skysight-inc/HackerNews huggingface dataset:
Programmers should not be empowered to perform roles for which they are an ill fit. In general, programmers are detailists who speak the language of the computer; they do not have a big-picture perspective nor do they understand the problem in business terms. Their social skills are very often lacking, and they are prone to arrogance. In a high-functioning information systems organization, the programmer's job is one of simple translation from specifications into code; those specifications will have been produced via stepwise refinement by systems analysts who do understand the business and the people within it.

See the late Tim Bryce's Theory P essay: https://www.phmainstreet.com/mba/ss050117.pdf and note that he uses the exact same "artists vs. house painters" analogy. Before his retirement Tim had been managing large software projects since before much of Hackernews was born, and had forgotten more than most internet commenters know about what it takes to manage a successful project.

The "software businesses where true creation is happening" are few and far between -- Apple, maybe Google at its peak, and a handful of others. They are run by geniuses, typically from top-tier schools like MIT and Stanford. They are not the typical software organization. The typical software organization produces the software that keeps civilization humming -- and doing that is a proven, teachable, scientific process. Lately we've seen many organizations that should be doing this instead cosplaying as a bunch of genius disruptors, but they have nowhere near the brainpower to actually pull it off, and the world has gone to hell in a handbasket as a result.
Just a shameless plug for https://golfcourse.wiki

If you’re into golf, help try to build the most thorough list of courses in the world, accessible to all.
I like the style, but this case felt forced. Like when corporate tries to do memes.
Does IA have much information on users? I’ve been in dozens of these HIBP leaks (including this one) but still none have concerned me, since they were mostly just email/password and nothing else.

Does IA store anything sensitive for any users?p physical addresses, credit cards, etc?
> Theoretically, someone could scrape the pages and compile a list of exposed email addresses.

I laughed. Oh no! Anyways…

The people interested in identity theft are probably too busy figuring out what to do with all the SSNs they stole (not from this breach, but from the annual catastrophic breach of a credit bureau or government repository).

And the people who want your email probably already got it from one of the hundreds of other services you have to create an account for now.

I’m not really sure if there are circumstances where donating to the internet archive could be held against you and lead to persecution. Maybe in certain Luddite communities? The Amish? But then, how would they know…
Montana uses Sell-By dates to artificially ban out-of-state milk.

They want to promote in-state business (dairy farmers).

Montana purposefully has short Sell-by diary dates, because it makes it prohibitive for an out-of-state dairy to transport their milk into Montana.

https://www.nrdc.org/bio/dana-gunders/how-montanas-sell-date...
This is something to be aware of. It can be guarded against, see https://www.tcl-lang.org/man/tcl/TkCmd/send.htm#M9 .
Reading through the list of providers on your link, I think the answer is that yes, it's more common in the parts of the world, and those parts aren't necessarily the US.
That's the one! They were lightyears ahead but seemingly couldn't make the commercials work. Thank you!
It seems to me like you'd need a separate security LLM context from the primary context that simply screens attempts to jailbreak out of system prompts. Something that simply categorizes attempts and then rejects the text from ever even making it to the primary context, like a sandbox.

But there are much more informed ML people out there than me, so I assume this and similar techniques have already been thought of.
Everyone Got Lost in Netflix's Endless Library
> that's why I'm asking for other differences

If the obvious difference explains the gap, this is unnecessary. Switch American taxation to a territorial system and you’d see a similar flourishing of start-ups and founders in Canada and Mexico.
Transforming Colors with Matrices
I was a user of one of the Fandom wikis this group took over. Moving the information to a better platform is fine.

What wasn't fine is how they made every single page on the existing Fandom wiki redirect to a meme page that didn't explain what was happening. This was particularly disruptive because it made every single google result for "<game name> <topic>" invalid as it redirected to this useless page. Fandom has better SEO and the replacement wiki was so new it didn't appear in google results for several weeks. It was extremely annoying.
https://archive.ph/sAsAJ
No, those are the same that have been around forever. They just have a new tool to "justify" their crappy behavior.
to put a finer point on it: capitalism.

That's still an extremely blunt point. While we can imagine some alternative world where we all live in a communist utopia and the internet is the great free place it was in its early days, it's not so easy to build such a society. All the attempts I'm aware of either didn't scale (small, local communes) or were large-scale disasters resulting in the deaths of millions.

What we have now is no paradise, but it's not a disaster either. It's balanced on the razor's edge of disaster, however.
Are you claiming sugar is a better local anesthetic than cocaine?
> how it used to work in the US

For a definition of “work” which normalises constant financial crisis.
What kind of childhood makes a top scientist?
> But why beer??? Legit question--I don't drink so maybe it's obvious and I'm just a knucklehead.

Very fair question. Anecdotally, when I was just graduating university I drank a few 4+ year past expiration macro-brewed beers that were sitting in the fridge that entire time. The results were not good compared to similar consumption of non-expired beer.
The idea is that the malware could have infiltrated the system (probably) but couldn't have exfiltrated data from it.

So a data diode wouldn't stop a "stuxnet" scenairo where the malware is trying to sabotage the air-gapped. But it would prevent secret information being leaked out.

(Btw. I'm just explaining what a data diode is, and what guarantees it provides. I don't actually think that it would be useful in practice, because it feels to be too cumbersome to use it and therefore the users/IT would poke holes into the security it would provide otherwise.)
As much as I understand that checked exceptions (the general term for the 'throws' feature) can lead to a bit of a maintenance nightmare and doesn't necessarily scale well with deeper call stacks, I have found python documentation extremely lacking in this area too.

I think what I've come to understand is that you can treat errors you don't know about as non-recoverable, because that's most likely what they are anyway if they aren't readily documented. Let them bubble up basically, and handle them at the top level if necessary to prevent crashes in prod/make sure they are logged correctly and so on.
Show HN: Git Py Stats Is a Python-Powered Version of Git Quick Stats
> JavaScript did deliver its promise of unbreakable sandbox

I'm sure there's a big long list of WebKit exploits somewhere that will contradict that sentence...
I gave it a try, but when I tried to start a finetune of Llama 3.1 8B it just gave an error every time. I also encountered several server errors just navigating to different pages.
> Do people set up their own IPTV servers to share content? What are the most popular use cases?

Most people I know use it to watch (pirated) sports broadcasts that are either very fragmented (So you'd have to subscribe to 5 providers, which is very expensive) or not available in the geographic location. Personally I use it to watch Sky UK, which isn't available in my location even if I wanted to pay for it.

You can self-host an IPTV server with https://ersatztv.org + Plex. I've recently set that up just for fun and there's people running channels with real old ads from their childhood just for nostalgia reasons.
Study Suggests AI Coding Assistants Don't Increase Coding Speed
It would be cool if you could run SQL queries against lcoal SQLite or DuckDB instances and generate tables
Thats ideal world solution. Love it!
How much resources requires maintenance of it?
+1

There are already many prompt/LLM routers available.

We've never found value in them, for similar reasons as mentioned above.
Was unaware of the Aktiia. Thank you for posting. I saw firsthand how CGM changed my behavior and would love the same for ketones and blood pressure.

I am particularly excited about the UT Austin research[1] that used conductive temporary tattoos to get actual real time data and not just polling at intervals. However it’s not yet at the stage of commercialization and the design is more the width of a cuff than a watch.

[1] https://scitechdaily.com/electronic-tattoo-offers-highly-acc...
Mine was i5 and I had issues with thermals while connected to external display... turned out that over the years it accumulated so much dust that it was virtually clogged. Given it was way past over any warranty (it was around 2019) I opened it, cleaned it up and all heating issues went away :)

When I got M1 I was on a fence with getting a linux machine but in the end the device was sponsored and ARM (cool and silent) won me over (I can't stand the nosie). I think that it's almost certain next machine will be Linux as apple and macOS are utterly annoying...
I could have the numbers wrong, archive.org is down otherwise I would check as we shared information publicly at the time. As far as I recall, we weren't taking money from the websites, we were spending on infrastructure alone with more than $10k in spend in the final month before the sites were acquired. I think it is easy to forget how much more expensive running things on the internet was back then along with the unprecedented popularity of Minecraft. Once archive.org is back online, I'll track down numbers.
The history of racism in the US is long and complex. In essence we keep track of this sort of thing to try to prevent ongoing systemic racism. "You can't fix what you don't measure" and all that. It also doesn't need to be systemic racism per se. People tend to hire people like them due to unconscious biases so if your company is mostly "X" there are is a good chance it will continue hiring "X".

Here is one example that might be interesting: https://www.npr.org/2024/04/11/1243713272/resume-bias-study-...
There are no obvious changes to a widely used programming language standard.

Even small changes often require years and many revisions to be accepted - burnout is common. You would need to build a consensus that this change is desirable - that's highly unlikely at best. Strict aliasing has been widely implemented since the 1990s and many compilers benefit from the rules; many compiler vendors are on the committee. You'd have to convince them that they should make their customer's code slower.

What might be achievable, however, is some kind of technical report on undefined or implementation defined behavior. Many compilers have options that allow programs with some undefined behavior to behave as the user would expect. Microsoft's C and C++ compilers, for example, don't enforce strict aliasing and allow some forms of integer overflow in loop conditionals. There would be substantial value in defining a common profile for these options. It would still be an uphill battle to get it through the committee, though.
They can't be anywhere even close to synthetic textiles.
Log space is nice, multiplication can be replaced by addition.

This part is easy and anyone can implement hardware to do this. The tricky bit is always the staying in log space while doing accumulations, especially ones across a large range.
Or it can set the clock locally from the particular app instance used for the initial setup.

If that's not accurate enough due to drift, then it can also rejigger the clock during subsequent runs of the app.

And that's probably good enough.

It's just a robo-vac -- nobody is going to be late for work or even annoyed if it drifts a bit and a sequence starts at 7:02:37 instead of 7:00:00.
> Otherwise they'd ban growth for environmental reasons

fantastic to see this delusional thinking spelled out today
I recall you could configure app engine with maximum number of instances you wanted, but you definitely weren't charged if usage was 0. They would start the instances as needed.

The fact that lambda would automatically scale to meet whatever QPS you got sounds terrifying.
Just saw this by chance in the new section and I think it is really compelling. Curious why it is not getting any traction here.
From a consumer standpoint, yes.

From a company-who-abuses-best-by-dates-to-sell-more-product standpoint it's very controversial.
Don't overshoot: why carbon dioxide removal will achieve too little, too late
What does "default expectation" mean here? Didn't the Ambanis just have the most opulent wedding of the 21st century?
Yes... let's let all the users controll the language... and some may decide: https://www.davidpbrown.co.uk/jokes/european-commission.html ;)
WeirdGloop is supposedly profitable despite having only a single, non-intrusive banner ad. It's perfectly possible to run forums/wikis/etc. on even just the free tier of Cloudflare/Oracle OCI.

The issue is that Wikia/Fandom, Reddit, etc. subsumed most other alternatives by offering what was for a long time a legitimately convenient and decent-quality service, but now that communities are too locked in to move (due to intentional measures like changing forking policy, and the community having to fight against network effect/SEO) they enshittify to squeeze out profit. Result is a worse site than if Fandom/etc. had never existed.

Relatively optimistic about movement towards structures that resist this kind of exploitation.
I’m willing to bet $100 he will never make it happen.
With that, attackers need two gadgets instead of one. Where’s the end?
Thanks! I've been meaning to write up a post that talks about some of the specific tricks we're using. A couple big ones:

- Heavy use of Cloudflare Workers to cache ~95% of logged-out pageviews, with a particular focus on doing a lot of edge-side modifications to minimize cache fragmentation

- Using the MediaWiki jobrunners to repopulate the parser cache before pageviews are requested, so even when pageviews hit the server, there's a high chance that the core contents have already been computed somewhere

- I realized that MediaWiki latency is usually dominated by I/O wait time. For example, some pageviews require thousands of synchronous database/redis cache reads, so the difference between 0.5ms lookup and 0.1ms lookup adds up. So we colocated more of those caches on the same physical machines as the webservers that were reading them, which on average dropped latency by ~40%
This is super cool.

So, wait, does this mean that gaming is better on Linux, on a Mac?
I believe libkrun is the tech behind.

https://fosstodon.org/@slp/113283657607783321

Sergio Lópéz has more info in his blog

https://sinrega.org/2024-03-06-enabling-containers-gpu-macos...

https://sinrega.org/2023-10-06-using-microvms-for-gaming-on-...
A bit of a follow up to this; after a bit of thought, I am considering reaching out to Weird Gloop. I do not feel I am able to give The Infosphere the care that it deserves. And with Futurama back on Hulu, we are naturally seeing an uptick in activity. We have a very restrictive sign up in place, because I don't have time to moderate it anymore. It keeps the spam down, yes, but also new users away.

Note: The reason I'm writing I'm _considering_ reaching out and not just straight up reaching out is because the domain itself has a different owner than me, and I want to make sure they are also approving of this decision.
Rabbit's Lam Playground
At least it is a private company though, meaning they are are required to make constant year over year gains for shareholders and investors. They have much more control over where the company goes and how it operates.
Blaming enshittification, rent-seeking and blatant conflicts of interest on... SWEs with overly high opinions of their business acumen is certainly a bold claim.
In my experience this hasn't been necessary yet on anything I've ran. I know WMF wikis run Varnish or something, but personally I'm trying to keep costs and complexity minimal. To that end, more caching isn't always desirable, because RAM is especially premium on low-end boxen. When tuned well, read-only requests on MediaWiki are not a huge problem. The real issue is actually just keeping the FPM worker pool from getting starved, but when it is starved, it's not because of read-only requests, but usually because of database contention preventing requests from finishing. (And to that end, enabling application-level caching usually will help a lot here, since it can save having to hit the DB at all.) PHP itself is plenty fast enough to serve a decent number of requests per second on a low end box. I won't put a number on it since it is obviously significantly workload-dependent but it would suffice to say that my concerns with optimizing PHP software usually tilt towards memory usage and database performance rather than the actual speed of PHP. (Which, in my experience, has also improved quite a lot just by virtue of PHP itself improving. I think the JIT work has great potential to push it further, too.)

The calculus on this probably changes dramatically as the RPS scales up, though. Not doing work will always be better than doing work in the long run. It's just that it's a memory/time trade-off and I wouldn't take it for granted that it always gives you the most cost-effective end result.
> “In the near future, every application will be an AI application; that means that everything we know about security is changing,” Pillar Security CEO and Co-founder Dor Sarig told SC Media.

Quite the opposite: nothing we know about security is changing because of LLMs:

Everybody who is at least somewhat knowledable about security topics can tell you that adding some some AI chat(terbot) to anything security-related is a really bad idea. The only new thing about IT security that has changed is that such sound advice now becomes ignored because of the gold rush.
Agree with the post from a practical perspective, the funny part is from a theoretical perspective all the arguments saying “scrum is wrong” will be wrong… since it is an agile framework it will always have the open way to say “the core says this…” which is really dynamic and agile by nature.

Based on my experience, one of the main issues describing the problem in post is associated with ego and management status… a lot of people in those positions feel like they’re better, superior to engineers forgetting exactly that they should be waitresses for engineers… the core issue is the structure, status and power associated to management and business related positions
Cracking SaaS Pricing: Announcing the Betapass
SaaS pricing is tough. Free trials work, but startups often need a middle ground between free and enterprise without requiring a credit card. That's why we built betapass—users pay for access, and funds are distributed based on usage.
Commercial LLMs generally have input and output filters to prevent "bad" prompts from reaching the model (instead returning canned text), or to nuke output if it appears to violate certain criteria.

But then, you have two independent mechanisms that can get out of sync, a classic source of issues in infosec - except both are also more or less inscrutable and fail in unexpected ways.
> We wouldn't be able to prove if Google ranked sites with their ads higher

This to me is a different argument, though admittedly reasonable to arrive at through the language of "paying Google for placement".

> I think it is a better assumption to make, that Google puts their profit above luser experience, when it comes to search ranking.

I mean, yes. Though I should hope I needn't preamble any statement about <company> with how cynical I am about their intentions... It's not relevant here because I'm not arguing on the grounds that 'Google would be ethical and kawaii if they didn't accept payment for organic search ranking'--I'm saying that from a business standpoint it wouldn't make sense.
> As a reminder, the scheme was designed to work exactly like typical lending libraries.

Wasn't the issue precisely that they removed that limitation and then never added it again?
… but something you should do anyway.

Having unique passwords isn’t something you should rely on either. Good MFA practices limits the impact of breaches like this. It isn't an either/or thing, do both.
Against dystopian views of high-speed audiobook listening
Learned phonotactics matters, though, and many languages distinguish between what's allowed on word or morpheme boundaries vs what's allowed within a single syllable - so even if phonemically it's the same cluster, it can still be difficult to learn to pronounce it correctly in the second case.

There are quite a few languages where both vowel and consonant systems are simple - just look at Polynesian languages such as Māori. The latter's vowel system is 5-vowel, and "long vowels" are phonemically vowel sequences that span moras. But, yes, it does mean that you end up with long words such as "whakararurarutia". That said, it's a rather extreme case, and one can still construct fairly simple but rich consonant systems in practice, because it's basically combinatorics - adding just one more bit of information doubles the domain space! So e.g. if you start with a strict CV consonant system and allow C(l/r)V, that's almost 4x as many contrasting syllables. Make it C(l/r/w/y)V(C) like in Globasa, and even with considerable restrictions on clustering stops etc this is enough for most words to be 3 syllables or less, and for most function words to be 1 syllable.
As actual links so people can click on them instead of needing to copy/paste:

https://g.co/double-sided — (current) Gboard Double-Sided version (2024)

https://g.co/CAPS — Gboard CAPS version (2023)

https://g.co/_____ — Gboard Bar version (2022)

https://g.co/yunomi — Gboard Teacup version (2021)

https://g.co/---o — Gboard Spoon Bending Input version (2019)

https://g.co/tegaki — Gboard Physical Handwriting version (2018)

https://g.co/ooooo — Google Bubble Wrap version (2017)

https://g.co/furikku — Google Physical Flick version (2016)

https://g.co/___o — Google Party Horn version (2015)

https://g.co/m9 — Google Lazy Tongs version (2014)

https://g.co/patapata — Google Split-Flag version (2013)

https://www.google.co.jp/ime/-.-.html — Google Morse version (2012)

https://www.google.co.jp/landing/drumsetkeyboard — Google Drum set version (2010)
If you have to lie to defend your position, your position is not worth defending.