skysight-inc/HackerNews huggingface dataset:
As an example, when I was doing some complex stuff in pybind11 using callbacks, I heavily relied on their tests to understand how it was supposed to be implemented.
The 'Peak Obesity' Illusion
*Theoretical high-energy beyond-standard-model accelerator physics.
This is how I use LINQ as well. With some non-standard names, it has everything you need! Eric Lippert wrote a great series on monads tying it to LINQ:

https://ericlippert.com/2013/04/02/monads-part-twelve/
You're Overcomplicating Production
Developers Remove Plugins from Wordpress.org Repository After ACF Controversy
I love this and applaud it.

It's also very timely: next week I have arriving a portable 3D scanner (an Einstar Vega) precisely because as a hobbyist sculptor the only way I can analyze these works to inform my practice is to go to galleries and scan the works myself (sometimes very surreptitiously!). It's crazy that I need to buy a £2000 piece of equipment and produce have a tonne of CO2 just to be able to look at a piece of art from x00 years ago on my computer.

Bravo.
Better: take one of the existing engines, sort the moves from the best to the worst, if the top move has score S, randomly choose among the moves with score >= 0.9*S.

You can simulate a better/worse player by increasing/decreasing the factor: 1 plays as well as the chosen engine can do, 0 is typing random (yet valid) moves on the keyboard.
Short jump from believing kale smoothies cure cancer to denying Holocaust
Or when the version is EOL, not getting security patches, and/or only compatible with an OS that isn't getting security updates.

…or you're on AWS RDS, which will automatically bump your db cluster if it goes EOL and you ignore the notices for more than a year.
Yep, that's how I learned you can directly google an emoji and find the emojipedia page for it.
I suspect you could achieve a similar result with a standard specification format for vector graphics. You just need to be open to extensions for prototyping features. See open *OpenRaster.

The issue with using SVG is it's not meant for use as data exchange in vector graphics editors but for web publishing.

* https://en.m.wikipedia.org/wiki/OpenRaster
How are these companies able to employ remote people as W2 employees? Aren't the remote employees subject to their local employment law? For example, in Canada the GP would need to be employed as a T4 which requires the company to maintain a Canadian presence (and pay corresponding taxes in Canada).
Does anyone have concerns that this reduces the variance of passwords to something than 35^(character length) because of rules like pronounceable memorable and typeable?
Related:

https://www.reuters.com/business/autos-transportation/nhtsa-... ("Reuters: US probes Tesla's Full Self-Driving software in 2.4 million cars after fatal crash")
> This seems like a different brand of the keyserver network?

It serves a vaguely similar purpose, if that's what you mean. That shouldn't be surprising, since this is all PKI-shaped problems under the hood.

To reiterate: the operational constraints here are (1) simplicity and reliability for PyPI, plus secure defaults for the signing scheme itself. Running a PGP keyserver would not offer (1), and PGP as an ecosystem does not offer (2). This is even before desired properties, like strong identity binding, which PGP cannot offer in its current form.

> "online operations" would be interactions with some other service or a non-PSF service? Or simply a service not-wholly-pypi?

In the PGP setting, that means PyPI would need to pull from a keyserver. That keyserver would need to be one that PyPI doesn't control in order for the threat model to be coherent.

In the PEP 740 setting, PyPI does not need to pull any material from anywhere besides what the uploader is providing: the signatures in the attestations uploaded are signed with an attacked ephemeral signing certificate, which has a trusted publisher as its identity. That signing certificate can then be chained to an already established root of trust, in "normal" X.509 PKI fashion.

You could approximate this design with PGP, but none of the primitives currently exist (or if they exist, are inoperational).

> But the sigstore analog is the JSON array of in-toto attestation statement objects.

Yes. Believe it or not, a big ugly JSON blob is simpler than dealing with PGP's mess of packet versions and formats.
I guess it would depend if I have it as an investment or to drive it myself. I would certainly keep the original logos in storage for future sale anyway.
Show HN: What Is This Malarkdowney
I played as a kid in Canada in the 90s. Fun game.
That might have been the symbolic last drop that made the bucket overflow.
I, personally, use my own password generator to generate passwords using 10 lowercase ASCII characters excluding ilo. That's 45 bits of entropy or one year of brute forcing trying 1 million attempts per second. I consider that a reasonable strength for all but the most important websites.

The password generators that generate me 20 characters of different character classes are crazy.
I wasn't an Apple user until almost exactly a year ago, and the auto-generated passwords were an inspiration to me to cobble together a script that generates such passwords in multiple languages [1]. I couldn't find any info on these passwords, so I am glad this is posted, because indeed, I find the format brilliant!

[1] https://pypi.org/project/applephrase/
Transactional DDL!
So the service you used this password at gets its password hashes leaked. Your account is one of the (admittedly many) low-hanging fruits that gets used for whatever else someone might be using it for.

I suppose, if it's some random forum, they could just post some bot spam with your account and get you banned, no big deal. You'll live.
Wow, racist and objectively wrong.
> I'm curious why the government stopped reporting on the weakening of Earth's magnetic field.

It, er, hasn't stopped reporting that? Ref : https://science.nasa.gov/science-research/earth-science/eart...

Not to mention airports have to update their markings regularly. As for the Carrington event stuff, thankfully we've been upgrading the US grid for a decade+ to better handle these anomalous currents. I'm not losing sleep over it and am enjoying the aurora's display all the way in Mississippi. Anyway, there is government-provided information out there if you want to dispel your ignorance further.
> If module foo had a function bar then my test is in module test_foo and the test is called test_bar.

Same. This is a good 80/20 in my experience.

Testing the happy paths is already very rewarding.
That's really cool! I am working on a diagramming editor and I wondered if I could expand the use cases to include knowledge organization. The challenge is mainly to display a lot of data on a canvas and don't kill the CPU/GPU in the process. How do you handle displaying that much information at once?
Photogrammetry is well established and you can do that with any camera and a few hours of cpu time.
Yeah, travel would be really hard. We didn't go anywhere more than a night when we were on. You would have to pack food to do it successfully, but yea keto is best when you're fixing most of your food.
Technically I tried to solve it for CSV data, which relies a little less on computed data. Prototype: https://csv-n2qj.onrender.com/

My struggle was how to display to the user what changed.
Does pg_upgrade not do all that?

Or do you mean the new Pg server should transparently do the upgrade automatically? And while online?
Uhh… not wanting to see emojis is a matter of taste, not engineering.
Typing that all in without error is considerably easier than typing TMJ0ltu*zif52Cb& in without error.
Been doing so since 15 years,
i make portable html with embedded images, mp3 and much so that i dont need any special software for viewing, just carry it in cloud or my phone nowadays and you only need a browser on any device any os.
With embedded mp3 in html, (yes size may grew large) l, but i dont need special music player software or app just browser,

Nowadays along with html i try to archive using MHTML format instead of manually embedding

Run a simple http server and start browsing archives

FOR IMAGES I DO IS

---> Store all images in Folder

---> Open localhost server

---> Open folder in browser

---> Using javascript convert links to <img> tag with src=link

--> Once browser fetches and displays all images Save as and i have embedded MHTML archive

Or simple bash script can be used to create html with img tag and links to folder

Or you can manuaaly template a MHTML

BUT i let my browser do the heavy work why go manual,

Also instead of BASE64 EMBED, EMDEDDING DIRECTLY BINARY IMAGES IN MHTML IS QUITE MORE EFFECTIVE AND LESS MEMORY CONSUMING

Eg i have 15 images
MHTML (binary encode) -> 4MB
MHTML (BASE64 ENCODE) -> 5MB

Another method i use is,
Run python -m http.server on any folder

Or
linux : tree -H http://localhost:8000
Set recursion depth

Then open folder link from server or tree created HTML IN BROWSER

in cmd
execute
wget -rkpN -e robots=off http://localhost:8000

It will recreate folder with index.html for you to browse, you dont need server then for viewing

Same as export from google or twitter or youtube
Altman came into my awareness because of WorldCoin, and that effort is what made me view him with deep suspicion. It's like he went out of his way to do a very creepy thing in the creepiest possible way.

I wouldn't be happy to use any "identity token" like that, but there's exactly zero chance that I'd be willing to use WorldCoin. I don't think they're anywhere near trustworthy enough as a company, and my trust in Altman is even lower.

If having some kind of identity token becomes nonoptional, then I want it to be run by the government -- they already have my identity information anyway so at least that way my surface area hasn't expanded.
It does mean that not all of the body's behavior can be explained by blood pressure. Emergent properties are not necessarily addressable (or describable, in the case of the OP) at the underlying level.
I’ve noticed for me fasting has a long lasting effect on reducing overeating with leads to sustained weight loss way beyond the calorie deficit- and deliberately doing other mildly mentally and physically uncomfortable activities like cold showers and weightlifting have similar effects also.

My theory is that overeating is basically an addictive behavior- a way to escape from stress, negative feelings, and emotional trauma. It is actually the mental discomfort of fasting that gives you confidence that you can deal with mental pain and discomfort without trying to escape it, that leads to eating less. This is likely the same mechanism behind weight loss drugs like
semaglutide that also help with non food related addictions.

Overall I think people are missing the emotional and psychological mechanisms behind the obesity epidemic, and looking too much at things like calories and nutrient content, which is why the whole phenomenon has been eluding understanding.
Show HN: What happens if you make a crossword out of Reddit r/gaming
As a fan of dense New York Times-style crosswords, I challenged myself to create topic-specific puzzles. It turns out that generating crosswords and efficiently placing words is a non-trivial computational problem.

I started the project, "Joystick Jargon" combining traditional crossword elements with gaming-related vocabulary. Here's the technical process behind it:

1. Data Source: Used a 3.8 Million Rows Reddit dataset from Hugging Face (https://huggingface.co/datasets/webis/tldr-17).

2. Data Filtering: Narrowed down to gaming-related subreddits (r/gaming, r/dota2, r/leagueoflegends).

3. Keyword Extraction: Employed ML techniques, specifically BERT-embeddings and cosine similarity, to extract keywords from the subreddits.

4. Data Preprocessing: Cleaned up data unsuitable for crossword puzzles.

5. Grid Generation: Implemented a heuristic crossword algorithm to create grids and place words efficiently.

6. Clue Generation: Utilized a Large Language Model to generate context-aware clues for the placed words.

The resulting system creates crossword puzzles that blend traditional elements with gaming terminology, achieving about a 50-50 mix.

This project is admittedly overengineered for its purpose, but it was an interesting exploration into natural language processing, optimization algorithms, and the intersection of traditional word games with modern gaming culture.

A note on content: Since the data source is Reddit, some mature language may appear in the puzzles. Manual filtering was minimal to preserve authenticity.

You can try the puzzles here: <https://capsloq.de/crosswords/joystick-jargon>

I'm curious about the HN community's thoughts on this approach to puzzle generation? What other domains might benefit from similar computational techniques for content creation?
Ah! That's a good point. I had been considering a hash leak to be equivalent to a plaintext password leak, where you're screwed no matter the entropy. But I guess you have a fair point: a high entropy password could prevent your password from being cracked even under that scenario. So you could have a point here.

We could explore that further: are there any recent examples of this happening? is cracking password hashes still hard, given modern GPU hardware techniques? This could help us establish what "low" actually means when I say "low threshold."
Oh no, didn’t realize PC was at risk here. Crikey, that’s bad news.
You needn't believe in magic, only in emergent properties well within the constraints of science.
This was an experiment in UX for markdown editing, with use cases such as chat programs and issue boards in mind (slack, jira).

It uses html's contenteditable under the hood, which is jank as all getout, but it works better than I thought it would when I started! I was able to bound a lot of uncertainty regarding the contenteditable behavior. There is still some stuff that I wasn't entirely successful working around yet (ex: cursor movement).

I added a 200ms debounce delay after changes to avoid adding latency to normal typing and hopefully save some cpu cycles (on mobile devices?) but that could be adjusted.
Also the cat was probably well fed. A hungry cat may not retreat so readily.
> So PyPI acts as keyserver, and basically a CSR signer for sub-CA wildcard package signing certs, and the package+key mapping trusted authority; and Sigstore acts as signature server; and both are centralized?

No -- there is no keyserver per se in PEP 740's design, because PEP 740 is built around identity binding instead of long-lived signing keys. PyPI does no signing at all and has no CA or CSR components; it acts only as an attestation store for attestations, which it verifies on upload.
So the user remains at risk in the time between the leak and the time the company discovers it and resets all passwords, which could be months. It might not really be relevant for most sites and for most users, and you might argue that if the hash database is compromised you have other things to worry about, but it's a something to consider.
It is a KeePass extension called Readable Passphrases or something like that, based on that one XKCD comic.
That's quite the mental leap for a statistically one-off event.
This isn't about food availability or ethnical sourcing of food. Apparently the business model of the dairy industry has illegal labor baked into how they do things. They have the gall to threaten Americans with higher prices if their workforce is eliminated. Sounds like extortion to me. This is a problem of crony capitalism.
The perfect is the enemy of the good, and achieving perfection (unlikely/impossible) is the enemy of achieving the good (always, ALWAYS within reach).
Why not use the AGPL version?

(Announcement for those who haven’t seen it: https://goteleport.com/blog/teleport-community-license/)
Can you feed all of Shark Tank to NotebookLM to keep a pulse on the zeitgeist curve?
AI Image Classification, Object Detection vulnerable to physical, digital attack
Evidence of individual corruption is not an indication that we should not teach ethics altogether. This is why ethics need to be taught, so that people are better equipped to weed out bad actors.

That said, who did SBF largely derive his ethics from? His parents, at home, not at his mom's lectures. So all this does is illuminate why it's important for people to get exposed to a wider variety of opinions and ethical considerations.
Another vote for this. Great work thanks.
'“But the plans were on display…”

“On display? I eventually had to go down to the cellar to find them.”

“That’s the display department.”

“With a flashlight.”

“Ah, well, the lights had probably gone.”

“So had the stairs.”

“But look, you found the notice, didn’t you?”

“Yes,” said Arthur, “yes I did. It was on display in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying ‘Beware of the Leopard.” '
> That's nice and all but my original comment was specifically about "processing power of the highest-end x86 chips" far exceeding that of any ARM CPU.

That wasn't the direction I was thinking of going in, but if you want to go in multi-threaded benchmarks, you need to include the Ampere and Graviton CPUs. Those are designed for hyperscalers and then you can make a fair comparison. They are not listed on your cpubenchmark website.

For example this multithreaded score from Graviton 4, https://browser.geekbench.com/v6/cpu/7980680, is better than all of the consumer Intel and AMD CPUs listed on Geekbench in their chart here: https://browser.geekbench.com/processor-benchmarks.

And better than AMD's latest hyperscaler CPU's multicore benchmark: https://browser.geekbench.com/processors/amd-epyc-9654

It is too bad that these Graviton CPUs are not listed on cpubenchmarks. It is true that CPUBenchmarks and Geekbench test CPUs differently so it would be nice to see both benchmark results.
I don't think they are saying "proprietary" as in "secret, closed source", but just as in "custom format" that is built around one particular application.
The main reason to prefer interpolation is that your fixed time step function does not need to operate on variable time ever- removing a complicated dependency.

For instance, modifying character accelerations based on a fixed time step constant is far more straightforward than the methods required to work with variable time deltas (due to floating point accumulated error). This is why any action-based deterministic game (think platformers, shooters, physics based games) will opt for this.

IMO it is much more straightforward to have a render method that pre-allocates some extra memory, interpolates a handful of values and renders them vs the nondeterminism introduced in a game logic method that has to take into account variable time (especially if also networking multiplayer state). And for this you trade off a frame of visual-only latency - a choice I’d take any day.
I'm enthusiastic about BitNet and the potential of low-bit LLMs - the papers show impressive perplexity scores matching full-precision models while drastically reducing compute and memory requirements. What's puzzling is we're not seeing any major providers announce plans to leverage this for their flagship models, despite the clear efficiency gains that could theoretically enable much larger architectures. I suspect there might be some hidden engineering challenges around specialized hardware requirements or training stability that aren't fully captured in the academic results, but would love insights from anyone closer to production deployment of these techniques.
Modern Asp.net stole a lot from a little web framework called NancyFx. It really shaped what Asp.net Core is today.
CCIE Certification
Any potential employer would need to have a Canadian presence (usually a ULC, which is a Canadian subsidiary of an American corp) or go through an EOR (Employer of Record), which would handle taxes, insurance, benefits, etc. "Quietly" working remotely from Canada isn’t a good idea as you'll likely fall foul of Canadian tax law (amongst other things) and immigration law (if you aren't a Canadian citizen), and your employer would likely have issues as well. This is a good summary of the issues:

https://www.swanwealthcoaching.com/blog/2024/05/07/working-u...
Devils advocate:

Maybe they were worried about sales of photos of the bust, and other products of the bust but not created using the scans? Could one take all the scans and produce a coffee table book of photos similar to what the gift shops often sell?

Honestly the whole gift shop argument is weird. I have no sympathy for them. You can get plenty of knockoffs now if you wanted: the world is full of Statue of Liberty, Big Ben, Eiffel Tower, etc keychains and trinkets even without scans. Gift shops already have to compete with those.
Smartphones/laptops/hardware is slightly different because its manufactured/assembled overseas. The dairy industry is domestically based and acting like its workers are based in the 3rd world. Threatening the population with higher prices if they can't continue to break the law is extortion and it needs to be treated as such. If you can't run a legit business with legal labor, you need to be shut down. Someone else will find a way to do it.
FYI, my personal experience has been that few HN readers will engage with such a long comment.

What's worked for me is to make my points / elaborate incrementally.
yep. thats hacker typer.
My point with this thread is that if you're focusing on entropy, you're wasting your time. It doesn't matter beyond some threshold, which I argue is quite low. It doesn't matter if it takes 500 years or 5000 years to crack your password, no one's doing it so long as it's beyond (say) 3 months of CPU time.

It would be better to focus on easy and unique, than to focus on entropy.
I've been to an art museum with a large collection of ancient Greek and Egyptian statues. A lot of the statues are damaged, or were painted and the paint has long since worn off.

I'd love to walk through a VR recreation of what they believe the statues looked like when they were new. It balances the need for preservation of what remains, and the need to preserve the subjective interpretation of what the art was meant to be.
Irreversible environmental disasters loom as global temperatures rise: new study
Same thing, different name.
The answer, my friend,

Is Boeing in the wind.

Twisting slowly, slowly in the wind.
You getting your info from Ben?

https://www.youtube.com/@Suspicious0bservers

https://suspicious0bservers.org/

Be aware he's a bigger alarmist than the IPCC. There's good info there, but I'd be careful assuming everything he says is generally accepted fact.

> Are we about to have a magnetic reversal?

> Almost certainly not.

https://www.usgs.gov/faqs/are-we-about-have-a-magnetic-rever...

> In the past 200 years, Earth’s magnetic field has weakened about nine percent on a global average. Some people cite this as “evidence” a pole reversal is imminent, but scientists have no reason to believe so. In fact, paleomagnetic studies show the field is about as strong as it’s been in the past 100,000 years, and is twice as intense as its million-year average. While some scientists estimate the field’s strength might completely decay in about 1,300 years, the current weakening could stop at any time.

https://science.nasa.gov/science-research/earth-science/flip...

> It has been speculated whether the current weakening of the field is a sign that Earth is heading for an eminent pole reversal – in which the north and south magnetic poles switch places. Such events have occurred many times throughout the planet’s history and even though we are long overdue by the average rate at which these reversals take place (roughly every 250 000 years), the intensity dip in the South Atlantic occurring now is well within what is considered normal levels of fluctuations.

https://www.esa.int/Applications/Observing_the_Earth/FutureE...