skysight-inc/HackerNews huggingface dataset:
I love this project. I "independently" "invented" it in my head the other day, and happy to see it already exists!

I'd love to see blockchain proof/notary support. The ability to say "content matching this hash existed at this time.

I'm exceptionally busy now but that being said, I may choose to contribute nonetheless.

I'd love to connect directly, and will connect to the Zulip instance later.

If we align on values, I may be able to connect you with some cash. People often call me an "anarchist" or "libertarian", though I'm just me, not labels necessary.
Haha, thank you for your kind reply :) really enjoyed the blog post as it shows nicely that implementing HM can be straightforward -- many papers on inference are usually quite math heavy which can be a tough read.

About duplicate labels.. one needs to retain the duplicate field at runtime _if_ there is a "remove_l" or "mask_l" operation that drops a field "l". For example, `{x=2,x=True}.remove_x.x` == `True`. (Where the type of `remove_l` is `{l:a|r} -> {r}`)

This comes up with effect systems where we could have 2 exception handlers in scope, and the current effect would be `<exn,exn>` (which corresponds to a runtime evidence vector `evn` of `[exn:h1,exn:h2]` where the h1,h2 point to the runtime exception handlers.). If a user raises an exception it'll select `evn.exn` and raise to `h1`. But a user can also "mask" the inner exception handler and raise directly to `h2` as well as `evn.mask_exn.exn`.

One could design a system though with different primitives and not have a remove or mask operation, such that the duplicate fields do not have to be retained at runtime (I think).

(Anyway, feel free to contact me if you'll like to discuss this more)
Definitely doable! Search plugins are one of the first that I implemented.

We already provide Sonic, ripgrep, and SQLiteFTS as plugins, so adding something like Solr should be straightforward.

Check out the existing plugins to see how it's done: https://github.com/ArchiveBox/ArchiveBox/pull/1534/files?fil...

archivebox/plugins_search/sonic/*
I doubt there's no notable power draw, NPUs in general have always pulled a handful of watts which should at least about match a modern CPU's idle draw. But it does seem odd that your power usage doesn't change at all, it might be always powered on or something.

Eye contact filters seem like a horrible thing, autocorrect won't work better than a dictionary with a tiny model and I doubt these things can come even close to running whisper for decent voice transcription. Background blur alright, but that's kind of stretching it. I always figured Zoom/Teams do these things serverside anyway.

And alright, if it's not MS making them do it, then they're just chasing the fad themselves while also shipping subpar hardware. Not sure if that makes it better.
Smartsheet.
Volkswagen monitoring data dump threat from 8Base ransomware crew
>Generally, NIST recommends[1] not using a wholly deterministic derivation for IVs in AES-GCM since it is easy to accidentally re-use IVs.

A quick skim of the referenced document did not show where NIST recommended against the use of deterministic IVs. The document actually spends a significant amount of text in discussing how one would do such a thing. Did I miss something?

>Lack of forward secrecy

The article mentions that the key is forgotten when you close the app. Probably enough forward secrecy for most people.

>Since AES-CBC is used alongside PKCS7 padding, it is possible that the use of this encryption on its own would be susceptible to an AES-CBC padding oracle, which can lead to recovery of the encrypted plaintext.

This is a messaging app. Is there actually an available oracle? Does the implementation even generate a padding error?

[1] https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpubli...
I Fell Back in Love with iPhone Photography
Yeah, I’ve wondered about that too! I think it might be because Japanese web design tends to focus more on dense information and bright, busy visuals, while Western designs prioritize minimalism and user flow.
By abstraction I mean a contrivance of symbols (ie things to which meaning is assigned). Be those symbols ideas, words, patterns of magnetized dots or whatever.

Sight, sound, taste, etc are not that.

(I suppose even words are not necessarily symbols. I mean, if you don't assign meaning, if you don't interpret it that way, then a word is just a unique pattern of squiggles)
I was telling someone this and they gave me link to a laptop with higher battery life and better performance than my own, but I kept explaining to them that the feature I cared most about was die size. They couldn't understand it so I just had to leave them alone. Non-technical people don't get it. Die size is what I care about. It's a critical feature and so many mainstream companies are missing out on my money because they won't optimize die size. Disgusting.
Maybe the devices found their target audience: airlines
This is still the case. KDE is full of bugs, bluetooth does not work properly (it fails to swap between hidef to a microphone/speaker setup automatically), 4K monitors have all kinds of problems (though KDE 6 fixes quite a few), hardware decoding in firefox/chromium for videos is a horror, the stupid fan starts all the time out of nowhere (by far the most annoying intel machine behaviour, thermals in windows are much better), and battery is dead after a three-four hours max (and usually much worse than windows on the same horrible x86 hardware).

A macbook air is miles ahead, unless you confine yourself to old hardware. I moved from thinkpads + arch to mac + brew. The experience is insanely better.
I would be fine with it.
About as well as it always did, which was some variation between “they shredded it whilst I watched” and “they probably wiped it before letting someone take it home” to “it shows up on eBay in three days untouched.”
"the largest prime factor of n^2 + 1 must be at least about (log(log n))^2" Yay.
“We don't rise to the level of our expectations, we fall to the level of our training.” Reading about it generates expectations, and they can be deadly.
i'd like to see some sort of site like this with a way to base it off things like stripe earnings, actual subscribers via callback, or people who are actually using it, and actual reviews people who review are more likely to have used it unless they are paid (there's always a way to cheat the system i guess)... maybe other factors too like shares on twitter, etc...
People can and will get their hands on technology and just as before Musk will continue to turn it off when they’re revealed.

Are you alleging that Musk is conspiring to assist the Russians?
I think the poster is confusing/conflating dynamic range compression with file compression
Japanese web design stands out due to its vibrant, content-heavy pages, which reflect cultural preferences for detail and inclusivity. As for officite customer service https://www.pissedconsumer.com/company/officite/customer-ser..., it's a site offering website services, including design and support for healthcare providers. For any concerns, their customer service can help with setup, customization, and issue resolution.
Nice, I wonder if there was a translation on a modern Lisp.
Once it’s built and operational? It can run near 100% for literally decades at 99.9% plus uptime, no solar source is going to do that because of physics where you can easily vary from 0% to 99% over a single day and have to smooth that out for the grid. Obviously you will need an extra reactor or 3 for when you have to take one of the others offline for maintenance.
> Correction of your correction

Thanks! Fixed.

> And I guess snoc is cons reversed and rac is car reversed.

Indeed! That's exactly how those functions are introduced in the article. Quoting from the article:

> The functions rdc and snoc are analogous to cdr and cons, only backwards.
Great article!

Bit of an aside, whilst SQLModel and merging the API validation and ORM models is fast, is it a good idea? There could be reasons these two things should grow individually and is it good to put so much logic into external frameworks?
They do…is that belief that people don’t buy other products that aren’t overpriced a part of the cult beliefs? Do you have a passive aggressive youtube video for that idea that allows you to passively be a dick about the products you don’t buy?

No it doesn’t mean they are wrong, just closed minded.
You can email such questions to hn@ycombinator.com https://news.ycombinator.com/newsfaq.html
In addition, they leaked proprietary code they didn't have rights to publish in the first place.
Show HN: React Sensor Meters-Fun, fill-style meters for custom React dashboards
A small collection of meters I’ve created over the years, showcasing various Arduino sensors for visualizing different types of sensor data.

I couldn't find anything exactly like this when I wanted to create my own custom dashboards so I decided to share in the hopes that others may find them useful.
Drupal.org leaked users' personal data including race and sexual orientation
I have just received this email from Drupal.org:

---

You are receiving this message because private information on your Drupal.org user account may have been exposed

Hello milankragujevic,

You're receiving this message because some of your PII was unintentionally accessible on the public internet.

On 2024-07-02 the new Drupal.org/jsonapi endpoint was launched.

Unfortunately the demographic information user field which should have been restricted as private was made publicly available at this API endpoint by an error on our part. It was discovered on 2024-10-15 and resolved within hours.

We have no evidence of scraping of this data by any malicious actors.

During the time period that this field was mistakenly made public, 17 unique IP addresses made 28 queries to the user API endpoint. Most of those viewed only a single page of 50 user records, while 2 viewed 2 pages, or 100 user records. It is possible that none of the returned records had any data in this private field, but out of an abundance of caution we are notifying any user who might have been affected.

A maximum of 1400 users may have been affected by this issue in total, but more likely it was less than 100 users, most of whom had not filled out the demographic field at all.

The issue is now resolved, with the information no longer publicly accessible.

Your data which may have been exposed included:

Demographic information
Which could be associated with any of your public user information from your Drupal.org profile.

We sincerely apologize. We take the security and privacy of your data very seriously, and treat your data in accordance with our Terms of Service and Privacy Policy, in compliance with all relevant regulations and ordinances, such as GDPR.

If you choose to, you can delete the information in the Demographic field on your Drupal.org profile by editing your account on Drupal.org. You can also remove your account from Drupal.org at any time, by following the instructions in our documentation.

Best Regards,

The Drupal Association Engineering Team

---

The "Demographic information" that the refer to, in the email, is described here: https://www.drupal.org/drupalorg/docs/user-accounts/demographic-information and includes: Ability, Age, Ethnicity, Gender, Gender identity, Race, Religion, Sexual orientation, Socio-economic status/class, Learning differences, Family composition
Perhaps. But I'd be more convinced if you gave some arguments.

This article tells a very different story: https://www.cnet.com/science/rare-asteroids-near-earth-may-b...

Platinum has a lot of industrial uses today at $1000/oz: https://market-news-insights-jpx.com/ose/commodities/article...

At $10/oz it could be used for vastly more purposes.
Author of DPO Is Giving a Talk in Palo Alto
A. Sharma the author of DPO, will be sharing insights in RLHF, this Thursday Oct 17th in Palo Alto. Cohost is CHAI research, where their researchers will be talking about how they built their LLM's and serve them to >1M users while staying profitable.

Current number of sign ups: 60. Max event size: 100, approval required.
I suspect the author is thinking back to more than ten years ago.

But yes; even newsgroups, BBSes, etc. were subject to this kind of stuff. People have always been people, even smart people with money to purchase computers.
Comments moved to https://news.ycombinator.com/item?id=41859047.
It's unlikely to be literally connected over PCIe when it's on the same chip. It just looks like it's connected over PCIe because that's how you make peripherals discoverable to the OS. The integrated GPU also appears to be connected over PCIe, but obviously has access to far more memory bandwidth.
If they aren't being used it would be better to dedicate the space to more SRAM.
I have not been following the end-to-end encryption discussion in a while so please excuse my ignorance in asking...

How does the 'rubber hose' threat apply to Matrix? So long as you are in control of your home server (or at least use a home server you trust) I am not sure who your advisary would pressure.
Give it another go! _The Anatomy of LISP_ is the first entry in the bibliography.
A right-wing argument against climate change policy is to “let the market forces” do the driving.

“No! Not like that!” I bet they’re screeching right now as megacorps refuse to tie their cart to a dying horse.
https://news.ycombinator.com/item?id=41858863 set off the flamewar detector. We turned that off a while ago. No one opted or buried anything.
Yes, the chairs on the Titanic aren't perfectly aligned with one another.
> you’ll start to see jobs requiring 100+ years experience

Do you currently see jobs demanding 50+ years experience?

Even if we ignore the fact that most jobs won't require any more experience to do than they take now just because we live longer, longer periods of time won't seem as costly to us either. Right now 100+ years of experience is absurd because the only way they could ever have that much experienced is if they worked from the day they were born until the day they died, and even then they would need to live an exceptionally long life. If we lived to 200, you could start your career in your 30s, get those 100 years experience, and still have 70 years - an entire current lifetime - to reap the rewards afterwards.

Being more realistic, there is some finite amount of money you need to put away to live indefinitely off interest at any given level of comfort. Right now reaching that threshold in the 50ish healthy adult years we have is a difficult but achievable goal for most people. But with more time you can reach that threshold on a less aggressive trajectory and enjoy retirement for substantially longer (all while being healthier to boot).

As a thought experiment, if you want to imagine how you would feel about your doubled lifespan, consider your current lifespan doubled from some previous threshold. Would you prefer to live only 35 years on average with 50 being advanced old age? Sure there might be some benefits, perhaps some jobs might lessen their experience requirements, but would this be overall a more pleasant world with higher quality of life? We did not choose a 75-100 year lifespan to optimize human happiness, it is just the number we happened to wind up at as a result of a process that did not consider human happiness at all.
Hexagonal Architecture in Practice [video]
The lists can be ridiculous sometimes. Many sites have an 'unsubscribe from all' option, that is basically just an unsubscribe from all CURRENT lists.

Later they create another list and you end up subscribed to just that new one, even though the unsubscribe from all option is still selected.

Edit: Another pet peeve is when you click the link to unsubscribe, and they want you to enter your email address. Bonus points are awarded when your email is in the querystring, but they fail to populate it.
> It is possible to use a JIT model for this but AFAIK it is typically not done.

Isn't this what the last line of the article is hinting at?
> our WebAssembly team is making great progress rearchitecting the Wasm compiler pipeline. This work will make it possible to Ion-compile individual Wasm functions as they warm up instead of compiling everything immediately.
There’s a headphone port in the Quest 3. I just got a $20 set of wired headphones for it. I think you can connect via Bluetooth for wireless but I have t tried.
Your unit tests should just take the result of loading the file as an argument or other type of injection param. Then you can hardcode your unit test config parameters in the test code itself. That's the appropriate place for this kind of indirection.
You seem to think that I'm praising these companies. I'm certainly not. I think they're a net negative on society.

That said, it's as important to acknowledge when they do something positive, even a little bit, as it is to call them out when they do bad things. More important, even, since if all a person can do is condemn then that person becomes less effective in terms of encouraging change. You want both carrot and stick.

> You think these companies made this decision with altruistic concern for the environment?!

Of course not. Nothing any of these companies do is altruistic. It's all about the Benjamins, baby.
I briefly worked for a place which used Splunk for what you'd normally use ELK for. I found it way more forgiving and in many ways easier to deal with than ELK, if only for the 100% certainty that you can run any query on anything, even if it sometimes takes ages. It was an old version, too.
What is the point of 'open source' where you're not even allowed to fork the damn repo?
Yep. Seamonkey is good. I also use the html editor.
It's a Mozilla Future project in their Builders program's 2024 cohort: https://future.mozilla.org/builders/2024_cohort/
As far as I understand it, no matter what kind of magic fusion device you come up with, it's going to be throwing off lots of fast neutrons which will be absorbed by the equipment generating the fusion reaction

So a fusion reaction will gradually irradiate the generator that is creating the reaction.

A molten salt reactor which consumes virtually all of its nuclear fuel as the closest approximation to your desire to have nuclear reactors without nuclear waste.

Edit: I recall that helium 3 fusion may actually be pretty neutron free. But you got to get your hands on a lot of helium 3
I mean, they have the right to be opposed to this practice even though it is standard, right?

I myself am opposed to it too, and I believe the more people stand up to it, the merrier.
Why in the world did they have data on… Ethnicity, Gender, Gender identity, Race, Religion, Sexual orientation, Socio-economic status/class, Learning differences, Family composition ?
>Eh, my experience is the opposite. A lot more exploitation in grad school than in industry. It's a lot easier to change jobs than change professors/universities.

>I recall multiple cases of formal/semi-formal interventions where other professors or the department had to force an advisor to let the person graduate (they wanted to keep milking them for more papers).

That's kind of what I mean though. In grad school other professors you've worked with might still keep an eye out for you. Under an exploitative employer, the way I was previously, I wouldn't know any better, I had no sense for the value of my time/work and I used to panic about having to send simple emails to people, quitting a job used to sound equivalent to suicide.

For me there's also the factor that as an international student, it's a lot easier for employers to exploit me than a school.

Edit: Although, come to think of it, I do know of other departments at my uni where even other professors can't be relied on to help in such cases. So I guess you're right.
To your point, profile your data as you would your code.

A sorted array of bit locations would represent a sparse bit set well enough to start, with O(N) storage and O(log N) access. Once the sets became large and/or dense, another data structure could be considered.
You can make a source available license and no one will criticize you for it. You put in the license "you can look, but you can't touch". When it becomes openwashing is when you instead write "you can look but you can't compete with us, also feel free to give us a hand". Let me cite:

> * Contribution to Project: You are encouraged to contribute improvements, enhancements, and bug fixes back to the project. Contributions must be submitted to the official repository and will be reviewed and incorporated at the discretion of the maintainers.

> * Assignment of Rights: By submitting contributions, you agree that all intellectual property rights, including copyright, in your contributions are assigned to Winamp. You hereby grant Winamp a perpetual, worldwide, non-exclusive, royalty-free license to use, copy, modify, and distribute your contributions as part of the software, without any compensation to you.

> * Waiver of Rights: You waive any rights to claim authorship of the contributions or to object to any distortion, mutilation, or other modifications of the contributions.

>Nobody is forcing 'the open source community' to contribute under the terms set forth; anybody who does contribute does so under their own free will, under the terms set forth by the license.

And? Yes, we're all acting out of our own free will. The owners of Winamp decided out of their own free will to release their code under those terms, and I'm criticizing them for trying to take advantage of people also out of my own free will. What's the issue?
Depends on the timeframe.

Nuclear is among the least dependable generation sources from a long term capacity standpoint, with multiple incidents taking generation off for long periods. 3 mile island wasn’t a big deal from a health and safety standpoint, but at 4 AM TMI-2 went offline with zero warning and never came back. Similarly you can’t trust timelines for when exactly new generation will come online.

Less severe incidents don’t necessarily make the news, but losing 1.3 GW at some random period for weeks or months isn’t particularly uncommon. Sure major incidents are “rare,” but there’s not actually that many nuclear power plants ever constructed.
Thanks. I don't really see how the validation schema and ORM model would ever really diverge... it's basically just specifying the various fields that are required or expected and the types of those fields. Before I found SQLModel and I was separately using SQLAlchemy ORM and Pydantic, I would always end up with models that more or less looked the same but with just different syntax. And actually keeping them in sync was very annoying, since you would always have to remember to change things in both places. It's very natural to combine them.

The beauty of how tiangolo (creator of FastAPI/SQLModel) implemented things is that an SQLModel class isn't just LIKE a pydantic schema and LIKE an SQLAlchemy ORM data model-- they literally ARE those things under the hood, so you can still use those libraries separately for more advanced tinkering and stuff "just works".
Clickable link: https://www.drupal.org/drupalorg/docs/user-accounts/demograp...
This x10.

When working with high variety data there are so many things that can go wrong (esp when working with external data sources), so you want a strongly typed compiled and memory safe language.

I really believe that as data engineers we need to adopt a language like Rust. It helps a lot that it has polars, so we can keep working with the dataframe paradigm.
API Docs
Is it dangerous to post your API Routes?
Thiel knows how to get rich and I’ll give him that, however I would never trust his reptilian takes on geopolitics or anything else outside of business strategy and even then I might limit it to stuff he’s working on in the past.
It is necessary for the problem and analysis to be linked like that?