skysight-inc/HackerNews huggingface dataset:
> they're infrequent and small

So far. Now you're introducing new technology. Are you comfortable prognosticating that it always will? Are there no lessons to be learned from previous tragedies, in particular, how _small_ radioactive sources are _way_ more dangerous due to peoples inability to identify them and tendency to pick them up?

You introduce medical radiation sources into a country without radiation controls and just a few years later you have an outbreak of tragedies. I'd rather not learn the lesson again the hard way.
Enphase required the cell connection when I checked a couple years ago. Sol-Ark makes a solid hybrid inverter and allows offline operation.
Exploit LogoFAIL to install Bootkitty Linux backdoor
> With a blockchain, you simply go back, "fork", apply a fixed transaction, and replay all the rest.

You're handwaving away a LOT of complexity there. How are users supposed to trust that you only fixed the transaction at the point of fork, and didn't alter the other transactions in the replay?
The ones who made react.
Understanding Digital Marketing Ecosystem Spreading Pro-PRC Influence Operations
Heavily misleading article. Why is it that all of a sudden - within the past 3-4 days - a bunch of right-wing media is acting like a business can't refuse service at any point and is incredulous about it?

https://www.investopedia.com/terms/k/knowyourclient.asp & know your customer

Oh, by the way, like any other service provided by humans - banks consist of humans and humans make mistakes. There's instances of it banks refusing service to folks who did nothing wrong. It happens. Either things get fixed or people part ways.
Oh yeah I’m sure that’s the case - I burn real easy even without the lime juice’s help.
If I’ve already gone through the trouble to obtain a blu-ray drive and insert a disk into it, then I’m just going to use MakeMKV
Nah, the rest of the article is not insightful either.

eg React Native is dismissed in 5 sentences, with no real solution at all given to the basic problem of wanting to have a website and mobile apps without writing your app 3 times. Let alone a website + mobile apps + windows + mac clients. The suggested solutions do not address this need -- eg there's some Apache crap that no one I've heard of uses (it's renamed Adobe Phonegap crap that Adobe bailed on and tossed over to Apache); some random link to a 5 year old google i/o presentation; etc.

As far as I know, there's basically 3 toolkits that offer this: React + derivates; Rails with Hotwire; and Flutter, which means trusting Google (fools only), and which has recently deprioritized desktop... so that's a rock solid foundation to pour millions of dollars of eng time into. And I guess Xamarin, if anyone is using that.
That's actually rather new so we shall see how frontend practice reacts. I've only seen a few instances of it out in the wild so far.
You know what that’s a fair point, I will give that to you.

I’d gladly give all my old licenses to NES and SNES games to a gaming library if it meant they could preserve them as digital lending material.
If not react(ive, of some flavor), which is appropriate for some things, then hypermedia, which is appropriate for a different but overlapping set of things:

https://htmx.org/essays/when-to-use-hypermedia/
There was a Washington Post article that did something on this (but not for OpenAI). Check if your website is there at https://www.washingtonpost.com/technology/interactive/2023/a...

There should a was to check for OpenAI. But my guess is, if Google does it, OpenAI and others must be using the same/similar resource pool.

My website has some 56K Token and I have no clue what that was, but something is there https://www.dropbox.com/scl/fi/2tq4mg16jup2qyk3os6ox/brajesh...
> (3) The term “firearm” means (A) any weapon (including a starter gun) which will or is designed to or may readily be converted to expel a projectile by the action of an explosive; (B) the frame or receiver of any such weapon; (C) any firearm muffler or firearm silencer; or (D) any destructive device. Such term does not include an antique firearm.

according to the law antique firearms are not firearms.
I'll happily ditch React once something better emerges. I've been doing web development since 1998, so I'm used to change.
Maybe you're aware but NASA publishes lots of technical and scientific documents to https://ntrs.nasa.gov/

Like this technical memo about Apollo data network systems from 1966: https://ntrs.nasa.gov/citations/19670009662

JPL specifically has its own repository with similar content at https://dataverse.jpl.nasa.gov/dataverse/jor

Like this paper about file transfers with the Europa Clipper spacecraft: https://dataverse.jpl.nasa.gov/file.xhtml?fileId=72593&versi...
Um the fact that some people in some (less developed?) places need cars is not an argument against cars being wasteful...
Nah nothing to do with LLMs, it’s just because the method of Llamafile is very similar to malware - basically zip up an executable, concatenate it with some stuff, throw it in /tmp and execute it with a randomly generated high entropy name.

(That said, after I explained it to SecOps they did tell me I would need to “consult legal” if I wanted to use a local LLM, but I’ll give them the benefit of the doubt there…)
... also TFA conflates web application architecture with frontend frameworks, creating a false dichotomy. For instance, I’m building a site that serves static HTML but still benefits greatly from Preact for the dynamic parts.

The critique seems focused on SPA architectures heavily based on React, as seen in frameworks like Next.js and Remix. To be clear, I also lean away from that style of web application architecture, but I’m not sure this 20-page article effectively makes the case for simpler alternatives.
Related:

Bevy 0.15 released

https://news.ycombinator.com/item?id=42277344
It boggles my mind that the whole US has this outrageous amount of fraud because they’re complete laggards with what is pretty much standard additional security measures everywhere else.

Look at how long it took them to move to chips on their cards. And I heard they initially required signatures instead of safer PINs, I hope they’re on PINs by now, but I don’t know.

If stores are worried that if they implement things like 3D Secure their customers will go to their competitor which do not, then the solution is simple, make it a regulatory requirement that EVERYONE must do it by a particular date.

Merchants will still try claim that it will confuse customers, but the truth is they would prefer to avoid the hassle of implementing it. The problem is these merchants already build the cost of fraud into their prices, in essence they’re passing on the cost of fraud to all their honest customers.

Also, how much time is collectively wasted by people having to deal with the admin of fraud on their credit card which is also largely due to apathetic merchants.

It would be a NETT benefit to US society if 3D secure was mandated.

And not just in the US, the rest of the world would no longer have to suffer with fraud on their credit card where it was used on a US website which doesn’t have 3D Secure.
It's not really the struct sockaddr sa_data[14] problem, it's still a compiler problem - treating explicitly sized buffers at the end of structs to be not explicitly sized. It's a compiler bug. 14 bytes is 14 bytes, and [1] is one byte not a many or some.

And the API's should follow. For the folks who need more bytes, invent your own type. Or set socket attributes as everyone else.
I'm not saying my own definition of "app" is the only correct definition, but in my opinion only if I do a click and something on the SAME page changes, then it's an app. Transitioning to different pages isn't an app, imo.
Would it be possible to serve a fake fingerprint that appears legitimate? Or even better mimic the finger print of real users who've visited a site you own for example?
Implying that you can just read that documentation and "walk through it in a tutorial fashion" is a peak HN comment probably only rivaled by the famous Dropbox comment.

Not everyone is an expert in these things, and I'd appreciate if there were more articles like this.
Except there's a jillion studies out there showing that testosterone increases sex drive in those who are deficient, which is what any reasonable person would assume they mean.

Bait used to be believable.
Do I come across as insecure?

What "success"? The stuff that other people have made happen that he takes credit for?
How about — instead of making sleep more "efficient" — we engineer our lives to provide decent amount of sleep and not stress over having more and more of the waking hours to do stuff.

After all, we live in the age of abundance.

(Though I admit I might not be the best person to ask for this as I am on the lower end of how much sleep I need)
And there will continue to be handguns and auto sears coming across the USA-Canada border until there exists the political will to crack down on smuggling via the cross-border native reserves.
That's my conclusion as well since now the closest we have to Bell Labs is the Google R&D where it has a virtual monopoly on Internet search and it's able to hire excellent well paid researchers [1].

[1] US weighs Google break-up in landmark antitrust case:

https://news.ycombinator.com/item?id=41784599
Do you not care about most of your potential customers, or do you only cater to high net worth people? If so, then sure, substandard devices and connections can be ignored. If you’re Target, on the other hand, you probably shouldn’t ignore them.

I find it extremely odd that this was even a question on this site. Do you think the problem you’re solving should impact your tech stack at all, or is your tech stack more important than the problem?
The issue is that a lot of IoT things won't even work unless they have Internet connection and a registered account.

The careful approach to IoT is to never connect a device to anything, dump the firmware, analyze it, reflash the EEPROM with patched TLS certificates (if necessary), write your own server implementation, let the IoT device join a dedicated IoT WiFi network, on that network run everything through a gateway pretending to be "the Internet", where the emulated server is running. Yep, it's this bad.

Of course, if the device or its malfunction cannot cause sufficient harm (e.g. it's a light, usually it's not worth to reverse engineer it) then just run it on a separate SSID and VLAN, with least access necessary to get it running (starting from blocking everything and allowing network by network until it works).

And, uh, if the device has a LTE or can use something like Amazon Sidewalk, it gets even trickier to keep it tame.

I don't have any solar power stuff, but I did this with my old cat feeder machine. In the process I discovered a service/backdoor SSH account, a system that does not encrypt p-frames at all before uploading data to the cloud, and a bunch of other things that made me happy I did not connect it to any public networks. Short conclusion: consider against with a camera or a microphone that runs on Tuya-developed firmware. Generalized conclusion: consider against IoT from any manufacturers you don't trust to fully respect your best interests, or aren't willing to audit first.

The downside is obvious, of course. And with every year more and more manufacturers tighten up their hardware, but I'm certain the crappy programming and service backdoors are all there, only ways to mess with the network traffic or firmware are clamped down.
I haven't had a chance to read that, but that quote suggests I should (especially considering the author and the editors).

I often refer to "Elephant Fitting" w.r.t these systems. I suspect you understand this, but I think most think it is just about overfitting. But the way problem isn't about the number of parameters, but that parameters need to be justified. As explained by Dyson here[0]. Vladimir's quote really reminds me of this. Fermi likewise was stressing the importance of theory.

I think it is a profound quote, and you were (are?) lucky to have that friendship. I do think abstraction is at the heart of intelligence. François Chollet discusses it a lot, and he's far from alone. It seems to be well agreed upon in the neuroscience and cognitive science communities. I think this is essential to understand in our path forward to developing intelligent systems, because there are plenty of problems that need to be solved in which there is no algorithmic procedure. Where there is no explicit density function. Intractable, doubly intractable, and more problems. Maybe we're just too dumb, but it's clear there are plateaus where luck is needed to advance. I do not believe our current machines would be capable of closing a gap.

[0] https://www.youtube.com/watch?v=hV41QEKiMlM
Linking is a huge topic: subtle nuances on the concept of topological sort represent the difference between success and failure for a build system that constructs an interesting link line. This is for lack of a better term “undergraduate link theory”.

But the real sweat equity starts at dynamic linking on a quasi-platform with all the best qualities of an identity crisis like an M Night Shyamalan story. Don’t take my word for it, some combination of Thompson and Pike and generally what’s left of the Labs legacy is a much better source than I am [1].

glibc is an amazing software artifact and has nonetheless become a liability in the default case. Everyone knows Drepper is an OG force of nature like they don’t make anymore, but copying the Win32 playbook has starved out musl and other strictly better ways to live. The consensus is to pour billions of good money after bad into the coffers of the Docker Industrial Complex to get a static link they had on a PDP-11.

For the first time in decades there’s a sane take on Python courtesy of the Astral folks and they have a whole page explaining the minimum viable technical debt risk landmine needed to use Torch with a better strategy than hope [2].

But really it’s the Nix people who have failed in their duty here: nix-ld is an awesome piece of software and it’s not the author’s fault, but crippling it on purpose via whitelisting rather than blacklisting eligible .so when they’re all already at the same privilege level could possibly kill Nix in the era of extreme performance vector compute via accelerator as the cover charge on being part of the software business [3]. I’m rolling Ubuntu boxes and patching it up with Homebrew when I don’t have a week and a PhD to get Triton taking to the driver these days and god damn I hate mutable state guess abd check and pray on my science.

I hate to rant with no actionable proposal, but the action item here is a very big ask. Almost all people are reasonable if they don’t fear for what they regard as essential and existential. Vi/Emacs wars were old when I was young but the idea that anyone would prosper or perish IRL who took this stuff seriously couldn’t even be spelled in the alphabet at that time, and it’s not AI or offshoring, or any of that. Wildly unique mathematicians and engineers and scientists were grateful for what little they had and exceedingly cautious of standing next to a dissident in the USSR for decades when the stakes wer3 nuclear hellfire.

That’s what central committees of insiders produce. You can call it communism or a16z. Unaccountable insiders who answer to no one but each other walks and talks and quacks like Thiel-world whatever you call it.

[1] https://harmful.cat-v.org/software/dynamic-linking/

[2] https://docs.astral.sh/uv/guides/integration/pytorch/

[3] https://github.com/nix-community/nix-ld
>Glock designed the handgun specifically to allow this, and they even manufacture switches themselves.

It really isn't, though. The way these work is exploiting the fact that the backplate on the gun can be modified such that the out of battery safety (inside the gun) functions as an auto trip.

Which, coincidentally, is why US (and to a point, Canadian) regulatory agencies do their best to consider guns with safeties like this machine guns. They shouldn't; horse has already left the barn with that one especially considering full automatic fire is de facto legal and (even when in cases when it isn't legal) is trivial to achieve with guns that aren't Glocks, and this is something gun laws in the entire rest of the world have tacitly acknowledged for decades.

>People are buying

Not anymore, they aren't; the purchase, sale, or transfer of handguns is banned in Canada. Not that that's stopping the gangs, but those bans have never been about stopping crime anyway.

>I don't know why they're going out of their way to not inform people of what exactly is happening.

Who the criminals are, and the route the guns take to even get there in the first place, is extremely politically inconvenient for the Canadian government as it relates to blatant policy missteps that now affect Toronto, Ottawa, and Montreal.
> The person firing this weapon has no control, nor do they understand that one to two seconds with their finger on that trigger can release between 30 and 60 rounds potentially.

Are there Glock magazines that hold 60 rounds? The highest capacity I see in a very quick online search is around 30. Standard capacity is 10-17 rounds. Can the barrel and the mechanism withstand the heat of 60 rounds fired that fast? Glocks are already at least anecdotally prone to jamming.

And, I'd guess that a person making such a modification understands exactly what it will enable.
Hello everyone, I am the developer of BootKitty. I am studying IT in Korea and I am making bootkit as a private project in BOB, a security program training. If you find it hard to believe that I am a developer, I can prove it. If you have any questions about BootKitty, please ask me :)
Man ‘Judas Unchained’ sounds like a real familiar title but the synopsis does not right any bells.

I think the artifact that could be tuned to pull power from celestial bodies was sold to the human / or traded or gambled or something - by an alien entity named ‘wheeler’ maybe?

The protagonist had a friend named Zero or Zeno that was kind of a techno mystic?

Idk my memories are pretty spotty
Why We See Digital Ads After Talking About Something
With this browser feature a navigation to a new page can look like only part of the page changes - without needing any JavaScript.
Show HN: Lossless compressor that can shrink llama3 to 68%
Well it goes boom and it’s roughly shaped like a big stick, so it’s big boomstick! Boomlog?

This is my boomstick!

https://youtu.be/881Dr4lMey4?si=sOW7Py_jQejicprM
The usefulness of beginner materials really depends on how big of a jump it is, no?

Going from writing firmware in C & asm for 30 years to Haskell would likely require more than just documentation.
I read nancy kress / beggars in spain as a teenager and get such an eerie vibe from short sleeper research

but also let's go, if a giraffe can sleep 2 hours so can I
Twitters owners used to be the current owners of blue sky. How gullible do you have to be to fall for the same trick by the same people twice?

Edit: looks like I'm six months behind on the drama https://www.theguardian.com/technology/article/2024/may/07/j...
The big thing is not the cost of the driver it is the capacity. As the article says:

"The main benefit of driverless trains is capacity, as the computerised control systems can allow trains to run closer together, which increases passenger capacity on the railway."

However as the article says this isn't as big a gain on the Underground since it is pretty optimized already and gains would be minimal for the cost.

For most metro-type rail systems driverless is the way to go though, it can offer increased capacity and lower running cost (especially off-peak).
Obviously not supporting having these switches, but wondering if it makes shooting more dangerous or less.

My non expert guess is the people using these 'pray and spray' in something I suspect is very hard to control. This would serve to make a heap of wild shots plus make them run out of bullets very quickly for any kind of follow up or ongoing fight. But at the same time send a heap of bullets fast.

I wonder if it becomes one of those events that on the surface looks far worse but statistically is not. Or more unintended bystander deaths?

To be clear. I don't know the answer or are promoting one, but it has the feeling of something that might have a counter initiative answer.
Proof:

https://www.accc.gov.au/by-industry/digital-platforms-and-se...

It's called the news media bargaining code. Technically speaking, the law isn't enforced since Google/Meta chose to voluntarily pay the link tax, rather than be put on the list that would force them to pay. But, at the end of the day it's the same effect.
It's tricky to say if the Dow is really a good measure across time like that. Exactly two of the companies on it were there in 1950; the other 28 were added in 1976 and beyond. It's not clear if the price weighting really accounts for that much of a shift in composition.
Yes, very public. Even blocks are public.

https://docs.bsky.app/blog/block-implementation
The book is Signal to Noise and its sequel A Signal Shattered by Eric S. Nylund.

A personal favorite of mine! Wheeler is such a convincing villain, and the existence of such a character as an explanation of the Fermi paradox is eminently believable.

https://en.wikipedia.org/wiki/Eric_Nylund
I was astonished to learn that Ford no longer sells sedans (Fusions) of any kind. Neither does GM. I dislike SUVs, and it seems the only choices for American sedans are a Cadillac or a Tesla. Hondas and Toyotas are selling like hot-cakes, but when they had to compete on quality American automakers just decided to walk away from the market.

So no need to worry about that feature on Fusions... they don't sell them anymore. Nor Chevies, Buicks, Oldsmobile is long gone, no more Dodges or Chryslers... nothing.
There is a lot of solid advice in this thread. It all depends on your specific situation:

* Sometimes the answer is to go work for a better boss. Someone who does constant 180s is impossible to work with.

* Sometimes it helps to learn more about business (I recommend "Lean Startup"). You'll understand the rationale for the changes.

* It might help to learn how to present/guide to options, like a consultant (I recommend "Secrets of Consulting" by Gerry Weinberg). "Do nothing" is usually a very solid option, and you have to educate your boss about it.

* You're always in control of energy/timing. Sometimes you can slow-roll a bad initiative and see if it goes away. Sometimes you can work like crazy to get a good initiative completed so that "its done already and can't be rolled back".

* You may be able to piggyback necessary work onto questionable work. So that if the core feature is canceled, you've "cemented" some small unrelated improvements in the codebase
In Australia it's very hard to get hold of cigarettes under 18. Determined kids will find a way, of course. But vaping is more prevalent currently, and is held in higher regard by teens here.

I haven't lived in Europe some years, but I was amazed at how smoking was perceived as more acceptable there.
These reminded me of https://en.m.wikipedia.org/wiki/Space-filling_curve
I have lots of experience working with software.

Linting and style guides are not of "critical importance". No business objective will go unachieved because some checkins use tabs and others use spaces.

Whatever problem style issues might cause can be resolved before lunch by running a formatter and committing the result.
>The highest capacity I see in a very quick online search is around 30.

The largest reliable magazine for a Glock that is still halfway concealable holds 33 rounds.

The largest reliable magazine for a Glock holds 50 rounds, but it's a drum and you can't conceal that very well.

Larger magazines may exist, but they are not both reliable and concealable.

>Glocks are already at least anecdotally prone to jamming.

This is 100% caused by mags that don't say Glock or Magpul on it. These guns are fantastically reliable.