skysight-inc/HackerNews huggingface dataset:
That’s one of the beautiful things about the massive Ruby ecosystem: the answer to that question is almost always yes, regardless of your need.

I’m not sure what your line of work is, but if you’re doing web dev, check this out for a great primer on the current state of things (Rails 8 + Hotwire): https://www.youtube.com/watch?v=-cEn_83zRFw

If you’d prefer just some straight Ruby resources, Ruby Warrior is (or was, been a while since I’ve used it but it appears actively maintained still) a fun intro: https://github.com/ryanb/ruby-warrior
I was thinking more about backend APIs managed by the company providing the app.
The MAGA Honeymoon Is Over
Thanks for the heads up - not sure I’ll be able to use it on my work laptop womp womp
Inside A Sinaloa Cartel Fentanyl Lab
just rebrand already

get jobs in your sleep

unlimited better taglines haha
That's not what I was saying. Granting the permission to uber.com requires granting the permission first to the browser, then configuring and trusting the browser's own internal per-site restrictions. I don't trust this as much as the more fine grained and configurable OS-level restrictions.
Northern Lights Photographer of the Year – 2024
They didn't.

EDIT: antirez is the creator of redis, not mvkel.
https://archive.ph/jEZJc

Frightening.
I also received undefined.

I replaced undefined with trading.snagra.com and I see a success confirmation message
That reasoning is dubious.

They aren't saying that more have been hacked, they are saying that more have been discovered related to that hack. Any adversary at this level would be monitoring the news, and would take appropriate actions (for gain) or roll up the network rather than allow reverse engineering of IOCs.

More than likely this was not an LI based attack, but rather they don't know for sure how they got in. Nearly all of the guidance is standard cybersecurity best practices for monitoring and visibility, and lowering attack surface with few exceptions (in the CISA guidance).

The major changes appear to be the requirements to no longer use TFTP, and the referral to the manufacturer for source of truth hashes (which have not necessarily been provided in the past). A firmware based attack for egress/ingress seems very likely.

For reference, TFTP servers are what send out the ISP configuration for endpoints in their network, the modems (customers), and that includes firmware images (which have no AAA). Additionally as far as I know the hardware involved lacks an ability to properly audit changes to these devices (by design), and TR-47 is rarely used appropriately, the related encryption is also required by law to be backward compatible with known broken encryption. There was a good conference talk on this a few years ago, at Cyphercon 6.

https://www.youtube.com/watch?v=_hk2DsCWGXs

The particular emphasis on TLS1.3 (while now standard practice) suggests that connections may be being downgraded, and the hardware/firmware at CPE bridge may be performing MITM to public sites in earlier versions transparently, if this is the case (its a common capability needed).

The emphasis on using specific DH groups, may point to breaks in the key exchange of groups not known to be broken (but are broken), which may or may not be a factor as well.

If the adversary can control, and insert malicious code into traffic on-the-fly targeting sensitive individuals who have access already, they can easily use information that passes through to break into highly sensitive systems.

The alternative theory while fringe, is maybe they've come up with a way to break feistel networks (in terms of cryptographic breaks).

Awhile back the NSA said they had a breakthrough in cryptography. If that breakthrough was related to attacks on feistel network structures (which almost all modern cryptography is built on), that might explain another way (although this is arguably wild speculation at this point). Nearly every computer has a backdoor co-processor built-in in the form of Trustzone, Management Engine, or AMD's PSP. Its largely only secured by crypto without proper audit trails.

It presents a low hanging concentrated fruit into almost every computation platform on earth, and by design, its largely not auditable or visible. Food for thought.

Quantum computer breaks a single signing key for said systems, acting like a golden key back door to everything. All the eggs in one basket. Not out of the realm of possibility at the nation state level. No visibility means no perception or ability to react, or isolate the issues except indirectly.
We have a cloud version of Tirreno in private beta now. Also, It can be run on Heroku easily.
My 25-year adventure in AI and ML
I think the missing piece here is that onramp contains the definition of a very simple virtual machine. One that the reader could implement themselves (though a reference implementation is also provided).

After it incrementally builds on itself all the way up to a fully functional C compiler.
The director of the WHO— who is Ethiopian, not a US puppet—is on record saying that the lab withheld data and China has rebuffed multiple attempts to collect the data that the WHO feels was withheld. How is that not a basis for the conspiracy theory?

I'm not even saying that it's right, it just confuses me to hear you so fervently insist that there's no basis for the idea when the WHO director himself says that there is and that the investigation was inconclusive.

We on this forum of all people should know that you can present partial data that shows completely different conclusions what the full data would show.

Why is a wet market a more convincing explanation than a lab whose explicit mission is studying coronaviruses, one which has been publicly called out for being uncooperative with the ensuing investigation?
Point the author is trying to make is that there are certain usecases you really don't need to deliver it via app, it is cheaper and better to serve via web. For eg. The Itaki app mentioned in the article.

Of course there are use cases that you mentioned are better served via native app. For eg. Apps that need compute or location. That's not the argument author is making.

The downside of delivering everything via app is your device ends up with app sprawl that eats up the resources.
We know that it's pure C, because it leaked.
I tend to agree that unless the extra income is going to seriously help pay off my mortgage, it's hardly worth the hassle of negotiation. Not that my outgoings have ever been on the scale of yours!
Is this "could" in the same sense as "I could be elected Pope"?
Thank you Simon
Fair enough

But then we get into the whole “salary compression and inversion” where because of HR dynamics vs market dynamics, you’re almost always better jumping ship after the first 2-3 years.

As a hiring manager, that’s out of your control. So you know that you usually can’t get more than 2-3 years out of an employee. If they are spending the first year doing “negative work”, is ur worth it?
Part of the problem is a "boiling the frog" situation - if you're invested in the campaign, or in the social circle, just burning the bridge in the moment is a very high cost.

I'm not the type of person who wouldn't say something in the moment, but I've had a lot of friends who were in longstanding campaigns well past the point of the people involved dreading going to sessions because some interactions had turned the group dynamic into a shitshow, and some conjunction of the social ramifications of being the one to blow it up and sunk cost fallacy meant that they kept going even as it poisoned their friendships.
Benefits:
Lots of things to do recreationally/hobby-wise. Pretty much any interest you may have there’s a good chance you’ll find some group doing it. First class restaurants, etc.

People are generally friendly/laid-back. A friend from Romania remarked that it felt very European to her compared to anywhere else she knew in the US.

Overall a beautiful area to live in despite the “doom loop” rhetoric you hear.

Drawbacks: Cost of living. Housing is expensive. Utilities are expensive. Groceries are probably on par with other areas. So depending on if your assignment is going to pay for your relocation and living expenses it may or may not be worth it from that aspect.
I concur that asking devs how they use AI is a great idea.

Recently, I shared a code base with a junior dev and she was surprised with the speed and sophistication of the code. The LLM did 80+% of the "coding".

What was telling was as she was grokking the code (for helping the ~20%), she was surprised at the quality of the code - her use of the LLM did not yield code of similar quality.

I find that the more domain awareness one brings to the table, the better the output is. Basically the clearer one's vision of the end-state, the better the output.

One other positive side-effect of using "LLMs as a junior-dev" for me has been that my ambitions are greater. I want it all - better code, more sophisticated capabilities even for relatively not-important projects, documentation, tests, debug-ability. And once the basic structure is in place, many a time it is trivial to get the rest.

It's never 100%, but even with 80+%, I am faster than ever before, deliver better quality code, and can switch domains multiple times a week and never feel drained.

Sharing best AI hacks within a team will have the same effect as code-reviews do in ensuring consistency. Perhaps an "LLM chat review", especially when something particularly novel was accomplished!
The jump between 'data was withheld' and 'there was a coverup of an incredibly improbable thing happening' compared to 'very probable thing that was also supported by data happening' is colossal.

Absence of data isn't a free pass that lets you fill in whatever blanks you want, to fit whatever improbable theory you want. Especially when a plausible, probable, data supported alternative exists.

At the moment, given what we know and don't know, it is dramatically more likely that it was a bush meat outbreak, and confidently and without quantification, asserting the contrary (as the ancestor post did) is nonsense.

Its correct to say that it might have been a lab leak. It's not in good faith to say that it was, or was probably a lab leak. Because that's not where the preponderance of evidence currently rests.
Snark like this, on the basis of ones own lack of knowledge, is one of those things that make you wonder how we ever got anywhere.
> On iOS iirc they don't even support adding PWAs to the homescreen?

They literally supported this since iPhone OS 1.0 (it wasn’t even called iOS yet). In fact, it was supposed to be the only way to add apps to the iPhone until people complained and started jailbreaking to install their own apps. Apple didn’t release the App Store and the iOS SDK until iPhone OS 2.0
All of these claims for serious fines, yet no indication of where the fine is to be paid. Fines means the gov't is getting the money, yet the person whose data was lost still gets nothing. Why does the person that was actually harmed get nothing while the gov't who did nothing gets everything?
Nice article. Ruby seems to be getting a bit of revived interest lately and some serious effort has gone into making it faster. It's not my favorite language but it has paid the bills for most of my career.
>It is colored to make the solution apparent.

Not apparent enough. I spent five or ten minutes finding dead ends in the green area and gave up.
> WDYM? The root cause is "you passed ownership to stack-based memory to the kernel and didn't ensure it's valid when it called you back", why would "consent of lower frames" matter here?

There is no "called back" in this case. The APC was executed by the sleep and corrupted the stack by unwinding across the C winsock code without any cleanup. It never returned.

The user-mode enters an "alertable" wait which allows an asynchronous procedure (APC) to interrupt it and execute code. Instead of returning the APC causes an exception, unwinds the stack across the APC delivery and ends up executing some random code instead of returning to the winapi code that called wait(alertable: true) in a loop. So the code that was supposed to be synchronous because of while(!completed) wait(); suddenly is broken out of the loop without actually being completed.

> Exceptions (where lower frames matter) hid the control flow here, but that's one way to reach this situation (early return is another way, as shown by Raymond Chen's post).

This isn't just hiding the control flow here. It's control flow that shouldn't have existed in the first place. It walks across the boundary of the windows APC dispatcher. Unity folks needed to go out of their way to make this "work" in the first place because using c++ exceptions and standard library threads this wouldn't work.
Yes exactly. The Google sheet is live. I couldn't just add a column in live sheet either. I had to copy the sheet using a formula so that its always up to date. And still had to use to other sheets. Chart is in the 4th sheet.

In excel I would not have to do any of that.
You posit that individual freedoms exist inside China?

I posit they do not.
Sorry, I edited my comment to ask this as the conclusion:

> Why is a wet market a more convincing explanation than a lab whose explicit mission is studying coronaviruses, one which has been publicly called out for being uncooperative with the ensuing investigation?

It's possible that the widespread belief in this explanation is a failure in science communication and there's a good reason for this, but it's not a failure in critical thinking on the part of those who are skeptical of the official story. The official story has an enormous unexplained hole. I've yet to see anyone effectively communicate why the intuitively more probable answer is the less probable one.
How about you tell the former CEO of Qwest, or William Binney, or Jacob Applebaum how it is you are so sure you think the world works. I implore you, respectfully, to consider what they have told the world and give some time, on top of the time you have probably already given this topic -- give some extra time to this topic, after seeing what they have shared with us.

https://www.vice.com/en/article/the-telecom-exec-who-refused-nsa-snooping-is-out-of-prison-and-hes-talking/

https://en.wikipedia.org/wiki/William_Binney_(intelligence_official)#Whistleblowing

https://media.ccc.de/v/30C3_-_5713_-_en_-_saal_2_-_201312301130_-_to_protect_and_infect_part_2_-_jacob

> and businesses generally push back very strongly against governments whenever a government asks them to do things that will cause them to make less money and/or waste money.

Did Facebook and Twitter do this when the federal government told them to censor?

What did Mike Benz' interview with Tucker (whether you dislike or like Tucker is neither here nor there so let's not get distracted by that) in February of this year (2024) reveal to all of us?

> of big tech to have any desire to do this kind of thing.

Apple is and always will be subservient to NSA, CIA, and the State Department. If you believe today -- after taking a moment to really, truly, seriously think about it -- that it is the other way around, you have a very special kind of stunted personal development.

> (including security engineering teams) within the company...

I respectfully implore you to look into the publicly available information about how many people at Facebook, Google, Twitter (pre-Musk), and Apple have NSA or other "glowie" backgrounds.

> well that seems like a recipe for getting some of the company's most talented and highly paid security engineers incredibly pissed off

You are correct here.

> if they ever find out

They won't, not unless they already have the appropriate clearance, and once they do they will take those secrets to the grave, or else -- unless they can make it to Moscow instead of a black site operated on foreign soil.

> and it's very likely they would eventually find out

Provided they can get into parts of buildings, buildings that aren't even on the same campus, that they aren't authorized to get into, which will never happen. So..
The ability to recognize and join a hype train, I presume. It’s one way to appear proactively leading-edge to marginally-informed product managers, marketers, execs and press.
The usual issue is the addition of control loops without much understanding of the signals (CPU utilization is a fun one), and the addition of control loops without the consideration of other control loops. For example, you might find that your cross region load balancer gets into a fight with your in-process load shedding, because the load balancer's signals do not account for load shedding (or the way they account for the load shedding is inaccurate). Other issues might be the addition of control loops to optimize service local outcomes, to the detriment of global outcomes.

My general take is that you want relatively few control loops, in positions of high leverage.
To the OP, try DragonRuby for your next game if you miss hot reloading but like the scripting, code-first nature of LÖVE. It’s also cross-platform. Not sponsored, just a big fan and it scratches many of the same itches as you described with LÖVE.
I feel like I have much more control over "when" I share my location, if permission is granted to "uber app" not "uber domain".

All the reasons I come up with, can be easily argued "you can do the same thing in a browser". But still, it is not the same.
Ok cool. I have been looking at plausible and others. People may not want to host their own web analytics platform per say as there are is maintenance overhead.
It's commonly referred to as a deflationary spiral because the falling prices lead to people (perhaps counterintuitively) holding off from large purchases, anticipating a continued drop in prices. Sort of a "buy the bottom" mentality.

The lack of spending then further contributes to falling prices, job cuts, businesses closing, etc. It's really not a situation any economy _wants_.

That said, I empathize with your sentiment.
You have nicely captured the sentiment of the post-truth world.
This is the text book answer. Not something you can actually do on a live sheet with all transactions. If you want to use a different aggregate e.g. week instead of month or skip first year or something like that you will be making these columns all over again.
Yes it's walled but there are a couple of summary articles [1] [2]

From what I came to understand fat cells never really die but lie in wait to do their given job. Now they need to find out why in some people as they age, the fat cells around the gut fights harder to keep it.

[1] https://www.smithsonianmag.com/smart-news/fat-cells-retain-a...

[2] https://www.livescience.com/health/fat-cells-have-a-memory-o...
I would like to add building a PaaS/ internal tools that abstract cloud for productivity sake. Bad idea.
Thanks ccheney, I think I found the issue and fixed it. Sorry again for folks running into issues, really appreciate folks interested enough to follow along and help troubleshoot as well
Yes exactly, excel's Pivot tables and charts are more powerful.
They can't think at all. The task must be strict macroexpansion of original input(doesn't mean that always works).

I'm suspecting LLM works for a lot of front end and app coding just because code in those fields are insanely overbloated and value proposition is almost disconnected from logic. There must be metric tons of typing in those fields, and in those areas LLMs must be useful. They certainly handle paper test questions well.
That is one of the great strengths of LLMs for school education as well. Students often refrain from asking questions in class out of embarrassment at showing their ignorance or hesitation at interrupting the flow of the class. When used well, LLMs offer a good way for motivated learners to fill in the gaps in their understanding.

The pervasive problem of low student motivation won't be solved by LLMs, though. Human teachers will, I think, still be needed.
Why would this be expected?
It's not the same, though I wouldn't call what Bazzite is doing a clone either. The thing that differentiates Steam Deck's Big Picture mode from what's on Windows or MacOS is that it integrates with a Gamescope, a micro-compositor that runs instead of (rather than on top of) a traditional desktop window compositor. It's in large part what makes it feel console-like.
yes, exactly, that's why the X-card thing is just useless performative theatre
You're talking about hundreds of millions of dollars to calculate that. "Put your money where your mouth is".

We know it's theoretically possible. And we also know that this theoretical possibility is within the reach of a couple of countries.
Good for you. Not everything has to be about financial gain all the time.

I accept that the OP is fortunate to be able to give back like this, but I've been working on a side-project (aka 'magnum opus') these last 20 years and giving it away for free, simply because reducing the day to day grind for some people in some small way without recompense is a huge plus for me.

And now I'm about to retire and I'm still going to give it away because that was my original promise.

And if you want to slag me off for it then be my guest.
You are right, but doing all that is incredibly cumbersome, at least to some people, which is why they don’t like working with LLMs.
Is that boot tasty?
There is nothing similar between Plausible and Tirreno. Tirreno is more about rule engines, risk scoring, and fraud prevention. From this perspective, sharing user data or even business context with cloud is not the best option.
Well, Rumi does at least, James looks like he's got a permanent position getting that Wolfram money.
I'm glad that so many open source and even "small" models like Gemma are better than gpt4.
Please for the love of god be gentle on the NWS infrastructure - and also ask yourself "do I really need to set up something that hits NWS public APIs every X minutes, or can I just get a $5 dongle to decode ISM band transmissions and read a $10 temp and humidity sensor stuck to a tree outside my house?"

Private weather companies have been lobbying Congress for decades to keep the NWS underfunded and hamstrung in what weather services they can offer. That's why we've seen an explosion in the number of companies offering things like forecast "products" for farmers, fleet operators, and so on.

The NWS is like the post office- invaluable, something the government should provide as a service to all, and constantly under attack and hamstrung by people with privatization agendas.
It would be quite useful if that were the only phone available.
Review of The Crisis of Democratic Capitalism by FT's Martin Wolf
I don’t think parent means the same or maybe he does. On chrome and edge on macOS one can choose to install the PWA as a native app. It gets an app icon and everything. It’s similar to a web bookmark on the HomeScreen. But it’s a sandboxed app. Don’t know if this is the exact same behavior though. PWAs are also a bit different to normal websites. They have a manifest and what not to describe the app in a standardized way.
That was one of the themes of my article: LLMs are power-user tools, mis-sold as "easy to use". To get great results out of them you need to invest a whole lot of under-documented and under-appreciated effort. https://simonwillison.net/2024/Dec/31/llms-in-2024/#llms-som...
You’re thinking about B2C ads. B2B has long sale cycles where you talk to customer and you can ask them where they heard about you from.
https://archive.ph/cZDJN
The Dreamcast was pretty much on par with the PS2, GameCube, and XBOX. I'm surprised it didn't keep getting games.
There is nothing inherently wrong with throwing an exception from an APC. Windows supports it and will unwind the stack correctly. If you wrote all the code absolutely nothing will go wrong.

The issue is more about the actual code that calls alertable waits not expecting exceptions that will unwind which will most likely be all of winapi code because in it exception == crash.
cant you just mess with them? like accept the connection but send back rubbish data at like 1 bps?