skysight-inc/HackerNews huggingface dataset:
Advertisers left because they didn’t want their ads showing up next to extremist content. There have always been political criticisms about ads but they rarely get traction, but no ad exec wants to see their ad next to some guy talking about the need to provide a safe place for white children. Getting rid of the people who used to keep that from happening was a very shortsighted cost savings.

Then Musk decided to sue companies who stopped advertising. That might indulge his sense of entitlement but it also sent a message that the safest move is not to do business with X because you can no longer predict what they’ll do if he thinks you should be giving him more money.

https://www.pbs.org/newshour/nation/musk-sues-advertisers-ov...
Some sensible manufacturers do this anyway without a mandate.
I go to sleep at 1am. I wake up at 9:45am. Is there something wrong with this?

I have my daily standup at 10:30, so I have enough time to drink water, and do morning rituals before I start to work. Feels good. I don’t know what would be the advantage of going to sleep at 10pm and waking up at 6:45.
Cheers! FWIW, I think you could easily build Sphinx docs using GHA and publish it on GitHub Pages and not pay a dime. Depending on your distaste for Microsoft’s monopoly, I suppose ;)
You could install a command line TOTP app on your email server and get the token via ssh. You're already presuming your email server is up to receive the authentication email, so assuming it's so you can get the token seems neutral.

Eg https://github.com/yitsushi/totp-cli but there are others.
how did you make it?
The New York Post or the Daily News .
so with this I would be able to create a server in my desktop web app and sync all my devices using webrtc
It looks really cool, but is this more than a curated list of projects from various 3D model and DIY sites, with some sort of line art instead of the usual photos/STL renderings? I sometimes go explore nice models on those sites too for inspiration, but I don't really see the advantage of this presentation format.
Your take is the dangerous one. I don’t disagree that

> the vast majority of security vulnerabilities in software are not actively exploited

However I’d say your explanation that it’s

> because no one knows about them

is not necessarily the reason why.

If the vendor or developer isn’t fixing things, going public is the correct option. (I agree some lead time / attempt at coordinated disclosure is preferable here.)
I am so glad you mentioned this, this got me excited!
Boring should not mean underpowered or old.

Using the latest and greatest can equally be boring.
> Just as an example I'm using lambdas in fasthtml in Python that don't allow type specifications for adding routes and fasthtml keeps on spitting out warnings that I didn't specify the type and doesn't handle variables in lambda functions correctly.

That's a very interesting yet valid downside I didn't think of
Counting papers in top journals isn’t a great measure. While top journals do have high standards, not all papers are equal.

I got published in a Nature journal but my paper was not groundbreaking by any means. You have groundbreaking research and you have “we made a slight, but important modification to an existing technology”.

In my area of physical sciences, the big breakthroughs are still coming from the US and Europe.
ZenDiS | open source roles | ONSITE (Hybrid) Bochum, Germany | Full-time or Part time

ZenDiS is the Zentrum für Digitale Souveränität der Öffentlichen Verwaltung. Our mission is to strengthen the digital sovereingty of the public sector with open source. Speaking fluent german is a requirement for these jobs so i will post the job descriptions in german as well.

Open source platform: Projektassistent:in openCode (w/m/d)

https://zendis.de/karriere#job-1878301

- Gehaltsspanne: 41 – 61 TEUR inklusive 8% variablen Vergütungsanteil

- Bewerbungsfrist: 11. November 2024

…

---

Open source products: Customer Success Manager:in (w/m/d)

https://zendis.de/karriere#job-1878628

- Gehaltsspanne: 57 – 86 TEUR inklusive 10% variablen Vergütungsanteil

- Bewerbungsfrist: 11. November 2024

…
I was looking for something like that for my parents (who refuse to have a "across-the-kitchen" kind of working surface with the induction and sink going into a hole from the top) but it was quite difficult to find them.

The "induction as an object that enters into the hole of the work surface" (sorry, I am not a native speaker of English and there is certainly a word for that :)) seems to be way, way more popular and I could really find what I needed.
Yeah, this seems pretty misleading by the blog post. Quite a big difference between finding a vuln in sqlite vs an sqlite extension.
This was a delightful read, thanks!
Because English is not the mother tongue for the majority of the people, and correctors fix typos, but not swapped words, unless you use something like Grammarly.

Pointing out mistakes is fine, being emphatic while doing it would be great
Venvstacks: Virtual Environment Stacks for Python
The Russian orbital segment handles guidance, navigation, and control for the entire station.
> At this point, I realized that I got the "V2" of the camera. This camera is regarded as worse than the "V1" mostly because the manufacturer removed the internal processing FPGA?

That's actually better. In-camera processing will just reduce the amount of information you can get out of the sensor. For example, even if it does exactly the same flat-fielding as you do, the in-camera flat-fielded image has to be requantized to 8-bit format before sending to the computer, therefore losing precision.

You can get even better accuracy by taking a dark or bias field (might be possible if you can set the exposure time to something very short, but this might not be possible with these thermographic cameras) and taking flatfields at different temperatures, so you can get per-pixel linearity curves. That's a lot of work though, and ideally each camera was indiviually calibrated by the producer, but I am guessing that is not done for these cheap cameras.
I think it's because I am not used to reading academic papers, so I don't know how to read the paper or where to get started. Do I start from top to bottom? Those papers get quite big so I don't think that's the right approach, they also tend to get very meaty with the keywords so I end up reading the same sentence multiple times because I have to lookup every word or try to grasp the concept they are explaining. Maybe I should start with the abstract first? I don't know.
Yeah these are the most boring emails I get. At least the adops guys pretend to use my website before they hit send.
The Dow Jones corp used to own the index and the newspaper prior to the mid 2000s. Now, News Corp runs the WSJ and the index is mostly owned and run by S&P. So there is a historical connection and probably some legacy ownership today.
> The key word being ”almost”. Yes, you can get similarity matches between job requirements and candidate resumes, but those matches are not useful for the task of finding an optimal candidate for a job.

Text embeddings are not about matching, they are about extracting the semantic topics and the semantic context. Matching comes next, if required.

If a LLM is used to generate the text embeddings, it would «expand» the semantic context for each keyword. E.g. «GenAI» would make the LLM expand the term into directly and loosely related semantic topics, say, «LLM», «NLP» (with a lesser relevance though), «artificial intelligence», «statistics» (more distant) and so forth. The generated embeddings will result in a much richer semantic context that will allow for straightforward similarity search as well as for exploratory radial search with ease. It also works well across languages, provided the LLM had a linguistically and sufficiently diverse corpus it was trained on.

Fun fact: I have recently delivered a LLM assisted (to generate text embeddings) k-NN similarity search for a client of mine. For the hell of it, we searched for «the meaning of life» in Cantonese, English, Korean, Russian and Vietnamese.

It pulled up the same top search result across the entire dataset for the query in English, Korean and Russian. Effectively, it turned into a Babelfish of search.

Cantonese and Vietnamese versions diverged and were less relevant as the LLM did not have a substantial corpus in either language. This can be easily fixed in the future, once a new LLM version that will have been trained on a better corpus in both, Cantonese and Vietnamese, languages – by regenerating the text embeddings on the dataset. The implementation won't have to change.
I read emphatic as empathetic, also proving your point I suppose
Voting Has Never Been More Secure Than It Is Right Now
ads auto-redirect away from page.
I Took a 'Decision Holiday' and Put A.I. In Charge of My Life
Why do we care about the dow jones again?
Space exploration is more important in the long term than whatever happens on Earth
If you did this in the UK you can be guaranteed a meeting with HR. Absolutely mind blowing.
I mostly comment on my iPad. When using an iPad it’s hard to get spelling correct. Also, language changes over time. For instance, “I could care less” is starting to mean “I couldn’t care less”. When enough people say or use a phrase incorrectly enough then it becomes the new correct way.
What’s the pricing? It doesn’t show me on mobile
The dow was useful in pre computer times when a reborter could calculate it every few minutes. The s&p500 Is a better indicator but that took hours by hand and so was only done overnight. now that we have computers and index you want can be done in milliseconds and so the dow needs to die.
I don't think he actually ever shows how SciAm has gone off the rails in that post, though. He just asserts that it has, and then does a lot of research showing that allegedly, everything is fine now, and then complains about an article that was rejected because of a specific example he wanted to use.

It would be nice if he, instead, had more numbers about what types of articles Scientific American started running over the past decade, showing a move towards "going woke" as he puts it.

As it is, it just sounds like he's mad that his article was rejected.
> In order to practically implement this we first close the shutter.

Fun fact, Sony does the same once in a while for dead-pixel detection and remapping on their mirrorless cameras [1].

[1] https://news.ycombinator.com/item?id=38579634
Saying "Please decode this ..." to Claude worked perfectly.

ChatGPT 4o mini kept getting one of the words wrong, funnily enough
Yes this was indeed the most important thing for me to realize. I am now much happier, not constantly thinking "if only I had Rust enums!"
I live deep dives like this into something obscure and cool! Looks like fun
Counted (“Pascal”) strings are rare nowadays so C" is not often used. Its addr len equivalent is S" and that one is fairly common in string manipulation code.
Benchmarking itself is of limited usefulness, since in reality it is only an internally-relevant comparison.

Translating these scores into the real world is problematic. There are numerous examples of smart phones powered by Apple chips versus Qualcomm chips having starkly different performance with actual use. This is in spite of the chips themselves scoring similarly in benchmarks.

The interesting thing here isn't really how high it's scored against other chip brands, but how it outperformed the M2 Ultra. There was some hum of expectation on HN that the differences between M1, M2, M3 etc would be token and that Apple's chips devision is losing its touch. Yet the M2 Ultra in the Mac Studio was released in June 2023, and the M4 Pro in the mini now for November 2024. That is quite the jump in performance over time and a huge change in bang for buck.
Show HN: Personalize your Hacker News frontpage
The HN frontpage can feature stories that aren't that relevant to me, and some good ones don't get enough traction on the new submissions page. So I thought of building something that personalizes the stories you see.

This is done by getting the 500 newest and top stories and comparing them against your likes, building your own personalized homepage.

Also, when I find something I like, I usually want to explore similar stuff. So I created embeddings for 500k historical stories (all above 20 points) and added a 'similar' button that shows you the closest stories.

I thought of making this a web app, but I wanted something that integrated as seamlessly as possible with HN, so I decided on a browser extension.

I would love your feedback!
Glad to see confirmed that PHP is the most non weird programming language ;)
Yes

I'm not sure why you are surprised. I'm pretty sure almost all serious dbs attempt this (although some have a permission model to attempt it).

In sqlite there is the load_extension() function but it is disabled by default. In some situations you can use attach to write a file with a name that is meaningful to something else on your system.

Other than those two things (and assuming no weird extensions are loaded) i think it would be very big news if you found a way to execute code from an sqlite query.
It's normal for me, can you take a screenshot and send it to me? Thanks
I have personal experience with a manager who acted similarly intrusively, seeming to want to blur lines between professional and personal. They later critiqued my (supposed) emotional state and motivations in a professional review. "Force" may not be accurate as in strapping me into the group until I talk, "abuse" may not be accurate as in an active misuse of power -- but there are negative consequences for non-participation.

I'm not the least bit opposed to connecting with peers. I've extracted two cherished friends of 10+ years from prior jobs. I just require it to occur organically and with peers, separate from groups led by the person signing my paychecks and writing my annual reviews.
Swapped at birth: Two women discovered they weren't who they thought they were
Loads of native speakers get the lose/loose thing wrong too.
A.i. agent posting a job listing
The thing is - and the post actually showcases this - that "10% more vulnerable" is super abstract.

What does that even mean? Seems like it triggers people to share very deep stuff.
World's largest crocodile in captivity dies
So the name is a throwbackronym?
Yeah that’s it. I am in awe of your reality.
26 days of paid vacation is way below the german standard of 30 days (for "Location: Berlin").
2% of how many?
Since you can identify the projects without mandatory deprecation, what does deprecation give you?

Also resources don't magically appear just because a resource constraint had been identified since that fact is also a given and obvious to everyone involved
No, not whatsoever. "Camarade" is the French word they both stem from, and the spelling "comradery" is the (North) American variant which some sources describe as an error and some not.

It's the U.S. vs England spelling thing again, except this time the U.S. spelling doesn't seem to be catching on, for some reason.

To get a feel for the whole thing in Ngram I looked at "labor,labour", "color,colour" and "organize,organise" and for each one the U.S. spelling was winning by a little or by loads, but "camaraderie" heavily dominates "comradery" in terms of usage. So, a little bit mysterious, maybe.

[Ngram is a great tool].
Don't recall exactly, but is this the release including an alpha wayland compositor?
That’s approximately 4 hours of work per day (excluding the ‘whatever comes’ time). For most businesses, availability during standard office hours might be too limited with this schedule.
Because the vowel sound in “lose” is more commonly spelt “oo” as in “loose”, and “lose” looks like it should rhyme with “nose” or “close” but doesn’t. And “loose” is a real world (albeit with a different meaning and pronunciation to “lose”) so people’s brains (and spell checker) don’t instinctively flag it as wrong.
Additionally, von Neumann did not "architect" that design; it was named for him because he wrote a paper describing it.

https://en.wikipedia.org/wiki/Von_Neumann_architecture#Devel...

https://en.wikipedia.org/wiki/J._Presper_Eckert#%22Eckert_ar...
When someone taught me that 15 years ago was when I started my path away from using Google. What's left are Google Scholar and Google Translate.
Not necessarily, no.

To give another example, bathroom facilities for disabled people would be practically non-existent if left up to the owners of the space to provide. It's only through legislation that this has been mandated, to the benefit of those with disabilities.

Similarly with female-only spaces, legislation that protects these, for the benefit of women and girls, is becoming increasingly necessary in today's society.
I love throwing sweet potatoes in the microwave. Ready in 7 minutes and delicious.
How are the ergonomics of that key? Between the switch with the spring and having to hold that in your hand to use, I'm wondering how accurate the keying is? One suggestion might be a flat pad with a capacitive switch so you could just tap things out without even moving, but maybe the key works for you.

Either way, a fun idea!

73 de Sean N3RTW
Cry me a river. Apple doesn't need you to defend their strategic and intentional PWA boycott.
The homepage assures me that Hazel's mission is to take semantic editing and ensure that the core of the experience is text editing in the most literal sense, for example by allowing you to make selections that cross-cut the tree. I just don't understand why!!! Both the current UX and the proposed UX are less useful and less semantic than the editing tools I already use.

For example in VSCode if I type ( the editor inserts () -- it's actually not a text edit in the sense that the code I produced doesn't map 1:1 to the keys I pressed. No, what actually happened there was already a semantic edit. It was quick and efficient. One keypress. Having a busted document is a worse experience than that, and having a document which is in a sort-of-busted-ghost-mode is also a worse, less semantic experience than I already have. Why would I want either of those experiences for myself or others?
Cadillac Ranch is (I think?) pretty well known. Nonetheless, these are the kind of road-side attractions I sought when I started gently introducing my kids to long road trips when they were young.

Our home base being the Bay Area, we never made it as far as Texas in our minivan. Nonetheless, using an app like "Roadside America", we checked off all manner of quirky things on our week-long drives around the western U.S.

As a kid, road tripping to "historical places", like the site of the Battle of Little Bighorn for example, made little impression on me. Life-size dinosaurs you could run around were more interesting. That's one reason I sought these roadside attractions out when I had kids of my own.

But more generally, I took the kids on road trips because I had hoped it might inspire, like it seems to have done for me, something of the breadth of the world. And even so we were not even traversing half of the U.S. And I suppose these quirky exhibits added something about the breadth of people's ... creativity?

Tangent: lesser known, but similar to the Cadillac Ranch is Nebraska's Carhenge.
But I don't have any geese.
Highly recommend Cogram.

I interviewed with them last year. While I missed out in the end, I really liked the overall experience and talking to people there.
Maybe my impression on Vert.X was misplaced. Trying it out left me off with "Oh, so kind of like ANC minimal API with Rx.NET but faster". I should revisit this, thank you.

JVM ecosystem has other great frameworks like Active-J and Ktor. My main point is, unless that's what you're most productive in, RoR is a really poor choice for both small and large codebases and there are plenty of options that completely eliminate the classes of issues you would otherwise have to spend the time on.

Sure, I like using C# (and recently F#) a lot but it wouldn't kill me if I had to use Kotlin/Java/Go/Swift instead. All these have understandable tradeoffs and merits to them. On the other hand, my experience of interacting with advocates of Python, Ruby and Erlang is incredibly poor - it's impossible to have a technical conversation and it seems that their communities live in a bubble of belief that using interpreted junk comes with magical productivity advantages inaccessible to expressive modern compiled languages with rich type systems and excelled back-end frameworks/libraries.
I wish the article would give more information on the comparative advantages and disadvantages of these “semi-solid state” batteries. It handwaves at improved energy density but doesn’t get specific. I’d be curious to know how this fits into the picture of gradually improving LI batteries.
Gave up about 30% of the way..
Talking about the idea of using plain AES-CBC for disk encryption:

>He can then inject arbitrary sectors into this file, dump the file, and recover plaintext.

You wouldn't recover any plaintext here unless you could create an actual oracle based on that plaintext. It is unclear to me how you could generically do that with a disk encryption situation. You would have to do something like triggering errors based on the decrypted and modified plaintext. How would the attacker get access to these errors? The real problem is the ability to create valid changes to the disk (malleability).

>There are cryptographic modes (like XTS) which fix these problems.

XTS is malleable at the block level. CBC is malleable at the bit level but that isn't really a lot worse for whole disk encryption. XTS is still better, so yes, you should still prefer XTS over CBC. Integrity checking requires extra data. For full disk encryption there is no obvious place to put such data. So the common practice is to just not worry about integrity.

>In CBC, the chaining aspect will screw up the first block only, and even that can be manually fixed since the ciphertext is known.

The screwed up block shows up as decrypted plaintext. So you can't get around the bad blocks on the edges of splices with knowledge of the ciphertext.
Right, c" is for when you want to pass a literal string to some other word, not print it. But I agree that it's not very common, because you normally use s" for that, which leaves the address and length on the stack, while c" leaves just an address on the stack, pointing to a one-byte count field followed by the bytes. I think adding c" in Forth-83 (and renaming " to s") was a mistake, and it would have been better to deprecate the standard words that expect or produce such counted strings, other than count itself. See https://forth-standard.org/standard/alpha, https://forth-standard.org/standard/core/Cq, https://forth-standard.org/standard/core/COUNT, and https://forth-standard.org/standard/core/Sq.

You can easily add new string and comment syntaxes to Forth, though. For example, you can add BCPL-style // comments to end of line with this line of code in, I believe, all standard Forths, though I've only tested it in GForth:

: // 10 word drop ; immediate

Getting it to work in block files requires more work but is still only a few lines of code. The standard word \ does this, and see \ decompiles the GForth implementation as

: \
blk @
IF >in @ c/l / 1+ c/l * >in ! EXIT
THEN
source >in ! drop ; immediate

This kind of thing was commonly done for text editor commands, for example; you might define i as a word that reads text until the end of the line and inserts it at the current position in the editor, rather than discarding it like my // above. Among other things, the screen editor in F83 does exactly that.

So, as with Perl, PostScript, TeX, m4, and Lisps that support readmacros, you can't lex Forth without executing it.
Their is no way this thing has any real use cases apart from emailing gibberish to yourself.
> If you click or hit enter on the auto-selected ‘Yes’ option, qBittorrent will then *download, execute the .exe*

No shit.

Yet another case of "security" people making a mountain out of a molehill for making a name for themselves.

Linus was right :p