skysight-inc/HackerNews huggingface dataset:
These days if the device is expected to be ~always internet-connected (increasingly a safe bet) it probably makes more sense for both the developers and users to handle multiple users with a remote identity provider (email, individual account for the particular service, etc.) rather than implementing identity per-device. I'm pretty sure gaming consoles have had support for this for a long time (at least since xbox 360?), and Microsoft is moving towards this model with Windows. And Microsoft Active Directory is 25 years old.

I personally find it annoying to be forced to use remote identity for devices used by me exclusively, but it makes a lot of sense for shared devices. I'm pretty sure a large portion of people sharing one kind of device would also using be using other devices for the same purpose (eg a kid with divorced parents, a school or office or library with laptops available to be checked out, a tablet used for logistics), so they'd want their data to sync across devices. Handling identity per-device works for local-only files, but also makes it so users need to manually and deliberately configure some kind of syncing if they really do want those files to be available across devices, which to technical people is NBD, but most users aren't technical. It's also just a more secure way to manage data in a corporate setting.

Of course, not every shared device can be expected to always be connected to the internet, some people don't want to back things up remotely for a variety of reasons, and this doesn't matter as much for devices only used by one person. In practice I personally hate how much Microsoft begs and nudges you into this setup even if you're the only one using your computer. But for the majority of users in the majority of cases, remote identity is probably better than local identity, and in the absence of internet it can always fail-open to local identity.
Tether also owns billions of dollars of US Government bonds. Does this mean they're more or less likely to be protected by US interests?
This is the exact opposite of my experience. I'm 6' 185 lbs athletic build and wear almost exclusively slim fit larges. I would look like an overstuffed sausage in a small anything
The book you are looking for is https://www.amazon.com/RISC-System-6000-PowerPC-Architecture...

It explains the architecture of the 7011/250 in detail. When I was much younger I was working with a group to get Linux on there. We got to the point of making a boot floppy that would display a 3 digit number on the front panel.
I am 100% sure the United States Federal government has been very concerned about terrorism in the middle east. I am not certain your whataboutism works in this case.
What is bad about them on the command line? If you understand git the only extra things you need are `git submodule update --init` and `git submodule add ...`
Have you used this? What’s your experience like?

I’m looking for ‘a tool’ like this to help manage code changes and communicating about those releases across a set of github repos.
Apple needs a new Jobs. Yes yes yes. Old trope, getting boring I know. I don't mean Jobs as in the tyranical leader

But Jobs as in a PRODUCT leader who knows that to be successful your product needs to speak for you, needs to have allure, a certain quality. Mr. Cook is a great COO/CFO. A backend / money leader. I don't see him care about what makes a product shine.
I think you will find that a large majority of people supporting both parties vote based on factors like desired policies and the current state of the nation, rather than (pardon my phrasing) trumped up personal drama.
Can you describe how this is different from TDD.

From what I understood it seemed like you listed a collection of requirements for TDD failure cases, named them "can't" statements and then did TDD on them. But I believe there is more to it, but I couldn't see it.

Could you list the types test cases you would have created if you had done TDD on this same problem? And how they'd be different?
> Except if you're on a team of sysadmins running a fleet of systems

not trying to be rude but this doesn't sound like "most people"
I don’t see mention of the real reason. Women are refusing. Because life in Korea sucks. Huge pressures to perform, low wages, high prices. It’s hard to start a family when there’s no hope for a better life for you or those you love. Theres even a name for the movement and catchy slogans. What was it? seventy percent of women agreed with the statement “Korea is hellish?” Why would you bring a child into hell?
>Step 3. Memorize the exact wording of the definition.

Huh. Any mathematicians who want share their own opinions and experiences about this?

This pretty much goes completely against my experience with other grad school level neuroscience/ML

You don't want to be so familiar with stuff as to make it second nature but NOT from memorization. That, at least an other areas, leads to surface level recognition

Does the author mean internalize and not memorize?
Tether can and has frozen certain funds due illegal activity (at the request of 'authorities') - so I've heard at least - so it would appear that there's precedent. The fact that the Feds are calling this out is... interesting if they're not also actually making any attempt to freeze these funds.

Potential dog whistling.
https://archive.is/LvAQa
I always assumed that people buying nft's fell into three categories: a) fomo with crypto and feeling like this night be the next one, or b) zero critical reasoning skills, or c) wanted to make someone else hold the bag after eating losses on crypto or stocks at some point.

Either way, real question; are nft's still being traded?
Amazing to see this alive and kicking in this day and age.

I grew up programming the 8-bit Atari and it was such a great time to experience. Information was scarce without internet, so magazines and word-of-mouth was so important. Once you collected enough information, you could pretty much hold a mental model of the entire machine in your head, and the only limitations were the number of cycles you had per second or the effort you were willing to put in. I firmly believe this is how I developed the mindset of stepping outside of the problem and readily looking for out-of-the-box solutions that pays dividends to this day.

Programming was a mix of BASIC and machine language routines (not even assembly as you hand-assembled to machine bytes) similar to how someone might use Python with C calls but at lower levels of both. Later on I tried compiled languages like Pascal but it ran like a dog, not tuned for the slow floppy or memory constraints of these machines. Getting a macro assembler was next-level, where you could write everything to be as fast or small as possible. Self-modifying code for wasn't only common practice, it was quite necessary for performance.

Other great pastimes were reverse-engineering games and copy protection in an arms-race. Most were pretty simple and it was always exciting to see completely new techniques or super-complicated multi-pass self-modifying or otherwise obfuscated code.

The filesystem on the floppy disks were also easily understood with sector chaining and a free sector bitmap, so you could write low-level routines like undelete or a defragger. Modifying the floppy drive with custom sector sequencing and RPM tuning could improve timings to get higher throughput and finding that you can add SRAM to buffer an entire track really sped things up. The simplest and cheapest thing was to punch a hole in floppy disks and write to the other side (of a single-sided floppy).

Having this level of understanding made you believe that you could do pretty much anything and everything (just not always fast enough) and makes you program without boundaries except the hardware. Even then it was simple enough to modify parts of the hardware like ROMs or extend it with helpers plugged into the bus or PIO (parallel I/O joystick) ports much like the GPIO on a Raspberry Pi.

The graphics system on the Atari was really something else, with 'display lists' of data that defined memory addresses and display modes (character or raster) that could be defined for each (character or raster) row, along with color palette lookup tables that you could modify to change all the colors using those values. Even the serial SIO daisy chain on the Atari was the basis of what is now how USB enumeration and command/reply works.

Shout-out to Bill Budge's Pinball Construction Set (PCS) originally for the Apple ][ and also on Atari. Of course being a kid I mostly made video games and tools for making video games like sprite editors, character/tileset editors, font editors, and level editors. PCS blew my mind and later got me into making programs that build applications, following the likes of Visual Basic (but running on OS/2 PM).
Wildcards work on crt.sh:

https://crt.sh/?q=%25.ycombinator.com
Ask HN: Did Cloudflare throttle my traffic only for 24 hours?
I have a home server with many services that I share with friends, among those services I have a Prometheus instance that tracks response times to all of the services.

Today, after receiving complaints that the services were slow I found out that request latency went from 100 Ms at most to 1 or even 2 seconds per request, starting at 9 AM 01/12, and even more mysteriously, request latencies instantly dropped at 00:00 the same day.

All of the services are exposed behind cloudflare, so that's my first guess but I have no knowledge of them throttling traffic for a day ?

My home internet was fine, I measured it throughout the day, that is why I am ruling out my ISP.
> I have some strong FOMO about not being able to learn much technical stuff from my peers or seniors.

You don't need to FOMO that, really. It works like that in theory, in practice... In about 2 years of work in a midsize company, I learn about one or two little details from the tech leads in the company. Two third of them were spending more time asking why one would think there are worth asking them a question than replying the question itself. The level of rockstar insufferableness was off the charts.
> It's calling into you three or more times, invisibly, if I remember the details of what useEffect and useState actually do at runtime correctly. Which rather illustrates the point.

If they were using useState() correctly and provided a button or link to call the update function, yeah, React would call into their code as many times as the user clicked the button. As it is though, it's just once (useEffect with that second argument is "only run the passed-in function once on mount").
Cable tv sucks. It still exists and still sucks. I don’t think anyone was begging for the fragmented options we have now.

Ideally people want to buy what they want to consume/use. Instead they make us pay fees for a bundle of garbage product rather than sell us the actual product we want. Everything as pay per view would be great. Maybe even include dynamic pricing.
I'm a drip coffee guy, too. I used a French press for years, but I finally got tired of cleaning up the mess and the fact that it's not better than a cheap drip coffee machine.

The roast type is the most important. How you make it does very little. It's an Italian roast for me but I like the strong taste.
> Trump pardoned....

This isn't the defense you think it is.

The democrats should be taking the higher ground, but instead have become just as bad as Trump, especially after Joe Biden pardoning his own son after repeatedly saying that he would not, even for crimes Hunter admitted and pleaded guilty of.
The general idea of Yotta at the time appears to be sound [1]. Research has shown that prize-linked savings accounts tend to result in people getting and using savings accounts who otherwise would not have done so.

Just make sure to get it from an actual bank or credit union where your account will be directly FDIC or whatever the equivalent for credit unions is insured, instead of going through some fintech company where you account is with the fintech company where they store your money (commingled with other people's money) in a (hopefully insured!) bank but as far as the bank is concerned its all the fintech's money and you have no relationship with the bank.

https://en.wikipedia.org/wiki/Prize-linked_savings_account
Exactly how do you propose to form an opinion on filesystem reliability then? Do my own testing with thousands of computers over the course of 15 years?
Who can tell? Perhaps language will stop evolving for the first time in history.
The AI Effect: Amazon Sees Nearly 1B Cyber Threats a Day
It's just there are layers of implausibility, specifically what the OP is referring to: you are not going to be able to handle that kind of volume for illegal services through the payment card networks (maybe you can if you collude with a payment service provider or own one yourself). And I don't know which cryptocurrency has achieved subscription revenue adoption for one merchant to the tune of $3 billion a year, as cryptocurrencies are push payments by default. Do you think 22 million people are topping up 10 euros of cryptocurrencies per month to pay for this? That itself would be news.

I'm not saying it's impossible just implausible. Interested to see more details on this.
Caught me by surprise as well
I think it should be proportionate (& increasing exponentially) to the revenue(not profit because hollywood accounting).

Big coporations like Disney can hold on to the material and pay the sum with profits from other ip if it's fixed.
<holding-hands>
Whoa, we don't talk about that here
</holding-hands>
https://archive.ph/GPdxa
> averaging all the tracks' embeddings to create a single embedding for the user, then using it in a KNN search, doesn't seem like a good approach to me, especially in a high dimensional space

If your embeddings are good, this is a valid first step. Yes, embeddings are weird like that.

You may not want to apply equal weight to all tracks, though.
I have a feeling that the big international banks like HSBC will have an axe to grind with Tether (and cryptocurrencies in general) because it's eating into their highly lucrative business.
Monads are a traditional stumbling block for Haskell newbies, including me when I was one. I found that those articles I linked demystified them more than any number of "monad tutorials" ever could do.
The system has no way of knowing who you are. It can’t tell if you’re really you, or just someone who walked by and started using your computer while you got up to go to the bathroom. If you really think the threat model is outdated, why not just run everything as root?

Also, you know you can configure sudo to not ask you for a password, right? So why do you need to use a whole new framework and privilege model to basically save yourself from typing four letters?
CAA records rely on the CAs to respect them, and this is an article about how a CA has issued a cert in violation of a CAA record.
sqlx (the rust library) does this, while also validating your sql statement, input types, and output types against your local db. For me it doesn’t get much better.
There is a very useful perspective in which categories are just typed monoids, and the monoid operation can only be applied when the types "line up". For example, here are some useful operations which do not form a monoid:

- PUSH(n) where n is a floating-point number

- POP

- CLEAR

- ADD, SUB, MUL, DIV

- ID

These can be interpreted as operations on a stack of floating-point numbers in the obvious way, PUSH(1.2) * [3.14] == [1.2, 3.14], POP * [1, 2, 3] == [2, 3], ADD * [1, 2, 5] == [3, 5], CLEAR * [1, 2, 3] == [], ID * [1, 2, 3] == [1, 2, 3], etc. However, not all of the compositions of stack operations are legal. For example, ADD * PUSH(1) * PUSH(2) is fine and equivalent to PUSH(3), but ADD * PUSH(1) * CLEAR is illegal.

Ok, so our stack operations don't form a monoid. But they obviously can still be composed, sometimes, so what do we have if not a monoid? They form a category! There is one object for each natural number, representing the height of the stack. So there are arrows like PUSH(3.14) : Height_{n} -> Height_{n+1} for all n, and POP : Height_{n} -> Height_{n-1} whenever n >= 1, and ADD : Height_{n} -> Height_{n-2} whenever n >= 2.

Another common example is matrices. Square matrices form a monoid, but what about arbitrary rectangular matrices? They don't form a monoid, but they do form a category where the objects are natural numbers, and the arrows N -> M are just the MxN matrices. You can't multiply any two matrices, but if you have a P -> Q matrix (QxP) and a Q -> R (RxQ) matrix then you can multiply them to get a P -> R matrix (RxP).
Given their major competitor Fortigate had multiple exploitable buffer overflow vulnerabilities this year that's probably a good thing.
Can people please, for the love of god, stop running tpcc with think time disabled. When run in this way it is not the TPC-C benchmark, and is not "simulating real database workloads that is considered a modern standard in database applications." TPC-C generally has an open-loop traffic arrival rate that scales with the size of the data and is lightly contended. When run without think time, it becomes closed loop, and generally dominated by the contention that was not supposed to be dominant.

This instance is less bad than some in that it's at least comparing the same sort of database and doing it using the same driver -- so it is at least an apples to apples measurement of something.

Still, please, as a community we need to stop getting rid of the think time and quoting the output as tpmC or as a standard benchmark.

See https://www.tpc.org/tpc_documents_current_versions/pdf/tpc-c... for the spec.
RAII is all about making the compiler do what the "disciplined" C code is already doing manually. As mentioned elsewhere in this thread, a common C coding style and idiom is to goto to the end of your scope, where all the free calls go. The resulting behavior is pretty close to RAII.

The argument in favor of RAII is that it's a lot less error prone to let the compiler write that part for you.

A fine goal of course, but I feel like this post is overstating it or perhaps conflating it with something else (eg. The aside about trying to convince the GPU API maintainer that the issues they hit are also affecting drivers written in C may have little or nothing to do with rust or RAII)
>>Theres even a name for the movement and catchy slogans. What was it?

The movement is called "4B"[1].

[1] https://en.wikipedia.org/wiki/4B_movement
I think when I looked it was still half closed source or something, or maybe I was mislead by something I read. To be honest I didn't take the time to properly investigate it.
If you have a compositional system, such as a programming language, you can use category theory to predict its behavior, in the same way that if you have a symmetric system, such as particles in a box, you can predict its behavior. In the former, maybe you prove that your programming language "can't go wrong"; in the latter, maybe you prove your physical system "conserves energy". (Or, do both at once: https://conferences.inf.ed.ac.uk/clapscotland/atkey.pdf). In any case, the point of category theory is to model compositional systems, which may or may not be worthwhile in any given context.
I've been in a similar position of having to learn solo for 10+ years and lesson #2 above has been FAR more important than #1 in my experience. Clients and bosses care much more about communication, dependability, etc. than whether a product has been coded elegantly via best practices.
Agreed, transport encryption is the term to use for this model which is a great model anyway.

You can use e2e if the data-at-rest (e.g., video) file(s) are also 100% encompassing the encrypted in both the camera and the remote server, as well as the mobile app and remote server.

From the client-side, this E2E means no raw data are exposed over network nor in remote storage and that keys are required to view the raw data at either endpoints.

In today's parlance, the undefined portion of E2E is whether the local storage is encrypted as well. Some will argue on this point. Future may (and should) tighten this E2E as well.
This feels like one of those times where a really good restaurant host would smile graciously, nod some tacit agreement, check for allergies, and then bring out a little lobster amuse-bouche on the house just to blow the diners' minds.
How do you create absolute silence?
This year I will solve AoC using Gleam. My challenge is to finally learn functional programming and learn Gleam at the same time.

I already solved the first problem and it was hard to get things ready, read the file, handle the data, etc. But once I had the first steps done it was easy to solve the problem
What if a is negative?
Didn't get much attention: https://news.ycombinator.com/item?id=42244076
Neat discovery. I would argue that this isn't really a dictionary attack because by taking permutations of words, you are not searching for actual words like STUD. Straightforward brute force may be cleaner, faster, and avoid duplicates.

Breaking simple (non-cryptographic) hashes is usually a great use case for an SMT solver like Microsoft's Z3. Unfortunately the approach is mostly defeated by the mapping of the input buttons to a set of arbitrary constants, so it resorts to considering a large number of disjunct possibilities---basically a very fancy brute force.

Nonetheless, I took a stab at it and I was indeed able to find the solution TXTUDUTXTUDUTXTUDU -- but I had to cheat and tell it the code repeats 3 times.

https://gist.github.com/rgov/e2d8f6831288ca739d5c51b0c9f4005...
I didn't say that? It is foul and unpleasant to behold, based on my experience of viewing it repeatedly over the last 5+ years.

It would be nice if you didn't assume that anybody who doesn't share your opinion is mindlessly regurgitating slop.
Relative to all professions or relative to just IT/tech?
crt.sh gives you direct access to their postgres database, if you find the capabilities of their site lacking.
> Proper tooling with C can prevent memory issue

Please tell me what I install and use to prevent this issue: https://xeiaso.net/shitposts/no-way-to-prevent-this/CVE-2024...

I just want to know what I've been missing. This is a genuine question.
Convergence or Divergence? A Look at GDP Growth Across Countries
An interesting generational battle- I'm surprised to see slop made the shortlist, I believe it came from a term popularized on 4chan
View's Lifetime Is Not Yours
That's an unrelated website. The paper is here, and called PhotoBot: https://arxiv.org/abs/2401.11061
Subrepos are non-standard and don't offer any significant benefit compared to submodules.

Even still, submodules are also best avoided.
thanks, I'll try that. your comment prompted me to look further why averaging is effective, which led me to this article, which made the intuition more clear to me -

"The mean is a reasonable way to summarize embeddings thanks to the blessing of dimensionality. Because an exponential number of embeddings are nearly orthogonal in high dimensions, it is unlikely for two independent collections to have similar averages. On the other hand, two related documents are guaranteed to have similar averages. As a result, two collections have similar averages if and only if they share many similar embeddings with very high probability."

https://randorithms.com/2020/11/17/Adding-Embeddings.html#:~....
I would offer a different point of view. On US soil they seem to be more concerned about it. When someone blows themselves up the US doesn't get involved. When terrorist/freedom fighters attack governments with unfriendly countries the US might be funding that.

The US cares about the overall goal of regional stability. They can use terrorism by funding groups with similar interests to advance their goals. When terrorism is used against them personally they care.