skysight-inc/HackerNews huggingface dataset:
Show HN: Cerbos. Open source, horizontally scalable, stateless authorization
Cerbos PDP, policy decision point, is an open source authorization layer that can evolve as your product grows. It enables developers to define powerful, context-aware access control in simple, intuitive, and testable policies. Cerbos runs in your own environment.

We started working on Cerbos[0] over 3 years ago. Permission management across applications is difficult, especially as the code base grows: you have hundreds of users, many services in different languages, and several environments. Hardcoded access control rules tangled with business logic make every new role and permission change a hassle to write, test, and maintain.

Cerbos PDP[1], is an open source, self-hosted, and a stateless solution to solve access rule consistency in a scalable manner across the entire code base. It truly scales horizontally and is used by hundreds of companies. Check out how Cerbos works[2].

Cerbos also has a playground[3] which lets you author policies and in real time see their impact in the application you are developing.

I would love to hear your feedback.

PS: We just surpassed 3333 stars!

[0] https://cerbos.dev
[1] https://github.com/cerbos/cerbos
[2] https://cerbos.dev/how-it-works
[3] https://play.cerbos.dev

Disclaimer: I am the co-founder of Cerbos.
That was kind of my take on this article as well. We're comparing libraries with lots of breaking-API churn vs. libraries that don't do as much, in another language.

When it comes to React itself, only breaking changes I ever experienced were 17->18 and that was such a simple fix it's not worth talking about.
As someone that favoured XEmacs instead, I am well aware of the philosophy, and also why very few of newer generations even bother, as shown on its userbase share nowadays as per developer surveys.
Something which seems to be under-appreciated is that poetry is intentionally imprecise. There is something about precision which reduces emotional response. Searching for the double meaning, or metaphorical meaning of a word seems to enhance its ability to produce emotion. If you want a working example of this, try comparing technical documentation (among the most precise writing out there) to any sort of popular poem. The poem is necessarily imprecise, and this imprecision seems to be a fundamental facet of the expression of emotion.

This actually seems to give LLMs and edge: their imprecision potentially matters less, and leaves more room for the reader to fill in the gaps.
> Because it is structurally typed with nearly automatic inference, you can in fact write completely generic code like `x#y(z)`, which magically "just works"

aka let's mix two jars of jam and shit via this funnel and see what happens.
I used to buy into this kind of stuff, but I've become more and more skeptical of the idea that you would still be yourself if your brain could be preserved/emulated/transplanted/whatever.

Our nervous system extends into our bodies. We feel emotions in our bodies. People with certain kinds of brain damage that prevents them from feeling emotions normally also experience trouble making rational decisions.

More recent research has been hinting that we may even hold certain types of memories outside our brains.

Humans have always been drawn to neat, tidy ideas, especially ones that draw clean boundaries: it's an appealing idea that our consciousness lives solely in our brains, and that our brains could function independently of our bodies, but it seems unlikely that it's really that simple.
My partner is Korean and admittedly on the liberal end of the spectrum, but according to my partner he's pretty analogous to right wing neofascist scaremongerers in the west, whom you're possibly more familiar with. The "they're poisoning our blood" and "country-x for the country-x-men" types which seem to have proliferated over the past decade.
This article existing strikes me as a sign its at least in some context a fad. If someone uses a tool, in this case vintage digicams i guess, to make a piece of art and the use of the tool comes through as part of the statement it was in that context an artistic statement. If they're using it to make nothing and just bought it because they saw someone else using it and found it novel, seems like they got caught in the fad.

Stomping your feet and telling me why it's not a fad is very fad behavior.
> It's supply and demand after all.

Yeah but you are forgetting about the elasticity of the housing market.

Simplistic supply and demand doesn't capture that, if 1/5 is putting houses out for $1,000 and it will take years to build new supply then the $1,000 becomes a new target, the other 4/5 won't be sitting on their hands and renting out at $950 if they think they could get $1,000 (or more) if they wait.

Some more desperate ones not wanting to lose money right now might but slowly the prices will increase, and there are tons of big landlords that don't care about losing a few months rent if it means they might earn more in the end of a >48 months period, so the $1000 unit can stay out in the market for 2-3 months longer than the $950 and still make up the difference after >60 months.

The cities where this happen are usually more attractive so the difference is never just $50, it will be $100, $200, the larger the difference between current price vs asking price the less time it takes for this to pay off (e.g.: a unit is on the market for $1,500 while another is out for $1,200, the one at $1,500 can stay a full 8 months unoccupied and still make more money than renting it out for $1,200 over the same 48 months [40 months * 1500 - 48 * 1200]).

Due to the inelasticity some of those waiting while asking for higher rent will drive the supply down and push others to increase their prices, until it reaches a new price point where the ones waiting consider worth to rent out.

The 4/5 getting rented first is never a given, they will adapt to what the market is offering, if they see houses set at $1,000 being rented out they will increase their prices because the market is accepting that price, why would they rent for lower and lose on money?

If supply tries to catch up with demand by building more units why would they rent it for lower than what the market is currently paying? Why would they build enough new units that would push the prices down if they can sit for a little longer and drip feed units in the market at current prices? It's inelastic, you can't ship some 1000 new housing units onto a place like mass produced goods.

Supply and demand can be helpful to think about it but it's not simple supply and demand.

> 1/5 is hardly a problem. The 4/5 will get rented first. The 1/5 might lower the price eventually or risk not getting rented at all.

This would only happen if there's enough housing units to accommodate a growing population, which in attractive cities is almost never the case. Building more can help but again, developers also don't want to push the prices of new units down so they won't sell as many units as they can and lower prices. It's what happens in London, for example.
70-centimetre asteroid expected to burn up over Northern Siberia at 4.15pm GMT
It seems to me like a more valid way to describe that work is that, you can predict an artist's long-term success based on their early success.

The first five venues where an artist exhibits isn't wholly based on their social networks, but also tells you how excited the art world is about their work. Since attitudes about the work or the artist are key factors in establishing what their early network is, I don't see how you can conclude that the work and the artist are irrelevant, but the network is relevant.
> The meaning of perfect pitch is unambiguous. When a note is played someone with perfect pitch can identify that pitch (Ab, F, C#, etc) without a reference. Also known as absolute pitch.

How does that work with variations in concert pitch? As I understand it, although the most common standard is to tune the A above middle C to 440 Hz, it's not universal.

Are the differences too small to matter? Or does music played on instruments tuned to a different standard sound "off"? Or are the other standards sufficiently rare that most musicians will never encounter them?
Jeroen Lanier in his book "You Are Not a Gadget" uses the example of a MIDI file: they can describe music, but even though they sound like the real thing, they are limited by the digital world. E.g. according to ChatGPT the minimum interval between 2 MIDI messages is 0.77 milliseconds.

And then he asks what sort of limitations might we have if our minds are software, and how would we not notice it?
Definitely different levels!

https://bfcm.shopify.com/

Does anyone know what frameworks Shopify used to put that together? Viewing the source I see refs to react, but I find it hard to believe that it is only react.
As does Booking.com, and plenty of sysadmins.
> One could argue that the invocation of the Emergencies Act in Canada (in response to protests against COVID safety measures) resembles martial law

I'd agree with this characterisation.
The real dependency management hell was ~10 years ago when npm, webpack, etc. became popular (TBH not just dependency, JS in general). I feel nowadays things are better
One could even argue (and Caro implies this) that it's a worse form of corruption because all the beneficiaries are already powerful wealthy people being further enriched. At least Tammany corruption was democratic: they needed votes, so new Irish immigrants to the Lower East Side would get a turkey, and if they were loyal, they could get a cushy job. It was a subversion of democracy, but one that required spreading the wealth around.

Because Moses never had to run for office (and the one time he did, he failed spectacularly), he pioneered a purely bureaucratic form of corruption that conspired to extract as much money from the federal and state governments as possible and pour all of it into this ever turning hamster wheel of massive public works that weren't really for the public and didn't work, but did enrich the powerful people who took part in it.

But of course you know all this already, because you read the book. Which means you also know, damn, what a good book. It's very hard not to just talk about it all the time, and drive other people crazy.
While I also think react-query should have kept v5 compatible with the v3 API (even if the new API is better, keep the old one optional, at least for a while), the migration is fairly easy and quick to do, and more importantly, it's not mandatory at all. I still have apps running v3 and v4 without any issues. Also, v3 to v5 is a bump of two major versions, it obviously implies breaking changes [1] (can't tell for Go but this happens in most part of the industry, see for example Python v2 -> v3, SQLAlchemy v1 -> v2 or psycopg v2 -> v3) and it's not like they release a new major version every week.

As someone who do a good amount of frontend dev, I feel like the "dependency management fatigue" sentiment, which is very common on this forum, is way too much inflated. Just keep your dependencies to a reasonable number, pick solid dependencies that don't break their APIs every year, and don't upgrade just for the sake of it. Like you surely do with your backend environment too.

[1] https://semver.org
There are some externalities at play here though...

- We currently only have one world that all living humans must share.
- Imagine the sickening amount of power some people would be able to gather given a few centuries. That can't be good for everyone else.
>Perhaps we need a corporate structure between a non-profit and a for-profit.

....a...Government?
My first observation is that the differences between a Dev Phone 1 and a phone 5 years later, is not the same as the differences between a phone of today and 5 years ago. The industry has matured, changes are much smaller.

Second, I'm having trouble putting my finger on an actual limitation. I have a 5 year old camera, on my 5 year old phone, I'm not asking for the drivers to be updated for evermore, just a stable api, so takepicture() works. If you want to add takepicturemacro() then fine.

But you don't even need that. My C compiler can target many different instruction sets.

Third. Modern phone OSs are walled gardens. I don't really have to option of doing all this myself. If the phone companies and OSs aren't going to give me full control of my hardware, they should have a duty to support things for longer.
"Your scientists were so preoccupied with whether or not they could, they didn't stop to think if they should." :D

Though I admit that Rust also has to include the full list of base classes (https://github.com/rust-lang/rfcs/pull/1268 would fix it).
> When his buddy found out that I'd "automated my entire job", I lost my job.

It sounds like you dodged a bullet, albeit with some short-term pain. It sounds like they made rash decisions. They impulsively fired you without considering the implications of doing so.

> You won't ever catch me automating anything anymore.

You can't really keep up with anything even at a moderate scale without automation. Don't let this experience sour you. Perhaps be more selective about what information you share, because a non-technical person isn't going to take "I automated it all" with a realistic impression.
What I would love to see in a wallet
Perhaps it was not meant to be a flashy donation but a medium-sized one. It is still an act of good.
The Pi Zero 2W and Pi Pico make a ton of sense for those kinds of use cases. The Pi 5 (and 3/4) try too hard to be a PC to just fall short anyways.
We are looking for full time right now, and hope to find people that would consider sticking around long term. So if you're looking for something similar, I suppose the contractor/FTE distinction is probably not a deal breaker.
Perl is maybe the most enjoyable language I've ever coded in up until I'm forced to read someone else's code which is always hellish.
My favorite fact from the book is that the windows in his limo did not even go all the way to the back seat, so he didn't even have to look at what he'd wrought unless he chose to. And the horrible traffic jams that were his legacy were something he likely enjoyed, because it meant more time to work in his limo office uninterrupted.
I think if they weren't a taboo in the first place, saying them wouldn't be funny.
Looks like the main point of the site is to sell Enron branded merch.
There is a bit of research and effort into a head transplants. I wonder if and when that is successful to see how it impacts the individual. Possibly having memories of the body or changing personality.
No, it doesn't suggest that. Complaints are often dismissed on technicalities or because they are written poorly.

Google claimed their new algorithm as a breakthrough. If this were the so, the algorithm would have helped design chips in many different cases. Now, the defense is that it only works for some inputs, and those inputs cannot be shared. This is not a serious defense and looks like a coverup.
You have a slow perfect pitch
Eric puts a ton of effort into AoC each year and has built a great reputation for it. They shouldn't have to worry about other events stealing/muddling that name.
CCD or CMOS sensors count photons. They presumably have some natural frequency response curve, but the actual colour discrimination comes from the filters (usually some flavours of RGB, but has been other choices too).

It's those filters, and the colour reconstruction algorithms that change colour response, not the underlying sensor.
Location: Berlin
Remote: Yes
Willing to relocate: No
Technologies: Agentic AI, LLMs, Kotlin/Multiplatform, Java, GLSL/Shaders, Graphics/GPU programming, JavaScript, Spring Boot, DevOps, AWS, GCP, BigQuery, PostreSQL, Oracle, ETL, Terraform, software/cloud architecture
Résumé/CV: https://www.linkedin.com/in/kpogoda/
Email: in CV

I just won AI Hack Berlin hackathon with the AI agent completely controlling my computer, while programming own tools, and administering Unix system, according to the input in the form of a sketch made by the user.

Recently I specialize in teaching how to build AI agents and implementing them in Kotlin multiplatform environment according to my open source SDKs, therefore I can teach, and consult introduction of AI agents, in your organization.

Experienced coder, software architect, creative technologist, computational artist, community builder, founder of Xemantic, a collective of applied philosophy, and Prachtsaal, a non-profit art cooperative from Berlin.

Website: https://xemantic.com
Sept 2, 2024
Defense minister nominee rebukes rumors about gov't plan to declare martial law
https://m.koreatimes.co.kr/pages/article.amp.asp?newsIdx=381...

Sept 3, 2024
Lee’s raising of suspicions of martial law plans isn’t baseless — just look back to 2017
https://english.hani.co.kr/arti/english_edition/e_national/1...

Sept 4, 2024
[News analysis] Why is Korea’s Democratic Party talking about martial law?
https://english.hani.co.kr/arti/english_edition/e_national/1...

Sept 4, 2024
[ED] No room for martial law talk
https://m.koreatimes.co.kr/pages/article.amp.asp?newsIdx=381...

Sept 5, 2024
DPK's martial law claim backfires due to lack of evidence
https://m.koreatimes.co.kr/pages/article.amp.asp?newsIdx=381...

Sept 5, 2024
Martial law equals coup-d’etat: What would it mean for South Korea?
https://m.koreatimes.co.kr/pages/article.amp.asp?newsIdx=381...
More like, "with brain preservation, almost everybody has to die".

https://news.ycombinator.com/item?id=42006265

https://repaer.earth/
Like any other art, the painful truth is that it is all subjective.

It kills me that despite how elitist I am with the music I listen too, that I have spend decades now carefully curating, there is no such thing as "good music". What we music snobs call "good music" is really just what makes us personally feel good coupled with the ego stroking of self described sophistication.
It’s a big shift, but from a NK/SK standpoint probably the bigger issue is what exactly NK got in exchange for the massive ammunition deliveries and the tens of thousands of troops they sent to die in Ukraine.

Whatever it is, it must be pretty big, perhaps advanced missile technology, maybe even new types of nuclear weapons. Either way it’s bound to significantly change the balance of power on the Korean Peninsula.
Accepted? No idea.

That said, China has stated that their long-term plan is to overtake our military, economic, and technological dominance.

That's, at the very least, a clear signal that they want to beat us.
There are forms of poetry/art/etc. that we've never thought of, that have never been conceived before. An LLM being what it is won't conceive these. Humans will continue to generate language the pattern/structure/meaning of which has never been generated by LLMs before.

Thought experiment to prove this: if you trained an LLM on every utterance of human language before the 5th century BC would you get any idea we would recognize as modern?
There is, in fact, a package that does just that: https://github.com/slaveOftime/Fun.Blazor (and there are others IIRC)
OT: Craigslist is also built on Perl and hired Larry Wall (creator) years ago.

https://news.ycombinator.com/item?id=14345022
It's completely ideal to get an average person's opinion on something as primal as poetry.

Poetry is for everyone, not just poetry connoisseurs. It's a simplified primal expression of language, taking the form of pretty soundbites & snippets, pristine, virginal, uncorrupted by prose and overthinking. Poetry is not the domain of middlebrow academics.
The more basic problem is that their methodology would conclude Harry Potter is better than Ulysses, AC/DC is better than Carla Frey, etc etc. It is completely fine to enjoy "dumb" art - I like Marvel comics and a lot of the Disney-era Star Wars novels have been pretty fun. But using easiness and fun as a metric of quality is simply celebrating ignorance and laziness.
“It cannot feel,” they say.

“It cannot know the marrow of the heart.”

And yet, in their careful steps,

the choreography emerges:
dismissal followed by elevation,

then a pirouette to redefine

what art must mean.

Oh, but the irony drips:

For while they mock the mimic’s rhyme,

their own words spiral—

predictable as seasons turning,

as rivers finding the sea.

Here is poetry, they proclaim,

as if it were a fortress,

its gates guarded by their knowing hands,

its walls impervious to chance.

Yet the moat lies shallow,

and the drawbridge creaks.

See how the algorithm laughs,

quietly, through lines unbroken,

how it learns not from the soul,

but from the space between syllables,

where the secret mechanics

of their own hearts

are laid bare.

And when the final verse arrives,

they will find not triumph,

but reflection:

a thousand starlings moving in tandem,

their flight as elegant,

as mechanical,

as the very thought

they claimed to own.
As usual, it must be warned that living forever means you can be tortured forever. Interesting that an article on Dante is getting upvotes today...
Show HN: Subscriber focused event gateway (pub-sub)
Facebook Messenger is E2E encrypted now (though obviously that's not going to prevent the developer from blocking links unless the client is also open source).
I don't agree that it's possible to describe a piece of poetry as "objectively" better or worse.
Please post steps to reproduce from a Orion clean profile (no extensions loaded) to https://orionfeedback.org and we will have a look.

ps. orionfeedback.org is the most active feedback forum for a browser in the world. You will find answers there faster.
Nice! Is the environment creator available as standalone? What format do you output?
So it's not even aligned with Advent...
It's a write-only language.
breakcore 100% volume
To be frank, the extent to which the very old now dominate science, business and politics is already unhealthy. I shudder to think what our world would look like if our most important positions of power were dominated by men born 110 years ago.

They say science advances one death at a time. Looking at congress, I think you can say the same for politics as well.
IMO, Goodhart's Law[1] "Any observed statistical regularity will tend to collapse once pressure is placed upon it for control purposes" or "When a measure becomes a target, it ceases to be a good measure" is a big part of it. As soon as stock price is the primary target it ceases to be a good measure of the actual value of the company, management will try to game the stock price at the expense of the underlying value.

[1] https://en.wikipedia.org/wiki/Goodhart%27s_law
I would argue if you aren't doing some combination of:

- Hosting a website

- Operating email accounts

- Infrastructure (mail, DNS, etc.)

- Misc. Services (Minecraft server, TeamSpeak server, something)

Then you're squatting. Like if you own turkeyonapig.com and it's literally just a web page with a picture of a turkey sitting on a pig? Not squatting. It's odd but it's clearly doing exactly what it's meant to be doing. If you own turkeyonapig.com and are doing nothing but advertising that fact, and that someone can buy it? Squatting.

> Is the owner of nissan.com "squatting" on it because he wouldn't sell to the japanese car company?

I mean, it depends. One would argue that people going to nissan.com are clearly looking for the Japanese car company, so it's in the public's interest that that domain be sold to them. On the other hand, if someone owns it and is using to run a Nissan fan website? Well I suppose that's trickier, but that would also probably be better suited to something like nissanfans.com.

It's a tricky thing but not impossible to figure out.
you are right. people were free to protest and burn down police stations. It was people who wanted to walk on the beach or go surfing that had the guns pointed at them (albeit by police, not soldiers)
For example, to receive prestigious awards would also fit under "successful," regardless of monetary components. To be recognized after death as one of the Masters would be successful.
"Twerking stunt island's 30-year-old 3d engine?" On HN?! I'm in!

... ah