remove the hairs while cleaning and prepping for bandaging... so it may help quicker healing
After some initial pains with colima, I tend to agree. Mostly, just needing to specify some VZ args[0] so I could run x86_64 docker images on my M-series.

Is there something in these desktop UIs that colima is completely missing?

[0] `colima start --vm-type=vz --vz-rosetta`
As someone mostly using compiled programming languages, I am perplexed about the built-in types that this new language provides.

According to https://typespec.io/docs/standard-library/built-in-data-type...:

* unixTimestamp32, but no 64-bit version

* plainDate that can be "April 10th" without the year

* DefaultKeyVisibility, OmitDefaults.. what?

I am genuinely curious how did that happen. Design by committee? Some secret use cases that leaked into specification?
I think the person is concerned with client-side compute, not just server-side compute. The article does not mention whether zstd has additional decompression overhead compared to zlib.

Client-side compute may sound like a contrived issue, but Discord runs on a wide variety of devices. Many of these devices are not necessarily the latest flagship smartphones, or a computer with a recent CPU.

I am going to guess that zstd decompression is roughly as expensive as zlib, since (de)compression time was a motivating factor in the development of zstd. Also the reason to prefer zstd over xz, despite the latter providing better compression efficiency.
The “what makes Arc different from other browsers” section is particularly funny.

> Arc is to your ex-browser what the iPhone was to cellphones. Or as one of our members said “like moving from a PC to a Mac.” It’s from the future — and just feels great.
Maybe exciting is the wrong word, but compelling is a better one.

For example, just the order of how you present information matters. Compare these two approaches:

1. "If you don't floss enough, then <BadThing> may happen. Here's tips on how to floss: A, B, C."

2. "Here's tips on how to to floss: A, B, C. Btw, this can help prevent <BadThing>."

The first is better. "Boring" information ceases to be boring and instead becomes compelling when you have a strong reason to want to know the information. Thus, it's important to hook people by giving them that motivational reason to watch/listen before you jump right into a video or article. Otherwise, you will likely only retain viewers who already arrive with their own personal motivations.
It's such a Dunning-Kruger effect. You get legitimately talented engineers who are talented enough to do a legitimately hard thing: optimizing a complex piece of code.

So, they don't realize that there's kind of another level of understanding beyond that (when to optimize vs. how to optimize)

There's also the fact that some people just like optimizing shit for selfish or even slightly nefarious reasons. Some just like doing it because it's fun. Others like it because it gives them visible and easily quantified "wins." On the rarer and more nefarious side of things, they may enjoy now having "ownership" over a piece of complex code that only they can understand....
Microsoft warns US healthcare of threat actor using new ransomware
Vivaldi's inhouse UI code isn't open source, but is visible for users to verify AFAIK.
It is for us. Our surgery has a triage system where you phone in the morning and if you need an appointment you get it the same day. I don't think it's that uncommon.

The problems are mostly concentrated in the poorer areas where they struggle to attract staff.
1. I didn't say AGI and neither did the person I replied to.

They said AI, I said AI.

But protein folding is also very much a thing humans did by playing games. Literally: https://en.wikipedia.org/wiki/Foldit

And Transformers are able to learn to use tools, so even mediocre ones can write and then invoke specialist AI.

3. To reach the quality level I specified, that of "You need a PhD to compete with this", it is only necessary to program the AI to be as capable of learning as a PhD student.

This is the standard AI researchers are aiming for, and what I was writing of.

Can they do that? Dunno, and I hope not. But I've bought some tech shares just in case they actually can, because I doubt I'll be able to keep up if that's the near future.
Interview with Richard Feldman about the Elm inspired Roc language
Coding Font by Typogram – Find Your True Love of Coding Fonts
Miller's claim rests on the assumption that the WIV would have published every virus it had collected. That's a facially odd claim--there's no research group in the world without unpublished work in progress, since even with no deliberate attempt to conceal, it takes time to write stuff up. We also know it to be specifically false here, since Deigin and some other authors found an unpublished merbecovirus in contamination of published datasets from agricultural sequencing on equipment shared with the WIV:

https://pubmed.ncbi.nlm.nih.gov/36865340/

That merbecovirus is unrelated to SARS-CoV-2; but with unequivocal evidence that the WIV had at least one unpublished virus, it's hard to reject the possibility they had two.
Makes me wonder why self-hosted Mattermost isn't far more popular...
Well, maybe not for debugging the kernel itself, but it is very useful for finding failing hardware, missing/crashing drivers and so on as a user. Call it external debugging if you will,
Swarm ships with Docker only requiring initialization and disabling access to the management ports. It is the appropriate alternative to more complex orchestration tools as it gives you things like zero downtime deployments, rollbacks, volume management, secrets, networking, logging, and can scale services across multiple machines if needed later. Check out what I did with Rove for setup as that is basically a wrapper around Swarm.
If you’re on macOS, then Orbstack is a nice alternative to Docker Desktop

(I’m not affiliated with Orbstack)
I'd figure the earliest thing anybody has run Linux on before this would be a 386. Although I suppose with this MIPS emulator ported to some other proto-processors it could go older, but just getting the hardware to do that would be a challenge.

PS: love the VFD
I want to add in case people think this is strictly a Google thing. DDG is equally terrible at finding this kind of thing. I didn't realize until I read this thread that I was suffering this same kind of issue. Its so painful trying to find on the internet.
While I love to see nuclear get a comeback from new tech ventures and commercial impetus, it's also interesting to point out how one now mostly hears crickets from the people who screamed about the energy consumption of crypto. AI has so far mainly managed to generate enormous amounts of spam sludge, pollute the already toxic landscape of social media with auto-generated garbage, and lead to a level of data prying and mass data ripping by the big tech companies that makes their previous efforts seem almost quaint.

This shit is largely what this voracious drive for more power is helping build. Even crypto wasn't this shitty, since at least its fundamental application wasn't nearly so broadly parasitic. Yet now I hear very little about uselessly burning vast loads of energy.

I guess if the companies responsible for the above trash heap are largely the same ones that hire or indirectly subsidize the jobs of so many people in the tech world as represented by a site like HN, then the whole dumpster fire is okay.

I'm also fairly sure that OpenAI, Microsoft and others would happily burn baby seals in coal furnaces if it meant powering their precious AI data needs. It's only for PR that they make useful noises about using clean power.
Another strange thing about the account... They have a little section under "Security" FAQ (lol) that says:

>"Why does Arc require an account to use?"

The answer is:

>"Here's a link to our forum that explains the rationale behind requiring an account to use Arc: Why do I need an account?"

That link goes to here: https://resources.arc.net/hc/en-us/articles/19401542261911-B...

Which... Doesn't explain why you need an account!
The catch is systemic competency
ChatPRD: Generate Product Requirement Documents
For some added pedantry: aren't all the mistakes that a professional might make, also ones an amateur would make?

In fact, it seems like an amateur is likely to run into all mistakes more often, thereby making all mistakes amateur mistakes; unless there some class of mistake that amateurs are better at avoiding?
An economy does not have a “budget” and I hate hearing this comparison. The banks have the ability to print and redefine the meaning of money, therefore whatever you think the budget should or should not be is irrelevant.
Rancher desktop is fine. I did migration within 30 minutes.
Are there other services that provide the similar offering as Cloudflare that could be switched to in case they changed policy (eg. removed the free teir)? I.E. is there any mitigation to Cloudflare lock-in?
Good luck with that. I'm sure people will respond the way you want when you call them dumb.
We used windy.com earlier this year to choose our location for the total eclipse in Texas. Worked out perfectly - great view for the eclipse, then the clouds rolled in...
Another enthusiastic +1 for OrbStack. It's fantastic.
The best way to create new countries to try different societal models is by claiming the only unclaimed territories in the world, international waters with floating cities. There are various projects going on [0][1][2]

[0]https://www.seasteading.org/

[1]https://www.ubm-development.com/magazin/en/maldives-floating...

[2]https://oceanix.com/busan/
For the explanation of hysteria: 1) Nuclear disasters are acute, traumatic events that can have drastic effects on health of people and ecosystems for generations 2) Nuclear power sounds like nuclear bombs and nuclear radiation, both of which are scary and resonate with long-held cultural fears of nuclear technology that have existed since the Cold War.

Basically, yes most fears of nuclear power are irrational. But that's part of the problem—even if nuclear power polluted in a manner similar to coal power and there wasn't the risk of acute disaster, I still think Americans would be quite wary of the technology purely due to cultural priors.
This is really lovely!