skysight-inc/HackerNews huggingface dataset:
Agree with the sibling: committing fraud by intentionally not honoring a contract is not morally or logically the same as duplicating a piece of media under copyright. That is not to say that copyright violations are harmless (the scale and intent matter), but details can't be ignored.

A material difference between fraud and copyright violations as categories is the presence of lost profit. With fraud one has lost the time value of their work, but with media piracy there is some research (funded by the EU of all things) that it doesn't trade off with sales and may even help some sales.
> Server-side templates, especially the “stringly” typed variety, are a demonic chimera suitable only for depraved alchemists

I couldn't agree more with this. Components and TSX are a much nicer way to build UI trees, even on the backend.
Same here. I’m stuck with the service provider’s (“free”) fibre router.

I’ve turned its wifi off, and connected my own setup via the LAN port.
It's not entirely about this particular certificate (although this is bad, too). This is about a certificate authority giving someone who is NOT Google, a certificate that can be used to "prove" a server is Google. Accidental or not, this should not happen.

The "blast radius" is limited to Microsoft since they are the only ones that trust this particular certificate authority. Your non-Microsoft browser won't trust these certs. Your non-Microsoft OS, Java program, etc. etc. won't trust these certs.
Does anyone have a list of state ( associated ) CA's so that I can ditch them all ?
How bad is it? (Genuine question from me who lacks cybersecurity knowledge)
oh wow this looks great and thank you for the guide. Haven't played GW2 in over a decade but I do think about my time playing it every now and then. Made a lot of friends and great memories. Will have to login and see if any of them are still playing. Would be cool to print their characters too.
> Gee, I dunno, maybe any of a thousand different materials/chemical reactions to absorb heat?

Well, I definitely don't know which reaction can absorb on the order of 2GWh of residual decay heat within the first 2 days.

I'm assuming a 3GWt reactor, something that at least can be competitive with PWRs.

To give you some perspective, this amount of energy is enough to vaporize more than 3000 tons of water. More than an Olympic swimming pool.

> Maybe you just have the dump pool be a bunch of molten thorium or even solidfied thorium salt and that also plummets the neutron economy as the neutrons get absorbed by thorium as the hot uranium salt melts the thorium salts. Maybe you keep the thorium salts liquid.

Sigh. It's not the fission that is a problem. Fission will be quenched by all the neutron poisons. Even in Chernobyl or Fukushima the fission stopped immediately after the accident.

It's the decay heat that has to be conducted away.

> Why does the plug only melt past some point of no return? The plug can melt at whatever temperature point is desired. A "meltdown" can just be part of the usual fuel flow and recirculation.

If normal recirculation works, then there's no problem with supplying cooling water. The touted advantage of molten salt reactors is their passive safety, they are supposed to fail safe even if EVERYTHING fails.

> You seem stuck in the limitations of solid fuel rods, solid fuel reactors, and their inherent inconvenience. Yeah, the liquid is 650 degrees or something like that, but it's still liquid and you can do things with liquids that you can't do with solid rods

Yeah, because I actually worked in the nuclear power industry.
> gp would argue that they can

I’d go further: they have. But that requires both investment into those resources and patience. (Consider all the comments on even HN whenever wrongdoing is exposed confidently predicting there will be no consequences. Then, when they’re charged, that they won’t be arrested. Then that they won’t be convicted. Then that sentencing will be light. Then that it will get overturned on appeal. Now imagine the entire country thinks like that—there is no patience for due process.)

It’s more difficult for a poor country to transition to liberal democracy than benign autocracy. The only ones I can think of did so under occupation or in the wake of a traumatic dictator and/or civil war (see: Uruguay, India, and going way back, the United Kingdom).
This isn’t unique to rust-query; this problem also exists with ActiveRecord, for example. At Twitch we just had to really think about our migrations and write code to handle differences.

Basically no free lunch!
> one qubes feature that could be profitably extracted are the disposable VMs, particularly for web browsing but also as a sort of default jail for potentially dodgy software

A similar feature ships on HP business PCs as HP SureClick based on uXen, derived from Bromium micro VMs, derived from Xen, which is used by Qubes. Also cloned by Microsoft in Windows as Application Defender Guard. Bromium isolated each tab of a web browser in a separate Windows VM with copy-on-write memory, and even individual network connections could be isolated in a micro-VM.

A similar architecture has evolved on mobile phones as Android Virtualization Framework (AVF) with pKVM nested virt. Apple has taken baby steps in this direction, adding hardware nested virt on M2+ silicon, M3+ macOS and M4+ iPad Pro "Secure eXclave" micro-VM for camera LED indicator.

While the underlying infrastructure is slowly being built to enable disposable VMs and other security improvements based on micro-VMs, one challenge is high-performance graphics composition of display output from the VM with the main desktop. Google has blazed an OSS trail with virtio and CrosVM on ChromeOS, which will hopefully be ported to Android with external display output. Since Apple controls both hardware and OS, they could add GPU hardware support for virtualization, removing any perceptible UX slowdown from micro VMs. Intel already added SR-IOV virtualization to Xe iGPUs.
Technology progresses and evolves in the direction that capital dictates, and this is what the money people want.

Accept it and move on. Cultivate community in your life, let go of the ways that technology no longer serves you.
I'd say not, since they also have reviews of UI that the site is exhibiting, but beauty is in the eye of the beholder.

The curator of the site is Fey Vercuiel, who apparently has done UI/UX on some AAA games, so it's not exactly nobody, and besides, I think the main site stands on its own fairly well.

They have a whole section for GitS:

https://ilikeinterfaces.com/tag/ghost-in-the-shell/

There are also a lot of categories you can explore. I think for this kind of site, having clear examples of something you already have in mind as inspiration can help in ideation as a jumping off point, and having a site to share that context with others to collaborate is useful to me, and perhaps to you?

The naviagation is kind of broken, so you have to click on the menu headings as links instead of expanding them, since the contents flow behind the content in the foreground for some reason.

I posted it because I was reminded of this fictional map UI when I saw this actually existing map UI on these AR glasses I saw today:

> I've waited 10 years for Glasses like this – Even Realities G1 [video]

https://news.ycombinator.com/item?id=42285596

If you like GitS related content, you may also like these:

> Architecture from Ghost in the Shell in Hong Kong

https://news.ycombinator.com/item?id=42286193

> Teruhisa Tajima, logo designer: story behind designing Ghost in the Shell's logo

https://news.ycombinator.com/item?id=42286243
I'm just about to cancel my DSL, but when you run the modem in bridge mode, and run PPPoE on your actual NAT gateway if needed (which is sadly often the case), the modem firmware doesn't matter very much.

I put together some stuff so I could transfer PPPoE sessions to a backup system and then I could reboot the NAT boxes for upgrates with minimal downtime. Sometimes, it even worked ;)
I did, multiple times with multiple countries. All of them had some sort of call rotation. Someone was always at the helm, _specially_ in infrastructure and security.

There are whole startups designed to solve this, like PagerDuty.

I am now very curious to understand where your question comes from. There must be some misunderstanding here. You never went on-call or seen a friend do it?
"A bad thing" is a highly variable judgement based on local rules, mores, and culture. And not every bad thing results in arrest. If I swear loudly, once, some people might think that's bad, but it's not going to get me arrested.
I have no clue what Unstructured is. Why link a doc that doesn't explain?
I'm glad you enjoyed visiting! Btw our demonym is “Salvadoran”.
Hikvision and reolink are highly rated onvif ones that support poe, but as long as the camera support ONVIF from there just compare as normal
I’m biased, but the web is the best platform.
Very good to know! May I ask what slant it was? From the article on El Salvador the conclusion felt like overall was that the Bukele's approach has probably been a net positive compared to predecessors, though he did point out plenty of negatives as well. Did this align with a particular slant you noticed on the other article?

Very true that it's necessary to keep in mind that even with texts that present themselves as well-researched, there could be plenty of angles omitted that may drastically change the conclusion. Still, I won't hesitate recommending it over random <200 character comments.
> Is it not functionally similar

No. Negotiating a peace treaty in which the gangs disarm in exchange for political participation versus paying them to be quiet for the moment are fundamentally different.

It’s analogous to the U.S. strategies in Germany and Japan, on one hand, and in Afghanistan, on the other hand.
React does not create a clear separation. Anyone who claims that hasn’t worked on any react bigger than a todo list.

If you struggle with backend code then you’re just not a good backend developer. Maybe just stick to HTML/CSS.
Alt key makes menus visible (at least on Linux).
CompressIt: Free Bulk Image Compression (up to 100 Images at a time, 50MB each)
CompressIt is a fast, private, and reliable image compression tool designed to help you optimize images without sacrificing quality.

- Bulk Compression: Compress up to 100 images at once, each up to 50MB in size.

- Privacy First: All compression happens directly in your browser—your files never leave your
device.

- Free & Generous: No limits on usage or signup required—compress as much as you need,
whenever you need.

https://www.hookerhillstudios.com/free-tools/image-compresso...
Those are beautiful! And I love the way you get seemingly continuous grain all the way around. If you no longer work on these, I would love to learn more about the processes you use for the pressure infusing and the finishing.
With DNSSEC + DANE Brazil would not have needed to make any deal with MS to be able to issue certs for .br domains and they would not have been able to issue a cert for google.com.

Admittedly DNSSEC has issues to put it mildly, but it does serve as a counterexample to your claim.
You stated that "It looks like a lot of absolutely basic due diligence from investors was skipped, probably due to the prioritization of DEI initiatives and willingness to support them blindly." Do you have any proof that due diligence was skipped? Also, due diligence will not catch every fraud.
If it helps the AI doesnt 'match' humans at all, it does a completely different thing.
> I’m still not sure how that sort of discrimination is legal, but here we are.

It's still an open question whether or not the civil rights act protects whites or not (that is, are they a protected class). That's not flamebait, although I realize it's a spicy observation. Regardless, there is a real question around the legislative intent when the law was passed and in ordinary jurisprudence laws are interpreted through that lens, among other factors.
> Stealing it carries the risk of "suicide by cop"

If you’re robbing the El Salvadorean central bank, you’re retiring under a false identity far away.
You definitely have no issue writing long and boring articles.
It'd be nice if they had the same reporting taxonomy across both products. Google Maps will let you report mobile speed cameras but Waze won't; the closest thing Waze has is "police".
Maybe this is an opportunity to create more curated online services which exclude AI slop, while acknowledging that not all AI-generated content is awful.
This device looks like a candidate for a wifi AP; if I'm reading correctly, it accepts PoE over the 2.5G port, and OpenWRT makes for a decent AP.
Tangentially related:

The system is deeply flawed, which is something I realized fifteen years ago when I was put into a situation where I had to use online banking. (Had to being the nearest branch of any bank was an hour long flight away, though there was an ice road you could use in the winter.) One of my first questions of the bank was: who issued their certificate. They didn't have a clue what I was talking about. I suppose I could have pushed the question until I found someone who did know, but I also realized that a random person asking about security would be flagged as suspicious. The whole process was based upon blind trust. Not just trust in the browser vendors to limit themselves to reputable CA, but of the CAs themselves and their procedures/policies, and who knows what else.
Tidesdb: High-performance, durable, transactional embedded storage engine
> One of my first questions of the bank was: who issued their certificate

…what did the certificate say?

> whole process was based upon blind trust

If I offer someone a ride and they start quizzing me on what differential I’m driving, I’m going to ignore them. That isn’t requiring blind trust, it’s just the wrong place and way to get the information you’re asking for.
The site has a very '90s vibe.
I don't think venture capital are known to be discerning about what they invested in. They will dump money and follow industry trends just like everyone else.

DEI initiatives are just excuses for doing a bad job. They would have done a bad job anyway.
Nice project, just as a challenge / piece of feedback - most of the time you don't actually need to have a C backend for this type of project. The challenge is to get all the P/Invoke signatures and struct declarations / pointer walking correct on .Net. The benefit being a single managed EXE and no need for cross process communication and the edge cases it brings.

(Source: Have built a full SCSI interop layer in .Net to do low level CD ripping, full with native pointer walking and all. Have also written tools to walk the PEB (process environment block) in .Net w/ no native backends.)
Can you explain?

I think the parent is suggesting that users should be able to tune their trust stores. I'd imagine that trusting only the CAs that are in all the major trust stores (Google, Microsoft, Mozilla, and Apple) would be a reasonable policy. Few websites would choose a CA that falls outside that group.
I don’t have proof, since I don’t have visibility into the company or their investors. I’m speculating based on the kind of things that are typically done to verify things before finalizing an investment. For example from the DOJ release we know millions in revenue were claimed but the actual revenue was only $11000. They also lied about the cash on hand, which is easy to confirm, and the customers they had. None of the investors checked to confirm the contracts with the biggest school district partnerships they claimed either, it would appear. These are typical things to explicitly confirm in due diligence.
> You never went on-call or seen a friend do it?

Red herring [1].

OP said it’s malicious or incompetent to release this on a U.S. holiday weekend. You asked if similar consideration would be given to Brazil. Multiple people chimed in that it would. You’re now pivoting to on-call capacity.

Any amount of on-call capacity can be saturated. That’s why competent multinationals avoid releasing while markets they’re likely to impact are sleeping or drunk. This is a high-level scheduling operation, however, so it’s reasonable for those lower in the organisation to be unaware why an update is being pushed next Tuesday instead of this.

[1] https://en.m.wikipedia.org/wiki/Red_herring
Sorry, my example was bad.

In fact, your example is perfect. We're not talking about business. CAs are different.

In security and infrastructure, there's always someone working on holidays. The larger the organization, higher are the chances that some kind of rotation exists.
Be careful of GL.iNet's products - some of them say they run OpenWRT, but they don't run stock OpenWRT and instead offer a version of OpenWRT supplied by the CPU manufacturer, with binary drivers and no source code.
Thanks for trying it out! Yeah, I'm sure they will... they've already built out some AI functionality in GA4 but I've found it doesn't really work well, also I'm wanting the solution now which is partially why I built this instead of waiting for them to get their act together.

Really just seeing GA4 data as a starting point, keen to integrate other datasets that might be helpful to merge with the GA4 one too to pull out more interesting insights.
> I feel like router and wifi should be separate so that I can expand and upgrade the wifi independently of the router.

This _is_ the objectively better way. It's not practical for a whole host of scenarios, though.
You can totally ignore the red herring and focus on the first part. In the end I was just paraphrasing the comment I replied to.

Rotations exist, specially in large organizations, or when there's shared responsibility.

Now we're talking nonsense about "you said, he said", this conversation makes no sense. I am much less invested in this than you think.
Architecture from Ghost in the Shell in Hong Kong
damn that's true. Soundcloud history sucks. It's unfortunate that there isn't a solution to this in the web standard.
> How the hell would you verify an AI-generated silicon design?

I think you're asking a different question, but in the context of the OP researchers are exploring AI for solving deterministic but intractable problems in the field of chip design and not generating designs end to end.

Here's an excerpt from the paper.

"The objective is to place
a netlist graph of macros (e.g., SRAMs) and standard cells
(logic gates, such as NAND, NOR, and XOR) onto a chip
canvas, such that power, performance, and area (PPA) are
optimized, while adhering to constraints on placement density and routing congestion (described in Sections 3.3.6
and 3.3.5). Despite decades of research on this problem,
it is still necessary for human experts to iterate for weeks
with the existing placement tools, in order to produce solutions that meet multi-faceted design criteria."

The hope is that Reinforcement Learning can find solutions to such complex optimization problems.
Where do you hide? Sure, you can and should create Dunbar-sized networks where everyone knows your name, but IIRC, Amazon sells AI clones of real books, "Scientific" papers are completely or partly AI. You can't buy an iPhone without AI (hoping my iPhone SE can't support it), your computer will have it, want it or not. And every damn business and agency you deal with will, if for no other reason, it eliminates jobs, and is a shiny sales object that your competitors offer, even with its failings.

I suppose that you could make some money selling "AI-Free" products and services, like cage-free eggs, nitrite-free foods, and so on. Certified "Legacy" books, BAI, before AI.
> Why would you not want to see how your solar system runs? You can’t easily verify that it’s actually generating energy as you expect it to if you don’t look at the data

You do see how it runs, you look in the sky and see the sun shining, maybe see a few LEDs on the side of a box, and see your electricity usage is lower / cheaper.

As to why people don't want to spend hours digging into "telemetry" and things of their appliances, that could be a difficult thing to explain to nerds who do like to.

I know people who wire up all sorts of monitors and ride their bike and calculate and graph how many watts they are producing and amount of oxygen their lungs are taking in blah blah. Other people just ride their bike to get to work.
Mobile installations (RV’s, construction trailers, etc.) and off grid are two very common types of installations for solar inverters. And do not have to meet those requirements.
Meh. What is that self-evident alternative supposed to be? I ask as someone who crafted HTML with my father's lisp parens on computers running linux kernels which were still delivered with the pl suffix, and as someone who occasionally still occasionally tries to deliver frontend code, much to my dismay.

I've made websites in so many stacks and varieties that it would be intensely boring to list or read them, and I have NO IDEA what he thinks is better, or even if he is able to disambiguate the React architecture from the React library/stack, or which one he is talking about.

It's a tome, a full tome, without a clear position.

Mine is this: a truly state based rendering and eventing engine for frontends is a dream, a beautiful dream, not unlike the beautiful dream of a purely functional language based on the lambda (or rho?) calculus. The dream giveth and it taketh away, and it is always a fundamentalist dream; where that fundamentalism hits the cracks of reality is where engineers have to make tradeoffs.

The React architecture stack (well, the stack without prop drilling) stays somewhat beautiful as a dream in my opinion, which is to say it provides guide- and guard-rails to stay relatively productive delivering mid size applications across millions of devices without a ton of moments where I'm like "what the fuck is the rule of hooks, and how did I break it here?"

The react library stack, and by extension the node stack: sucks balls, full stop. I'm happy to get some other framework which has write/compile-time type safety, modularity and an eventing/rendering system that abstracts away most of my concerns for delivering over the web and is lighter weight, has less dependencies, etc. However, if the author wants me to change my ill-begotten ways, it would probably be more effective to explain how it is that each of the items in his list: "Preact, Stencil, Svelte, Lit, FAST, Qwik, or any of a dozen faster, smaller, reactive client-side systems" provide a better world.

In this area, I believe I'm a journeyman, reading a senior / master engineer's writing -- fine. But he is not informing me at all. I don't want to go learn the recommended 18 (12 unnamed) smaller client-side systems that apparently require less mental bookkeeping of me. I'm not even sure what that means -- I code tsx in vim, and do not feel like I have to do a lot of bookkeeping.

So, back to you -- what's your recommendation? I'm genuinely curious what you think would be better. Or the author, if he wants to butt in here. I just don't understand what you (or the author) thinks should be done. The forms processing and server rendering (say with Perl 5 and tcl were two early langauges for me) were not that great.
As someone who doesn't understand what's actually going on: could someone ELI5?