skysight-inc/HackerNews huggingface dataset:
Storybook JavaScript lib collecting telemetry by default
I was just setting up a Sveltekit project and I noticed this message from the Storybook library.

attention => Storybook now collects completely anonymous telemetry regarding usage.
This information is used to shape Storybook's roadmap and prioritize features.
You can learn more, including how to opt-out if you'd not like to participate in this anonymous program, by visiting the following URL:
https://storybook.js.org/telemetry

Not much more to say. I just wanted to make sure users are aware of this.
I think if somebody wants to describe themselves as an "ethical hacker", and a conference wants to let people talk about exploits they've found, the minimum bar for disclosure is at least a description of a mitigation that could be taken, and ideally an actual code diff if its an open source project.

There's a bit of street cred for finding a 0day, a bit of glamour about figuring out the puzzle. There's not much for the person who fixes it. I think as an industry it might be worth trying to fix that somehow.
It is quite ironic to get a cookie banner on tat page.
To be fair to Dijkstra, he was writing about how he believed university students should be taught. Two years before that cruelty paper was published, I was getting my first exposure ever to computer programming when my parents bought a Commodore 64 that came with a BASIC manual that showed how to make a Pong clone. I was 6 years old.

There's maybe an analogy to riding a bike. If you're aspiring to compete in a grand tour, you probably want power meters, lactate threshold and VO2 max tests in a lab, training that is principled and somewhat scientific in the way it builds toward a goal. If you're 6, your parents just put you on the seat and push you until your balance gets good enough that you can take the training wheels off.
Vendor microarchitectural and optimization manuals.
I'm pretty sure this is wrong. PHP has been faster than Python for a long time, but numpy is not written in Python, it's written in C. Just like PHP, coincidentally :)
It would also work if it were about professional sports stadiums.
chrome does.

https://miro.medium.com/v2/resize:fit:720/format:webp/0*7Oo4...
Email spam filters have the advantage of being able to see the content of the message, so hopefully they're more accurate.

The disadvantage of email is that it doesn't work for urgent use cases, like Disneyland calling the parent of a lost child.
OT: Your tool has a typo in the right hand side: "Claude 3.5 Sonnet
Techincal writing checker"
Breaking the Snowden story wasn't serious journalism for you?
I get that their culture/lifestyle take is a bit of a culture war outrage session, but their core journalism is some of the strongest in the world.
Mind, matter and being – A novel, unified view of reality
PX4 with Pixhawk FC would be much better in terms of working out of the box.
But of you use it with a random "supported" FC then still lots of debugging is needed
I'm not a fan of the void argument syntax. Wouldn't something like the code below work? We already do it with `strict_types=1`.

<?php
declare(strict_args=1);
From the [docs](https://docs.pypi.org/trusted-publishers/internals/):

> Reliability & notability: The effort necessary to integrate with a new Trusted Publisher is not exceptional, but not trivial either. In the interest of making the best use of PyPI's finite resources, we only plan to support platforms that have a reasonable level of usage among PyPI users for publishing. Additionally, we have high standards for overall reliability and security in the operation of a supported Identity Provider: in practice, this means that a home-grown or personal use IdP will not be eligible.

From what I can tell, this means using self-hosted Github/Gitlab/Gitea/whatever instances is explicitly not supported for most projects. I can't really tell what "a reasonable level of usage among PyPI users" means (does the invent.kde.org qualify? gitlab.gnome.org? gitlab.postmarketos.org?) but I feel like this means "Gitlab.com and maybe gitea.com" based on my original reading.

Of course by definition PyPI is already a massive single point of failure, but the focus on a few (corporate) partners to allow secure publishing feels like a mistake to me. I'm not sure what part of the cryptographic verification process restricts this API to the use of a few specific cloud providers.
The more Sam Altman posts stuff like this, the more he comes across as a grifter hype man to me
There are many dreams that are failing. Self driving is solved having private driver by upper class. The same is for flying taxi. Renting helicopter is no big deal. Few hundred euros per hour and you’re anywhere in no time. Maybe flying taxi is a solution to no problem.
The difficulty with this is that anything that isn’t a hard 180 involves continuing to publish approximately the same type of content for a while, which is probably unpalatable to The Onion. Anything that is a small enough course correction to retain its audience is too small a shift to get away from that hateful nonsense. It’s a nice idea to try to steer people away, but you have to start off by driving in the same direction, which nobody wants to do.
Stop Making Me Memorize the Borrow Checker
Or having a small shovel in the car. But like I said, I think it should be taught in schools. As I also wittness the lack of this knowledge.
Social media largely feeds the petty culture war that substitutes for political dialog.

I would say it's a strong net negative.
The unstated point is to explain the connection between lowercase ξ and uppercase Ξ.
Ah - is the problem a malicious administrator of the repo you're pulling from?
Python is slower than most of the horses I bet on. That's pretty slow.

The important - CPU intensive parts - of numpy, pandas, pytorch, and all the other "fast python" libraries out there, are actually written in C.

Pure python should not be used for anything that requires good performance: it is programmer ergonomic, not CPU ergonomic. It is great that through the use of FFIs it has access to powerful libraries written in a language that isn't slow, but that does not make it as a language itself, fast.
I mean, you’d really have to bet on your proposed form of corruption remaining unprosecuted _forever_ for that to make sense. Like, that’d be just a straight-up bribe, surely?

I suppose if you’re betting that Trump causes the US to permanently convert into a Russia-style semi-failed state, then maybe it makes sense. But there’s definitely a world where, in two to four years (or sooner; Trump is not big on loyalty, and if this turns into enough of a public-annoying mess he’ll turn on it in a second), someone is tasked to clean up the mess, and at that point you don’t want to be a company who’s blatantly paying for policy.
Essential Guide to Anxiety Counseling: Understanding Options and Finding Relief
Bena, the post you are responding to was joking. "It always was something different" - gaslighting - is the entire point of the Mandela Effect.

And well done, GP: I laughed outloud!
> Have fun with that.

I do, that is the argument.

It would also leave me better informed since the example clearly shows that the statements could benefit from a wider context. And this wouldn't be the only case.

If comments don't provide value for you, you can ignore them. No reason to remove them for everybody else too.

I stopped reading the Guardian a few years ago. It once had really good content. That changed significantly in my opinion.
Social media is not the PUBLIC, but billionaires busy brainwashing and fleecing the public.
> But if you are going to run a website with any services on it (video content, eCommerce, member management, etc) you are going to have partners.

No? At least not in the scale that would require these consent services. Services like member management are literally required to operate the website so those can go into the privacy policy (as would e.g. hosting on AWS or using a CDN).

The reason these consent services exist is that a lot of websites are just content mills that operate entire on behavioral advertising, whether it's the web version of a newspaper or just SEO blog spam. These often use hundreds of "partners" for analytics, ads, targeting, re-targeting, etc. And they desperately try to trick visitors into opting into those.

For your run of the mill Wordpress website you can just get a plugin like https://devowl.io/wordpress-real-cookie-banner/ - and in many cases the free version is good enough.
There is no burden of proof required to assert a hypothesis. This is how none of truth nor science nor security operate. There is evidence gathering activity which supports or undermines, strengthening or weakening a hypothesis. Ideally, one dispositive form of evidence affirms or denies a hypothesis. It is not difficult to find historical precedent of election fraud, but in any case, other claims are weak evidence.
Stripe thinks that AI is now ready to not only read data but also act on it and generate payment things.

Because AI is still prone to hallucinations and making stuff up, I am a bit concerned about letting agents do things like adjust pricing tiers automatically, negotiate payment plans, or alter things that may not be entirely legal to do.
The junk science from social sciences is a combination of students/researchers who both lack the ability to read critically and are given work that requires it fundamentally. Any real critical sociologist is going to be far more scientific than most scientists when it comes to their analysis since they have both the rigour of their method and the eye of self-reflexive objectivity, but you don't always get those people. Mostly not, most academics are just fairly mediocre people who were smart enough to get through their classes, kissed enough ass, are seemingly competent and lucky to land a good position.
Of course it's a benchmark worth winning, has been since Watson. And before that even with mechanical turks.
The calculus of a politician and the calculus of a voter are entirely different, because the politician running for office has the power to do things to influence all of the votes, giving voters reasons to vote for or against the politician. Whereas most voters have very little influence over other voters. Practically speaking, the only votes you can change are your own, or perhaps those of family and close friends (but probably not them either).
Here's one I wrote the other day which took a long time to get right. I'm curious on how well your AI can do, since I can't imagine it does a good job at it.

# Given a data set of size `size' >= 0, and a `text` string describing
# the subset size, return a 2-element tuple containing a text string
# describing the complement size and the actual size as an integer. The
# text string can be in one of four forms (after stripping leading and
# trailing whitespace):
#
# 1) the empty string, in which case return ("", 0)
# 2) a stringified integer, like "123", where 0 <= n <= size, in
# which case return (str(size-int(n)), size-int(n))
# 3) a stringified decimal value like "0.25" where 0 <= x <= 1.0, in
# which case compute the complement string as str(1 - x) and
# the complement size as size - (int(x * size)). Exponential
# notation is not supported, only numbers like "3.0", ".4", and "3.14"
# 4) a stringified fraction value like "1/3", where 0 <= x <= 1,
# in which case compute the complement string and value as #3
# but using a fraction instead of a decimal. Note that "1/2" of
# 51 must return ("1/2", 26), not ("1/2", 25).
#
# Otherwise, return ("error", -1)

def get_complement(text: str, size: int) -> tuple[str, int]:
...

For examples:

get_complement("1/2", 100) == ("1/2", 50)
get_complement("0.6", 100) == ("0.4", 40)
get_complement("100", 100) == ("0", 0)
get_complement("0/1", 100) == ("1/1", 100)

Some of the harder test cases I came up were:

get_complement("0.8158557553804697", 448_525_430): this tests the underlying system uses decimal.Decimal rather than a float, because float64 ends up on a 0.5 boundary and applies round-half-even resulting in a different value than the true decimal calculation, which does not end up with a 0.5. (The value is "365932053.4999999857944710")

get_complement("nan", 100): this is a valid decimal.Decimal but not allowed by the spec.

get_complement("1/0", 100): handle division-by-zero in fractions.Fraction

get_complement("0.", 100): this tests that the string complement is "1." or "1.0" and not "1"

get_complement("0.999999999999999", 100): this tests the complement is "0.000000000000001" and not "1E-15".

get_complement("0.5E0", 100): test that decimal parsing isn't simply done by decimal.Decimal(size) wrapped in an exception handler.

Also, this isn't the full spec. The real code reports parse errors (like recognizing the "1/" is an incomplete fraction) and if the value is out of range it uses the range boundary (so "-0.4" for input is treated as "0.0" and the complement is "1.0"), along with an error flag so the GUI can display the error message appropriately.
If you are one of today's ten thousand, this is a reference to the original garbage-in, garbage-out quote:
https://en.wikiquote.org/wiki/Charles_Babbage#Passages_from_...
When liability and cybersecurity laws start being more hardly enforced, many companies will certainly bother to fix them.

It like no one cares to keep a kitchen clean, or a factory in order, until the inspection shows up and closes doors.

Naturally even for those, we are at various levels of how those inspections are honestly enforced across the globe.
The problem with "flying anything" plans is that ground vehicles are pretty inherently stable with regards to most types of failures. Cutting or losing power solves most problems.

Not so with aircraft: any failure leaves the vehicle in a notably unsafe state - hence the delta between maintenance standards for road vehicles ("have brakes which work" basically) and aircraft.
I do basically the same with Zim Desktop Wiki, just with only hundreds of tags ;)
And algebraists often use lowercase fractur for ideals.
Or make every phone call cost a cent. .But then again therecis large growth potential in human hostile software abd services and defenses against that
Do you think that's the problem? To pay someone to get some backlinks?
Also I think you are charging a lot for only 20 DA.
Is it? As an Englishman, my instinctive tendency is to blame any corporate buzzword innovations on the US: but perhaps I'm wrong in this instance.
China battery giant CATL would build US plant if Trump allows it
> now I'm trying to wrap my head around the fact that there's such a thing as "Docker Hub" in the first place

Unless you build all of your images `FROM scratch` by default (or use in-house registries or quay or whatnot for all of your base images), you've used Docker Hub too...
One of the reasons I hardly bothered with Motif back on its heyday, was that it was much worse than Win32.
Show HN: I made a Piglet's Big Game website where you can play online
Hey HN,

Piglet's Big Game unexpectedly surged in popularity on social media platforms, particularly Twitter.

The sudden spike in popularity has led to a scarcity of physical copies across various platforms, with prices soaring on resale sites like eBay—some listings now exceed $70 compared to previous prices around $20-$30. And it is out of stock on most platforms.

This has led to many people wanting to experience it but having nowhere to play it. I found a version that can be played online and put it on the website, where you can experience it directly online. I hope that those who want to play can experience it.

ps: This online version is still very different from the original version, and the picture quality is not very clear, it is only for experience.

would love your feedback pls

Chars
Most of those builders, including VB, have the option to support dynamic layouts, it is up to devs to actually learn to use them, instead of the default approach.
I once noticed a LaTeX installer installing a package called he/she (apparently some sort of pronoun swapper). "Latex he/she" is not great for work search history.
> Chess is stateless with perfect information. Unless you're going for mind games, you don't need to remember previous moves.

while it can be played as stateless, remembering previous moves gives you insight into potential strategy that is being build.
Sorry if I wasn't specific, but the severance part is Brazilian specific which I was claiming works better than the "can not fire anyone ever" way a lot of EU countries work
Hi Swirly, most youtube videos will not help that much, other than conference talks. I recommend going more slowly, and comfortably reading books. For example "Designing Data-Intensive Applications", based on your interests. Don't read it over a weekend, read it over a couple of months.

Your focus should also shift a little bit more towards helping others, thinking about where the whole team is going, etc.

But give it time. As long as you keep learning, you will get there. :)
Layout managers are supported for decades now.
The point is clearly that they don’t have a vertical axis of control, they can’t make the car fly up in the air unless they’re driving crazy taxi style
If you swap to a content-based object store for container images (like OSTree/Flatpak), you could potentially save a lot of disk space too because you'll no longer need to be careful about your Dockerfile layers.

If two OCI images share the same file, they'll be de-duplicated on disk and only be downloaded once.
Manual for PUB (a markup language in 1971) – Larry Tesler
OpenAI is losing far more billions than they are raking in. I don't think any generative AI company is even close to profitable at the moment.

https://www.cnbc.com/2024/10/30/microsoft-cfo-says-openai-in...
Thank the Kotlin crowd at Mountain View.
I have been experimenting with putting up short TILs on my blog, as an alternative to writing notes, and so far I think it has been a positive experience.

Putting it out there in public means I spend a bit more time editing and curating, which is good for when I'm looking it up later on.
Yes. It's not the regulation but the misguided implementation that's to blame.

Sites and cookie banner plugins could just accept DNT signals from browsers and no productivity would be lost.
Is that the same as a kellums grip or hubbell device?
Opinion size age shape colour origin material purpose Noun
True. Also, the LLM will give you the most widely deployed versions encountered in the wild (during training).

That means one might find themselves using deprecated but still supported features.

If LLMs came out during the Python 2/3 schism for example, they'd be generating an ever increasing pile of Python 2 code.
That illustrates the difference between anterograde amnesia and dementia. Dementia is a general degradation of the brain that includes memory but you can have amnesia with an otherwise perfectly functional brain. A patient with dementia would never text her kids as in OP's case.

Glad that your wife got over it.
There was a comment here complaining that Matrix is a failure as an open protocol because encryption in Matrix is too complex and hard and PFS is overrated and "why can't we have a simple protocol for chat like Wireguard is for VPNs"... but it got deleted while i as writing my reply. I'll post the reply anyway:

Matrix without encryption is as simple as it gets - e.g. here was a younger, happier me writing a working client in 8 lines of bash: https://news.ycombinator.com/item?id=20948530

With encryption, inevitably things get way more complicated - especially in a decentralised network which needs to be byzantine fault tolerant. As you say, we've successfully simplified this by providing best-in-class implementations like matrix-rust-sdk-crypto - which i'd argue is the equivalent to Wireguard (which under the hood is a bunch of gnarly crypto, even if the API it exposes it simple).

In the end, encrypting messaging is just way harder than a VPN. The encryption hooks need to know the membership of the room (as users), the membership of the room (as devices), verify identities of all devices and their users to prevent MITM, verify that only the right devices can be added to the room, handle accessing history for new logins and new joiners, handle backing up history if you log out of all devices, handle receiving msgs if you log out of all devices, handle encrypted push notifs and allow multiple processes (push, share extension, etc) to share the same crypto state, scale to thousands of devices, etc etc.

Meanwhile if you simplify that by removing PFS - sure, some of it gets better ("the room history gets encrypted by a static password!") but then breaching that secret from any client at any point trivially leaks the whole history of the room.

In terms of "Matrix as an open protocol isn't very successful", i suggest taking a look at https://2024.matrix.org/watch/ for the zeitgeist from a few weeks ago. It's working for some folks at least.
IIRC, that's how symphony and other php frameworks do dependency injection.
Do banks stand a chance against tech giants?
VB 6, back when doing COM was still easy, then the macho team took over, and COM development experience has been a mess ever since, even though it is the main API surface since Windows Vista.
Idk I think the global events of 2020 to 2022 had a bigger effect on public opinion than fringe lunatics like Alex Jones.
archive.is/KHCcc
That's still democracy! Right?
38C3 Community Stages CfP (Chaos Communication Congress)
The Chaos Communication Congress is the Chaos Computer Club’s (CCC) annual symposium and hacker party. During four days between Christmas and New Year’s Eve, thousands of hackers, technology freaks, artists, and utopians get together in Hamburg to communicate, learn from each other, and party together.

This is the CfP for the first "community stage program" covering the tracks: Diversity & Inclusion, Hack, Make & Break, Privacy, Anonymity & Decentralisation, Open Source & Platform Decay (Enshittification), Sustainability and Entry-Level & Education.
always has been...
You're framing website use as transactional but for financial transactions we literally require informed consent.

Also you seem to be operating under the assumption that your personal data is something that can be used as payment. The GDPR literally does not allow that just as human rights don't allow committing yourself to indentured servitude. You can't sign away your rights. If you share personal data you continue to have rights to that data and can revoke your consent. It doesn't stop being your data just because you handed it over, even if you did so willingly.

If your business model can't work without exploiting your users' personal data, your business model no longer works and it's your job to find a new business model that does. There are plenty of business models that only worked when indentured servitude was legal (let's not have the debate about prison labor in the US) and I'm sure you would agree that it's fine for those business models to no longer work. It's part of the risk of doing business. Innovate. Disrupt. Or perish.
I kind of feel you. I also feel that AI is going to be so powerful that most of the developers read it as "all average developers" are going to be in threat.

I am trying to build my own products, trying to build a business around so that money gets taken care of. Then I will code for fun, not for paying bills :)
No one made this claim.
This seems quite likely to me, but did they special case it by reinforcement training it into the LLM (which would be extremely interesting in how they did it and what its internal representation looks like) or is it just that when you make an API call to OpenAI, the machine on the other end is not just a zillion-parameter LLM but also runs an instance of Stockfish?
defending the un-free world, I think you mean. Unless you are exempt from forcible extraction of your wealth (taxes).
I tend to use PHP for my backend work.

In my experience, it’s actually very fast. That may be partly because of the way I write the code, though, and my backend code isn’t really too massive.