skysight-inc/HackerNews huggingface dataset:
Meanwhile, another Apple-focused publication 9to5Mac, just chose Apple Vision Pro as Apple's product of the year: https://9to5mac.com/2024/12/30/9to5mac-product-of-the-year-a...
9to5Mac Product of the Year: Apple Vision Pro
The experience of developing a simple website using React is orders of magnitude better than using html and CSS. Reusable components, loops, and separating data from presentation go a long way even in the simplest of pages. Sure, you don't need React, you could use Jinja or any other templating library, but React is pretty good at what it does. As for Next.js, it makes it super easy to develop using React.

The biggest problem with React is the JS bloat that's sent to the browser. Though as long as you do server side rendering and don't even ship the JS to the FE, Next.js is a pretty good static site generator.
> (c) lots of routine mass murder incidents,

Your other points are valid but this one has been so highly politicized that inner city gang violence is classified as mass shooting, which is a completely different social issue that’s being co-opted in with the political violence issue and the mental health crisis. All of those problems are complex and have different root causes, implications and magnitudes, but activists like Everytown want to lump them together to portray a “Gun Problem” to pitch their forced solution, which is making it harder for law-abiding citizens to own guns.
On one hand it is great Unreal is being used in many places outside Gaming from VR, VFX, Movie production or anything to do with 3D / Photorealistic Graphics.

On the other hand there are some recent backlash suggesting these direction and default in Unreal is making games look worst. [1] [2] And Nanite may not be the silver bullet we were looking for.

[1] https://www.vg247.com/unreal-engine-5-has-been-a-disappointm...

[2] https://www.youtube.com/watch?v=lJu_DgCHfx4
I liked Recursion and Dark Matter a lot, but the last two pages of Upgrade really left it on a poor note for me.
The password is generally the weak point. If you can remember it any modern computer can guess it in a short time. Which is why password generation is so imporant.
I think one thing Andy misses about why people were pissed about Elastic and Redis but not as many for MongoDB and some other is their license and size of Contributors Community.

When original license is as restricted as AGPL it is unlikely there is much of embedded use... so less people are impacted in truly catastrophic way

Also if there is no contributor community to speak of... who is going to do the fork ?

I put some thoughts about it in my post about ScyllaDB https://peterzaitsev.com/thoughts-on-scylladb-license-change...
> If you consider that evolution has taken millions of years to produce intelligent humans--that LLM training completed in a manner of months can produce parrots of humans is impressive by itself.

I disagree that such a comparison is useful. Training should be compared to training, and LLM training feeds in so many more words than a baby gets. (A baby has other senses but it's not like feeding in 20 years of video footage is going to make an LLM more competent.)
Ooh, I hadn't heard of rbs-inline before. I was always a bit put off by the type definitions having to live in separate files.
If I recall, the decision to quarantine people who had contracted Ebola was totally uncontroversial, but I can’t speculate as to how that willingness would scale.
it's crazy to think that in 40 years, we may go from landlines to brain-to-brain communication
The most impactful book I read this year was "Computer Power and Human Reason" by Joseph Weizenbaum. For a book written about ai in 1976, it has aged very well.
I really wish we could store passkeys and totp in bitwarden where access always goes through a server side KMS.

Currently, bitwarden stores these encrypted, but they are unlocked with the rest of the password manager.

For now I'll stick to yubikey for 2FA.

But I wish I could use bitwarden as a layer of abstraction, such that bitwarden would always require my yubikey before allowing any of the passkeys or totp keys to be used.
It's not just Kitty graphics, the Kitty Keyboard Protocol is a DOS waiting to happen, and Goyal with his customary charm is very hostile to the idea of correcting his mistake: https://github.com/kovidgoyal/kitty/issues/7749

Short version: as defined, Mode 16 can deliver many megabytes of CSI parameters before the parser ever sees the `u` telling it what it's parsing. Since this is violently different from any other CSI code ever proposed or implemented, it cannot be parsed using any technique or parser which expects sane behavior.

This isn't the only problem with KKB, it must be deprecated and replaced.
Talking about the broken API argument here. Also Redis is particularly useful exactly in other situations compared to what OP says. Leaderboards style use cases with sorted sets are killer applications (super hard to model with SQL) of the data structure server thing. Apparently OP does not understand this and says "simple GET/SET" is what you should use Redis for.

Redis has probabilistic data structures, the ability to implement complex queueing patterns, and so forth. That's where the value is. Otherwise we would still be just with Memcached without caring about Redis. Another killer app was Twitter initial use case (then they used it for pretty much everything): to cache latest N Tweets, using capped lists. I could continue forever.

So OP argoment is flawed IMHO, for the above arguments, not fair. When you talk to students you need to make your homeworks. Really understand the system you are talking and provide a realistic image of it. Then, yes, if you want, criticize it as much as you want, with grounded arguments.

You know what? I re-read this comment and it's embarassing I ever have to write this, because after 15 years of Redis history at such scale and popularity, pretty much everybody that was seriously exposed to Redis knows those stuff. Is tech culture really degraded so much that we have to restate the obvious? Do I really need to explain GET/SET is not exactly where Redis shines after 15 years of half the Internet used all the kind of Redis patterns?
it's a PoC
I think you'll find that, ethical or not, "makes begging harder" is considered a feature rather than a bug of a cashless society. That's going to be doubly true in a country like Sweden that has a minuscule homelessness rate.
Yes you can. It’s the frame behind drywall then. Probably CNC cut plywood construction. And it’s more art than anything you might get from standard construction company. And crazy decorative art can be made from gypsum and integrated into drywall.
Basically because 2FA is a useless nuisance when you've got unique high entropy passwords that can't be stuffed, and it's not a defense against your entire password corpus being leaked.
Unconventional opinion here.

Passwords in the password manager are not "something you know" anymore. They are "something you have". So, no matter whether the TOTP codes are stored in the same app or a separate device, you can no longer properly call them 2FA. It's 2x "something you have" in either case.

EDIT: user "jerf" in the same comment thread says that it is 2x "something you know". The distinction whether something stored counts as "something you know" or "something you have" does not really matter. In either case, it is 2x the same type of a factor. --END EDIT.

From the "difficulty to compromise something" standpoint, you are, of course, right that storing the TOTP seed in a separate device is better. But look, this is not the primary reason why websites need to implement TOTP. The very fact that hackers need to compromise your device in order to get access to your account is already indicating a higher-than-usual security level, even without 2FA, and the article fails to notice this. Besides, the article only presents a user-centric viewpoint, while the viewpoint of a website owner would be more relevant here.

The main problem solved for real by TOTP is that users select stupid passwords like "Zhong+wen" that are guessable yet still pass complexity requirements, or reuse passwords on multiple websites (and your website cannot check for that), thus enabling compromise of the user's account on your website if another website gets hacked.

The main security reason (from the website viewpoint, not from the user's viewpoint) for TOTP introduction is, thus, to introduce a high-entropy factor which is (unlike a password) not chosen by the user, guaranteed not to be reused elsewhere, and thus cannot be guessed or compromised without access to the user's devices. This benefit is not invalidated by you storing the 2FA secret in the password manager.
This post seems to have been made obsolete by the passage of time, ten years ago.

> Update: Since this post went up, The New York Times seem to have come to their senses. In October 2014, they published The Advanced 7-Minute Workout.

https://archive.nytimes.com/well.blogs.nytimes.com/2014/10/2...
Diagnosing an Unusual WiFi Issue
Since when are "intelligence officials" considered reliable sources of facts rather than sources of propaganda?
Ultimately, you have to store your backup codes somewhere. So the only solution besides using your password manager is using a second password manager. Or not using a password manager to save off your backup codes, which has its own disadvantages.

There's lots of cases where 2FA reduces to 1FA. E.g. logging into a website on your mobile phone, and getting your TOTP or SMS code on that same phone. In fact-- that case is so common I wonder if we should just get more used to the idea of 1FA, with smartphone passkeys/biometrics/SSO being the auth factor. As it stands, if you compromise someone's smartphone (and have their smartphone PIN), the odds are great you can autofill any password you like on their phone and pull up any needed 2FA tokens as well.
X.org Server Development Hit a Decade High for the Number of Commits in 2024
The comment seemed to be about when it was right to ignore Constitutional Rights, giving two examples of people noisily pushing for that. There will always be people noisily complaining because that's what we amplify these days.

I personally don't think there's enough public consultation on rights. For some reason America relies on an increasingly political supreme court to set those boundaries rather than what The People actually want.

And all of this is entirely impossible to derive from online conduct because it's just wall-to-wall strife, disagreement and suffering. A system continuously telling us to be angry with other people, rather than how to enjoy these short, little lives we have. Weird if you ask me.
Before eBay acquired PayPal in 2002, buying something then mailing the person a check was fairly common.
I doubt I'll use it in committed code very often at all, this feels more like something that's very useful when hacking at something in the REPL
> they're so carbrained that they will continue to vote against their best interests to continue to have the whole place dominated by cars.

This is an arrogant statement. It's more likely that you don't appreciate or agree with what their best interests are.
I wish there was a new generation of HP-48, just with a faster core and better screen. :(

I have a SwissMicro DM-42, which when setup properly is similar to a HP-48, just minus graphing capabilities. Still want a HP-48 refresh.
Which should also be a red flag, if this individual was a credible threat they wouldn't have granted bail.

I can't even imagine the headlines that some of my neighbors would have "Man with Arsenal and stockpile of thousands of rounds of ammunition" presented in a slant. Meanwhile he had a few buckets of 22lr, and a half dozen rifles.

Given the evidence we've seen, the memes, and what would clearly pass as joking, there isn't really any "Here's my plan for x date" type smoking gun.
Yup, worked now. Signed up.
Master suppression techniques
> https://github.com/martijnvanbrummelen/nwipe/blob/master/ssd...

Yeah:

> Given that the support for sanitization is optional and not a mandatory aspect of the respective standards the support accross vendors can vary largely. The following table does not claim or warrant to be complete, it is highly advised to always validate the information with the manufacturer:

It'd be nice if the INCITS/SATA/SAS folks could make it mandatory.
Migrating my personal site from Jekyll to Hugo
> In practice, I feel the main reason 2FA is popular is because people cannot be trusted to create unique and secure passwords for every service.

Right. This is the killer features of passkeys.
I spent the past year puzzling over the DB market as well, but I don't feel like I'm much closer to understanding it.

It appears that a lot of attention is now directed at the folks doing 100 MB queries, and the high end has moved past everybody's radar. My idea of an exciting product is Ocient, who have skipped over Cloud and gone for hyperscale on-prem hardware. Yellowbrick is also a contender here.

I have a lot of experience with Vertica, and they seem to have gotten stuck in this niche as well, with sales tilted towards big accounts, but less traction in smaller shops, and a difficult road to get a SaaS or similar easy-start offering.

There's a crossover point where self-managed is cheaper than cloud, but nobody seems to have any idea where it is. Snowflake will gladly tell you that your sub-$1M Vertica cluster should be replaced by $10M of sluggish SaaS, and that you are saving money by doing so. These decisions seem more in the realm of psychology or political science.

DHH's cloud exit was a refreshing take on the expense issue, even if it wasn't strictly in the database space -- the cost per VCPU and so forth that he documented is a good start for estimating savings, and he debunked a lot of the "hidden costs" that cloud maximalists claim.

In the business/financial space the biggest news to me was the correction in Snowflake's stock price, which seemed to indicate that investors were finally noticing metrics like price-performance, but they added a little more AI and went back into irrationality.

I'm heavily in favor of DuckDB, Hudi, Iceberg, S3 tables, and the like. Mixing high-end and low-end tools seems like the best strategy (although settling on one high-end DWH has also worked IME), and the low end is getting better and cheaper, squeezing out the mid-range SaaS vendors.

In research I found Goetz Graefe's work in offset-value coding exciting -- he's wired it into query operators in a way that saves a lot of CPU on sorting and joins/aggregation. This is a technique that I've applied favorably in string sorting, and it was discovered in the DB community decades ago but largely forgotten. (This work precedes 2024, but I'm a slow study.)
This looks like a happy path naive blogpost with no mention of challenges or maintenance with React Native, with the end goal of this site to sell outdated courses to newcomers.
Another HN user experiencing this: https://news.ycombinator.com/item?id=42567896

They're stealing their customers data, and they're charging them for the privilege...
Right, you could find memes from just about anyone and paint an extremist picture with the right context left in or out at your discretion.

I think that it's clear this wasn't the "credible" threat implied, simply by his bail.
> Don't be fooled into thinking that a Nobel Literature winner is difficult to read, none of them are

Kind of a stretch there. No casual reader can handle Doctor Faustus (Thomas Mann) or the Glass beads game (Hesse) without serious effort. Sure, one can try, in the same way one can try running a marathon without training, with the same predictable results.
I miss the old LAMP stack, good times
The article is about how to squeeze absolute maximum in performance from the hardware. So you need a language that allows a relatively low-level access to hardware. And big plus of Rust is that it has standard SIMD libraries while C++ will get them only in C++26
Isn’t this what passkey is trying to sidestep? Assuming the user is at least authenticated on one device.
you would have to randomize spawns otherwise they can just record a playthrough and repeat it to unlock
It calls to mind two great lines:

''Reports of my death are greatly exaggerated.'' -- Mark Twain

''I'm not dead yet.'' -- Monty Python's Flying Circus
The cost to get to LEO dominates in most, if not all, launches, and it's relatively trivial to add a booster stage which solves additional delta-v problems while being cost preferential to alternatives.

Maybe SpaceX will make those stages, if the market would interest them. Maybe fellow companies like Impulse Space would manage those requests. Starship still looks like a probable winner in the area.
Just study it, deploy whatever vaccine or mitigation procedure exists and let those that don't want it die.

Just let them die.

Do not want a ventilator because 80% of those placed in ventilators die? (humans are awful at reasoning)

Great! Die.

Enough with this nonsense.
Was it actually popular among non tech people? I feel like nobody I knew outside of developers had ever used a 2FA code until maybe 3 or 4 years ago (unless they were forced to)
How and Why I Stopped Buying New Laptops (2020)
Perhaps this implementation works that way, but in principle if the game is strictly determined based on a random seed and player input, then the server can verify that the player's inputs do in fact result in the correct outcome.
This seems like hindsight bias. Much less was understood about COVID back then and maybe you forgot how uncertain it was?
The author also forgot to mention that the new error output doesn't mix ` and ' anymore.

Ruby 3.3

> 'asd' + 1
(sitar-report):1:in `+': no implicit conversion ...

Ruby 3.4

> 'asd' + 1
(sitar-report):1:in 'String#+': no implicit conversion...
>Where does it clarify that manufacturing includes personal use?

The definitions, which were on the previous page.
https://www.law.cornell.edu/uscode/text/18/841
This is not really an interesting line of discussion because all the relevant regulations regarding classified information, materials handling, and industrial safety would be enough to effectively prohibit possession of nuclear arms, without any reference to arms at all. I'm not sure we even have any laws explicitly prohibiting possession of nuclear weapons -- most of the material I've found so far on the subject in the CFR is about "special nuclear materials".

Most of the interesting policy area regarding the right to bear arms is actually in bearable arms -- small arms and light weapons. Although it is legal to own a tank, for example, this is not of much practical impact.
Back around 2007-2009 there was a risk of bird flu in central Europe. We had a local ban on washing cars except in fully automated car washes, it wasn't controversial at all. We just went along with it.
No, it only says "ChatGPT Plus (Upgrade)" or "ChatGPT".

Maybe it's different if you have a paid account?
Apart from lower costs, suburb housing usually has more space, features like yards for pets or kids, less crime, parks and things that aren’t as crowded or littered (with needles in the city parks near me), better schools, shorter travel times between common family activities, etc. Suburbs aren’t popular for some irrational reason like HN often paints - they simply have better quality of life for many people, especially those who are 30+ or have families.
this work is similar to the GSM symbolic paper (applied to putnam) https://arxiv.org/html/2410.05229v1

going forward, llm performance must be reported on the confounded benchmark as well
Yes, I mixed them up, and you are of course right as proved by his joint win of the event!
Worst crypto hacks and exploits of 2024
> It was clear to people paying attention to the hard numbers by February 2020 that Covid was no threat to children and non-elderly adults ... which led to the rational decision to treat it as a non-risk.

I found that the risk of supplying a deadly contagion to a loved one is a risk that mattered to me. Even if my loved one were elderly or burdened with a health issue.

I also realized some concern for the lives of people I didn't love. FF to now and I mask up when I do service calls in medical buildings (because of high risk patients).
TV series and movies can also be watched with a goal in mind, whether secondary to the fun or not. Examples are seeing how culture changed or how a genre evolved.
The threat model for most FPV pilots (either hobbyists or people in Ukraine) doesn't really include hijacking of the air link. It's trivial to just shoot something down with interference, sometimes inadvertently.

Pretty much everyone in FPV is now using ExpressLRS, which is an open protocol. If you want an encrypted air link, then the best option I'm aware of is the proprietary TBS Crossfire protocol.

https://www.expresslrs.org/

https://www.team-blacksheep.com/
It was at the Schlumberger-Doll Research Center (which Schlumberger since moved to Cambridge, MA in 2007).
Yes I phrased it backwards in the first sentence (of course). So the answer is ”investor money to operate at a loss?”
TigerBeetle Code Style
Ergonomic keyboards on software like ZMK or QMK actually change both iirc, so that's a no go for external keyboard users.
"state" is area where government is able to collect taxes and respected by other governments. Thus "communist state" is not oxymoron.
I agree. Give the average person the ability to make a good enough decision for their online security with minimal effort. I'm having a hard time being that concerned with TOTP 2FA being an option in the same location as passwords when the most important accounts people have are often limited to completely unacceptable SMS 2FA (looking directly at you financial institutions). Whatever it takes to get people off SMS and Email 2FA is a big win in my book, even if it isn't the best option.
This. It is way faster to build a decent looking prototype using JavaScript Framework Bloat than shipping something leaner. Performance and maintainability are luxuries that make sense to focus on later. This is in no way analogous to using k8s from the get go, which is a technology focused on being flexible and generic enough to maximize choice, rather than speed or developer experience.

Yes, yes, I you want to make a plain HTML form its fast enough, but for a startup 99% of customers want to feel assured by it having a look and feel which simply takes too much time if you are building things up without a framework
Do you feel this way about dashboard apps? The OP is about a dashboard app, and I think they are one example where the benefits of a SPA framework really do make sense. Curious if these fit into the "almost all" criteria you use.
> There’s an easier way - use full disk encryption with a TPM. Data effectively erased upon destruction of TPM key.

Assuming you can trust the drives to actually encrypt:

* https://news.ycombinator.com/item?id=18382975
I guess? 25k rows with 10 columns shouldn't be a big deal. LibreOffice, Excel, Numbers, they all handled this data without trouble.

It is 99% static data, it would be updated maybe once a year if that. The point was to give users something they were familiar with to look at the data, search it, etc. While being in the "cloud" so I only had to update one place whenever I do get tasked with an update and to handle authn/z easily with no hassles.

Anyways, I used SQLite and a very simple web frontend(it had 3 screens: search, table view and record view). Solved the problem and moved on. Search just filtered the table view.
The courts can not apply the law without interpreting the law. There is just no way to do without it.
it's a special case, not an approximation
The article was pretty clear and cohesive on its messaging. I’m not sure what you’re confused about.