skysight-inc/HackerNews huggingface dataset:
I imagine Black Forest Labs (Flux) is doing alright, at least for now. I still feel like they’re missing out on some hanging fruit financially though.

But yeah, you’re not going to make any money making yet another LLM unless it’s somehow special.
Yeah, but then they can't win "customer service" points by not making you pay outright extortionate rates, thus further inducing lock-in.

It's very clever - either people pay the overages, or contact you and you can look good by giving them company scrip to spend on other of your services.
I still think it’s far less than managing tls per service.

Every component needs a different tls configuration, vs one time installing istio.

Raw TCP is supported by istio even with mtls, you just have to match in your VirtualServices on SNI instead of Host header.

We routinely mix tcp and http services on the same external
ports, with mtls for both.

UDP I don’t really see how is relevant to a conversation on tls
By averaging the embeddings.
> Yes

The tiny subset of D userbase, which is tiny in its own.
The rapid rise of Russia's powerful darknet drug industry
(Daflux.io) – Premium Tech Domain for Sale from YC-Candidate Startup PlawLabs
Hey HN community,

I'm Yaz, the CEO of PlawLabs, a startup that’s recently become a YC candidate. We’re excited about the tech projects we’re building and the innovative domains we have in our portfolio. One of our standout domains, daflux.io, is currently for sale. With a concise 6-character length, tech-relevant ".io" extension, and a memorable sound, daflux.io is an ideal fit for tech startups, data platforms, or SaaS ventures.

Why daflux.io?

Market-Valued: Appraised at $1,025, with the .com version listed at $3,000.
Powerful Brandability: “Flux” evokes movement, innovation, and adaptability—qualities we think resonate with ambitious projects in tech.
Popularity of .io: Widely used and trusted among tech companies and startups.
As we continue to grow our presence, PlawLabs is committed to sharing valuable assets with the community. If you’re interested in daflux.io or have any questions, feel free to reach out directly via email at domains@plawlabs.com.

Looking forward to connecting with potential buyers and tech enthusiasts who share our passion for building the future.

Best,
Yaz, CEO & Co-founder
Which drives me mad, given that Uranus should really be pronounced like the greek god Uranus (uran-os, with U pronounced like in Uzbekistan), not "ur anus".
https://www.youtube.com/shorts/Na_yeYJMCCc
"Billing alerts" are a joke, give us hard spend limits. Then offer a way to set those limits during onboarding.

Building a business on blank cheques and accidental spends is shady. It's also a large barrier to adoption. The more times devs see reports like, "I tried [random 20-minute tutorial] and woke up to a bill for my life's savings and luckily support waived the fee this one time but next time they're coming for my house", the less they'll want to explore your offerings.
We will never know if jarts comment was constructive or not until we know original developers decision process.

If original decision process was indeed “less keystrokes”, then how is that not a constructive criticism?
This is a fine library, but I use nlohmann extensively and haven't experienced any considerable compilation slowdown once I added it to the project.

Overloading from_json to modularize parsing is really useful, I think that should be a part of every templated C++ json parser library.

That said, I have seen these ThomPike* macros in cosmopolitan.h before, I wonder what the origin is.
I'm defending open source developers. We can't freely modify open source code if it has glacial build times. It's specifically because people are volunteering that we should aim to be as conscientious as possible when it comes to build latency. Someone who volunteers to contribute code that compiles slowly is not being respectful of the time of all the other volunteers, which is like pumping the brakes on the open source movement. So I will make my views clear that development practices need to improve.
My experience with our riscv build deamons in Debian is everything works, but there is some spurious segfaults from time to time.

Check the green build matrix on this page: https://qa.debian.org/developer.php?login=alexander.kjall%40...
I've only ever self-hosted. Granted, I'm only running a website with a few visitors, but I'm just using a cheap raspi, and not spending loads every months for AWS or whatever else people use these days. Plus, its right in my cupboard, and I have full control over it
Hmm. So you don't disagree that cheap semirural airports with a population base and short flights are important parts of the model, but you don't think they are related to population density? I don't see how those could be unrelated.

Perhaps a simpler way to convince you of the importance of population density to today's LCC model: Take a look at a map of where Ryanair flies. Under the 58th parallel, on the entire European continent, there is only one place over 250km from a Ryanair airport! Look at all the tiny airports, Limoges or Valladolid or Brive or Osijek or anywhere really. Ryanair flies to 250 airports and they do it with hundreds of 737s operating like clockwork, one short flight to another, not a tiny regional plane to be seen. Meanwhile, Delta flies to a similar number of airports in the US (in the 200s) but the majority of those are with small regional jets which are way less cost-effective than 737s; if you're an LCC, that means that you can forget about flying there. Obviously Delta is flying all those regional jets not for fun, but because they can't fill a 737, because the local population is not large enough to support one. I don't see how population density is not a core part of the issue here.
For many people, $15 lights are fine. My commute only has a very short unlit section and its a very wide and easy to follow path, so the lack of an adjustable beam setting is no big deal.

Of course, that means that I absolutely must adjust the fitting to "permanently low beam" rather than "permanently blinding", if for no other reason that I don't want to get flattened by an oncoming car I've just dazzled...
Agreed. Politics on micro logging sites is terrible.
It certainly is, one just needs to check any programming language market share analysis that omits Android deployments.

Kotlin hardly does more than 10% of JVM workloads, and it isn't as if any JVM vendor is replacing Java with Kotlin on their JVM implementation.

Besides Google with ART, which is anyway not a JVM proper, not fully TCK compliant to start with.
An article about jungle music in 90s video games that doesn’t mention Unreal Tournament?!
They aren't as good as here though.
No, it's a long deprecated JVM that is effectively abandoned. But it's still a good minimum target as all of its successors tend to be backwards compatible. But you'd typically use one of the more recent LTS versions.

Of course there are quite a few crypto libraries out there, including several JWT related ones. A challenge in that space is that there have of course been some platform changes over the years. Not all of the newer algorithms are supported in older JDKs. And some of the alternatives are a bit complicated in terms of dependencies. I've had some issues with some of Google's libraries dragging in everything and the kitchen sink in terms of dependencies and then causing conflicts with my other dependencies when one of those dependencies changes their API.

This one looks like it builds on bouncycastle and not much else. Which explains how it is not really that dependent on what comes with the JDK as bouncy castle provides its own implementations for a lot of the popular crypto stuff.
Hi François, just wanted to take the opportunity to tell you how much your work has been important for me. Both at the start, getting into deep learning (both keras and the book) and now with keras3 as I'm working to spread DL techniques in economics. The multi-backend is really a massive boon, as it also helps ensure that the API would remain both standardised and simple, which is very helpful to evangelise new users that are used to higher-level scripting languages as my crowd is.

In any case, I just want to say how much an inspiration the keras work has been and continues to be. Merci, François !
Any concern about conceptual namespace collision? The mobile app Burner is a completely different product (not to mention it fits in with the common definition of the term)
You can get some higher degree examples (y squared = a degree 4 polynomial, for example), but degree 3 is special. An arbitrary polynomial of degree 4 and higher lack a rich structure (as far as we can tell). You can try to get around it by embedding the curve in a higher dimensional object, but it doesn't get you as far. (This is the idea behind hyperelliptic curve cryptography, for example.)
You can always use something like Docker Swarm or Nomad which achieves the same end result as Kubernetes (clustered container applications) without the complexity of having to manage Kubernetes.
> You're thinking too much by the rules. You can absolutely scrape them anyway. Probably the biggest relevant factor is CGNAT and other technologies that make you blend in with a crowd. If I run a scraper on my cellphone hotspot, the site can't block me without blocking a quarter of all cellphones in the country.

I am familiar with most of that, and there is a BIG difference between trying to find a workaround for one site, that you scrape ocasionaly, than to to find workaround for all of the sites.

Big sites will definitely put entire ISP's behind annoying capachas that are designed to stop exactly this (if you ever wonder why you sometimes get capatchas that seem slow to load, have long animations, or other annoying slow things, that is why etc.)

And once you start making enough money to employ all the people you need for doing that consistently, they will find a jurisdiction or 3 where they can sue you.

Also good luck finding residential/mobile ISP's that will stand by, and not try to throttle you after a while.

You definitively can get away with doing all of that for a while, but you absolutely can't build sustainable businesses on that.
Is there even a simple way of listing all the existing resources in an AWS account? I’ve always had to check service by service, region by region. It’s tedious and error-prone.
I'm old and was self hosting 20 years ago, but we're comparing apples to oranges a bit here!

Using AWS for smaller personal projects will always be more expensive and probably less fun.

On the other hand I recently had to run an ML model over hundreds of thousands of media files. I used AWS to launch 100s of GPUs using spot instances and complete the job in a few hours, then just turned it all off and moved on. It cost a few hundred dollars total.

In my mind it's at this kind of scale AWS really makes sense.
> do paranoid sweeps of their entire AWS account looking for rogue resources

That's the thing that annoys me the most about AWS. There's no easy way to find out all the resources I'm currently paying for (or if there's a way, I couldn't find it).

Without an easy to understand overview, it feels like I don't have full control of my own account.
The rationale is that you can control the position of the visual parts that make a letter by changing the color of the larger pixel.

http://www.msarnoff.org/millitext/

https://millitext.gk.wtf/
They're both terrible echo chambers, one created by Musk and the other created by random instance admins.
Though to be fair, since a few years ago Java 8 is no longer the most popular java version.
I kept seeing all these posts about using a DB as a filesystem, so I wrote one
Thank you, that would be much appreciated!

Slug selection uses a better AI prompt now.

I agree with the lack of vertical alignment. It's not just you, many people have the same view, and there's a reason it's been used in newspapers. And there's a reason it's not used when the content and layout is generated automatically, but I'm going to work on a solution.

Thank you, I will browse through your comments :)
Where do you guys find these? I really enjoy reading these short stories people post on here
Yes i was charged $400 once for services i had running for three months without any idea it was happening
>How did you find that link?

If you install the Archive Page addon Firefox[0]/Chrome[1] (I don't use Chrome, but the FF version works nicely) you can right-click on any link and select 'search link', or you can click 'archive link' which will queue the link for archival if it has not already been archived.

[0] https://addons.mozilla.org/en-US/firefox/addon/archive-page/

[1] https://chromewebstore.google.com/detail/archive-page/gcaimh...
>This is due to the horrible build system, odd choice of defaults, instability under constrained resources, and how it inserts itself into everything. You end up needing more fine-grained control than ROS gives you to make an actually robust system, but by the time you discover this you'll be so invested into ROS that switching away will involve a full rewrite.

So true. The worst is that at many companies they will write a ROS clone in the end that does what they need, instead of getting rid of this awful programming paradigm altogether.
Congrats, François, and good luck!

Q: The ARC Prize blog mentions that you plan to make ARC harder for machines and easier for humans. I'm curious if it will be adapted to resist scaling the training dataset (Like what BARC did -- see my other comment here)? As it stands today, I feel like the easiest approach to solving it would be BARC x10 or so, rather than algorithmic inventions.
The alternative is charging for the rental by the day but a huge proportion of your customers (who probably own a bmw) constantly complain that they’re being overcharged and they want a discount cause they don’t need the blinkers, and refuse to pay for them.

I joke, but this persona is very real, and it leads you to this nickel and dime billing model.
unrelated rant, but I'm still salty about it.

needed to send "raw" http requests instead of using their bloated sdk for reasons, and requests failed with "content-type: application/json" header, but succeeded with "content-type: application/x-amz-json-1.0". get out of here with that nonsense.
Study: Aussie Wiki editors face burnout amid racism, edit wars
Site not loading at all, `https://www.nxtrace.org/static/js/main.4678cf79.js net::ERR_TOO_MANY_REDIRECTS` in DevTools console.
JavaScript required just to read a page describing a CLI tool? I'll pass.
We just finished upgrading all our Java 1.2 code to Java 17, the Java 6 projects are next :)

I doubt we'll get around to the Java 8 stuff before 2030.
LOL. Why are you asking us?

Speak to your potential customers and find out what they'd want to see to make them trust it, and what their data requirements are.

What's the angle BTW? Please provide as much info as possible. Thx :D
A Cloud Guru / Pluralsight has something they call "Cloud Playground" or "sandboxes".

It might provide that, but I’ve never tried it myself, so I could be wrong.
the more responsive someone is, the less busy they are. unless they are doing work that is so easy that constant interruptions don't matter.
I dont have this but I have experienced this rarely in some dreams, where a concept appears as an object or a shape and you know it.

In one very old dream I saw love as a yellow space ship like object. In that moment in that dream, these two weren't separate from each other. May be that's not synesthesia but that's how I understand it.
This is a fantastic explanation, thank you very much!
The billing department knows exactly what you were running, but they only tell you once a month...
That’s EU-wide. https://europa.eu/youreurope/business/human-resources/employ...:

“You must offer your part‑time staff the same employment conditions as full-time workers, including pay, leave, notice periods and other rights and benefits linked to their employment. The employment conditions should be applied on a pro-rata basis compared to full time workers. For example, if a part-time worker works half the hours of a full-time worker, they should receive half the amount of annual leave.

[…]

Whenever possible, you should try to accommodate requests from your employees if they want to change their working schedules, such as:

- transferring from full-time to part-time

- transferring from part-time to full-time

- increasing their working hours

You cannot dismiss an employee if they refuse to transfer from part-time to full-time work or vice versa.“*
Voting for Short term Goals have started!
That's actually pretty cool, props to Apple for open sourcing it
I mean this’s has been known for years and it’s not just Russia is it but I gusss you know “Russia” == More clicks
The developers motives doesn’t change the snarky way jart wrote their comment.

And if you felt their comment was acceptable then I question how much you’ve contributed to open source yourself. Snarky comments like jarts are all too common and really demotivate people from maintaining popular projects.

But don’t just take my word on it, there’s a plethora of other contributors who’ve talked about this topic as well.
I thought the same thing, why not calling family first and let them provide help...
I was in Bloomington for college and ordered from ClusterTruck multiple times. I did think the food was notably more fresh than other delivery services.
What ties to Russia?
Anyway to answer your question the number of fingers in one's hand would be nearly 100% inheritable. A more accurate figure would be 99.<something>

tptacek , I'm not sure why you are hung up so much on the specifics, haven't we veer well past the main topic? My getting the definition of heritability, innateness etc. in this should not matter beyond a certain point. I understand that if we were experts debating a certain tropic definitions matter. Quirks , physical trait, depression, mental illnesses, and by extension IQ would run in families, this was common knowledge in the pre-modern era. ( and probably is still so in many parts of the an on urbanized world). Ofcourse one has to separate out the external factors like common food habits (that was common to these families) would impact psychological traits.
I love the Desk Depot! The chap who runs it is really nice and helpful, too. So we'd call him the Desk Despot since it was so inappropriately slanderous. I got a huge desk for home there in 1990 when I worked at Sun. It's been opened since 1976!

I wonder what the record is for the number of times a piece of office furniture has gone through Desk Depot.

https://news.ycombinator.com/item?id=12759801
Object-Oriented Analysis and Design with Applications by Grady Booch is my favorite one. It explains object oriented programming from the conceptual point of view.
I would also suggest the design patterns book by the gang of fours by the same reason: this book teaches you to think in the object oriented way rather than describes object oriented languages features.
Java 8, as in "extended support until 2030 because too many companies would rather pay for that than upgrade"
Fewer people means less insurance in case of natural disaster, less innovation, less of everything really. Of course, that has to be balanced with resource consumption, environmental effects, etc.

Also, a declining population doesn't just mean "go back to a more sustainable level". It's not like people are suddenly going to start having babies again when the population gets to, say, 1B, and things will carry on sustainably. Instead, there'll barely be anyone who can have babies, because everyone will be elderly (i.e. inverted population pyramid), so the population will just keep collapsing. And with so many old people needing care, and no young people around to do it, things are going to get really bad quickly.

People seem to think we're going to invent some super-advanced humanoid care-giving robots "any day now", and I suppose also invent some way of people being able to have more kids over a longer lifespan or something, but betting your society's future on uninvented technology is not good planning I think.
> recognizing when your calculator gives a bogus result because you made a keyboarding error

It might be counterintuitive, but the cheaper (and therefore successful) solution will always be more technological integration, not less.

In this case, better speech recognition, so the user doesn't have to type the numbers anymore, and an LLM middleman that's aware of the real-world context of the question, so the user can be asked if he's sure about the number before it gets passed to the calculator.
Show HN: Graph-Based ML for Detecting Anomalies in SELinux Policies
We're working on a way to tackle the complexity of SELinux policies by using graph-based machine learning to automate policy analysis and anomaly detection. SELinux enforces security through strict access controls, but the intricacy of its policies makes it hard to manage and troubleshoot effectively. Our approach represents policies as graphs and uses node embedding (like Node2Vec) to train models for identifying policy violations more efficiently.

SELinux has become widely adopted for security on Linux systems, but misconfigured policies can lead to unauthorized actions and security issues. Our method aims to make it easier for admins to detect and adjust misconfigurations, potentially reducing vulnerability risks. Early results are promising, and we’re excited about the potential to make SELinux management more intuitive.

IEEE ICIR (2024)

- KJ
> And honestly in some low-population towns it might well be the most sensible solution.

That is reversing the logic a bit. The reason that low-population towns don't get to develop their own robust economy is very correlated to its lack of in public transit and fast connections to larger centers.

Politicians in the US keep talking about high speed rail and crazy projects, but a (relatively) easier to way to revitalize flyover states would be if they had "regular" passenger rail to connect with each other. Each station would become an opportunity to develop a local economic center, and each center that starts to grow would mean an opportunity for thousands of people to leave the big expensive coastal cities.
> as there's no guarantee it will be maintained

As opposed to official projects like Allo, Wave, Reader, etc. that will?
I've played with this quite a bit over the past few years and want to clarify that the colors of light from the display only combine in your visual system (retina/brain) so that you perceive colors other than red, green, and blue.
In the case of transfer of ownership there's little GOG can do (legally) except lobby. But from a technical standpoint access to the games is guaranteed by the DRM-free part. You can have the binaries free of encumbrances, effectively owning the game (binary). Possession is nine-tenths of the law.
BERTs Are Generative In-Context Learners
Uhhh that's not how Generally Accepted Accounting Principles work.
> In a vacuum this problem wouldn't exist and aluminum should be no more difficult to weld than steel.

Aluminum is a PITA for more reasons than its oxide layer...
Right, one rather uninteresting line of approaches to ARC consists of trying to anticipate what might be in the test set, by generating millions of synthetic tasks. This can only work on relatively simple tasks, since the chance of task collision (between the test set and what you generate) is very low for any sophisticated task.

ARC 2 will improve on ARC 1 by making tasks less brute-forceable (both in the sense of making in harder to find the solution program by generating random programs built on a DSL, and in the sense of making it harder to guess the test tasks via brute force task generation). We'll keep the human facing difficulty roughly constant, which will be controlled via human testing.