skysight-inc/HackerNews huggingface dataset:
> E9 errata made me junk the RP2350 for projects where I needed to interface with any kind of tri-state logic

Do whatever floats your boat; the rest of us just uses the documented work-around [1], i.e. either use internal pull-up or an external pull-down resistor on the bus. Note that while tri-state devices are common, it is rarely a good idea to leave a bus line floating.

As for the OTP security retrieval: high security projects, e.g. 2nd factor authorization fobs seem to be out, bummer. Another important use case I'd think are small market specialized devices for which the manufacturer wants to delay the
distribution of intellectual property, e.g. by encrypting part of the code. For that the functionality seems still sufficient.

[1] https://datasheets.raspberrypi.com/rp2350/rp2350-datasheet.p...
I always have to define 'external: true' at the network. Which I don't do with databases. I link it to an internal network, shared with application. You can do the same with your web application, thereby only needing auth on reverse proxy. Then you use whitelisting on that port, or you use a VPN. But I also always use a firewall where OCI daemon does not have root access on.
Slow and steady progress. They’re just about to go big in Vegas, with tunnels the length of the strip.
I guess that depends where you order from. You can get some crazy machines from Alibaba/Aliexpress and the “documentation” they come with is usually… well it leaves a lot to be desired.
> they built the community of Matrix and Element around a promise of openness but specifically chose a license to make it another Discord or Slack

This is really unhelpfully inaccurate.

Matrix is as open as ever - and run by the vendor-neutral non-profit Matrix.org Foundation these days. Code published by matrix.org is all Apache licensed.

Element shifted the development of most of the stuff it implements as a Matrix vendor to AGPL+CLA in order to fund FOSS Matrix dev by selling AGPL exceptions to organisations which are allergic to AGPL. We also explicitly put a clause on the CLA spelling out that any contributions under CLA will remain OSI-licensed FOSS for as long as Element is around to release them. Speaking as Element's CEO, if we hadn't switched to AGPL+CLA, we would not have been able to make Element a sustainable organisation (i.e. able to pay the salaries of its developers) - and even then Element isn't quite at break-even yet.

If you can't tell the difference between a proprietary, non-standard-based stack like Discord or Slack and a FOSS, open-standard-based system like Element+Matrix, then I'm not sure you are arguing in good faith here (and it's incredibly depressing to see disinformation spread against Element, given the 10 years we've spent trying to build a good open-standard FOSS solution).
China also still has huge rivers it can do this with. Where would we bulld a dam like this in North America? I suppose Northern Canada has undeveloped rivers but not this big.

We could I suppose displace tens of millions of people and dam the Mississippi and the Ohio and power a good chunk of the Midwest but we have human rights. I’d rather us build nuclear, wind, solar, and batteries.
Where is the rest of the exploded ship, in that case?
I wonder if he was trying to resell your laptop and wasn't going to pay until he got an order for your laptop
Great collection. I can dive into content like this all day, everyday.
> You are more likely to get late to work because your alarm run out of battery :-)

Or because you spend precious sleep time on pointless comments online...
Google: chips act and dei.
Either you run a VM inside the VM or indeed two VMs. Jumphost does not require a lot of resources.

The problem here is the user does not understand that exposing 8080 on external network means it is reachable by everyone. If you use an internal network between database and application, cache and application, application and reverse proxy, and put proper auth on reverse proxy, you're good to go. Guides do suggest this. They even explain LE for reverse proxy.
The existential threat against C++ – NDC TechTown 2024 [video]
Interesting that the following wiki has been updated with this paper:

https://en.wikipedia.org/wiki/Inhomogeneous_cosmology
Google research scientist died unexpectedly, leaving a last note two months ago
That's an assignment, not an explanation.
A Strong Correspondance Between Bayesian Networks and Linear Logic Proof-Nets
SpaceX notwithstanding, it's pretty common for orbital rockets to "neck down" for upper stages.
Also, if you’re running SSH on a non-standard port, block Censys’ IP ranges. They port scan the entire internet constantly and bad actors use their scans to target their attacks. Once I did that, the number of attempted SSH logins went to zero pretty quickly.
Traditional weather forecasting is slow and expensive
I cant believe ebay hasnt been disrupted yet...
Rise of AI and loneliness drives demand for robot pets
aider.chat has an /architect mode where you can discuss the architecture first and later ask it to execute the architectural decisions

works pretty well, especially because you can use a more capable model for architecting and a cheaper one to code
No such term exists in Newton’s laws. If a particle accelerates, it must be because of a force acting on it. Not something “like an inertia for forces,” but an actual, physical force.

Two forces act on this particle, but they sum to zero. If you claim the particle begins to move from zero velocity, then either those two forces don’t sum to zero, or there’s a third force. But they do and there isn’t.
Yes, ship offset from touch point was an intentional 2024 change. In the 2004 version, touch screens used a stylus, which were thin enough that you could see whatever you were touching, so the player's ship was centered on the stylus point of contact. With a finger, it's much harder to see...

For Safari, I ended up having to investigate a crash on iOS Safari specifically, because it did not happen on Mac Safari.

I considered itch.io but I am still undecided on the whole affair.
> I wonder about the river barriers. I buy that the ocean buoys aren’t effective, but it seems like plastic would be a lot more concentrated in the rivers that feed it into the ocean, and the rivers themselves are a lot shallower. I would be interested in reading an expert opinion on whether those make sense.

What is it that you're wondering about exactly? The article mentions and explains the progress of the "plastics in rivers blocking" that they're doing, in the "PREVENTING PLASTIC AT ITS SOURCE" section.

> Our mission goes beyond cleaning the oceans; we also work to stop plastic from entering waterways in the first place.
Electric Thrusters Are Revolutionizing Space Exploration
NaNoWriMo's AI Blunder
[dupe] https://news.ycombinator.com/item?id=42598936
Very cool, I hope this will continue on and maybe get popular again.
While I understand your perspective, I don't follow the vindication. Viral marketing is a marketing strategy, it is taught in marketing classes. Isn't it naive to believe everything you see on the internet?
I think the river barriers are certainly the most effective in terms of waste reduction per dollar, it’s just a question of optics— to Joe Public, the idea of only working on slowing the flow of new waste sounds too much like we’re declaring bankruptcy on what is already in the open ocean.
> our largest customer who made up 70% of our revenue insisted on the code being put in escrow

> then they hired me as a contractor for them using the code they now had access to

Did you live in the same city? Or did you work remote?

Did they want to meet you in person first, before the escrow agreement?

Maybe that can be an addition to your answer: Start with big companies close to where you live?
These are projects the world needs more of.
Most of it is just boring old upkeep and maintenance.
What they are saying is that social media norms do not reflect social norms, thus they are false norms.
I don't think that's true though. The right doesn't vilify in quite the same way as the left has historically done. They're certainly starting to learn to.
I think the problem is that in the US they cost as much as a "real" megaproject in China cost.
Unfortunately it seems that in many places, that's pretty much what they're doing instead of doing any actual recycling. If you collect more than you're capable of processing, you inevitably just end up with an ever growing TO-DO pile.

The sad thing is, if you pretend to recycle instead of actually recycling, you're just a landfill operator. And landfills can be run profitably.
Your last sentence is confusing, as you seem to understand the nature of online dogma wars and are then surprised by their natural conclusion.
Poetry 2.0.0
How many people will have to be fatally injured before international laws put seriously painful financial fines on companies dropping crap from space? Or will my fantasy come true that all roads, infrastructure, homes and businesses move underground?
I don’t think the CO (technically it would’ve been OIC, as at the time we were not yet commissioned) ever found out. The Engineering Duty Petty Officer lost his mind when he did a log review around 03:00, and then later in the morning, I got a talking-to from various leadership.

The fact that I was fresh out of “A” School and a non-qual probably helped. Nub shields are real.
> I agree. This seems like they treating symptoms of the problem than the actual cause.

How do you agree with something when you don't even take 2 minutes to read a bit more, especially about what you're complaining about? They're not only trying to pick up plastics in the ocean, but also stop plastic from going from the rivers that flow into the oceans, and preventing plastic from entering the rivers in the first place.
That approximation is only used in the USA, Liberia, and Myanmar tho. In the rest of the world, we use the metric maritime approximation,

π * φ km = e nm
Got a link for this?
I am interested :-)
This is interesting. I realized some part of me would think I failed if I only had a couple paying customers after a launch. Helpful to rethink things.
This is to go through NAT, which are devices designed to work around the rarefaction of IPv4 addresses.

Firewalling is a different concept, but since you raise that issue of connectivity wrt. security, I have to say that what makes /me/ sad and anxious is to see how internet security has always been hinging on bloquing paquets based on the destination port.

Doing what's easy rather than what's correct, exemplified and labelled "professional solutions"...
Previously (includes informed critique of the paper): https://news.ycombinator.com/item?id=42495703
I'd feel a lot better with customer-centric privacy protections around the collector and storer, a la HIPAA.

Instead of regulating only some of the uses.

HHS already had to administratively extend to cover gaps (we'll see how that goes, post-Chevron) and Congress attempted to repeal it for workplace purposes in 2017.

And there's still the gray market question about 23andme -> Equifax-alike packaging it into a blended proprietary risk score -> insurance companies using that (of course 'without knowing that genetic information was included').
Seeing Austin’s Project Connect on there makes this list suspect, to me. It was an approved item on the ballot several years ago, but it was challenged by the state government and last I read had been substantially pared down from its already modest goals. Even in the original plan, it was “just” a relatively small number of train lines around the city, with one stretch of subway through downtown, if I recall correctly.
Many apologies, I didn't mean to be pedantic, only informative.

I did get the point you are making, but I wasn't sure what to say about it so I didn't say anything. Let me give it a go now. The problem with Turing completeness is that you don't know whether you'll need it until you do. There are non-Turing complete languages around of course, like e.g. HTML (far as I can tell). You can do quite a lot with HTML but, for example, you can't really define business logic.

In logic programming (Prolog is a logic programming language) there have been some efforts to eliminate the non-termination of recursion in Prolog while retaining the good parts of the logic-based and declarative paradigm. The result is languages like Datalog and Answer Set Programing (unfortunately abbreviated as ASP; long before ASP.Net though), which certainly have their place and certainly let you define complex behaviour, including recursive procedures. On the other hand, both languages don't let you use lists. You know, lists: [1,2,3]. Lists are recursive data structures and without the possibility of unbounded recursion- you can only have fixed-length lists. People in the ASP community know how to simulate lists by essentially breaking them up in single elements and having some code that looks for the next element, but that's a clunky, hacky, and incomplete notation that just goes to show what a mess one makes when one tries to make something better by making it worse. I'm afraid that's a pattern that applies to much more than logic programming and trying to make programming languages safe by making it impossible to write non-terminating code, will only do the same thing.

Non-termination is by no means something you get only with recursion of course. I like to say this story at length but I'll spare you the details: I was working in a C# shop and one bug that brought the company servers down (that was before the cloud) was caused by a foreach loop with a faulty condition. There was a talk about all that "upstairs". It was put to the suits that it is impossible to guarantee that an iterative loop will terminate, and the decision was made to... use recursion instead. In C#. Obviously that was completely ignored by everyone. That goes to show... something. But mainly that you can jolly well make a mess with unbounded iteration, as with unbounded recursion.

So in general I think what you say sounds good on paper but it won't work in practice. It's a bit like asking why can't we have a campfire that won't burn your marshamallows. Well because fire burns and that's the whole point. The undecidability of Turing-complete languages is not an academic curiosity. It's a direct result of the power of computers. You can remove the undecidability bu then you've taken away the power.
You can extend that to stories people tell and images they portray in real life.
I want to use Podman but I keep reading the team feels podman-compose to be some crappy workaround they don’t really want to keep.

This is daunting because:

Take 50 random popular open source self-hostable solutions and the instructions are invariably: normal bare installation or docker compose.

So what’s the ideal setup when using podman? Use compose anyway and hope it won’t be deprecated, or use SystemD as Podman suggests as a replacement for Compose?
A lot of people comment about Docker firewall issues. But it still doesn't answer how an exposed postgres instance leads to arbitrary code execution.

My guess is that the attacker figured out or used the default password for the superuser. A quick lookup reveals that a pg superuser can create extension and run some system commands.

I think the takeaway here is that the pg image should autogenerate a strong password or not start unless the user defines a strong one. Currently it just runs with "postgres" as the default username and password.
Hello, is there an obituary?
It’s worrying when you get downvoted on HN for telling the truth [1]

[1] https://theguardian.com/sport/2022/oct/05/buffalo-bills-new-...

The way things are going I fear the day will come you’ll get downvoted for saying the earth is round or that men walked on the moon.
From 2018, and seemingly very outdated. They're not just trawling the open ocean for plastics anymore, which is the base premise of the comment.
You should look into Firefox with the extension Dark Reader, it results in 99.95%* of the web being readable once more without relying on web devs to offer dark mode.

*with the odd exception.

-older crankier, probably.

Edit: Ahhhhhhh I'm blind!! HN is bright white without the extension. How are you even here?!
> You mean relaxing

Fair enough, at high redshift the cosmological principle could still hold under timescape. (It doesn't require, it however.)

All that said, I'm generally sceptical about findings based on supernova data. They require so much statistical work to interpret correctly that the error rate on first publications is remarkably high.
You should try swarm. It solves a lot of challenges that you would otherwise have while running production services with compose. I built rove.dev to trivialize setup and deployments over SSH.
The trouble is, darklaga.bin will not work locally because it must be fetched over an HTTP(S) connection. So, there's a darklaga.local.html provided when running locally. The build sequence is "npm run pack" then "npm run build", after which darklaga.local.html should work.
> Its like http

and for the same reason: both were initialy designed to be simple...
Related:

Bye, Felix Hill

https://news.ycombinator.com/item?id=42587131
Luckily there’s an easy fix, enabling JavaScript like a regular human being :p Honestly curious though, do you generally browse the web without JavaScript?
For all intents and purposes, the only ports you should ever forward are ones that are explicitly designed for being public facing, like TLS, HTTP, and SSH. All other ports should be closed. If you’re ever reaching for DMZ, port forwarding, etc., think long and hard about what you’re doing. This is a perfect problem for Tailscale or WireGuard. You want a remote database? Tailscale.

I even get a weird feeling these days with SSH listening on a public interface. A database server, even with a good password/ACLs, just isn’t a great safe idea unless you can truly keep on top of all security patches.
This looks very interesting, however it seems to me like the critical piece of this technique is missing from the post: the implementations of getFileContext() and shouldStartNewGroup().

Am I the one missing something here?
There are a lot of vulnerability categories. Memory unsafety is the origin of some of them, but not all.

You could write a similar rant about any development stack and all your rants would be 100% unrelated with your point: never expose a home-hosted service to the internet unless you seriously know your shit.
1. Is any person any less morally responsible for their decision when they work for the company or when they work as individuals. My answer is no. There is only legal and company branding decision, not moral ones.

2. Should companies and actions of their executives be treated as amoral (not having moral factor in their decision) or moral as a starting point. I think amoral.

3. Does anyone think that value statements from companies convey actual intentions? If not, why to always treat as PR and not talking points.
Can anyone explain that resize_to_320.tflite file? Surely they aren't using an AI model to resize images? Right?
People really don't want to admit them being separate people. This guy just basically adopted all of Elon mannerisms, beliefs and interests to get attention. He "slips" up sometimes on purpose to keep the ambiguity but the real tell is he spends hours every day talking while Elon is appearing in other places, like on NYE you could listen to Adrian while seeing Elon and X at Trumps party in mar-a-lago.

Musk has had some cringe alts but Adrian is not one of them, he tolerates him because he's a massive fan who always has his back and he likes the attention all the speculation gets.
Big Dig also used ground freezing.
https://babelniche.com/2024/01/17/innovations-of-the-big-dig...

And the Erie Canal dig the sections through swampy ground in the winter. That was partially to avoid Malaria. Circa 1825
It is naive, yet it is still read, believed and scored (and score gives it more trust). The medium still seems trustworthy but the individuals within it are not. And as the internet has progressed, the percentage of trustworthiness has slipped, but can also not be intuited directly from the medium as there are no signals that have meaningfully changed in the medium.

Only anecdotes from outside the medium can inform us to be less naive. Or doing an analysis which takes effort, skill, and time per-person
In the UK, we are tending towards separating the FNO (fiber network owner) and the ISP. The larger FNO's will provide wholesale access to multiple ISP's. There are some smaller operators that are both FNO and ISP, but I am not aware of any provider that combines the ONT and CPE, so they could wholesale without having to replace hardware.
podman rootless running services with quadlet is not a bad start.
Higher daily step counts associated with fewer depressive symptoms
> on a team you like

I cannot over-stress how important this is.

Being on a bad team will drain you fast, no matter how interesting the work is.

Meanwhile, churning out widgets is something you can do if you enjoy the people you're doing it next to.
I had the exact experience selling an iMac on eBay about 10 years ago. Buyer clicked buy it now, my listing was removed, they never paid. They deleted their account shortly after (it was some .ru email address.) eBay had nothing to say other than “try again after X weeks”. Why, so it can just happen again? They admitted they have zero protection against it.

I deleted my account and sold it on Amazon instead. How anyone puts up with eBay I have no idea.
You’re right, this was used to great effect in Castle Wolfenstein - where the guards would shout “Achtung” in German.

If you accessed (either read or write) memory address $c030 it would move the cone of the speaker in or out. Do it fast and you can create tones and voices.
Consider a lathe. It's a machine tool that "wants" to kill you. Machinists can use them for entire careers because the risks are well understood and a culture of safety is enforced in the workplace. The main task is to keep yourself and any dangling bits out of it's reach.

A useful home robot needs to have about the same level of force available to complete tasks. The range of side effects is unlimited, and there is no culture of safety, and there are kids and pets in the mix. You're just asking for trouble that really can't be avoided through technical means.
> Keep in mind that AI models [...] are considered intellectual property

Is it ironic or missing a /s? I can't really tell here.
I don't think any of the methods give any significant advantage since in the end you need to maintain a connection per each client. The difference between the methods boils down to complexity of implementation and reliability.

If you want to reduce server load then you'd have to sacrifice responsiveness, e.g. you perform short polls at certain intervals, say 10s.
There is a third option: enable the Docker socket and use Docker Compose as usual.

https://github.com/containers/podman/blob/main/docs/tutorial...
Olympians turn to OnlyFans to fund dreams due to 'broken' finance system (2024)
“ Keep in mind that AI models, like most things, are considered intellectual property. Before using or modifying any extracted models, you need the explicit permission of their owner.”

That’s not true, is it? It would be a copyright violation to distribute an extracted model, but you can do what you want with it yourself.
You might actually be on to something here...
Reading between the lines, it sounds like they are creating an AI product for more than just their own codebase. If this is the case, they'd probably be keeping a lot of the secret sauce hidden.

More broadly, it's nowadays almost impossible to find what worked for other people in terms of prompting and using LLMs for various tasks within an AI product. Everyone guards this information religiously as a moat. A few open source projects are everything you have if you want to get a jumpstart on how an LLM-based system is productized.
Sugoi! I imagine this approach would be very useful in learning any other language, too.
But on the bright side, we may not stay uniplanetary either!