skysight-inc/HackerNews huggingface dataset:
Keep in mind that this is going to be the default option for a lot of forums and social media for automated moderation. Reddit is already using it a lot and now a lot of the front page is clearly feedback farming for OpenAI. What I'm getting at is we're moving towards a future where only a certain type of dialog will be allowed on most social media and Sam Altman and his sponsors get to decide what that looks like. Since he's of YComb stock, the zeitgeist here seems to be let him cook, that is until he doesn't share the wealth with his market-cornering pals here.
I wish I knew more; between the opening song and the presumably idiomatic[0] exchange between vixen and cub[1], it's probably obvious to anyone who knows if the Zhu-Zhu victors (compare 1:25!) are speaking 南蛮鴃舌[2] or not.

As for Elysium (2013), having watched the trailer and skimmed the synopsis and a review, it sounds exactly like the sort of movie a fox (or at least a maneless lion[3] who hires wolves assisted by vultures to do what his snake tells him to?) would want to show to all the rabbits (or hedgehogs or whatever creatures Machiavelli and Pareto think are below the foxes and lions): a hero's journey in which the One guy of Destiny getting in a physical fight saves everyone; if anyone in that world had been spending as much time knotting up nets as the characters in https://en.wikipedia.org/wiki/Water_Margin#Plot seem to, it hadn't been obvious to the reviewer.

[0] are they chengyu? if not, they should be, like 高新低人(?).

[1] stepping back and preparing his nets speaks to a fox with lions on the payroll?

[2] Mencius (the original) had best watch out when accusing people of bird-speak; consider Qur'an 27:16, and https://en.wikipedia.org/wiki/The_Conference_of_the_Birds#Sy...

[3] https://en.wikipedia.org/wiki/Robin_Hood_(1973_film)#Voice_c...

EDIT: or maybe the flashback should've been https://www.openstreetmap.org/?mlat=22.14364&mlon=113.56283&... ? I don't know my asian skylines well at all :(
Show HN: I made a lightweight webapp as an MVP for processing CSV files
Over time I wish to add capabilities to create dashboards, allow users to create pipelines and share dashboards, results summary, or create email templates. But all this requires a backend and, most important, possibility of a market with paying users for the backend stuff.

P.S. could have minor UI bugs,
What case? I don't pay for anything YC has ever created.
This has been an on-going issue for decades, I believe. Will this ever happen? Do people in control want it to happen?
The point of microservices is not technical, it's so that the deployment- and repository ownership structure matches your organization structure, and that clear lines are drawn between responsibilities.
You can't cache based on the file contents alone. You will also need to cache based on all OS/compiler queries/variables/settings that the preprocessor depends on, since the header files might generate completely different content based on what ifdef gets triggered.
I want an open source firmware based around a popular rtos. Sell me the product, provide ok software gratis.

Framework's AMD laptops notably have a Zephyr based embedded controller. Good stuff.

There's definitely some strong OpenBMC efforts ongoing right now in server space. AMD says they're going to replace (closed) AGESA bring-up code with OpenSIL, so consumers might even have access to firmware it yourself too, sometime this decade.
Short of full-on using Widevine/eme for all videos (which I assume would lock out too many devices), how much more could Youtube do? As long as the data is being streamed to your computer, there will be a way to capture it, right?
AI has very little do with it. You can take any MIDI file, randomize it and call it "music". Artistic freedom. Streaming services do not validate file content at all, or at least did not in the past. They only care about copyright infringement.
I was still learning assembly, it took me a while to be sure it wasn't my bug.
Related to this in asked LLMs to directly solve the same riddle but then obfuscated the riddle so it wouldn’t match training data and as a final test added extraneous information to distract them.

Outside of o1, simple obfuscation was enough to throw off most of the group.

The distracting information also had a relevant effect. I don’t think LLMs are properly fine tuned for prompters lying to them. With RAG putting “untrusted prose” into the prompt that’s a big issue.

https://hackernoon.com/ai-loves-cake-more-than-truth
I feel like you’re missing the point on purpose? Cobalt is asserting that it’s doing good based on the shadier behaviour of its competitors. But can you justify Cobalt in isolation any more than you can justify whoever was scraping it?
It is because the goalposts were wrong.

We once thought that a computer could not beat a grandmaster in chess or pass the Turing test without some undefined special human property. We were wrong about the computer needing this undefined special human property.

A spreadsheet has been much better at math than the average person for a long time too. A spreadsheet is a very useful human tool. LLMs are a revolutionary useful tool. For some people that doesn't seem to be enough though and they have to try to find or insist the LLM has the undefined special human property.
We'll buy back your Typewriter for Uncle Sam
5 mins!? Why would it take so long? This is 10 years ago but my DSL (telephone) and then cable internet connection would not take more than 60 seconds. Now it's less than 30 seconds.
It's to keep the annoying "fill the rinse aid dispenser" light from always being on.
That is actually pretty cool, but I believe you meant to say "biological sex" instead of "gender". :P

I have no clue how an AI may find the gender (which is in the mind) of someone through x-rays alone.
It's not clear that this is illegal. Violating a site's terms of service isn't criminal hacking.[1] That's been decided by a court. It's more like financial engineering.

This person did create music: "24. The AI technology that CC-3 used to generate AI songs for MICHAEL SMITH,
the defendant, improved over time, making it less likely that the Streaming Platforms would detect
the scheme. For example, in an August 17, 2020 email, CC-3 wrote to SMITH, "Song quality is
10x-20x better now, and we also have vocal generation capabilities. . . . Have a listen to the
attached for an idea of what I'm talking about."
They paid for thousands of accounts on Amazon, Spotify, etc. to stream music. Those accounts were paid for with real money, not stolen credit cards.

That streaming can generate a bigger royalty bill than the payments required to receive the content is a business model problem at the streaming companies.

[1] https://arstechnica.com/tech-policy/2020/03/court-violating-...
Long enough ago I don't remember the business details.

The 4.x compiler line never being patched was a bit of eye opener into commercial toolchain support.
this is smart, but also: the overall design was so overengineed in the first place..
What makes you think they're really the bottom?
The fact they considered allowing executable code in path lookups shows a certain attitude.
I found learning Latin (and to some extent, ancient Greek) to be far more useful for learning new words in the Romance languages (and English) in general than actually learning the Romance languages themselves.
This is fine as a technical exercise, but trusting Oracle is a very bad idea for numerous reasons if your data is not mirrored or backed up elsewhere.
YAJF - Yet another Javascript Framework.
Big if true.

Coinbase listed the doxxing of Satoshi as a business risk in their S-1 filing.

I'm sceptic though. Past media attempts have not turned out well with some collateral damage. Even if this is the same documentary maker who tracked down Ron Watkins as the Q in QAnon. We'll see if they have any kind of new evidence or just synthesizing "clues" to spin a narrative.

Popular somewhat plausible candidates so far:

Hal Finney
Len Sassaman
Nick Szabo
Wei Dai
Paul Le Roux

EDIT: They claim they're making is Sassaman.

https://www.blockhead.co/2024/10/05/new-bitcoin-documentary-...
And Netflix claims that they've discovered evidence of an ancient apocalypse.

And Google claims all the weird stuff you find in Youtube video because they host them on their platform.

This is silly clickbait.
As others have said, this has been supported since the limited/stable APIs were introduced. What this adds is a way of implementing a Python extension that can be loaded in (not just compiled for, which is already an improvement!) different Python implementations, namely CPython, Pypy and GraalVM.
A few big sites that I'm familiar with have seen in the last six months ByteDance become by far the most agressive scraper in their logs.
Just the lack of.. the whole ecosystem adopting the restricted model and there being a properly specified and documented model in the first place.
Gems in DuckDB 1.1
I go back and forth on this.

On the one hand, maintaining local development environments that work reliably across larger team if developers is a HUGE cost in terms of time and effort. Developers are amazing at breaking their environments in unexpected ways. It’s common for teams to lose many hours a week to problems related to this.

So I love the idea of cloud-based development environments where, if something breaks, a developer can click a button on a website, wait a few minutes and have a fresh working environment ready to go again.

But… modern laptops are getting SO fast now. It’s increasingly difficult to provide a cloud-based environment that’s remotely as performant as a M2 or M3 laptop.
Cobalt is bypassing protections to allow legitimate Youtube users to download single videos without causing harm and with no monetary incentives.
Bytedance is mass downloading thounsands of videos, all for monetary incentives while heavily breaking the TOS and potentially ignoring copyright laws.
Similar, but one is doing way more harm than the other.
>"[believing] in the work we do"

This sentiment of 'believing' does really annoy me. There are individuals whose work is their passion (nothing wrong with that) but they judge everyone else, for example a potential job candidate through the same immature lens.
Supabase (YC S20) Is Hiring a Product Marketer (Remote)
This was the case as early as in the year 2010-2011 from what I remember.
There's tons of precedent for click fraud on traditional ad networks being classed as criminal wire fraud, with multi-year prison sentences getting handed out for it, and faking music streams to get a bigger cut of Spotify's ad revenue is just click fraud with extra steps.
Do We Need a 37-Cent Coin? (2009)
Bytedance seems to have increased its scraping efforts significantly.

I've posted a canary token[1] URL as a Mastodon post, to check how scrape-resistant Mastodon actually is (it is not resistant at all), and have been getting quite a few hits from the ByteDance spider recently.

Last hit is from 47.128.114.151, Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)

Edit: added missing footnote.

[1] https://canarytokens.org
If I wanted to nitpick, I'll point out that I used "says", not "said". In the present tense, Naggum can no longer say anything at all. :/
A free website builder for developers
Hey HN!

Being more of a backend person, I find creating websites for my projects very tedious.

So, I created a simple website builder that lets you export the code as (clean!) HTML + TailwindCSS.

If there is enough interest, I will also add support for exporting to common JS frameworks like React, etc.

It's free and takes about ~3 mins to create a website.

Would love for you to try it out!
I would interpret your statement of "the voices are real" as equivalent to the statement that "the voices are a real experienced phenomenon".

But you seem to be describing them as distinct entities. If they are distinct entities, what are they it what attributes do they have?
Buzzy – New free app which allow to rate everything
Hey,
since few long months of learning react native and trying to not loose all my hair during the development i've made an mobile app, which is very similar to all the others social apps. With one adventage - it allows You to post a rates on the posts, and what's more - it has voting system. From now one, Your mate or collegues can post a new entry, and let You decide whether one meme is better than the other!. Check this out guys and let me know what You think.
orion is not _released_ though. it is 'this is what we are working on'.
As anyone who has tried to build multi-platform software with C or C++ can easily tell you.

It's almost a relief AIX, Solaris, and HP/UX are either very niche, or going the way of the Dodo.
Gani has done a great job of keeping folks in the loop about upcoming changes and the thought process behind them, see this thread for more context: https://github.com/pocketbase/pocketbase/discussions/4355#di...
FF Send already had encryption -- IIRC, Mozilla shut it down because it was being abused.
If your stop signs don't disrupt traffic then they're not working properly. Roundabouts are designed to efficiently weave traffic streams together instead.
ETHZ and EPFL Announce the Swiss National AI Institute (SNAI)
1.) Carried out, that logic suggests not performing any outbound filtering because LAN hosts could simply find another way, protocol or port, out? I understand that 99.9% of LANs are configured default-allow LAN outbound. But the premise of your statement is untrue if the firewall is configured default-deny in all directions on all interfaces.

2.) I've not suggested 'blanket blocks' (nor 'blanket allows' for that matter). Specifically, both ingress and egress ICMP should be filtered by type code.

3.) In a zero trust model[1], every LAN device is untrusted. One should perform as much isolation and filtering as possible at all the relevant network layers. Network security is "disruptive" by definition.

4.) The second paragraph of my comment suggested that ping should be explicitly allowed for anyone/any device on the LAN legitimately utilizing it.

[1] https://en.wikipedia.org/wiki/Zero_trust_security_model
"More efficiently"? Maybe. It opens up a new way to think about solutions to problems. Sometimes those solutions are more efficient, and sometimes they are just different.

It's a useful thing to learn though. And dare I say it, fun. Even if there was zero benefit to it, it'd still be fun. As it turns out, there really are benefits.

For me, the biggest benefit is when I'm working with data interactively. The syntax allows me to do a lot of complex operations on sets of data with only a few characters, which makes you feel like you have a superpower (especially when comparing to someone using Excel to try to do the same thing).
> how do you determine if the pattern you seem to be identifying is actually related to the phenomenon being measured and not an error in the measurement tools themselves?

If the “which data is missing” information can be used be to compress the data that isn’t missing further than it can be compressed be alone, then the missing data is missing at least in part due to the phenomenon being measured. Otherwise, it’s not.

We’re basically just asking if K(non-missing data | which data is missing) < K(non-missing data). This is uncomputable so it doesn’t actually answer your question regarding “how to determine”, but it does provide a necessary and sufficient theoretical criteria.

A decent practical approximation might be to see if you can develop a model that predicts the non-missing data better when augmented with the “which information is missing” information than via self-prediction. That could be an interesting research project...
+1 much better , thank you for posting.
Show HN: A Browser UI for Your Docker Registry – Built with Elm and Rust
I was hosting my own Docker Registry for work, and i was disappointed that Docker Registry didn't ship with a UI, so i decided to build my own version.
Qualified yes is probably in order ( and more knowledgeable person can likely chime-in if I misstate something ). It is and always has been a cat and mouse game not completely unlike with game or movie piracy. As you stated, if you can see it on your PC, there is likely means to capture it.

Still, notice how most of the low effort avenues are slowly being cut off one by one. I will use non youtube example. Not that long ago, I was able to rip blurays using off the shelf external bluray writer, but new firmware on currently sold drives remove that ability.

Now, Google typically won't be ( and isn't ) everyone's hardware provider, but there are ways they could degrade 'non-sanctioned' experience in browser they can ( and do ) control.

Granted, in Firefox ( and other non-google browsers ) it may not be as simple, but future there is not as straightfoward either given Mozilla's trajectory and financial dependence ( and moves ).

In short, I agree with you but note that initially it was genuinely trivial to download youtube videos. This has changed over the years.
How can you see it any differently?

You need an "app" for everything, they can hardly interact with each other, they can get killed at any time, and without rooting (which is subverting how the system is meant to be used) all sorts of things are crippled (from filesystem access, to using a firewall, to freaking setting a different volume for every app).

And the limitations increase with every Android release
I’ll explain the context for my initial comment in this subthread. The comment I replied to was then downvoted and at the bottom of the thread. That’s why I did the whataboutism.

I understand if you think it’s tedious to bring up America’s war efforts on tangentially related topics. There’s a time and place for everything. I used a more subtle hint in my first comment on this submission[1] while also addressing Stoicism (or stoicism). But I didn’t like when someone was downvoted for simply saying that going into self-made conflicts on the other side of the world might make someone question if the team they were fighting for had righteous reasons to fight.

> They don't "yell" whataboutism, they kindly point it out in context.

:)

Since you refer to them and not you I can say that this point (non-argument) is brought up to shut down the conversation since whataboutism is (in their minds) basically a fallacy.

It’s not “kind” but so are non of the conversation points on such a topic. So that’s whatever.

> And they already know that the US invades places, and have fully "parsed the salient commonality" that you seem to think is so elusive to them.

No one would presume that people have been living under a rock for half a century or so. That would be daft. Everyone knows that the US invades places. And plenty of people think that’s either good or that it’s bad but it was done with good intentions, so therefore no one is to blame.

> The reason they need to keep doing that is because it seems necessary to counter/deflate the relentless "hypocrisy, hypocrisy, hyprocrisy" tide of thinking that tends to dominate what passes for discussion on the topic

Counter it with what?

Your “deflate” is quite on point. Why have an argument when you can do a whataboutism-deflate? Then you don’t need to provide any arguments.

But then the other thread participants need to be on board with the thinking that it’s a slam-dunk. Which wasn’t the case this time.

> (backed by a lot of broken or distorted narratives about what actually did happen).

With that? It’s actually different?

> And also, because in fact there are substantial differences between the current aggression in Ukraine and what the US has done in most of it recent adventures (the Iraq invasion the one notable exception). So while there are commonalities between what these countries do, by and large they really aren't that "salient". To suggest that they are is, well, whataboutism.

See the original comment:[2]

> > What scientists call the “are we the baddies?-syndrome”

It’s never quite the same when the aggressor is “us” (the US or whatever else). Then any such comparison is obviously wrong and not nuanced.

[1]: https://news.ycombinator.com/item?id=41724980

[2]: Which is from a skit, probably not a researched symptom. Right?
cffi is used to wrap c libraries. Only a masochist would use ctypes to wrap a whole library. While both are technically FFIs, it does not make sense to compare them. From a conceptual perspective, cffi was written to replace the C-API for C modules.
Show HN: AiResume – I built a free AI-powered resume builder
any feedback would be appreciated :)
I frequently see folks fail to understand that when the unicorn rocketship spends a month and ten of their hundreds of engineers replacing their sharded mysql from setting ablaze daily due to overwhelming load, it is actually pretty close to the correct time for that work. Sure it may have been stressful, and customers may have been impacted, but it's a good problem to have. Conversely not having that problem maybe doesn't really mean anything at all, but there's a good chance it means you were solving these scaling problems prematurely.

It's a balancing act, but putting out the fires before they even begin is often the wrong approach. Often a little fire is good for growth.
Is anyone still using Docker?

I am, simply because I haven't "updated" my stack in a few years.

But are there any remaining arguments for using Docker instead of Podman (sudo-less docker alternative)?
.su survives only because Russian users kicked up a massive stink about keeping it. About 20 years ago, ICANN was quite determined to kill it off.
This. Bytedance's official spider has a clear User-Agent tagged Bytespider, but OP didn't mention what they're seeing.
OpenAI Is Putting Down Office Roots in New York
> Comparisons always cut both ways. You’re saying both those things, even if you only wanted to say one.

I can’t coax your interpretation into the correct lane. Even when they are so obviously wrong.
Well, it might get super expensive to print it all if you write a lot. The only trustworthy way I have felt 100% safe with is if I type something like a blog post I would want to leave for my son, I just print it out after I have published it and then sew it into a journal that I have started specifically for him. I also sometimes handwrite things like little notes of things he says that I want to keep while I'm living and leave for him to read about and remember the things that made him so precious to me. Sometimes it's a lot of work to put it all together, especially if I just collect the notes, posts and letters and then need to sew or add them some other way to my book.
I just cannot bring myself to trust any company knowing what I do about the lengths they go to in order to trick you into paying for things you don't need or things you forgot you signed up for and how unrepentant they are about it.
Not to mention all the other problems you mentioned yourself! I'm going to try to remember to come back here and check in on the answers later because I would love to get some advice here as well.
You can't run Facebook on a laptop either.
Local development works great ... until it doesn't. And then getting it to scale past a certain point is excruciating.

My favorite argument against local development, however, is that isolation is a bug, not a feature.

When I want to show another developer what I've built, or get help debugging an issue, I don't want to have to call them over to my laptop or do a screensharing session. I want them to have access to the same machine that I have access to, with the same data and configuration, and having cloud-based dev boxes enables that.
So wasn’t inevitable that they got to the point of sitting on the ground in the first place? Meaning you still haven’t solved the contingency problem.
can you have a central conda install? or zip a full conda env?

with nixos, you can have a single default.nix and serve from a binary cache.