skysight-inc/HackerNews huggingface dataset:
> "None of the database guides I followed had warned me about the dangers of exposing a docker containerized database to the internet."

This prompts a reflection about, as an industry, we should make a better job in providing solid foundations.

When I check tutorials on how to drill in the wall, there is (almost) no warning about how I could lose a finger doing so. It is expected that I know I should be careful around power tools.

How do we make some information part of the common sense? "Minimize the surface of exposure on the Internet" should be drilled in everyone, but we are clearly not there yet
Can you say more about the plastic left behind? Polyurethane coating on the cannula?
Same here. It truly is a godsend.
They already do this to treat some kinds of Parkinson's

https://www.youtube.com/watch?v=XNk3UF488mg
https://en.wikipedia.org/wiki/Human_chimera

It happens, although only when we are at a very early stage of development, a time when we share some traits with jellyfish. The growth of an embryo tracks our evolution. If you ever see a dog, or a person (see the model taylor muhl) with a color split down the middle of their body, there is a reasonable chance they joined with a twin in utero. Absent a color split, no doubt many of us are totally unaware that we may contain multiple gene sets.
Hard disagree. Long polling can have complex message ordering problems. You have completely different mechanisms for message passing from client-to-server and server-to-client. And middle boxes can and will stall long polled connections, stopping incremental message delivery. (Or you can use one http query per message - but that’s insanely inefficient over the wire).

Websockets are simply a better technology. With long polling, the devil is in the details and it’s insanely hard to get those details right in every case.
Despite TBMs being used all the time it is genererally much cheaper to build a tunnel by cut and cover - that is just call in excovators and dig a hole then cover it. when an excavator breaks you push it aside and get another until it is fixed. Want to go faster - just hire more excavators the overall cost is the same since you are done faster.

tbms are cheaper if you must go deep, but deep is a negative for subways since people must get down which takes time (faster is always better).

It is claimed that cut and cover is toa much surface disruption - but cut and cover is much faster and so the disruption to any one place can be quick enough. Better to manage disruption than eliminate it.

when a tbm breaks your project is delayed while you wait for parts and then fix it in place.

Tbms do go under everything else, but experience proves you can find things and go around them quick enough (sometimes there is a delay as somethingeof archeological interest is found - but evperience shows this is still cheaper than a TBM.

Yes TBMs are cool and useful but the simple shoud not be over looked
Yes, repeated information is not great in many cases. A more advanced system could possibly keep track of which information is new and which information is already known to the user.

I wanted to create something opposite of needing to say "Hey Google, describe what is in front of me" or similar. Also a point was to see how cheap/simple you can go and still get valuable information.
> It’s in the public interest because Musk is one of the most powerful people on the planet and he’s exercising that power quite forcefully these days.

But that doesn't mean you should go ahead and hunt for every detail about a person just because they sound like Elon.

So if I am a great Elon Musk impersonator should I be doxxed to a huge extent just like in this article / Spectator?

All one had to was ask or do a face interview with the person.
Article doesn't talk about accuracy, which should always be included when ai is used,imo
I don't need to know the names of specific drug dealers or politicians to care about my community or even engage in activism. If I do need to know, again, I don't need the paper to tell me.

You're wildly spinning the topic off the rails. The subject of this thread is not news reporting per se, but newspapers removing old crime stories, and whether that would, to quote upthread, "prevent the public from knowing of the past misdeeds of the powerful."

I'm arguing it wouldn't because newspapers are not the sole source of knowledge for anyone and haven't been for a very long time, and because such stories are a matter of obvious public interest, and would certainly remain archived.

What the article is discussing is a consideration by some (not even all) papers to consider remove old stories of minor criminal incidents on a case by case consideration. If anything, this protects the less powerful more so than the powerful.
I know other ecosystems do the same and those are baffling too, especially for the newer created languages like rust, which is why https://internals.rust-lang.org/t/pre-rfc-sandboxed-determin... exists
I'm trying to push up the stock, but my co-founder is a tough negotiator and adamant
For my last few projects I've resorted to

*,*:before,*:after { min-width: 0}

I haven't had a single problem with it. I honestly feel this part of the spec was a mistake, given all the confusion I see. Online discussions suggest 'auto' is a counterintuitive default.
In the editor there’s GitHub copilot autocomplete enabled in the chat assistant and it’s incredibly useful when I’m iterating with code generations.

The autocomplete is so good that even for non-coding interactions I tend to just use the zed chat assistant panel (which can be configured to use different LLM via a drop down)

More generally in multi-turn conversations with an LLM you’re often refining things that were said before, and a context-aware autocomplete is very useful. It should at least be configurable.

Mac default Dictation is ok for non technical things but for anything code related it would suck, e.g if I’m referring to things like MyCustomClass etc
Not a lawyer, but been involved in two startups where a founder left with some animosity and a lot of emotions, once as a third party and the other as the leaving founder. Short answer from my experiences: you can't take equity with you but you can get more money.

Slighty longer answer: dead weight founder equity on the books will kill the company unless it's already achieved some level of success and you're into a more dividend phase (doesn't sound like it) or it's young but doesn't need to ever take outside money . From your perspective it may "feel" good to keep some of your baby but you don't want that, as the company will fail/wildy succeed and you'll be really upset, or (more probable) land somewhere on the spectrum from mildly successful to zombie and you won't care about it.

I think you can probably get a bigger buy-out, but have no details. You don't typically value a young company on one-time, past revenues but on projected or recurring sales. A grant might impact goodwill in the future, but a potential grant wouldn't have much impact in my view. These deals around very early stage companies are not going to pay out like a typical startup (wild valuations on theoretical future growth) but on assets and free cash flow. You should push for a buyout in line with that, while recognizing you are not driving and if your CEO thinks it is unreasonable they can stall, fight or torpedo the company before paying you out.
This is even better as it allows you to glue the printouts on a diary page instead of discarding them, e.g. https://www.youtube.com/watch?v=7kMFWM64gVQ
China aiming for more export curbs after bans on US defence contractors
Tailscale is a great solution for this problem. I too run homeserver with Nextcloud and other stuff, but protected behind Tailscale (Wireguard) VPN. I can't even imagine exposing something like my family's personal data over internet, no matter how convenient it is.

But I sympathize with OP. He is not a developer and it is sad that whatever software engineers produce is vulnerable to script kiddies. Exposing database or any server with a good password should not be exploitable in any way. C and C++ has been failing us for decades yet we continue to use such unsafe stacks.
True crime stories are influencing the real-life justice system
Another example of confusing cause and effect. Perhaps the people with the view that 'ego depletion' was a thing, had that view because of personal experiences.

If so, then all we've shown is that their clever quiz detects people that suffer from limited willpower. Which is a valuable result, but not worthy of the overheated claims in this article.
Show HN: Trending Open LLM List
So it doesn’t seem to be mentioned here, but has there been some major recent change in the economics of the _scale_ of the tunnels? Dublin’s beleaguered metro project recently put out its new design; there are a bunch of changes from the previous early-noughties design, but one of the more eyebrow-raising ones is that the bored sections will now be a single _9.5 meter diameter_ tunnel; it is claimed that this is less disruptive and cheaper than the two-narrow-tunnel approach used in conventional bored metros. Recent metro lines is Barcelona and Madrid have also used the single-giant-tunnel approach.

Anyone know what’s going on here? Intuitively you’d expect two small tunnels to be cheaper; you’re moving a lot less material.
Ctrl+↑
I'm afraid, you would sooner see safe code in assembler with the help of ai than in rust. You can argue that ai can be used to enhance rust, but at this point why bother if ai will be writing code by your instructions.
Well, it’s the same in both cases. You need to handle disconnection and reconnection. You need a way to transmit missed messages, if that’s important to you.

But websockets also guarantee in-order delivery, which is never guaranteed by long polling. And websockets play way better with intermediate proxies - since nothing in the middle will buffer the whole response before delivering it. So you get better latency and better wire efficiency. (No http header per message).
It can actually be done correctly, like e.g. safari does it in the top-urlbar mode.

- When a user scrolls content-up in any way, the header collapses immediately (or you may just hide it).

- When a user scrolls content-down by pulling, without "a kick", then it stays collapsed.

- When a user "kick"-scrolls content-down, i.e. scrolls carelessly, in a way that a when finger lifts, scroll still has inertia -- then it gets shown again. Maybe with a short activation distance or inertia level to prevent ghost kicks.

As a result, adjusting text by pulling (including repeatedly) won't flap anything, and if a user kick-scrolls, then they can access the header, if it has any function to it. It sort of separates content-down scroll into two different gestures, which you just learn and use appropriately.

But instead most sites implement the most clinical behavior as described in the comment above. If a site does that, it should be immediately revoked a dns record and its owner put on probation, at the legislative level.
Any chance that non-tradition is related to loss of the Thresher?
Not general curiosity -- but for healthier eating.

There's a theory that says you basically won't ever gain weight if you prevent your blood sugar from going above a certain level. So it's an objective way of knowing how much to eat and when.

Also, to warn when blood sugar is too low. Some people (myself included) often get so into work (or whatever) that we forget to eat, with adverse consequences. An alert is very helpful.
I initially got excited about this (and know people who would really love this to exist), but after a bit of digging, I am convinced that this is likely a scam. This report explains why it is: https://whitediamondresearch.com/research/know-labs-is-an-ob....

You could also look at the stock economics to see that this company has not behaved like one with a bright future.
because he has a 2/3 majority, he can lift my rights for preferential subscription, which means I don't get the chance to buy them. He could issue new shares at a really low price and buy them himself.
More likely a commanding officer who didn't care/know about tradition and incorrectly told you no.
The paint program we used was called "fged". It could generate C code for animations. People would spend hours generating their animation masterpiece, then bring their friends to play it back for them.
I feel like the origin of this joke is a Louis CK stand up routine IIRC but I’m unable to locate the source.
The answer almost certainly is no. While lithography is one of the largest single contributor to manufacturing costs, the contribution to overall cost is still far below 10%.

And one cannot simply substitute an optical lithography with a nano imprint machine without redesigning some part of the process (etch, metrology etc.).

Investing R&D resources for a (best case) 10% reduction in costs while still having a decent probability of failure in a big but declining node is not worth it.
Tempeh: A fermented food with many benefits
I think I'm missing something here - what is specific about Docker in the exploit? Nowhere is it mentioned what the actual exploit was, and whether for example a non-containerized postgres would have avoided it.

Should the recommendation rather be "don't expose anything from your home network publically unless it's properly secured"?
https://archive.is/5oCak
I really like the "VPN into home first" philosophy of remote access to my home IT. I was doing openvpn into my ddwrt router fortunately years, and now it's wireguard into openwrt. It's quite easy for me to vpn in first and then do whatever: check security cams, control house via home assistant, print stuff, access my zfs shared drive, run big scientific simulations or whatever on big computer, etc. The router VPN endpoint is open to attack but I think it's a relatively small attack surface.
Now I understand. You don't want the product and you're not interested in that kind of product. Then of course any price asked is too expensive for your taste. I don't like breakfast cereal. That doesn't mean that they're too expensive, it just means I'm not the customer. But there are people who like the product and to them the price asked is cheap.

When I go to the super market I walk past thousands of products which I'm not interested in. The same for any store or virtual market place. So it's not about $5 being a "considerable" amount.
They should be preserved somehow. Even a modern web browser has enough compute power to emulate a network of them probably.
> your own site, it's still going to get hoovered up and used/exploited by things like AI training bots.

Firewall ?
Well, I always read reviews by ignoring all 1-star reviews first. Most 1-star reviews are made by disgruntled customers to grab customer service attention, a practice I detest. For example, one of the 1-star reviews says that a printer does not work on Win10 and thus is a garbage that was returned. Yeah, about that... https://www.youtube.com/watch?v=uV9lemggOuw sure it works on Win10
The standard way to fix that is to send ping messages every ~15 seconds or something over the SSE stream. If the client doesn’t get a ping in any 20 second window, assume the sse stream is broken somehow and restart it. It’s complex but it works.

The big downside of sse in mobile safari - at least a few years ago - is you got a constant loading spinner on the page. Thats bad UX.
It's sad you're downvoted, because you're right. So called "anti-scammers" who make a fortune on Youtube or that Reddit apparently considers heroes, are in effect preying on the poor. The real culprits are the bosses, not the ones doing the phone calls.
No link to this years poems?

I didn't look because my understanding is they all need to be checked for classified information and thus the public can't see them until late in the month.
Yeah I remembered same thing. btw Futaba channel (mama 4chan) has different lifespans to drop thread on each board. (ex. img.2chan.net drops thread in 1hour). Just an idea.
Despite people slating the author, I think this is a reasonable oversight.
On the surface, spinning up a Postgres instance in Docker seems secure because it’s contained. I know many articles claim “Docker= Secure”.

Whilst easy to point to common sense needed, perhaps we need to have better defaults. In this case, the Postgres images should only permit the cli, and nothing else.
I don't see characters copyrighted by Nickelodeon, make sure you licensed the characters or you might be sued.
people on this site get angry when you ask this question. apparently we need more microblogging sites.
Thing is, you’re often building these under already-existing things. The Dublin metro project is facing significant planning challenges on the basis that thousands of homes and businesses passed can complain about speculative vibrations from the TBM; with cut and cover it would just be a complete nonstarter (I think one small section is planned to be cut and cover, but most of it will be either bored or surface rail).
I use Bootstrap Flex utilities.
Imagining a time when San Francisco used to be the center of fashion and music is wild.
I'm interested in coming to an agreement, I have not much to gain in holding on to all my shares.
Security in depth.
China is the only country in the world with ambition right now. The west can't build anything anymore.
What the GP commenter might have meant is that websockets support binary message bodies. SSE does not.
this. The value of a company in this scenario is ARR, discounted sales pipeline, IP, and goodwill. It's likely to be very low for a departing founder, because it's almost all goodwill at this stage which for tech startups is essentially "the perceived ability of the founders to build something that eats the world", which by definition is a going concern he won't be part of.
That's one option. On macOS, it's fn + Left. On Android, I'm not sure there's anything.
How about studying some philosophy? If you dedicate yourself to it for a couple of years, it'll hammer in a sense of what truly matters. (While at it, it'll wean you off the Silicon Valley's empty humblespeak.)

Particulary, ancient Greek and Roman philosophy. Grapple with the originals, and not some weak "modern" versions. Don't try to "hack" philosophy, give the time it deserves.

As a more concrete pointer, in the past I wrote a list of high-quality English translations by scholars who have immersed themselves in these works here[1].

https://news.ycombinator.com/item?id=22990579
Nah it’s quite a bit easier than that: you’re violating the site guidelines.
Blip Cam: Self Hosted Live Image Captioning with Real-Time Video Stream
This is definitely an Android failing, in that case.
Not OP, but found this very helpful in my current situation. Thank you for sharing.
Yes - see the shady character behind the Hawk Tuah meme coin - son of some famous actor who was a judge on The Voice.
Do you have a link to his patent? You should be able to find it by his name.

But the hurdle today isn't in the physical sensing technology, it's how to detect an accurate signal from extremely noisy data.

Patents aren't the main blocker -- nobody has built this at all in a way that is accurate enough. And Apple has been trying hard, and they have nothing to do with Big Pharma.
Right but generally the organization with the CLA has moned and develapers and so can move faster than the old free fork and thus overwhelm it.

even if they don't have money today if someone with money wants to take over they are a target.
> A significant fraction of games today is actually written in C# (Unity) and most games don't need to push the hardware at all.

??? Unity is a C++ engine, C# is just used for scripting...
Fully Featured Invoicing Platform for Freelancers
In a world full of complex invoicing platforms that are designed for small businesses, what would you like to see in a platform dedicated to freelancers?

After years of using invoicing platforms that were either overly complex, cumbersome to use or just downright ugly and under featured. I decided to work on a platform that was built solely for Freelancers with only the features that we require. I’m close to finishing the platform but before I start to roll it I’m doing one last call out to my target audience for features that you’d love to see
Yeah, and you can send cookies in the websocket connection headers. This used to be a problem in some browsers iirc - they wouldn’t send cookies properly over websocket connection requests.

As a workaround in one project I wrote JavaScript code which manually sent cookies in the first websocket message from the client as soon as a connection opened. But I think this problem is now solved in all browsers.
More likely is a dollar per day for T2 and higher for T1. The differentiator will be non-invasiveness, not price.
Just like people shouldn't just buy industrial welding machines, SCUBA equipment or a parachute and "wing it" I think the same can be said here.

As a society we already have the structures setup: The author had been more than welcome to attend a course or a study programme in server administration that would prepare them to run their own server.

I myself even wouldn't venture into exposing a server to the internet to maintain it in my freetime, and that is with a post graduate degree in an engineering field and more than 20 years of experience.
The Engine: Jonathan Swift's satire on Language Models
What isn't clear (even to many experts) is that certain properties change the layout model entirely and that text has its own "pushing" box that contributes to sizing.
??? Where did all this come from?
Bundy apologists in the wild? Insane.
How were you able to make the transition?
I went to a bar in SF that had some graffiti all over it. One of the graffiti said "Itching to get out of Portland". I asked inside about it, and they said it's because at the time Portland had a bedbug infestation.
That's not because they become obsolete, it's because they're the rate-limiting step (bottleneck).
Stallman is old. Who will take over when he dies? What when thos people die? Sure you trust them today but do you trust them in 50 years?
China's Low-Productivity Innovation Drive: Evidence from Patents
> UK electricity cleanest ever in 2024, with record 58% from low-carbon sources

> Gas-fired power stations remained the UK’s single-largest source of electricity in 2024, generating some 88TWh (28%), just ahead of wind at 84TWh (26%).

The remaining sources of electricity in 2024 were nuclear (41TWh, 13%), biomass (40TWh, 13%), imports (33TWh, 11%) and solar (14TWh, 4%).

Wind + solar = 26% + 4% = 30%. Math is hard. /s
(A)GPL helps everyone proportionately, without distinguishing between the people being helped. MIT allows one person to try and capture the entire benefit.
You’re on social media right now fwiw
I hope you don't mind if I'll wait for the court verdict on whether it was the same intent or not. Courts usually give more substantiated verdicts with regard to intent when they review all the available evidence, which I assume you don't have (neither does the court at this stage).
Even before clicking, I already knew it would be in China.

It has been a while since the US or other western countries have done a major public infrastructure project (compared to what have been done before). The US especially is lagging behind. How long has it been since the high speed rail system was proposed? China built a national network in less time than the US took to argue about how to build just one line between its two hub cities...
The source footer ("View Page Source") summarizes it perfectly:

Sites that need HTTPS:
- all of them

If you like it, you better put a lock on it.

And, BTW, the website is as delightfully simple and unobtrusive as the one in the article.