skysight-inc/HackerNews huggingface dataset:
I'm a longtime rock climber and climbed a tower professionally back in another life. With most things, it's practice with the gear that builds trust in your system. I can do most anything at a height these days because I know that I'm safe; it lets me push that lizard brain feeling away. I similarly experienced this learning to SCUBA dive a few years ago - it's horrifying! But the more time spent doing the thing, practicing the systems, failure modes, etc... let me relax and enjoy the fish rather than freaking out that I'm 70' underwater.
The rules are written by the powerful to advantage the powerful. Once those advantages disappear, the rules must be rewritten or disregarded.
It has been successfully proven wrong so yes
> suppose there is a method of producing a data artifact which would be genuinely (and economically) useful, and which does not rely on taking in any copyrighted input, [...] It seems like it would make sense to want it to be economically incentivized to create such data artifacts of higher sizes [...] But maybe copyright isn’t the best way to do that? Idk.

Exactly. It would be patents, not copyright.
I was wondering that too - I don't think that's a ligature I've ever seen before.
News (especially national or global) is largely idle entertainment for middle class people, and comes with large servings of propaganda. Subscriptions/commerce are fine. Productivity stuff IME is almost all FOSS or paid for. Ads tend to optimize for the opposite of productivity: engagement.

Existing ad-free because the money comes from somewhere is the point. That somewhere is more ethical and prevents the conflicts of interest that make ad-based services inevitably worth their nominal price.

Some obvious very high value parts of the Internet with no monetization: government services and information, free educational materials from pre-school through graduate university and research level, basically all software I use, creative commons music, art, and CAD designs, forums and blogs where world experts like Terence Tao post, forums and blogs where hobbyists post.

If you look to the Internet for ways to improve your life, you'll find the associated resources (which I'd characterize as the high value parts of the Internet) generally have no ads. It should be obvious why.
Glass Buildings
There are enough scare quotes here that I can’t actually tell what you’re getting at.
most probably your employee actually 'paid' for their textbook.
I have now removed the post.
Yeah, basically the oil companies pumping up fossil fuel to burn, but we get a single use of it as plastic before it goes to the incinerator.
I was kind of wondering how something hadn't solve this at all, compared to a solution not readily being on one's path.
Executives should continue to be shot until morale improves.
You don't get to make baseless accusations against people and require them to entertain you with a response. They are not guilty of everything you can make up until they prove themselves innocent of each one. If you are going to accuse someone, you need to prove it - it's up to you. Otherwise, don't say it.

An far better approach is, ask; be curious. People have wildly different ideas than you. Here you cut all that off and reduce the world to the narrow range of what you can think of, and the even narrower range your expectations. The great advantage of talking to others is they have different ideas totally outside and independent of yours.

Baseless accusations are not ok, even if they are commonplace on social media. They are morally wrong. Bearing false witness is a sin. I don't want to be accused, to have this put on me; nobody does.
> The only change is now we say no to Japan teaching us to make better steel

Blame Cleveland-Cliffs [0] - Nippon Steel's Brazilian-owed competitor in Ohio.

> Lourenco Goncalves, CEO of steelmaker Cleveland-Cliffs (CLF.N) which made a failed $7 billion bid for U.S. Steel in August 2023, participated in at least nine calls assuring investors that President Joe Biden would scuttle the Nippon Steel merger months before he did so on Friday, according to summaries of investor calls included in a Dec. 17 letter from lawyers for Nippon Steel (5401.T) and U.S. Steel to the Committee on Foreign Investment in the U.S. (CFIUS) and confirmed to Reuters by two participants in the calls.

> “I can’t force U.S. Steel to sell to me, but I can work my magic to make a deal that I don’t agree with not to close," he told investors on a March 13 call hosted by JP Morgan, the letter quoted Goncalves as saying.

> While Goncalves made similar comments about the deal to analysts on three earnings calls this year, his private remarks made throughout 2024 about the deal process show the extent of his effort to cast doubt on Nippon's bid for U.S. Steel. His comments sometimes preceded drops in the U.S. Steel share price, Nippon Steel and U.S. Steel told CFIUS.

[0] - https://www.reuters.com/markets/deals/rival-ceo-spread-doubt...
yeah... he is definitely not trolling (/s?)
> But now we have to figure out how to structure that raw intelligence into actual useful thinking patterns.

My go-to framing is:

1. W've developed an amazing tool that extends a document. Any "intelligence" is in there.

2. Many uses begin with a document that resembles a movie-script conversation between a computer and a human, alternatively adding new lines (from a real human) and performing the extended lines that parse out as "Computer says."

3. This illusion is effective against homo sapiens, who are biologically and subconsciously primed to make and experience stories. We confuse the actor with the character with the scriptwriter.

Unfortunately, the illusion is so good that a lot of developers are having problems pulling themselves back to the real world too. It's as if we're trying to teach fashion-sense and embarrassment and empathy to a cloud which looks like a person, rather than changing how the cloudmaker machine works. (The latter also being more difficult and more expensive.)
I guess the author alludes to the paradox of tolerance first described by Karl Popper 1945 in The Open Society and Its Enemies.

Sometimes deterring punishment is the only thing that keeps people from abusing tolerance or freedom to destroy that tolerance and freedom, but it needs to stay a measure of last resort.
Haha - amazing. I've had the same thought, and I'm sure the scammers have too.
The question is, are current LLMs more like wooden biplanes or early passenger jets?

It feels like we are closet to the wooden biplane era, imo.
My brother in code, Hackernews is a blatant ad for YC, look at title bar. They just decided they could afford the subsidy to run it enough to be the sole supporter.

In general, its easiest to charge the wealthiest group with the greatest motivation to spend and that combination means in almost all cases corporations are better customers than individuals. Hence, advertising replacing subscription.

Additionally this why consumer internet is so hard to standup and SaaS feels so much easier to take from 0 to 1.
$50 is a common application fee for a rental apartment in a city in the US. I would imagine no one would be interested in paying $5k to apply to 100 jobs.
I have relatively recently taken steps towards Postgres from it's abiality to be at the center of so much until a project outgrows it.

In terms of not getting fired - Postgres is a lot more innovative than most databases, and the insinuation of IBM.

By innovative I mean uniquely putting in performance related items for the last 10-20 years.
This is one technology that I've been waiting for for over a decade. Apple apparently hasn't given up on it, despite working on it for 10+ years as well. I am hopeful it can be solved because diabetes is one of the biggest killers on Earth today.
I don’t really think it matters because you can just compare the output to the input and apply the same standard, treating the process between the two as a black box.
Er, what? I'm speaking directly from the law, 17 U.S.C. § 107. It's deliberately written in terms of "factors to consider", rather than absolutes.

> In determining whether the use made of a work in any particular case is a fair use the factors to be considered shall include:

> * the purpose and character of the use, including whether such use is of a commercial nature or is for nonprofit educational purposes;

> * the nature of the copyrighted work;

> * the amount and substantiality of the portion used in relation to the copyrighted work as a whole; and

> * the effect of the use upon the potential market for or value of the copyrighted work.
Related:

Getting Started with Axum – Rust's Most Popular Web Framework - https://news.ycombinator.com/item?id=38545341 - Dec 2023 (25 comments)

Axum 0.7.0 - https://news.ycombinator.com/item?id=38432225 - Nov 2023 (1 comment)

Migrating from Warp to Axum - https://news.ycombinator.com/item?id=33718765 - Nov 2022 (75 comments)

Show HN: Axum web framework for Rust – a demo tutorial - https://news.ycombinator.com/item?id=30615288 - March 2022 (1 comment)
Ask HN: MIT License, but you can't sue me later
Basically I'm working on a small game, and I really want to open source the code.

It's basically a framework/prototype that others can build upon.

I was thinking MIT, but I want to avoid the following.

MIT Base Game Exists.

Developer A creates a derivative.
Developer B creates a derivative.

Developer B thinks A's game is a bit too similar and decides to sue.

How can I license my project without this possibility.

I think Apache says you can't sue the original authors without losing your own rights to lose the code.

Another option is GPL, but I don't want to stop commercial usage or force other developers into contributing back.
I wonder if people only look for solutions in their language when a tech like websockets is language independent.
ok, how compiling this?
Why can wrote Makefile?
> It's lossy compression, the same way a JPEG might be

Compression yes, but this is co-mingling as well. The entire corpus is compressed together, which identifies common patterns, and in the model they are essentially now overlapping.

The original document is represented statistically in the final model, but you’ve lost the ability to extract it closely. Instead you gain the ability to generate something statistically similar to a large number of original documents that are related or are structurally similar.

I’m just commenting, not disputing any argument about fair use.
If it guaranteed that you got a phone screen, I imagine a lot of SWEs would take that deal.
USB-C cables are standardized. Nearly everything will charge with standard cable and charger.

There is a problem with the cheap devices that will only charge from USB-A chargers not USB-C. The reason is that they don't spend the cents for USB-C charging chip or the resistors to signal that support legacy USB mode to USB-C charger. The problem isn't the cable or charger, the device is defective.
Advertising is a virus. It infiltrates all ecosystems.
iOS 18 really screwed up my phone. Never had this issue with safari before then.
Rescuing My Feeds from QuiteRss
I imagine it's also a bit difficult to separate it this cleanly, as most bigger projects will probably use a mix of technologies: cut and cover where possible (if it leads to savings), TBMs or other technologies like NATM (https://en.wikipedia.org/wiki/New_Austrian_tunneling_method) for the rest. Even if TBMs are used for the tunnels, cut and cover will probably be used for things like stations, emergency access points and intermediate TBM starting points (of course, the TBM starting points might be future stations).
this research actually demonstrates that AI will reduce the phishing threat long-term, not increase it. Yes, the 50x cost reduction is scary, but it also completely commoditizes the attack vector.
Technologically, email aliases have been working wonders for me in personal use. No idea if it could be rolled out effectively for nontechnical users at an organizational scale though, even with automation.

It also does little against compromised mailboxes - heck, a sufficiently advanced spear fish might even have better chances if the user misunderstands the security improvements this would provide.

But I think other than this, there's not much else to fix. Some people are malicious, others get compromised. No fixing that.
I've always been into vintage Mercedes-Benz cars.

A talented and wonderfully jovial mechanic ran a specialist workshop east of Johannesburg, in Brakpan (South Africa).

For a long time he had a Mercedes 600 - similar to the linked video but with the M100 engine naturally-aspirated as standard - in the shop.

That particular car, finished in a cream colour, belonged to Ian Smith (1919-2007), the last colonial prime minister of Rhodesia before it became Zimbabwe.

I got to spend a lot of time with the car, including several drives in it, and especially seeing the mechanical bits exposed including the ridiculously cool (silent, powerful) hydraulics that operated every convenience of this car, from power windows to power back seat.

While a Mercedes 600 indeed screams "head of state" or "pope" it gets my vote for the all-time, no-holds-barred, most opulent and classy car of all time with absolutely nothing kitsch or gangsta about it.

A true high point of what Mercedes-Benz once was.

And don't get me started on it's little brother, the W109 300SEL 6.3, of which there was a lovely example in the shop for a few months as well. It drove and operated perfectly, I had the most amazing solo test drive in that car, taking it to 200km/h.

This was in 2003, and the 300SEL 6.3 was for sale for $3,000 and Ian Smith's 600 was about $12,000.

God if only I had the money then! I wonder where both of those rarities, sitting in a small workshop in the East Rand in South Africa, ended up at. Probably exported to Europe or the USA.

Anyway, just wanted to share that small anecdote.

P.S. The Chrome, Leather, and craftsmanship of a Mercedes 600 is far beyond any Rolls or Bentley, of that or any other period. And Mercedes vehicles of that era were made to last decades and hundreds of thousands of miles down to every detail including all the rubber parts. The disposable garbage churned out in the 21st century simply fuel man's insane behaviour to constantly buy, consume, discard.

There was a time when cars were made for a different modality.
As someone who has lived with a chronic lifelong condition since childhood, I know this struggle deeply.

The only time I have had success is connecting with executives at the insurer on linkedin ( I work in medtech so that makes that easier) and then personally appealing to them, repeatedly, to help.

Also, in every case, please report these things to the insurance boards in your state, your representatives, etc.

Make it a process, get good at it. It's the only way to effect change.
@namanyayg
Thanks for posting this, OP. I created a prompt series based on this and so far I like the results. Here is the repo if you are interested.

https://github.com/jimmc414/better_code_analysis_prompts_for...

I used this tool to flatten the example repo and PRs into text:

https://github.com/jimmc414/1filellm
I'd also argue that the US establishment's goal is to spread capitalism (that favors US capital), not democracy.
To anyone reading this, the free version works well also.
> think they mostly interpret NAT as a security mechanism because that's what it originally was; "NAT" was a species of firewall

That’s simply wrong. NAT is, and always has been for the sole purpose of Network Address Translation, I.e. allowing a large IP address space to hide behind a much smaller IP address space (usually a single IP address), for the purpose of mitigating IP address exhaustion.

NATs were meant to be a stop gap solution between IPv4 running out, and the rollout of IPv6. But we all know how that panned out.

The “firewall” like aspects of a NAT are purely incidental. The only reason why a NAT “blocks” unsolicited inbound traffic is because it literally has no idea where to send that traffic, and /dev/null is the only sensible place to direct what’s effectively noise from the NATs perspective.

The fact that NATs shares many of basic building blocks as a very simple stateful firewall is just a consequence of both NATs and firewalls being nothing more than stateful packet routing devices. The same way any standard network switch is (they internally keep a mapping of IP to MAC address of connected devices based of ARP packets, which incidentally blocks certain types of address spoofing, but nobody calls a network switch a firewall).
I finally took the time this weekend to get the family switched over to using NextDNS. I use uBlock Origin on my laptop but it's nice to have something for mobile too. I've been getting heated when my partner hands me her phone to show me a recipe and it's completely covered in ads.
I used to live in a rust-belt steel town. My knowledge is cursory except for my lived reality of my town being economically depressed by poor management of steel production facilities.

US Steel mostly focuses on commodity steel.

Nippon Steel has a wider portfolio focusing on higher-end specialty steel.

Commodity steel producers like US Steel (they acquired the main steel company in my town) generally play on lower end of the market, and have not invested adequately in technology or modernization. They are not able to make specialty steel because they have not made those kinds of investments. Instead they have chosen to languish with low productivity practices, so they're being outcompeted by foreign companies who are now able to make the same quality of steel but cheaper. They used to laugh at foreign steel companies because of the trash steel they made, but they laughed a bit too long and didn't realize that foreign steel gradually got better year over year. I saw this hubris play out first hand in my town.

My town also has another steel maker, a specialty one. This one was smaller but chose to invest in automation and modern technology, and also on producing new types of high-value steel for specialty applications. They had a profit-sharing scheme and had loyal employees who did not reject automation or modernization, but instead had a growth mindset. They remain competitive today.

This is capitalism's creative destruction playing out, and companies like US Steel that refuse to adapt find themselves outcompeted by more productive players.

The Nippon Steel takeover, even if it had succeeded, might have been too late.
With fastly stopping df last year and cloudflare a while before that it seems like tor/snowflake options are dwindling fast
What defines a successful spear phishing? Is it just clicking a link?

My process when I see a sketchy email is to hover over the links to see the domain. Phishing links are obvious to anyone who understands how URLs and DNS works.

But working for a typical enterprise, all links are “helpfully” rewritten to some dumbass phishing detection service, so I can no longer do this.

At my current company I got what I assumed was a phishing email, I hovered over the links, saw they were pointing to some dipshit outlook phishing detection domain, and decided “what the hell, may as well click… may as well see if this phishing detection flags it” [0]…

… and it turns out it was not only not legit, but it was an internal phishing test email to see whether I’d “fall for” a phishing link.

Note that the test didn’t check if I’d, say, enter my credentials into a fraudulent website. It considered me to have failed if I merely clicked a link. A link to our internal phishing detection service because of course I’m not trusted to see the actual link itself (because I’d use that to check the DNS name.)

I guess the threat model is that these phishers have a zero-day browser vulnerability (worth millions on auction sites) and that I’d be instantly owned the moment I clicked an outlook phishing service link, so I failed that.

Also note that this was a “spear phishing” email, so it looked like any normal internal company email (in this case to a confluence page) and had my name on it. So given that it looks nearly identical to other corporate emails, and that you can’t actually see the links (they’re all rewritten), the takeaway is that you simply cannot use email to click links, ever, in a modern company with typical infosec standards. Ever ever. Zero exceptions.

- [0] My threat model doesn’t include “malware installed the moment I click a link, on an up to date browser”, because I don’t believe spear phishers have those sort of vulnerabilities available to burn, given the millions of dollars that costs.
Even assuming you’re right in principle, there’s a basic problem here: ads have value (to the advertiser, to the network, to the site showing them, and potentially to the user). And ads have costs paid by the parties other than the user (lots of money changes hands and some compute may be incurred, too), and that’s fine, and the parties in control are strongly motivated to control those costs. But there are also costs that are effectively externalities as far as the companies involved are concerned, and those are bandwidth, battery usage, and degradation of the user experience.

So if anyone wants to seriously call the modern ad system a benefit to the user, then those externalities should be controlled. Either the actual bandwidth costs should be accounted as losses to the user, or the advertiser should be forced to pay those costs. And I bet that ads would start using far less bandwidth with no change in appearance if the advertisers started caring.
* wants the publicity from being the president to ban them
lol "deeptech"
It's not UDP but I do TCP hole punching here: https://github.com/robertsdotpm/p2pd and every other major method of NAT traversal.

It's written in Python. Though its not based on using the default interface like most networking code. I wanted the possibility to be able to run services across whatever interfaces you like. Allowing for much more diverse and useful things to be built. Its mostly based on standard library modules. I hate C extension crap as it always breaks packages cross-platform.
I'm new to websockets, please forgive my ignorance — how is sending some "heartbeat" data over long polling different from the ping/pong mechanism in websockets?

I mean, in both cases, it's a TCP connection over (eg) port 443 that's being kept open, right? Intermediaries can't snoop the data if its SSL, so all they know is "has some data been sent recently?" Why would they kill long-polling sessions after 10sec and not web socket ones?
The relying party usually doesn't care about big tech, they just want to put the easiest method in front of the user. Passkeys mays don't need to be the original invention of lock in to be used in a way as to cause more of it.
The way I see it: if your service forces me to watch ads or pay for a subscription, then I have two choices: either I watch the ads (probably not) or pay for the subscription (slightly more likely but it really depends), or I simply don't use your service. For the most part, I have gone with option #2 in the majority of cases so far.

I have no bad conscience whatsoever to use an adblocker. Heck, I get eye cancer every time I have sit in front of somebody's webbrowser who does not have an adblocker installed.

Even though I use the internet quite a bit as we all do, if the free internet were to go away tomorrow, I'd probably find something else to do with my time.
a simple docker run --memory=512m --cpus=1 could have at least limited the damage here.