skysight-inc/HackerNews huggingface dataset:
>ASML provides a key component required for it, but it’s only part of the process.

Without the equipment from ASML, Taiwan's semiconductor manufacturing would be nothing, we wouldn't even be talking about them - they wouldn't be "operating the most advanced chip fabs in the world". The fact is, the high-tech of Taiwan is imported. While they may have smart people in Taiwan, they were not the ones who created this advanced tech.

Labor costs absolutely do have a lot to do with why these fabs are located in Taiwan, as well as other lower costs than in the U.S. due to regulations and everything that comes with running manufacturing in the U.S.

But my point stands that Taiwan imports their semiconductor fab equipment, as well as their power generation facilities. It's a small island, there's only so much that they can build there. Just because an island can produce advanced semiconductors does not mean they have the capability to build power stations themselves.
Can? Anything that a mighty military, economic, and political power allows.

Should? Maybe walk their talk? Too many times the US is criticizing countries like China for doing something only to turn around and do the very same thing but sprinkled with a "feel-good" explanation.

This [0] will never get old.

[0] https://www.brokenfrontier.com/wp-content/uploads/2020/03/ho...
And ironically was the part that failed.
Where is the example of a dependency? The link is about an unexpected behavior that broke something, not that someone depended on 3 gimmes
CPython Platform Support
I was surprised to see so much comments here upon reading the article: the article is full of bad takes, and all the commenters seem to agree.

This is simply bad advice, let's get this off the frontpage.
Hidden files get checked/built in all the time. Too many people don’t think to look for them.
The only nationwide unique ID people are assigned is a Social Security number. They are absolutely not designed for unique tracking. In practice that’s exactly how they’re used, in healthcare and everywhere else. It’s maddening.
I personally very much prefer buildroot over yocto, which feels bloated (my opinion only). However buildroot has some shortcomings that are important to me (for example it lacks a package system, which makes it difficult to do partial updates). Ptxdist adds this and also some other useful stuff, such as a mechanisms for “layers” (similar to Yocto).

I guess for me it just hits the sweet spot between simplicity and flexibility.

My company has been using it professionally since 2014, and we are very happy with the results.
yep - my old moto phone was fine, and I didn't add any new apps or desire new functionality, but performance got so bad over time to the point where it was unusable. There's really no attractive business model today in maintaining modest device usage over a long period of time.
in the US, this type of junkmail pays for the postal service to keep it in the black, so that non-profitable one-off mail of personal interest can be delivered quickly and affordably.
I read techmeme.com, but especially this weekend almost all headlines are AI related, probably because of OpenAI's huge round too
I read /Cannery Row/ once a year, and have for over ten years. I am a Steinbeck fan, and this is my favorite of his, but I'm not sure if I keep doing it because it's really the best or if I just enjoy judging my own changes in outlook against a standard unit of literature. I suspect it's the latter but it's a short book and I recommend anyone read it at least once.
Yeah, I’m not making much of a substantial argument, it’s very much an unqualified intuition at best.

Right now there are millions of high school students tweaking and testing different inputs against LLMs for very real consequences: their grades.

Meanwhile I barely trust LLMs enough to write a relatively inconsequential piece of code.

If this version of AI is the real deal, the kids that are really depending on it are going to figure out the breakthroughs, not me.
An economic thinker that can garner praise from democratic socialists like Einstein to neoliberal ghouls like Milton Friedman has to have something going for it.

It's transformed my worldview as well, if nothing else by underlining that free markets and capitalism are not the same thing at all.
The coolest thing about them is that he solved the Fermi Paradox, I definitely buy his explanation.
How about "tests with an obviously high risk of systematic, invisible false negatives are bad"
It actually helps Alzheimer’s patients regain their faculties, if only temporarily.
See: emception

https://github.com/jprendes/emception
That is not an example of a php problem. There is no "post=filename" feature in php; it's running webdev code. They only used .php because it's a very common language.
You can also do some nice things with https://github.com/getsops/sops, I store encrypted password and secrets on git with sops, but I also use nix so I have near perfect integration with my services.
Also "The Curse of Bigness" is as relevant as that book.
https://www.amazon.com/Curse-Bigness-Antitrust-New-Gilded-eb...
Not very surprising, considering it’s the same companies using the same playbook. I’m not so sure that being obese is healthier than smoking, being obese might not give you cancer but it will certainly mess with your heart, and I would not be surprised if someone who smoked for the same amount of time someone else was obese ends up having a better prognosis after quitting.
Yes! And they make an okayish point that especially on an infinite timescale, some noob developer (or a genius but fallible experienced engineer) will commit a .env file to source control, creating an inadvertent data disclosure that nobody wants.

The thing is, in a properly run engineering organization, zero developers should have any production secrets to put into .env files in the first place. Development secrets should always be either dummy values created for this purpose (e.g. one's local development database password should be nothing or 1234 or something because you need no 'security' on a local DB that listens on 127.0.0.1 only), or the keys to entirely separate testing environments, developer sandboxes, and free-tier accounts on your 3rd party dependencies (e.g. an identity provider, Salesforce, etc.)

I'd be uncomfortable with any .env files anywhere having creds in them that I would be upset about someone accidentaly posting even in our public repositories. Sure I'd rotate them just because I don't want someone poking around our local developer Auth0 account or local developer OpenAI account, but there should be zero or close to zero of value that's possible to exploit using those secrets.

At my company we've settled on dotenvx to manage these .env files, which has the neat feature of asymmetric encryption so that 99.9% of the time devs don't even need the private key for the production one because adding a new value for a new thing can be done with the public key. Values that are actually secret are encrypted in the env file, and the correct private key for the environment is passed to the app as an env var, which it uses to decrypt any encrypted values. As others have pointed out, many claims in the article about how anyone can access any application's environment are inaccurate.
> ... I don't know what pjmlp means by "Lisp-2", which I normally interpret as meaning a Lisp with different namespaces for functions and variables ...

There indeed was a language named LISP 2: https://dl.acm.org/doi/pdf/10.1145/1464291.1464362

I posted it on HN two weeks ago but it didn't get much traction: https://news.ycombinator.com/item?id=41640147
100MB on every page refresh just to compile C is a pretty bold direction to go in.
It is not that simple. Hubble was developed in the open by nasa civil servants who did not have access to KH-11 design. The non-optical systems are entirely different between the two platforms. Some of the contractors were shared however, and may or may not have reused IP and tooling. A lot of it is convergent evolution though. The size of the space shuttle payload bay was set by the DOD to be large enough to carry or return a KH 11 spy satellite, even though it was never used for that purpose AFAIK. The size of the Hubble was obviously the max size they could fit in the space shuttle. So they both ended up being identically sized optical telescopes, and it’s not surprising that similar design requirements end up making similar devices.
> If VCs disappear overnight most tech would not change ideologically. It hasn't changed too much ideologically for the past few decades.

What has changed is that the proportion of people who wind up in tech primarily due to passion has drastically dropped as it became more prestigious. I'll paraphrase something I read elsewhere that rang true to me. In the 80s and 90s, amoral,greed-is-good, get-rich-by-any-means people got into banking and finance because it paid well. Now they go into tech.
Why does this keep happening?
I thought OP was going to do this without soldering anything.

But I feel like soldering something is no different than just like splicing a telephone cable in half and putting your own headset in the middle…

Except instead of putting a headset, you crudely use a lighter…
Two of my favorites, too, although I'd go with Anti-Fragile from Taleb.

I think Anathem is Stephenson's best. The Diamond Age is also really good. For every one of his books, I just wish he could write an ending that matches the quality of the rest.
It's been long enough that I don't recall. I will have to re-try sometime soon. Currently burning through a few other books.
Because it's a drop-in, no-dependency, no build-step library that can make your static MPA a little less static for the little bits of interactivity you need with not much effort. It's what you reach for to avoid "write the whole website in JS."

React -> "The site exists in JS, HTML is just a render target."

jQuery -> "Poke at the HTML from JS." Which is brittle as hell.

htmx -> "The site exists in HTML, extend HTML to handle the common tasks you want to do with it."
Hearing about Iridium reminded me of how excited I was to take on a job managing 5 engineers for them, until they offered me a base salary of $135,000 in Phoenix. They work on incredibly cool technology—I'm bummed I had to pass it up to work for some garbage web-focused tech company becayse Iridium pays pennies on the dollar to their engineering department.
Very cool. I recently implemented my own accessibility tree visualization [1] Yours is very interesting, getting away from the tree itself to a visualization more focused on grouping discrete units.

My thinking was to show the entire structure and through that help people focus on a logical flow through the page. Flipping that around and thinking of the tree as a set of discrete blocks, where the cohesion inside each block is more important, is very interesting.

Happy to chat if you want to compare notes!

[1] https://polypane.app/blog/polypane-20-1-the-accessibility-tr...
The connection is even closer. Tobacco company extensively invested in the highly processed food industry and brought their advertisement experts in. The obesity crisis (and addiction to sugary and fatty processed foods) is not an accident, it's the result of a sophisticated advertisement campaign directed by the brains behind tobacco and alcohol campaigns.
Get a general purpose home maintenance book.

For example, https://archive.org/details/stanleyhomerepai0000fine/page/14... links to the chapter "Painting Trim the Right Way" from the book Stanley Home Repairs, 2014.

Could also look at used book stores. Home repair hasn't changed much.

Edit: Could even fire up Wine and try the CD-ROM "Black & Decker Everyday Home Repairs" (published by Broderbund) at https://archive.org/details/BlackDeckerEverydayHomeRepairsBr... . https://www.goodreads.com/book/show/3424503-everyday-home-re... says;

> Like its predecessor in book format, the CD-ROM version offers easy-to-follow, step-by-step instructions on more than 100 common household problems, from how to fix a leaky faucet to repairing hardwood floors. What's more, the CD-ROM version incorporates animation and narration to help make the repair project even easier to understand and complete. Instructions can be viewed one step at a time or all at once, and, if desired, can be printed out and taken directly to the repair site. Included with each repair project is the projected time needed to complete the work, estimated cost, and a list of materials and tools needed.

That sounds pretty nifty, actually!
It is similar to buildroot, but more powerful. We have been using it for 10+ years with very good results.

Why no traction? Not sure about that. Perhaps it was difficult to communicate the benefits in an area where buildroot was already well established.
Are you Scott Alexander? https://www.reddit.com/r/slatestarcodex/comments/12yn28h/com...
I was going to make a tongue-in-cheek suggestion about randomizing undefined behaviour, but I suppose that's common in debugging and even seen in some APIs.

At one time, in Python, dictionary (hashmap) ordering was randomized so users wouldn't rely on non-specified ordering behaviour. Eventually though, dictionaries were guaranteed insertion ordering.

https://www.youtube.com/watch?v=p33CVV29OG8
Ruling at the below link, because apparently every US news reporter is allergic to actually providing source docs in court cases . . .

https://storage.courtlistener.com/recap/gov.uscourts.wawd.32...
> it's people leaving .env in git

Ah, makes sense it could get exposed then.

The pattern I've always followed is having `.env.template`, `.env.dev` or similar in SCM, then require the development setup to manually/automatically copy it to `.env`, which is .gitignore'd.

Seems that pattern might not have been as widespread as I thought :)
One of the big uses of hardware security modules was allowing web servers to reboot without the private keys being accessible through the filesystem.

But they keep people from walking off with private keys, they don’t stop people from borrowing them. HSMs are great for SSL keys but not so great for code or cert signing.
Real Engineering (youtube channel)had an interesting video about Spinlaunch a couple years ago.

https://www.youtube.com/watch?v=yrc632oilWo
Don't let me dissuade you, but it's not a very good read. There's a reason I forgot almost all of it.

But if you like her long-winded style, have fun! It's a long one.
I think the filter is quite effective, I wouldn't want to be friends with anyone who has such a strategy!
Indeed. The First Amendment guarantees freedom of the press, which in clear language protects free speech for corporations. That includes the right to engage in political advocacy, which is what Citizens United v. FEC was about.

A lot of people have a, let's say filtered understanding of the decision, which has become a sort of shibboleth rather than a direct reference to the Supreme Court's ruling.

I encourage reading up on the ruling itself, at least the Wikipedia summary https://en.wikipedia.org/wiki/Citizens_United_v._FEC

Or should you prefer primary sources (as ideally you should) just read the ruling https://supreme.justia.com/cases/federal/us/558/310/

The canonical source, just for completeness. Justia has the same text https://www.supremecourt.gov/opinions/boundvolumes/558bv.pdf
Most important IMO is third-party testing along with published results. Concentrating nutrients also concentrates contaminants like lead and PFAS, and many powders have cocoa, which is also notorious for lead contamination.
Thanks for the hint!

We hit the front page on Hacker News and received many submissions, which led to network errors when fetching some podcasts. I've just added retry logic and scheduling for new podcast fetches and pushed these changes to production.

The Criminal[1] podcast is now added. Due to the current demand, our transcription queue is a bit backed up, so transcription for this podcast will appear in a few days. Please be invited to have a look the next days again.

I'm actively working on securing more GPUs to help scale this process efficiently so in the future you don't have to wait that long.

Would it be interesting if I add e-mail "transcription ready" notifications for those who submit a new podcast?

[1] https://www.audioscrape.com/podcast/criminal
I recently did a deep dive into the history of JavaScript standards:

(pre-ecmascript versions of JS not investigated)
EcmaScript 1(1997) = JavaScript 1.1 - missing many ES3 features (see below), of which exceptions are the unrecoverable thing.
EcmaScript 2(1998) - minimal changes, mostly deprecations and clarifications of intent, reserve Java keywords
EcmaScript 3(1999) - exceptions, regexes, switch, do-while, instanceof, undefined, strict equality, encodeURI* instead of escape, JSON, several methods on Object/String/Array/Date
EcmaScript 4(2003) - does not exist due to committee implosion
EcmaScript 5(2009) - strict mode, getters/setters, remove reservations of many Java keywords, add reservation for let/yield, debugger, many static functions of Object, Array.isArray, many Array methods, String().trim method, Date.now, Date().toISOString, Date().toJSON
EcmaScript 5.1(2011) - I did not notice any changes compared to ES5, likely just wording changes. This is the first one that's available in HTML rather than just PDF.
EcmaScript 6(2015) - classes, let/const, symbols, modules (in theory; it's $CURRENTYEAR and there are still major problems with them in practice), and all sorts of things (not listed)
EcmaScript 11(2020) - bigint, globalThis

If it were up to me, I'd restrict the web to ES3 with ES5 library features, let/const from ES6, and bigint/globalThis from ES2020. That gives correctness and convenience without tempting people to actually try to write complex logic in it.

There are still pre-ES6 implementations in the wild (not for the general web obviously) ... from what I've seen they're mostly ES5, sometimes with a few easy ES6 features added.
I hope they include Amazon's practice of taking popular products on their storefront, making generic "Amazon Basics" versions, and selling them to undercut the popular options. Simultaneously owning a marketplace, approving who can and can't sell products on it, and then putting your own products on it to undercut other sellers is so scummy and muck rake-y.

I hope they also include Amazon allowing thousands of Chinese retailers to stock Amazon's warehouses with counterfeit, faulty products, and potentially dangerous out-of-spec parts - with no way to meaningfully report or bring the offending product to Amazon's attention.
Has anyone figured out how to do “visual” chunking for rag? I’m curious how this would be used in place of an OCR service.
Depending on context I could see myself asking a followup question. In this specific instance, no that's enough for me personally. As I can see from the other replies the OP made my assessment was in line with my personal values.
"MRMap is free for use by Mountain Rescue Teams. While being free it is NOT open source." http://www.mrmap.org.uk/index.php/introduction

Relevant changelogs are 6.0a and 6.0b. http://mrmap.org.uk/forum/viewforum.php?f=24
No, and I don't know who he is either.
A lot of weirdness in the US happens because we were the first to do something, or the first country where a practice became widespread. Certainly after you get to the point as a nation where there needs to be some kind of "national ID," you might create one from whole cloth, but for decades the US had no need of such a thing because there was no way for two businesses in two different states to communicate except by mail, fax, or telephone. And we also have that weird fundamentalist Christian lobby that believes any "national ID card" or number is the "mark of the beast" from Revelations and staunchly refuses such a thing.
> doing something you don't like

I think people mostly aren't surprised that a country is taking action against an enemy, that's expected in general. What might raise an eyebrow here and there is when they're doing it via the exact same means they classified as anti-democratic, anti-free market, anti-freedom, etc. when their enemies were doing it. It's the hypocrisy of the explanation and the realization once you try to look beyond the veneer of righteousness that those giving the explanation think their own people must be at peak ignorance.
Honestly, not making this up, I have no idea how any of you have time to read.

Last few books I read (non-{technical,programming,electronics}) were in college. Perhaps a few for fun, mostly for class.

I work all day, when I am done with work, I have house work to get done. Every single time I grab a book and think "I will read this book", heck even technical,programming,electronics books I _want_ to re-read, time vanishes, I put it up and get too busy.

Reading these comments, seems like a lot of people read books. I have no idea how you all find the time.
Scrum's "Product Owner" Problem
wrt to psmith pants-mongering (hip trendy rascal Archer slid panty?), I always figured that if short squeezes are billionaire's poker (4 years being the longest hand of which I'm aware), betting against a major central bank would be trillionaire's poker.

For most people, it's not a question of if* they know what they're doing, but if you can stay solvent (pace "in the long run") long enough for the tide to go out.

(I don't know about you, but if I ever attempted to attack THB, my net worth would a.a. meet an absorbing barrier at 0)

* if I were a central bank, and someone asked me if I knew what I was doing, I would be tempted to reply "we do not have a single theory, but rather a cluster of models and results".
Lol yes, so much this
Except if/when it's cached.
No, power makes bad. Money drives bad because it makes power, but getting rid of money will not solve any problems, and historically it’s made them worse.
If what I want is not an executable but a shared library, does this get me anything?

I currently have a use case that uses a server running an emscripten build (using SMODULARIZE and some exports, I suppose it’s not a true dylib)
Let's use MVC for the sake of argument. A regular monolith has lots of models, lots of controllers, and lots of views. A modular monolith has several collections of models/controllers/views, which might be tightly coupled internally, but the collections as a whole exposes much smaller APIs to each other. You cannot just reach into an implementation detail of distantly related functionality, even if this functionality is "public" in the programming language package visibility sense (i.e. users repository is visible to users controller).

This is basically what's accomplished by publishing a Thrift/Proto/OpenAPI IDL from a collection of packages comprising a network service. The key insight is that the serialization and networking parts of this are superfluous, what you actually wanted was the visibility rules.
You can use “taskpolicy - b <command>” on MacOS cli to force it on a performance core.

I’ve had to use it when doing benchmarking as I also noticed variations due to migrations.

Not sure if you can combine that with docker though.
gwern.net has entered the chat
Why does what keep happening? Antitrust cases or companies becoming monopolies?
I'm not a web developer at all, but I thought keeping the URL was intentional for SEO reasons.
> The company is investigating the circumstances of the problem and exploring possible solutions to allow users to download and update the software from the Play Store again.

They could ask their nephew in fifth grade who would tell them about things like F-Droid and naked .apk files.
Arcades were big dark noisy rooms, and quite often had only one or two people on staff who were usually either busy dealing with other customers and were paid far too little to care about the owners' profit margins. They were basically there to hand out prizes to little kids for the ticket machines and make sure nobody walked out with Dig Dug on a hand cart.