skysight-inc/HackerNews huggingface dataset:
"I use a single 12k mAh Anker battery bank".

Is it really? Or is it a 12G nAh battery bank?
Well, for a start there is a strong tendency for devs these days to ignore the old wisdom of abstraction and layered architectures etc. If they keep doing it long enough they usually learn it eventually, though!

But this kind of thing can work in a well-architected system too. You're basically just saying this API is pure CRUD. I simply record what the client tells me. Then you have to apply your business rules somewhere else. This is usually the event-driven approach. I just record commands/events, then some other code actions those, based on business rules.

Where I think this goes wrong is not realising the business rules have to go somewhere else. I see this with Django a lot. You get started with just pure CRUD then someone says "oh, we shouldn't allow that record because xyz", and the whole thing starts to become a mess.
UndefinedBehaviorSanitizer's Unexpected Behavior
CRA is meant as a starter application. IMO for anything serious, an app should either "eject" or use a framework.
> it is well known that Hamas set up command centres in or under hospitals

This is patently false. Israel single-handedly claimed this without any evidence other than CGI render. Think about it, ALL hospitals in Gaza has been bombed by this point, but have you ever see the actual footage of Hamas command centres?

Also pretty sure there was no Hamas involved in the case below:

> In one of the most egregious cases, the Commission investigated the killing of five-year-old Hind Rajab, along with her extended family, and the shelling of a Palestinian Red Crescent Society ambulance and killing of two paramedics sent to rescue her. The Commission determined on reasonable grounds that the Israeli Army’s 162nd Division operated in the area and is responsible for killing the family of seven, shelling the ambulance and killing the two paramedics inside. This constitutes the war crimes of wilful killing and an attack against civilian objects.

Also for the first point, you can read more about it in NYT (if you have the subscription) here: https://www.nytimes.com/2024/10/16/opinion/gaza-children-dea...

Some people accused it as fake, but NYT themselves had rigorously verified the evidences and found it to be true: https://www.nytco.com/press/response-to-recent-criticisms-on...
Apple worked with China's BYD on long-range EV battery
IR can be auto-upgraded between LLVM versions.
KDE Plasma 6.2.1, Bugfix Release for October
On the contrary, this stack makes my life as comfortable as possible.

I do understand esbuild, I don't understand whatever it is that Vite does.
As long as you use the C++ API, the pace of change is reasonable.

If you try to keep by by generating textual IR, it can be a nightmare.
see - https://opennext.js.org/aws/comparison
Ask HN: Share Your Experience with QR
I live in India, and here majority of transactions daily work on QR scan, that is great for computers and devices but QR code in Media and Marketing have failed to gather attention of audience or are less interactive when it comes to perceiving a brand.
Recently I came across qewie on Twitter. And that made me curious about what can be done with a QR.
Please share your experiences where you were interested in representation of QR and how it impacted your relationship with the brand.

https://x.com/josephpalbanese/status/1841522918460620940
That's really cool. I have a Boox device with a Kaleido 3 display and the colours are really muted. And the display is much much darker than a regular BW display. I use it as an info display so I can quickly see the weather forecast and when the next subway leaves.

I'm also impressed by the improvements to Gallery 3 displays used in the latests reMarkable. Gallery 3 has typically had much better colours, contrast and brightness when compared to Kaleido 3. Now I'm very curious for the reviews.
What are AKGs?
There always is a way to opt-out, just delete the account. It is a toxic far-right propaganda platform anyways and it is smartest to just get off of it.
Some clients are more like a bot/service, imagine google reader that fetches and caches content for you. The client I’m currently using is miniflux, it also works in this way.

I understand that there are some more interactive rss readers, but from personal experience it’s more like “hey I’m a good bot, let me in”
This will solve a lot of virtualization issues, if the project works out successfully over the years.
I don't think my comment implied anything nefarious about EU influence in the UK. Why would you think so?

I'm saying that the EU uses law making as in EU law making as both a political tool and a diplomatic tool which is, well, undeniable. You just have to take a quick glance at think like the EU green taxonomy or the CSRD to understand how it works.

> Very simply, maintaining two production lines or trying to engage in pointless differentiation from the standards of your largest export market is costly and potentially futile.

See, that's what I'm talking about. That's using law making as a diplomatic power.
Or not. They claimed a big win but it was not at all that. It was essentially not completely falling at the first hurdle. All bar one of their claims were dismissed.

The remaining claim may not be a good claim, but it isn't completely laughable.

https://cdn.arstechnica.net/wp-content/uploads/2024/08/Ander...
Order-on-Motions-to-Dismiss-8-12-2024.pdf

In October 2023, I largely granted the motions to dismiss brought by defendants Stability, Midjourney and DeviantArt. The only claim that survived was the direct infringement claim asserted against Stability, based on Stability’s alleged “creation and use of ‘Training Images’ scraped from the internet into the LAION datasets and then used to train Stable Diffusion.”

I think you could have grounds for saying that construction of LAION violates copyright which would be covered by this. It doesn't necessarily mean training on LAION is copyright violation.

None of this has been decided. It might be wrong.

The rest of the case was "Not even wrong"
TIL! Although my neighbour still does live cover, the local semen vendor not only provides this service (~90% selected), but even has an app to calculate if the extra expense could be worth it for your dairy op: https://www.swissgenetics.com/en/selexyon-profitabiliy-calcu...

(they seem to suggest a mixed strategy could be optimal: just enough sexed straws to guarantee full replacement of the dairy herd, and normal straws for the remainder)
Why OIDC works for us to connect to AWS?
It was nothing more than a handful of interns couldn't come up with in the same amount of time. Along the way they just asked obvious questions about how we used and wanted to see our data. There wasn't any magic, there was nothing new. We can make our own reports. We were told they were going to find new insights, there weren't any.
This is an excellent discussion from one of the smartest and most incisive commentators in the industry.
> Finally, sadly, the most obvious point .... a longer form helps sort the wheat from the chaff. Both in terms of cutting down the volume of applications some poor soul has to trawl over, but also helping keep the quality of applications high.

Does it though or does it sort out the projects who would rather focus on developing while selecting those better at marketing themselves than at building useful things aka the professional bullshitter class.
I am not trying to "make an exception", I'm asking for information external to Cloudflare so I can look at what people are experiencing and compare with what our systems are doing and figure out what needs to improve.
> What are those "entirely disproportionate downsides", in your opinion? If you subtract the effects of radiophobia?

A handful of people operating Chernobyl have caused costs that passed 600 billion euros already in 2016, and will keep costing more money for the foreseeable future.

Nations have international agreements to cover liabilities from nuclear power stations, since no company and very few individual nations can cover the costs of severe accidents.

That's disproportionate.
But if they want to observe planets, and planets move, wouldn't the telescope need to move too, to keep the image stable while gathering more photons? I presume very few photons reach the telescope from that far away.

That means the object's orbit need to be known before beginning it's observation, and then consuming a lot of propellant to change the telescope's speed and trajectory, possibly distance to Sun too, to track another object.

At that distance from the Sun, to track objects in another solar system, it would need to move vast distances sideways possibly taking hundreds of years.
> I use passkeys for everything I can and I've never once seen friction.

That’s great for you, but they don’t currently work like that for anyone

- using anything other than Chrome or Safari (many sites perform broken user agent based support detection)

- using both iOS and Android (at least not without setting up a third-party password manager, which not everybody knows how to do, or even why)

- not using iCloud (iOS just outright refuses to store local-only credentials, last time I checked at least)

Passkeys are absolutely an improvement for anyone able to use them, but that’s still strictly less users that can use passwords. And even for those that can use them, the availability story is still worse (almost by design, but that’s no consolation for a locked-out user).

> If anyone in the comments doesn't like the implementation of webauthn, suggest changes to the spec and do the work to get it implemented instead of complaining about it in the comments.

I have, with no success. There seems to be a misalignment of priorities and incentives. I even understand where the editors are coming from, but like most industry-sponsored specs, it’s really not the democracy you’re trying to paint it as.
Awesome. My company had blocked Ngrok, will try this out when I am back from my leave.
I love that these solutions exist for some extreme workloads but I hate that everything has shifted to microservices by default.

I’m not a fan of resume-driven development. Monoliths are just fine for most organizations’ needs.
How does Google Password Manager sync your passkeys then?

EDIT: Private key is not transmitted off of your device when authenticating, but it can be transmitted off of your device by your password manager.

"The difference between passkeys and passwords is that passkeys are cryptographic key pairs. The key pair is specific to a website. One half is shared with the website, and the other half is private and stored on your device or in your password manager." [0]

"Passkeys are securely backed up and synced between your Android devices" [0]

"Passkeys are stored in your Google Account..." [0]

"Your iCloud Keychain stores and syncs them [passkeys] between iOS, iPadOS, and macOS devices." [0]

[0] https://support.google.com/chrome/answer/13168025
Considering the high price of Vision Pro I'm surprised it does not include high quality spatial sound over-ear headphones. Required for Cinema experience which currently seems to be it's best use case, plus the overhead strap could help support its heavy weight for better comfort.
Doesn’t the article say the OP wanted to work on meaningful problems in healthcare and bio? I don’t think what you describe sounds like that.
Ask HN: Do you use CM tools newer than Ansible?
Ansible was created in 2012.
I am curious if you use any general-purpose configuration management tool that is newer.
(By "general-purpose" I mean not narrowly focused on containers or cloud infrastructure.)
I am aware of at least Itamae (first commit in 2013), Pyinfra (2014), mgmt (2015), and mitamae (2016).
New Way to Deploy Dbt
Why is it required and how is it different
Kudos to the team, this is truly impressive work! It's exciting to see how AI connects with the local-first movement, which is also really exploding in popularity.
(The idea of local-first, where data processing and functionality are prioritized on users' own devices, aligns perfectly with emerging privacy concerns and the push for decentralization.)

Bringing AI into this space enhances user experience while respecting their autonomy over data. It feels like a promising step toward a future where we can leverage the power of AI without compromising on privacy or control. Really looking forward to seeing how this evolves!
You forgot about conservation of momentum. Photon cannot change it's direction without interaction with something to exchange momentum.

"Bending of spacetime" is just computational trick to increase precision of the model.

Bending of trajectory because of change of speed of light is negligible, yes. It's only visible on light-year long distances.

Photon is very wide. Dual slit experiment show that single single photon interacts with two slits up to millimetre apart. Even small difference in speed/frequency at such large distance will accumulate to noticeable change of course at light year long distances.

I can calculate bending radius, if you wish.
I use pyinfra and I love it. Pure python resulting in pure shell commands.

I'll definitely check others.
Hi there Hugo from Orchestra here - I am a data engineer by trade and always wanted a sort of "control plane" for data that in today's terminology would be described as "pipeline builder + orchestrator + observability". Obviously a big part of that is being able to run a repo of SQL code a la dbt, which we now can. So that is pretty cool and would love any feedback anyone has.
https://app.getorchestra.io/signup
I hate that every time a vulnerability is posted, someone has to argue about whether the bounty is high enough. It’s always followed by, "blah blah, they're pushing whitehats to sell it on the black market."

Vulnerabilities will always sell for more on the black market because there’s an added cost for asking people to do immoral and likely illegal things. Comparing the two is meaningless.

To give a straightforward answer: no, I don’t think $20k is underpaid. The severity of a bug isn't based on how it could theoretically affect people but on how it actually does. There's no evidence this is even in the wild, and based on the description, it seems complicated to exploit for attacks.
Ah you're right, I didn't know external TPM modules were a thing. Looks like they're only ~10ish usd too.
With Vite you do not have to hack together Hot Module Reloading yourself.
Where are you still seeing attestation?

Both Apple and (I believe) Google threw theirs out when they moved to synchronizing passkeys, and they’re both widely supported by relying parties.

Other than that, I think it’s fair for e-signature etc. services to be able to require a physical, non-synchronizing credential like a Yubikey. With such a service, it’s not just your (as the key owner), but also others’ security on the line when breaches happen.
When I switched from CRA/webpack to Vite I saw an order of magnitude speed-up, from minutes to a few seconds to compile. My laptop is old, needs replacing and starting to struggle but really shows how bloated webpack is.

It's fairly trivial to switch too, though means you need to start understanding how webpack/vite/package.json/tsconfig actually work. I did the same as the author and just made a new vite app and then copied stuff over and moved things as required.

The only complication I could really see where the environment variable names, which we only used two anyway.

By the way, I don't know why the author changed to using import 'components/blah' to '~/components/blah' as there's no real explanation in the blog post. The link for their commit is broken so can't see what the author has done.

You actually don't need to do that, all you have to do is set 'baseUrl' in your tsconfig (e.g. "baseUrl": "./src"). That tells typescript where to look for imports. Then Rollup via Vite handles the rest in compilation.
CRA seems pretty much abandoned. I wouldn’t recommend it for anything nowadays. There are much better options for both starter and serious apps.
Vite uses esbuild under the hood. It can also create bundles with all your deps, which is essential when you don't want an npm i step involved during deployment (lambdas/containers).
Try getting CCTV footage passed as admissible in court in most of Europe. It's basically impossible, even at HD resolutions. That's if you can even get hold of the footage under GDPR - as it requires the police to request the footage and follow up with the business to ensure its passed on.
Migrate from Create React App (CRA) to Vite with One
God damn that is one of the best things I’ve ever read.

Super clever sleuthing
They should have open sourced from the start, then such a drama would never have happened. But if you start propietary, become very popular and then open-source, you really have to be careful with what you open-source. It's just how copyright law works. And we can't just ignore the copyright law in just this one case because it's Winamp, unfortunately.
That is actually how current CS cheat detection works. I think valve had a talk about it. I think it's called valve overwatch.
There is no chance the license changes. Matt has been a very, very vocal supporter of GPL.

This self-described war he’s going on is all about commercial trademarks, and other hosting companies having more commercial success than Automattic in the ecosystem while contributing fewer developers and less money to the project.

Now, he’s taken it to a very extreme extent, and I fully disagree with his approach, but the core issues (for him) have nothing to do with GPL and how the WP project is governed. Those has even the same for decades, and he’s not trying to change them.

He’s just being very self-destructed because it turns out the community has no interest in some kind of “war” that gets long term contributors locked out of the ecosystem. He was expecting more people to be on his side, and frankly now seems to be lashing out (by blocking people) when that didn’t happen

None of that means he’s trying to change the governance model or license.
> and to add a bit about searching for a new maintainer.

Don't. Unless you already know someone you can trust it's better to just let someone fork it and build reputation for their fork on their own.
Cursor Update Removes External Pastes into Chat
Recent Cursor hotfix seems to remove external pastes (probably to remove possibility of pasting in edits from Claude running in browser and using cursor-small to apply). Workaround could be to simply past into an untitled file and tell Cursor to apply one file's changes to another.
I had problems accessing Cloudflare-hosted websites via the Tor browser also. Don't know it that is still true.
What a goober
It can be simplified even more if you just use Deno and don't bundle.
Lovely plumage
My company runs a tech news website. We offer RSS feed as any Drupal website would, which content farm just scrape our RSS feed to rehost our content in full. This is usually fine for us - the content is CC-licensed and they do post the correct source. But they run thousands of different WordPress instances on the same IP and they individually fetch the feed.

In the end we had to use Cloudflare to rate limit the RSS endpoint.
Yeah I see, but also all of that shifting of weight, heat, acceleration and deceleration must be pretty stressful on that structure and on the materials, I feel like it would be best to wait and see what these things look like after one or two uses before claiming the wins.
Having a few eink readers/tablets, I can say that I almost never care about battery life. You end up charging them once a week or two anyway. I never look at battery stats for them because it almost never ends up important in practice. I don't even look at the battery stat when deciding which to buy or when I recommend one to a friend.
Why can’t other interests, such as labour interests, also bait-and-switch?
In Brazil these "persianas" are everywhere as well, and they look exactly like the one in the example you gave.
Efforts to eradicate queer people and any relevant information through history make efforts like this even more important. It's good to see Wikimedia taking an active role in improving coverage even if it's only exploratory at the moment.
Some people do feel responsible for things besides themselves. That's generally a good thing for society.
Friend, it gave the answer 10, just like the illusionary calculator. I'm sorry you don't like how it got the answer.

You take care now.
Passkeys aren’t identical with secure enclaves.

They can be stored in them, but also in software; even when stored in hardware, they can be marked as extractable to some trusted party (a companion device with the same root of trust, a trusted cloud sync service, a supply chain attacker etc.)
That movie is full of insight. That whole 'nobody can hear Jesus talking' is a great point as well. Those speeches are just pure fiction, just as the speeches from Alexander and friends are. Real ancient historians even admitted that they just made up the speeches to add some flavor.

In fact that whole speech from the gospel was most likely simple something 'Matthew' (not actual Matthew the character from the bible, but some random author who's script was later titled 'Mathew' by the church) inserted into Mark. And funny enough in these speeches Jesus just happen to say some stuff that overrides a number of points from 'Mark'. Its almost as if 'Matthew' used Jesus to voice his own opinions.
I read it as if it was a subscription, my bad.
We have encountered that problem too. As far as I learnt from various sources that is caused by circular imports in some cases, and by using index files that re-export your modules in other.
IEA World Energy Outlook 2024 [pdf]
Passkeys and secure enclaves are only loosely related. You can implement one using the other, but it’s by no means a requirement.

And even when they are, nothing says that secure enclaves can’t have importable or exportable keys. Many schemes do both on a regular basis.
Webpack is much slower because it's written in JS. Vite uses esbuild to compile, which is written in Go. That's probably why you saw the speed up.
I was grappling -- and failing -- to parse that comment. Thank you for explaining.

To unpack the explanation, because I was wondering how the very negative statement could be misinterpreted:

"Never" is a negative; "fails" is a negative; in English, two negatives cancel out.

"Never fails to disappoint" means "always disappoints".
any plans to share progress on open channels like matrix.org or even irc?
It really messed a lot of things up, editing my blog used to be seamless and after it took multiple seconds to even load the editor.
I believe this also pose issues to people running adblockers. I get tons of repetitive captchas on some websites.

Also other companies offering similar services like imperva seems to be straight banning my ip after one visit to a website with uBlock Origin I first get a captcha, then a page saying I am not allowed, and whatever I do, even using an extensionless chrome browser with a new profile I can't visit it anymore because my ip is banned.
Parts of photon cannot have different frequencies than whole photon. Both inner and outer parts of photon will make exact same number of fluctuations for the same period of time, but inner part will travel slightly smaller distance.

It's the same effect as in reflections, except that speed difference between air and solid objects is much much bigger, which results in sharp turning radius.
iCraft Editor – 3D Diagram Designer
iCraft Editor is a 3D diagram designer that can help you draw network diagrams and other 3D diagrams. iCraft Editor is an alternative to cloudcraft. iCraft Editor uses real 3D scenes to display architecture diagrams. Draw AWS|GCP|Azure|AliCloud architecture diagrams and visualize your AWS|GCP|Azure|AliCloud environment as an isometric architecture diagram. It can rotate views and nest sub-scenes to help you easily draw excellent 3D architecture diagrams.