skysight-inc/HackerNews huggingface dataset:
The fines are symbolic. Even if you look at the fine for the hotel data breach in 2018, that was only $52 million (US) and $23 million (UK), total of $75 million. And the Equifax breach? An executive VP of IT sold $584k of shares right after the breach and before the press release. Nothing happened to him, he said he was unaware of the breach. https://www.npr.org/sections/thetwo-way/2017/09/08/549434187...

The SW supply chain attack is one of the most brilliant cyber attacks in recent history. They hit a train load of gold bars, and had a much as 14 months of dwell time with potentially 18,000 customers. Discovery must have been disappointing for the attackers.

If you follow the most important rule, secrecy, you get plausible deniability and small-er fines.
Maybe Boeing should be allowed to go bankrupt as whoever buys the pieces would definitely do a better job.

Also, isn’t this how capitalism works or supposed to work?
Yeah this will be a true paradigm shift
I like it already!

Unbound athlete guide [1]:

"Special Note:
The Flint Hills region of east-central Kansas is an extremely remote area. You will rarely pass through any towns, and there are no convenience stores between checkpoints. Always be aware of the distance to the next checkpoint and be prepared to travel that distance with the supplies you carry. Participants are solely responsible for their personal well-being, will have to make their own informed decisions, and suffer the consequences of those decisions. Please be aware... if you break down or become injured, it is YOUR responsibility to contact your support crew to come get you. DO NOT CALL US. WE WILL NOT COME RESCUE YOU. EVENT PROMOTERS AND SPONSORS ARE NOT RESPONSIBLE FOR YOUR SAFETY AND WELL-BEING. If you sign up for this event, make sure you have a support crew with a well thought out emergency backup plan. If you do not feel you are prepared to meet such a challenge, please consider a shorter route option."

Support crew info [2]:

"Support Crews are NOT allowed on course, except to pick up a rider who is abandoning the event. IF A SUPPORT CREW VEHICLE IS SPOTTED ON COURSE, THEIR RIDER WILL BE DISQUALIFIED. Providing support to a rider while on course goes against the self-sufficiency spirit of this event. It is unfair to other participants, and therefore will not be allowed."

[1] https://www.unboundgravel.com/wp-content/uploads/2024/05/202...

[2] https://www.unboundgravel.com/support-crews/
Ask HN: What are the best resources for SWE to PM transition?
I am a software engineer with nearly 15 YOE and as I progressed I have been drawn more and more towards product. I am interested in transitioning to the PM role at a startup but would like to be setup for success upon doing so. What classes, books, courses, etc would you recommend to someone with my background?
I expect adults to maintain emotional control and practice empathy.
> "... and similar speed to the previous generation of Haiku."

To me this is the most annoying grammatical error. I can't wait for AI to take over all prose writing so this egregious construction finally vanishes from public fora. There may be some downsides -- okay, many -- but at least I won't have to read endless repetitions of "similar speed to ..." when the correct form is obviously "speed similar to".

In fact, in time this correct grammar may betray the presence of AI, since lowly biologicals (meaning us) appear not to either understand or fix this annoying error without computer help.
Feral Concurrency Control (2015) [pdf]
Small aerospace company. We had a really old school CEO at the time the project was started - didn’t even want us using GitHub since it was on the cloud. Everything runs on an on-premise IBM i Series (AS400 / IBM Mainframe).

I pushed hard and was able to get us to the point where stuff runs in PASE with modern languages (like PHP).

It’s not any specific licensing issue, just organizational distrust of anything that isn’t paid for.
> Either that or they have other contingency plans - or they're the most incompetent three letter agencies in the world.

It's not like the US' three-letter agencies (both national and foreign scoped) have inspired much confidence over the last decades, to be honest. Inadequate internal oversight, too many things outsourced to contractors with way too many privileges, completely fucked up contingency "plans" for a loooooooooot of crises - 9/11, the countless intifadas in Israel, the entire color revolutions and social media revolutions, Russia's/Iran's messing around everywhere for decades completely unchecked, China's industrial espionage including the F35 program, the disaster that was the retreat from Afghanistan, Trump inciting a putsch attempt claiming multiple lives, Trump getting almost shot...

The US security apparatus eats an awful lot of money and people but it regularly and spectacularly screws up.
Two Health Unlocks
I've thought about starting a page to call out the apps that abuse push notifications for ads to show that Apple isn't enforcing its rule.

> 4.5.4 ... Push Notifications should not be used for promotions or direct marketing purposes unless customers have explicitly opted in to receive them via consent language displayed in your app’s UI, and you provide a method in your app for a user to opt out from receiving such messages. Abuse of these services may result in revocation of your privileges.

The worst offender is DoorDash. If you turn off push ads, after you place an order it will prompt you to turn on notifications "to get the latest on your order". Agreeing turns on ads. You get the prompt even if you already have order update notifications enabled.
Impressive output, also amazing that a not-quite-as-good version is free and open source: https://liveportrait.github.io/
How many US persons do communicate electronically? That's the number.
Ah. I was only comparing with other 'pure' disciplines like analysis and topology/geometry, but I guess these are still more strongly connected to applied things.
I agree that some of the talk about neurons in LLMs can be a bit much, but don't you have a model in your head of how the world is composed of forces, and you can generally predict how things react? If you throw a ball up in the air, will it come down or just go up forever?

Or are we using different definitions for "world model"?
Crystal; compiled Ruby!
> TypeScript solved those problems, and that's why it has taken off and had a meteoric rise to the point that it's practically synonymous with JavaScript.

It's also backed – nay, pushed – by one of the largest and most successful tech companies in the world. A company that also made a point of releasing a very capable IDE to go along with it. Surely this has had some impact on its meteoric rise? :o)

(Wait – aren't meteors falling?)
I wonder when it'll actually be available in the Bedrock AU region, because as of right now we're still stuck using mid-range models from a year ago.

Amazon has really neglected ap-southeast-2 when it comes to LLMs.
You just about need some sort of ast optimizer or some such.
Demandbase Ditches Denormalization by Switching Off ClickHouse
ugh i really don't want people to mine in the mobile basin. that's one of the most diverse ecosystems in north america. https://www.youtube.com/watch?v=8j9coyJeB4Q
Are there enough of these people for it to matter? Let’s say instead of there being 5000 of these “nepo babies” (whose parents and environment of course never taught them anything so that they’re useless members of society in charge of massive fortunes because of chance alone because that just suits your world view best) there were now 50000. What policy changes might they now implement that would shake the foundations of our society?
Because it empowers those most favored by existing systemic biases extra power to protect those biases against progress toward equality.
When this information is useful you've either got fundamental security related issues that needs to be addressed long before this, or you're dealing with threat actors with significant capabilities. In the latter case you've probably already taking this into account when you're creating your stuff, or you have the capability and technical understanding to know how to properly roll out your own PKI.

The overlap of people that suggest that you either run your own PKI or just distribute a wildcard certificate and have the technical understanding on how to do this in a secure way is minuscule. The rest of those people are probably better off using something like Lets Encrypt.
>I've learned the linux cli by setting up a minecraft server for my friends in high school.

What you've learned was "enough to set up a minecraft server", but definitely not as much as "learned the linux cli", and that's without even touching the obvious question "what does someone mean when they claim they learned the linux cli"?

I fell for this trap too: I watched a tutorial by Nick Chapsas, then made my own ASP.NET Core Web API for a personal project, and thought "Wow I know ASP.NET MVC time to get a junior developer job".

After a few resumes (there's .NET demand in my area) I landed an interview with a startup. The interviewer (who happened to be the cofounder and has 15 years of .NET experience, some working directly in Microsoft) started hitting me with questions like "what kind of objects can get constructed in a using block?", "what's the difference between readonly and const", "how can we identify that a payload comes from a mobile client if the endpoints are shared?", etc.

That's when I realized that I knew enough to make me go "woohoo I have a .NET Core web API" but not enough to get a junior job. In fact, he was honest enough to tell me "you're barely entry level, and this wasn't even the technical interview it's just the screener".

Off-topic but related with the event: I obviously didn't get the job, but he left me with an advice I'm actioning: "Stop jumping around and stick to one language, I don't know if that's gonna be C#, TypeScript, Go, Python, whatever. Deep dive something well. You're only hurting yourself in the long run".
HDLBits: Getting Started with Verilog
I personally would love for 90% of these features to make it into TypeScript and eventually be ECMAScript standards. This is a taste of the world we could have, I don't understand all the hate towards this project.

Kudos to all building & contributing to this!
Slick. I thought it was too slow at first, but that changed. Love the parallax scrolling background.

Might I suggest a remix of Chemical Plant Zone for background music instead of traffic noises? I like this one: https://ocremix.org/remix/OCR04552
AMC-9 and Telkom-1 both broke apart fairly recently too.
The A.I. Climate Dilemma
I don't see how you can avoid human labor for this type of task given the current energy demands of the top AI models.

Once we do reach a point where AI could do the filtering, who is going to draw the limit to where free speech ends? Should they have that much power?
OpenAI Hires Former White House Official Aaron Chatterji as Its Chief Economist
Can you not use cross-region inference?
https://archive.ph/70Gox

Aaron Chatterji was chief economist at the Commerce Department under President Biden and served on President Obama’s Council of Economic Advisers.
He studied very hard and was exceptionally gifted, it wasn’t a mystery.
I prefer the explicit /dev/shm for this.
You raise very valid points about the fragility of devices and the challenges with recovery options for passkeys. It’s crucial that any passwordless solution addresses these vulnerabilities.

I also don't like that Passkeys are dependent on the OS providers ( Apple, Google and MSFT). If the solution is OS dependent, with an ability to do seamless device recovery/ account recovery, that does make it more adoptable.
Why though? We don't expect that of X86, ARM, or anything else. X86, ARM or the hundreds of other ISAs that have come and gone. We don't ask because it's impossible without putting a freeze on adding new instrucions. Once you add a new instruction there's no way for binaries with that instruction have that instruction run on an older processor. A compiler reads a value from memory. If that value doesn't map to an instruction it can follow, what do?

RISCV is actually better than most in this. First of all there is a core ISA that will run on everything and the extensions can be setup to be ignored when running on a system without them, defaulting to some core-ISA alternative.

The only alternative is to get the entire ISA spec done before letting anyone make anything... and that's just not happening.
Possibly we're taking by each other. Persons with a focus on a narrow work goal, when given extra time, will probably come up with extra, productive goals using that extra time. It's not bureaucracy (at least for the honest), and it's not busy-work. It's just better work; but, it's outside the parameters of the originally defined task. Often, they'll ask the tool to help them. Not for the piece-work element, but for a slightly expanded purpose; maybe simply for organizational goals that aren't in any handbook. Sometimes it's vanity, sometimes it's lulz; it just seems pretty human.
Okay, that's useful information. But then the number is 40% of engineerings seeking employment, not overall. It is also for those engineers using your platform, which will also be a biased sample.
BMI-type measure for a place's "goodness of weather"
If you're familiar with BMI (body-mass index), read-on:

I am trying to develop a single score, similar to BMI, for a place's "goodness of weather".

Yes, I am well-aware that BMI is flawed. But its simplicity is useful.

The data available to me are:

- MAX TEMP (°F)

- MIN TEMP (°F)

- AVG TEMP (°F)

- PRECIP (IN)

- SNOW (IN)

- Standard Deviation of each of the above.

Data are available for tens of thousands of weather stations in the USA, and are available in the following bin-sizes: annual, monthly, daily, hourly.

I think I want to use monthly data.

BMI is calculated as: weight in kilograms (kg) divided by height in meters, squared (m2).

In your opinion, what should the formula for "goodness of weather" look like?

(Of course, people will disagree on what constitutes good weather. Some like San Diego weather, some like Denver weather. So, what would your formula look like?)
C!

My job is typical web TypeScript + Python

But in my spare time I’ve been deep diving C and loving it for the most part. Though I really hate strings in C!
The Timeless Art of Storytelling: How Narratives Triumph in a Data-Driven World
So, e-books are either immediately out of print, or never out of print?
As someone who wrote C for my hobby projects, I've switched to Zig and enjoy it more as it feels I can express my intention more clearly
90% of our customers do not allow this due to data sovereignty.

Bedrock here is lagging so far behind several customers assume AWS simply aren't investing here anymore - or if they are it's an afterthought - and a very expensive one at that.

I've spoken with several account managers and SAs and they seem similarly frustrated with the continual response from above that useful models are "coming soon".

You can't even BYO models here, we usually end up spinning up big ol' GPU EC2 instances and serving our own, or for some tasks running locally as you can get better openweight LLMs.
> Is it a private or large repo?

I entered "rtyley/small-test-repo" which is public and small - and also got "Request failed with status code 400. Try again".
Also most attempts at code quality lead to even worse code - into overengineered abstraction layers that no one will be able to adjust once it's inevitably realized that the assumptions were all wrong.
And the linked topic, off by one errors.

One could also the hallucinated citations are null pointers.

At least cache invalidation is easier: the users can backtrack up a conversation as far as they need to in order to un-cache things from the context window.
Yes, on WPA2. WPA3 introduced per-client encryption keys.
That looks pretty cool, congrats! How feasible is it to be a product by itself? Did you try with a local edge model?
Resellers don’t pay the sticker price, they buy the phones with a discount and they’re sure to charge a premium or interest.

I’m not saying it’s going to be either faster, better, or cheaper. The carriers are like a cartel that is abusing the phone locking system and should face the consequences. As the things are right now, they’re even locking unlocked phones to their service with immunity and individual users cannot effort to sue them or even worse users are not even allowed to sue them because of forced arbitration clauses. Should nothing change in this system because it benefits a certain range of companies?
Is pg_azure_storage available on GitHub?
I just tried to signup for a new Hamina account... and I've failed after spending 15 minutes on it. It seems they have a bug in the last step of the signup process that makes the final "continue" button always be disabled. Forcibly enabling it by modifying the DOM appears to work at first and lets me submit the form, but it doesn't result in a new account being created.

I have a suspicion it's flagged my signup as potentially abusive or something due to my various privacy enhancements...
Yah, server overload for the web version. Taking a look now. Sorry about that.

You can try again. I just tried it
There’s the everything available online for free mindset. But, yes, I’ve basically donated all my books that were in the public domain. And, in general, have been massively purging my book collection of stuff I won’t realistically read again.
its just a "tell" that you dont mind the poor reader experience and being associated with the rest of low quality slop that is on medium. many of us here have simply given up clicking on anything medium related
A solution for the global warming crisis
They do, but very few people are good enough to either write a pull request or review one well. I wouldn’t put myself in the really good category for either.

Most people write pull requests that are scoped too poorly to tell what they’re doing. Like I get a single function with unit tests, so the best I can do for a review is check whether there are any obvious missed edge cases for a function whose purpose I don’t understand.

On the review side, most people review by doing basically what a linter does. I joke with people that if they want to nitpick my variable names then I’ll start DMing them to ask what name they want every time I need a variable. A meaningful review would analyze whether abstractions are good, whether there is behavior that relies on an unspecified part of an abstraction (timing), etc. Nobody does those.
> the price of Chinese lithium is low enough that it would be essentially impossible to compete with them...

In an export model, yes. However, given their negative externalities (including geo-political factors), importing countries may place tariffs on Chinese lithium in order to make use of other sources.

If the total embodied value of lithium in any particular product is small compared to the overall value of the product, the tariff might not represent a significant drag on the indigenous industry.
> You May Become Dependent on Your Own Eventual Replacement

If you're going to be eventually replaced, and I absolutely believe that even the best of us will, you may as well get in on the ground floor to extract value for a bit before that happens.

Not writing your own code doesn't need to mean turning your brain off. You still need to look at what came out, understand it, and spot where it didn't match your needs.
It's odd that the post shows as being only a few hours old, but the comments from ramiborni99 as 3 days old when viewed from the above link (here it shows not as old)? Similarly, your comment shows as a few minutes old, but showing as 3 days old when I view the threads from the above link... Very odd

@dang - what's going on with the timing on these comments and posts when viewed from the user thread link?
Does the new product have the same ASIN ?

How could they allow this?
Extracting lithium from brine is cleaner than e.g. extraction from spodumene ore. Also direct lithium extraction from brine is faster, cleaner, smaller footprint, lower energy consumption.
Netflix closes AAA game studio before it ever released a game
The lock-in potential with major tech players is definitely a concern for many. The reliance on OS providers and as a result the interoperability challenges can create significant hurdles for Enterprises and users, especially if they encounter issues with device loss or failure.

I think a passwordless solution ( not magic links/OTPs - dont even get me started on how insecure they are) that does not depend on the OS is what will make a secure passwordless world a reality for enterprises, developers and end users. Thoughts?
Thanks, that is quite fascinating! I recently spoke with a very old school IT guy who was setting up his brother's IT stuff for a new business, and he is militant about on-prem and other stuff too. It's a very interesting mentality, though so foreign to me as I strongly gravitate toward FOSS instead of away from it.
It seems backwards, but pretty much the only fuel that protects ecosystems on a large scale are fossil fuels and nuclear.

Global reforestation is almost entirely the result of households switching from wood to coal in the 20th century.
Unfortunately, most people hold a variety of silly and counterproductive beliefs.
I read the article carefully, twice. Doesn't have a link to any original paper, of course. And I can't find the answer to my question... did they, you know, validate the model? Did they actually take some samples at new locations and compare it to what the model says?

Or are they literally just announcing that "Hey, we told the computer to tell us something, so it told us something"? Yes, that is how it works. The computer will always tell you something if you make it tell you something. That isn't the hard part. The hard part is getting it to tell you things that correspond to reality.

In the absence of validation, this means very little, especially in an environment where the USGS is fairly incentivized to loudly announce to the world that we've totes got plenty of lithium, my fellow countries, any effort to keep lithium away from us is just a waste of time, look at us just rolling in lithium over here.

Or, maybe they did do the validation, and it's just the reporting that doesn't consider that an important aspect of the story. Somewhere between funding and press release someone's lost the trail but I don't know who exactly.