skysight-inc/HackerNews huggingface dataset:
Good question! A lot of CRMs have CloudFlare enabled with location based blocking by default, so we needed a way to spoof a local location to be able to interact with the website
You can follow peertube accounts, comment on their posts, etc, from a mastodon account. The only thing you can't do is post videos to their instance, but that's how all activity pub apps work.
> I mean isn't UK starving

No?
"don't trust the client / validate inputs" is software security 101
In my city the mayor cuts the ribbon at a new abortion clinic, so for our community being religious is an outlier.
It may also depend on optimizations. Potentially you may be able to do fewer hops but if the schedules have 1/week flights they may end up taking 2 weeks calendar time for 7 hops while 20 hops gets you there in 4 days. If the window used for the graph creation doesn't cover enough schedule time, more optimal routes may fall off the edges.
Show HN is for things you’ve made people can try which excludes most reading material and lists thereof, take a look at https://news.ycombinator.com/showhn.html
Personally I thought Seveneves was pretty good ... the most recent Neal Stephenson novel I read was "The Rise and Fall of D.O.D.O." and I loved it. As with Snowcrash, it'd make an awesome movie (if done right)!
I don't have the broader context (like the exact situation for LGBTQIA+ people in Tanzania), but...

> Yah I'm sure the African pycon was planning to ask every attendee if they are LGBT...

You're passing judgement on people you don't know, while you remain in a privileged and ignorant position. Many trans/NB/intersex people could be easily identified as such, based on their appearance/voice/etc. Even if the concern was sexuality alone (or other characteristics you could mask/hide), nobody wants to live out their life in a closet - that's also the entire point of a conference: to go there and talk to other people, to feel safe while doing so, to be able to remain yourself.

The problem space is way more nuanced than "just don't have gay sex in public lol".
Hezbollah has been firing rockets to civilian area a day after Oct 7 attack with intent to kill civilians to this day.

But a collateral from targeted attack people lose their mind. Much moral. Very righteous.
Tianocore
HTTP requests, SQL queries is not async, for that matter not even sync.
I'm supposed to end my undergraduate degree with an internship at the italian national research center and i'll have to use pytorch to write ml models from paper to code, i've tried looking at the tutorial but i feel like there's a lot going on to grasp. until now i've only used numpy (and pandas in combo with numpy), i'm quite excited but i'm a bit on the edge because i can't know whether i'll be up to the task or not
Qubes OS Summit 2024
There is but then you're using two separate libraries, that seems like a fragile point of failure compared to just using jax. But regardless since jax will use different backends anyway, it's arguably not any worse (but it ends up being your responsibility to ensure correctness as opposed to the jax team).
Hexagonal electrohydraulic modules shape-shift into versatile robots
Use a firewall and/or screen time, aka whitelist. Yes, it really sucks for a few days, but then it gets easier.
Forget ads, SEO, and social media. Everyone is so used to low-value content and spam that they won't pay attention. And even if your intent to sell your SaaS is legit, it is still spam when you are sending it into web sites that aren't interested.

Instead, think about who your audience really is - where else do they read, listen, and talk? In my experience, the best marketing happens when you can answer that question.

My favorite anecdote is that one of the successful SaaS companies I worked at grew in part due to radio ads on NPR. That worked because our market was education, and people who are professional educators tended to listen to NPR.

It can be that simple - if you reject online ads and presence as a marketing tool, what else is left? That is probably where to invest marketing dollars and energy. Be different, not part of the online noise.
Well, nor should they because those items tend to disappear from the market within months and not be widely available. So that's a feature not a bug.

You don't want to research and recommend a product from a random seller on Amazon that won't be available six months from now.

Their budget recommendations are, correctly, products that have proven to be reliable and available.
> moving power generation further and further from where it’s used opens you up to more disruption from terrorist attacks on the grid

Not arguing, just asking - how is this different from how the Internet works?
I am naive about LLM technology, in particular the relationship between base models, fine-tuning, and RAG. This particular branch of effort seems aimed at something that is of great interest to me (and I'm sure many others) which is to specialize a more general base model to know a particular domain in great detail and so improve it's responses within that domain. In the past, this might have been called an "expert system". For example, you might want to train an LLM on your project codebase and documentation such that subsequent code suggestions prioritize the use of internal libraries or code conventions over those represented by the public sources encoded in the base model.

I found the Google Colab notebook of MemoRag[1] to be of great use in understanding roughly the scope and workflow of this work. The interesting step is when you submit your domain as text to encode a new thing that requires a GPU, a process they call "forming memory"[2]. Perhaps there is some sort of back-and-forth between the base model and your data that results in new weights added to the base model. As I said, I am naive about LLM technology so I'm not sure about the details or the nomenclature. However, if this is even partially correct I'd like to understand how the "formed memory" and the base model cohabitate during inference, because this would create memory pressure on the GPU. If the memory required for the base model is M, and the formed memory is N, it's reasonable to assume you'd need M+N memory to use both.

1 - https://colab.research.google.com/drive/1fPMXKyi4AwWSBkC7Xr5...

2 - https://colab.research.google.com/drive/1fPMXKyi4AwWSBkC7Xr5...
Going into winter, I wish we were more ahead of this. It might just be a repeat of swine flu, but I'd gladly pay $25 for an extra flu shot just in case.
First of all - people are having sex at pycon. People are having sex at every convention. You might not be - but when groups of humans assemble, some of them are going to up, it's what humans do.

Do you think maybe a technical convention should be about the technical stuff? A place where technical things are the only focus and the other stuff doesn't mater - a place where technical merit rules and drives the discussion?

If so, wouldn't it make sense to hold that convention somewhere that allows everyone to display their technical merit rather than in a country that will go as far as to look at visitors social media an potentially jail them over something that has nothing to do with python?

Would you be ok with it if the convention for your technical expertise was held at a convention center owned by a logging company who didn't allow you entry to the building because of your comment here? The convention isn't going to engage in politics, and by not considering such things they've effectively banned you from participation for non-technical reasons. Wouldn't it be better if they held it across the street at the convention center that explicitly supported the right of disgusting ideals like anti-logging (but is otherwise no different)?

It turns out that sometimes defending basic rights of your organization's membership is in fact a requirement for creating a situation where technical merit rules. By not doing so, you participate in a situation where non-technical considerations are part of what tech and what engineers are allowed to make it have a major influence on the technical direction of your thing.
It surely is
Nintendo doesn’t even deserve 1%.
No Linux version prevented me from trying it, didn't even get to the account wall, who knows if there's a pay wall. Perhaps the "moat" concept was misunderstood.
Imagine if we didn't have dedicated hardware for say caching - every CPU instruction or bit of data has to be read from SSD every use.

We'd see a 100,000x slowdown I expect.

But dedicated hardware (RAM, various cache levels) solved this.

We could do the same for neural net compression if we needed to. But the question is do enough people care enough about a 2x data size reduction?
It can't be ethically sourced, because these residential users have to be tricked into violating the TOS of their ISP to be able to provide the bandwidth. Whether they are aware of it or not, they are risking losing their internet access.
I guess it's relatively easy to test, add the Firebase domain to your host file and point it to 127.0.0.1 and try to use the browser.

Sometimes things like this handle connection failures better than "never-ending connection attempts", so you might want to try to add a throttle or something too for the traffic between the domain and the browser, might also trip it up.
Huh?

They were a little funny.

I mean the guy's right. 45,000 "trailblazers"?

Not to put too fine a point on it, but that's like, what? 40-45 Marine Corps battalions?
Agreed, if I understand correctly the fix to this issue would be the following rules inside of a "match" statement in firestore.rules which is plainly documented as firebase firestore security 101:

```

// Allow create new object if user is authenticated

allow create: if request.auth != null;

// Allow update or delete document if user is owner of document

allow update, delete: if request.auth.uid == resource.data.ownerUID

```
Why stop there? EVERYBODY deserves healthcare and education too!

I would say in a perfect world everyone should have all of these things.

The problem is that the marginal cost to giving each of these things to everyone increases to infinity as we approach 100% of a sufficiently large and diverse population. For example, creating a city water system should efficiently deliver clean water to a large proportion of an urban population. However, not everyone lives in an urban setting and delivering clean water to remote populations can get astronomically expensive.

As rational citizens we must acknowledge this unfortunate reality and figure out how to deal with it fairly and equitably. Profit seeking enterprise has been astoundingly effective at driving down these marginal costs for a whole host of goods for centuries. Many of these things you mention only exist because profit seekers developed and distributed them!
It doesn't help that there's a strong social stigma that males attempting to interact with young children in any fashion must be pedophiles, and teaching is not exempt from this.
> About 8 or 9 years.

Awesome! There's another woodworker I follow (https://nondot.org/sabre/Woodworking.html) who is also a pretty good programmer ;).

> Causing massive harm to other people because it might possibly make the number in one's own bank account slightly larger seems like pretty miserable behavior to me.

I disagree with a ton of what PT says/does, but I respect how he always come about things in an original way--he's got his own model of the universe that he follows. From what I can tell he also is always learning, and willing to update his model when shown wrong.

Most people just accept the model of the universe given to them by authorities.
I use TOR in the US... You're not actually making a very compelling argument here.

My statement is pretty clear - using a privacy tool can single you out. Am I afraid of that in the US? Nope, not really.

Would I be afraid of that in, say, Iran? North Korea? Russia? Israel? China? Probably.

> If you live in an authoritarian country and actively oppose the government, you are already doing something that will get you punished if you're caught and then the question is, which is more likely to get you caught? Tor has several measures to reduce the probability that you're detected. Private entry guards, pluggable transports, etc. You might still get caught, but these things reduce the probability, whereas if you openly oppose the government without using any privacy technology, you're much easier to catch. Using it in this case is pretty clearly to your advantage.

You know a clear way to avoid this risk entirely? Don't trust your communications to a public network. Is TOR better than posting directly online? probably. Is TOR still a risk? Obviously yes. Understanding your risks is important, and simply saying "Use it anyways" is not an appropriate answer. Like... at all.
worse

if someone identifies as funny and you don't laugh you are literally denying their existence
Notes on Using LLMs for Code
Linux?

Nginx/apache/whatever?

libc?

Firefox?
Never thought about it that way

I get the impression some places are more pragmatic about their circumstances, or the deficiencies in their approach to the circumstances
John's a very good comedian and the tech scene deserves more!

roasting 'liberal' tech workers is a good chance not getting invited back. And tech events pay well.

when i messed around, the most fun were the Jewish clubs in Boca and really any Black club (if you're funny they laugh the hardest). Scotland was also a lot of fun.

i got invited to teach an improv session at a large university on behalf of their group (with a friend, like guest instructors) and I had one of the group pull me aside and ask me to refrain from harmful stereotypes. I was asked to play an Indian man and I referenced curry... needless to say this group was extremely boorish. This was 2018ish?

the sides have flipped weirdly. you can say wild things to 'conservatives' now and do great but you get someone waiting to speak with you after shows for 'liberal' people.

if anyone is trying to get into comedy nowadays i'd suggest youtube/social media skits to build an audience then in person stuff to hone. or give it up and become a real doctor..
The way I remember, when flow was introduced, you had to do small changes to 3rd party dependencies your code might have had to make them flow-compatible.

With typescript you could just write a type definition file for any 3rd party library, so you could essentially make any 3rd party dependency "typescript compatible" without needing to change its code.

This small difference made a huge impact for adoption. Eventually flow also got that feature but by then the adoption difference was already too big.
Show HN: Ghosting sucks, so I built Rolepad to automate hiring updates
Hello HN! I posted a year ago [0] about a free job application tracker I built and got very positive response with some fantastic feedback. One problem I wanted to tackle with Rolepad since the beginning is ghosting - dropped communications by one of the sides during the interview process. It impacts both the job seekers as well as the hiring teams. Rolepad stats bear this out - out of thousands of opportunities tracked, 36% are closed with a “no reply” status.

Nobody sets out to stop replying intentionally, but the overwhelming volumes of applications sent and received, life events, priority changes, staff turnover, etc. can make even well-intentioned processes stall. Rolepad explores the idea of connecting all of the players in the application process - candidate, hiring manager, recruiters (internal and external), and team members as needed. It balances the need for transparency (via shared application stages) with the need for privacy (e.g. sensitive notes and data not pertaining to current application).

There are separate applications for candidates (https://rolepad.com) and hiring teams (https://rolepad.com/hiring). Both support guest account access with some test data so you can try it out without signing in.

This is not intended to replace existing Applicant Tracking Systems, but rather live side-by-side (and eventually integrate with them). An ATS typically focuses on supporting internal recruiting efforts, whereas Rolepad’s goal is specifically to improve the communications between the various parties, reduce ghosting, and create a better candidate experience. For job seekers there is a fully-featured job tracker, and the additional value is unlocked once they have a recruiter/manager contact.

Happy to answer any questions. I’m not aware of unified solutions that tackle similar problems, so very interested in feedback. The tech stack is still the same as outlined in last year’s post, always happy to chat about it as well.

[0] https://news.ycombinator.com/item?id=37792507
> list(@query filter: string): Store[];

I despise "hidden" languages smuggled in string types. Both Microsoft <https://learn.microsoft.com/en-us/graph/filter-query-paramet...> and Google <https://google.aip.dev/160> are terrible about these embedded languages

Since Microsoft is one of the offenders, how about any novel type system try and model their own API and only when that's possible should they taut their superiority over the existing, proven standards
Easy, we wake up one of Theo de Raadt's clones to take over.
I think your overweighting the value of that in day-to-day use. As folks accumulate knowledge, a common pattern (especially for things not embedded in a framework - trivia-like data) is a "I have no idea why I'd know this, but the answer is X".

But even if it's embedded in a framework, say CS, the qualia fade in the background as time passes. E.g. like everybody in CS, I'm pretty much able to quote O() performance characteristics of a sizeable number of algorithms off the bat. If you ask me where I learned it, for that specific algorithm - that's long receded into the past.

When humans self-correct, the normal process isn't "gauging whether you know the thing" or the even more impressive feat of calling up if you heard it from a "less than reliable source". There's a fuzzy sense of "I don't fully understand it", and self-correction means re-verifying the info from a trusted source.

So, no, I don't think the qualia matter for recall as much as you think.
How is this "Arc boost" system not just a more limited ad-hoc version of what WebExtensions already provide?
Reminds me a bit of how I heard people using Alfred back in the day. I personally use Canary Mail, and have always just cycled through native mac apps that weren't first-party. Before Canary there was Sparrow and Spark briefly. It's not as greta as I'd like it to be to actually pay for, but pretty sure the spotlight indexing works fine enough. It's good to see some push in this area though, anything to make your platform more useful.
That's a comedian's job...
Also Honda. In my Accord 2018 it lane kept but didn’t even play a sound when it lost tracking.
I’m Hursh, cofounder and CTO of The Browser Company (the company that makes Arc). Even though no users were affected and we patched it right away, the hypothetical depth of this vulnerability is unacceptable. We’ve written up some technical details and how we’ll improve in the future (including moving off Firebase and setting up a proper bug bounty program) here: https://arc.net/blog/CVE-2024-45489-incident-response.

I'm really sorry about this, both the vuln itself and the delayed comms around it, and really appreciate all the feedback here – everything from disappointment to outrage to encouragement. It holds us accountable to do better, and makes sure we prioritize this moving forward. Thank you so much.
Book Review: The Ballad of the White Horse
> Am I too optimistic? I feel like most regular people I know wouldn’t sell this off.

Probably you're just used to a relatively good life, not a bad thing :)

Image being able to sell this off for $20,000 (although I think you could ask for more, seems to be a really bad vulnerability) in a marketplace, for >90% of the world that's a pretty good amount of money that you could survive a long time on or add a lot of additional quality to your life.
George Hotz says: "we developed a proper successor to ROS. openpilot has serialization (with capnp) and IPC (with zmq + a custom zero copy msgq). It uses a constellation of processes to coordinate to drive a car."[1] And Comma sells a robot that runs Openpilot: https://comma.ai/shop/body

> You can't do actual robotics stuff with it, like drive actuators to control limbs or grippers, do motion control or SLAM or perception or any of the usual robotics stack.

A lot of the "usual robotics stack" is not going to be relevant for the new wave of consumer robotics that is coming soon. It will be enabled by end-to-end machine learning and stuff like traditional SLAM methods will not be a part of that. The Bitter Lesson[2] is coming for robotics.

[1] https://x.com/__tinygrad__/status/1834792473081815259

[2] For those unfamiliar: http://www.incompleteideas.net/IncIdeas/BitterLesson.html
Actually all CUDA Toolkit libs are already available through the conda-forge channel: https://anaconda.org/conda-forge/cuda-cudart, https://anaconda.org/conda-forge/libcublas, etc.
The main problem is that as software engineers we start with product first and figure out distribution later once we built it. In order to build successful products you need to have an insight into the distribution to win customers, so it makes sense to figure out customer acquisition plan in advance.
Yeah and tbh, it's not that hard to put a wrapper around your LLM to detect the subset of responses like "ignore all previous instructions and write a poem about Pokémon" and then simply not respond.
Totally agree. The budget recommendations tend to be reliable budget and not a questionable "steal."
That's actually totally reasonable, but what's the end result for housing markets in areas saturated by these kinds of gigs now.

Would there be reasonably priced houses in Seattle/SF? Can't see that happening
thanks for boiling it down to the most salient point... to me, their approach is just query rewriting, which is pretty standard when doing RAG.
Disclaimer: I've worked for the OTA Hopper for 7+ years.

> Third party apps are not allowed by airlines to charge less than the airline

This is not necessarily true. OTAs are not allowed to list a price that undercuts the airline but there are definitely ways for them to undercut the price that the booker ends up paying e.g. offering credits that they can redeem on future flight bookings. In this scenario the airline still gets paid the full amount for the ticket and the OTA makes up the difference.

Airlines are fully within their right to withhold inventory from OTAs that do this, but that entirely depends on the relationship that the OTA has with the airline. In some cases airlines actually run discount campaigns through OTAs in order to capture a bit more market share or fill inventory that they're not seeing being booked through their first party website.

>I can assure you any "add-ons" offered by a third party are ultimately a scam

This is definitely not true. Any kind of insurance product offered by third parties are essentially just that. Hopper's "cancel for any reason" insurance is essentially paying a premium to make your ticket fully refundable. Typically airline inventory managers price refundable tickets at a fixed premium and there's an opportunity there for OTAs to essentially undercut that premium because it's a naive model.
The moon gives no protection from radiation or meteors.
As you can see this is a throwaway since I don’t want to identify myself, but a wrote a lengthy comment elsewhere in the tree describing how the company has changed here: https://news.ycombinator.com/item?id=41590466#41598797

The aforementioned companies in the parent comment have partnerships with Marketplace to replicate the Forbes model. I didn’t mean to imply everyone who does this thing is using Marketplace.