skysight-inc/HackerNews huggingface dataset:
This is often the result of poor risk management or lack of risk management understanding.

Compliance assessments at least the assessments I have worked with, take a risk based approach and allow for risk based decisions/exemptions.

If you have a vulnerability management process which takes what the scanning solution says at face value and therefore your process assumes ALL vulnerabilities are to be patched, then you're setting yourself up for failure.
Read the end of what i responded to
And if you try to avoid the ad-hoc-ness by formalizing each useful weird behavior as its own documented type with its own documented semantics for application, then you've just reinvented monads. (Which is not to say you shouldn't; IMHO stdlib support for monad types in a dynamic scripting language is long overdue.)
I appreciate it. So far so good. We've been hosting lobbies for about about 6 months now.

Also, I made a typo. They shit down in late 2023, not 2024. So between November 2023 and March 2024, there was no public place to play the game we've brought it back since though.

Hope Bamco lets us be in our little corner for now!
While I've never done it, it might be worth headhunting and paying more than the engineering market rate if you have specific requirements like this. Two of my friends have this exact skillset, but they're both moving into management because it pays better, so you'd have to convince them that you're able to offer A) a salary competitive with a tech lead or EM, and B) sufficiently interesting work.

I think if you're expecting to find someone with 5 years experience who'll work for a mid-level engineering salary but also understand design, you might need to adjust your expectations towards paying more or hiring older people from non-traditional backgrounds, maybe both.
Elon runs an efficient and innovative business off of government contracts. He is probably the right person to define what those contracts should look like.

Cost-plus is garbage.
I'm really shocked that anyone is still mentioning Dieselgate and comparing VW to Tesla when people are dying because of faulty Tesla tech: https://futurism.com/the-byte/four-die-trapped-burning-tesla
I'm a new manager and I'm really struggling.

Reading this article put into words my own struggles and the candid feedback I've received.

I'm certain that had I read this a few months or years ago, I would be completely lost.
The damage for the kid is also considerable. I mean, he learns that he needs to be surveilled 24/7.
100%

Third party cyber risk management is a hot topic in cyber security at the moment. If you want people to buy your solution, you need to be able to demonstrate you have appropriate information security controls. A good way to do that is ISO 27001, all the way up to SOC reports.
You posted this 2 hours ago https://news.ycombinator.com/item?id=42122497
Hi Zachd,
I like this, but I'd like to be able to do it for custom date ranges, and add custom constraints.

for example, my company has mandatory shutdown days, I have x additional days leave, and z study days leave that I expected to not use more than 1 study day in the same week and I need to use some of my leave by 30 jun as australia businesses manage the financial year as july to june, not jan to december.
Why does the current administration think we need to be protected from crypto? Did I miss an amendment?
Overall I think it's worth it. I made a switch like this back in 2018, and it's worked very well for me. I ended up buying a new stock-config MBP15 because my previous laptop had a fatal failure and needed a quick replacement; A couple of months later I swapped to a maxed out i7 Mac mini and kept the laptop as a "backup" (in case the mini needed service) and for travelling; 5 years later (last year) I (mostly) replaced the mini with an upgraded M2 Studio, and still have the same laptop as backup/travel, which leads to one of the "downsides":

It makes for a conundrum when you finally need to replace the laptop. It isn't your primary use machine, so it becomes hard to justify costs of upgrading components on a replacement, but you need something that can do the core things your desktop does if you need to work while travelling (or the desktop is out of action).
Worth noting the base model only has 1Gb ethernet, not 10Gb as mentioned in the blog.
I suspect the two of you simply have a different definition of "make sense".
I tried to tell you. :shrug:
AI's math problem: FrontierMath benchmark shows how far AI still has to go
It seems enshittification isn't limited to big corporations these days.
Does it, though?

It has a very brief introduction to Docker and Docker Compose, but then it mostly has a lot of FUD that's designed to scare people off of Docker Compose but is not remotely convincing to someone who's actually worked with it. The way they frame that pihole example ("Whew! That’s a lot of stuff!") is just silly.

Looking at their website, I think they started out trying to make self-hosting really easy for a barely-technical user [0], which accounts for their attitude towards docker-compose, but it also means that the post was pretty devoid of useful information for someone who actually wants to self-host with the tech that's already ubiquitous today.

[0] https://tealok.tech/
He *has* to be aware what's he's doing, because this has already happened to him before,

https://www.cnbc.com/2021/01/08/elon-musk-boosts-signal-app-... ("Elon Musk told his followers to 'use Signal,' leading to 1,100% surge in unrelated stock with similar name" (2021))
flash-attention is a additional and later technique to accelerate computation of attention, That's why it's not the default option for llama.cpp
Some recipes end up with more than one dish, like when you prepare a thing and its accompanying sauce together.

I guess superficially you can join them together with a final node that is like "serve all the dishes".
It can also increase your PM output, at the expense of next day's AM output
But can it boot SCO Xenix v2.3.2d?
Feature request: Enter company shut down dates.
What's the difference between this and the GAO? [1]

[1] https://en.wikipedia.org/wiki/Government_Accountability_Offi...
> If you have one machine and docker-compose is falling short, really, just write a Python script with the official docker Python package, you'll be fine.

… aand there is even Ansible playbook for that! Maybe overkill.
Show HN: Reddit Comment Visualizer
A visualizer I built that takes in any reddit post (via link) and shows how comments were made on it over time. Originally I made it to try to discover which comments got the most upvotes generally speaking, but there are probably other good uses for it too!
Yes, in retrospect I should have mentioned "Components" in my comment and just compared it to "Java" in general instead. I felt that was implied due to the thread and topic of discussion.

From a pragmatic end-user point-of-view explanation, I would still stand by saying WASM Component Model may be similar to working within the JVM multi-language ecosystem. One can work with code compiled from multiple different languages, but the generated code may be different because of the different compilers.
That may be so in America, but in Germany I had to log in through my university‘s system in order to verify my student status.
I never did manage to fly them. Their website just returns " You don't have permission to access "http://www.spirit.com/" on this server." Preventing customers from buying tickets isn't a good way to run a business.
Previously

(5 points, 3 hours ago) https://news.ycombinator.com/item?id=42122241

(3 points, 6 hours ago) https://news.ycombinator.com/item?id=42120974
This is super cool! As a regular BART commuter I always thought it'd be fun to try and build a location classifier based on the screeches in different tunnel locations, but using accelerometer data is probably much more practical.
You know you can run multiple processes inside a single container, right?

The solution to the complexity of applications that are distributed as collections of interdependent containers is to put all of the different pieces inside a single container. This is equivalent to what people did before docker existed, and it's still perfectly viable today.

There's no need to over-complicate things.
I'm pretty sure he means brand-new versions, with the idea that high-end enterprise tech like this will eventually become inexpensive consumer-level tech, as it usually does.
If you can wait a few months, Ryzen AI Max Pro (ignore the name) should be pretty powerful. Ryzen AI 370 isn't bad either.
Recipes are a pretty interesting case because they're right on the edge between text with a bit of markup, and data with a lot of text.
It's more than just a runtime for running containers, from the main landing page it looks like they're really specifically targeting self-hosting for the barely-technical [0]. In that context this article makes some degree of sense: their target audience will probably be legitimately overwhelmed by that pihole example and wouldn't know how to write a Python script to save their life.

If they can pull it off more power to them, but I'm skeptical that what the non-technical self-hoster needs is a TOML DSL that abstracts away ports, volumes, and even database implementations behind a magic text file. At some point you just have to bite the bullet and admit that your audience needs a GUI (like Sandstorm [1]).

[0] https://tealok.tech/

[1] https://sandstorm.io/
@eskibars was specifically talking about luxury. And yes, there are people who will fork out $10000 or $50000 for a 10-hour flight where they get their own little multi-room apartment complete with a shower and free flow champagne.
It's not the same flight. I avoid American, United and the discount carriers because they have the smallest seats. Spirit is also one of the only airlines without power outlets. Personally, I don't care if it's a 1-2 hour flight. I'd be happy to stand. But on a 4+ hour flight, a hundred bucks isn't so bad for bigger seats, a power outlet and maybe even a TV and free WiFi depending on the carrier.
Those people have precisely zero bearing on Spirit airlines and it's ability to stay in business.
I wasn’t particularly addressing your feelings towards singapore, whether they are positive or negative. Was just merely stating facts.

Rent security is one of the highest ive seen in many other places. Landlord can’t just kick you out. There are some notoriously bad ones, who are disciplined by small claims court easily.
honestly i can’t care less where indian workers can get booze. they are not allowed because they do stupid things after. and in singapore it’s punishable to do stupid things, as you know. Those who want to get a drink, can have it almost anytime. And again, noone stops anyone from stacking on it and enjoying anytime.

Cars - government does regulate amount of cars via COE supply. they can shrink or expand it as they please.

Quality of life - hard to disagree here. It’s tanking. Disparity between rich and poor people went up substantially, especially within last 5 years.
"Upstream" Arch works fine, so whatever problems you had with Manjaro, they weren't caused by systemd in Arch.
I thought Swarm had been deprecated?

I just took a quick look into it and (classic) Swarm was deprecated and ... replaced by Swarm (mode).
Well, it would be more like a directed acyclic graph, not a tree, because you can re-use nodes.

(And it's not even necessarily acyclic, because eg sourdough or master stock is perhaps best modelled as a cycle.)

In any case, looking at a recipe as a tree or a graph is a very limited view:

A great recipe isn't a list of steps to produce 'something'. A great recipe has a dish in mind with a specific taste (or a specific family of tastes with knobs you can turn), and the author has worked out what parts of the recipe you need to adapt in what ways to compensate or take advantage of current local conditions.

Eg some days it's warmer than others, so you need to adjust your fermentation times. Or some parts of the world have harder water than others. Or your available veggies might have different amounts of moisture etc.
A happy HyperDX customer here. Can't recommend it enough.

We wanted something good for tracing and logs, without the price tag we were used to from datadog. We've been pleasantly surprised by how easy it was to set up and start pumping telemetry.

The UI is super intuitive and the OOTB dashboards are great as well.
I find it curious how people are so willing to uncritically accept this ill-defined "female brain in a male body" idea without thinking it through sufficiently to be able to explain it.
Compared to Linux that's flat not true. Someone has been blowing marketing up your ...
The cheating/fraudulence encouragement in this thread is disgusting. You guys are not stilling a pencil but several hundreds dollars. Paying a part of it or apple being fatty rich doesn’t make it more honest.

I don’t think I ever encounter here such collective encouragement to bypass a law (ok probably for jailbreak which is not a fraud). Not sure if the demography changes, societal culture change or just luck.

Edit: Oh and yeas I never completed college, don’t own a .edu and am maybe just subconsciously jealous.
Bandwidth doesn't replace size, these are orthogonal parameters.
My guess is that the difference in Keycodes, 229 and 2, could be due to gboard trying to delete the entire autocompleted word, instead of deleting one character at a time. But I could be wrong.

Seems like a pretty simple bug to address
More interesting is that there are tons of tools that convert docker-compose files to Kubernetes on the fly. Minikube and friends are pretty good and solves all the problems, in a more battle-tested way.

So what is the real business opportunity here?
Is canine.sh hosted on Canine?
Light reranking is a huge understatement, given the amount of preferences they let you manually set for ranking.
Hello everyone! I have recently developed and released a VSCode extension using cursor ai: the name of this extension is VSCode Cursor Rules.
This is a simple extension whose core function is to pull the .cursorules files you need from https://github.com/PatrickJS/awesome-cursorrules.
By creating and defining your .cursorrules file, you can enhance your programming experience with cursor ai.
We hope you enjoy it!
Marketplace address: https://marketplace.visualstudio.com/items?itemName=BeilunYa...
Github address: https://github.com/beilunyang/vscode-cursor-rules
PgLater: Asynchronous Postgres Queries
I just found out about this extension that runs your Pg Queries in the background and returns a job id. You can come back later and get results from that job id.
It is a bit too verbose, but the gist of it seems to be, that delegation is about giving goals and then giving freedom to the delegates to achieve those goals. The article discourages micromanagement(with some bad examples), and encourages that giving general tasks and giving some goals with little bit of hints should be the appropriate approach.

For example, you tell your delegate to post a link on HN, giving them goals that it is properly formatted and correctly posted, a hint that there should be a prominent “submit a post” link somewhere on the navigation bar, so that they can try to figure out about how HN works, how to post, figure out the formatting guide, check when their post was successful.

It is discouraged to set out the entire tutorial steps(micromanagement with too much how), like type this url in address bar, signup/login by clicking the anchor, click submit post/link, type in the content …

The aim is that, the delegate learns how to achieve the goals with as little hint as possible, so eventually if you ask them to post a link(say doing a SHOW HN) or a job, they can achieve the goals on their own.

Some sound advice but too much text to explain.

(Edit: reduce word count and formatting update)
CIMB Niaga Bank moves to Rust from Java, gains 400x efficiency
Where is the app that uses two or more comms channels with text messages (e.g. WhatsApp & Signal & iMessage) in order to send a message ? Something like a one-time pad technique, except that no single comms channel has the unencrypted message. Require that ALL channels be cracked/surveilled in order to XOR (or some other algo) them all together to crack a message.
You have to render strings in (Chinese|Japanese) font if you believe the string to be meant to be (Chinese|Japanese). Literally that. That's the official Consortium sanctioned way to handle Chinese/Japanese/Korean characters.

There are no particularly good ways or ready made frameworks for that, as it wasn't a huge issue pre-Internet because most people are monolingual in these languages: you pick a language in OS(or buy computers with a ROM) and everything user would see was in the user's language.

It's a giant pain today - there's no "Arial in Chinese", no easy way to mesh multiple fonts together in UI, or good ways to determine intended language of a string, and the fallback default is least common denominator of Simplified Chinese(PRC) for some reason - but not much is being done on those fronts.
Unfortunately, the more useless the signal the more effective it is, and the degree of signaling in recent years has only increased. This reminds me of an excellent article from almost twenty years ago: https://www.cbsnews.com/news/aggressive-ostentation/
I know this is content marketing fluff for their own product, but complaining that Docker Compose isn't a full-fledged web application platform is idiotic. Use something like Dokku if you need such a solution.
It also seems slowish, but seems the problem is the startup cost. So probably pretty smart?

The following shows fairly stable times.

> for i in $(seq 20); do time raku -e "say (1, 1, + ... *)[0..$i]"; done
I still mourn the long scale. A billion is obviously a million millions.
> the CD version looking rather more washed out

I remember reading somewhere many, many years ago that the graphics were adjusted to have less colors to work in Windows, which reserved 20/256 colors for system use.
Doesn't mean it will get honoured. You will be offered the opportunity to remove a few specific comments/posts at most.
The family would have heard about airplanes, they were from Perm Oblast, which isn't exactly remote. It isn't exactly a big leap to think that what they were seeing was the lights of airplanes. Ships carry lights for safe navigation, and if you fly at night you also carry lights for safety.
Because most of the good sites won't let you crawl them any more, unless you're Google.
So it's not so much an "artificial intelligence" as it is an "intelligence amplifier", with the usual amplifier feedback loop.
Show HN: Hour Crash Course on Data Structures and Algorithms
Containers were a mistake. This is all radically more complicated than it needs to be. Running a computer program is not that complicated.
It's not an especially crisp piece, but it comes down to this.

- Managers need to pay close attention to where they spend their energy (=time). For example, the CEO should not be spending time picking items for the company snack cupboard.

- At the lower tiers of management, the "what" necessarily becomes much more granular and task-oriented.

- The risk is that managers at this tier end up telling people precisely what to do and how to do it. This is not scalable, leads to frustration on the part of the manager and managee, and burnout.

Better is that the manager describe the desired outcome and set of standards, kpis, norms, etc, that must be met, and let ICs do it any way that fits. (Standards and norms enforce a culture that lets people collaborate more productively. No point letting a dev loose to code up a feature if they turn around a week later and tell you they did it...but in C#, when you're a Rust shop.)

An effective IC should aim to internalize the standards and norms that a manager (and their boss) use, which can be explicit or implicit, take the time to understand the manager's own targets, and offer up ways to make their work product make their life easier. For example, if you know that your manager has to write a weekly report with kpis like code coverage and test cases, then take care to produce easy-to-consume material that they can use. Eg text they can copy paste into an email, a dashboard they can screenshot or link to, etc. You want to be thought of as someone who they "dont have to worry about" and who comes to them with solutions and not just problems.

Sounds a bit Machiavellian to some, but a good manager relationship cam make or break your time at an org.
Consider yourself lucky. The rest of the experience is worse than that.
I don't really think ARMv8 has anything useful to provide here?
How many here flew on spirit knowing what to except via an Ultra Low Carrier yet had a bad experience cause they expected more (one I.e. ..expected same experience as on southwest where bags are free)and or as well what were your experiences.

Mine were all great (enjoyed dozens of flights with them)..clothes & travel stuff in a book bag or sometimes in a vacuum seal bag then in book bag and stuff book bag under the seat. Saved hundreds and flew a lot more!
(Semi pro jazz guitarist here). The heuristic I was taught: the accompanist owns the 3rd and the 7th, which allows the SOLOIST to choose #4, 5th or the #5 as the muse dictates in the moment. The 5th is an semi-avoid note, until I hear the soloist commit to a choice of 5th.
Those are dead threads with three comments between the two them. Since that's not a "significant" amount of discussion, this one wouldn't considered a duplicate post; you can consult dang's (the mod's) philosophy [0] about what a dupe post is or is not.

[0] https://news.ycombinator.com/item?id=36899010 ("HN's policy about dupes has been consistent for many years (it goes back to pg, who started the site and ran it for the first 8 years or so), so I hope it's ok if I explain it a bit...")
Whatever the theoretical analysis tells you, I've been able to reproduce a microwave interfering with a wifi signal with at least one microwave and router. I've had other times where it didn't have a noticeable effect though.
NASA's Jet Propulsion Lab laying off 5% of its workforce
This is a fun problem to see on here (for me) - because I solved a lot of these problems at my last company when I built them a dev enviroment that ran over 30 services, and growing.

It was written as a makefile that wrapped docker compose commands, but that's just because it was the easiest to mvp.

I considered it a "framework for running a large collection of containers locally".

I solved the ports issue by using env vars like a switchboard, with an iPortService=<inside container port>
and
oPortService=<outside network port unique to network-layer>

Then i used two directories, one for a data layer that ran datastores, and one for app, for apps. You controlled the layers as groups.

You could operate the layers separately, initialize the dbs, and also reset their storage state definitely.

Then I had to solve the "docker ps" output problem, since its unreadable. So, i just split it to 3 commands: state,ports, & running. It outputs what you expect.

I should re-write it into better code and open source it. It was fun to build.
To those who are pointing out that compose isn't meant for production, keep in mind that this product that they're selling appears to be designed for the small time family self-hoster [0]. They're not targeting production web apps in a corporate setting, they seem to really be targeting people who wish that they could self-host something on their own network but don't have the technical background to use the docker compose files that most self-hostable apps provide as the 'easy' option.

I'm quite skeptical that adding a layer of abstraction and switching to TOML instead of YAML will suddenly enable those scared away by compose to start self-hosting, but kubernetes and docker swarm were never in the cards.

[0] https://tealok.tech/