skysight-inc/HackerNews huggingface dataset:
This is problematic though, isn't it?

It's effectively mass subsidization for bad behavior at the expense of people who are altruistic. I don't see how it can be a winning strategy in the long run.

For just a second, let's set aside our hopes and idealism, because I do realize how distasteful this world view may be.

If the best hope for the environment is that altruistic people suffer a disadvantage so that everyone (including defectors who don't want to help anyone and only help themselves) can win, how is that not a strong long term advantage for anti-social behavior?

"Great, don't take that plane ride, stop burning fossil fuels. More for me until we run out! I can even afford to have more kids because I don't care how impactful they are, while you responsibly go extinct."

Feels like a losing battle, and not a fun way to lose either. I suspect that we all know, despite our hopes, that eight billion people will not decide to collectively give up their own happiness for the betterment of billions of strangers they aren't related to.
I guess most Node.js developers also don't realize that there's "node:fs/promises" so you don't have to use callbacks or manually wrap functions from "node:fs" with util.promisify(). Doesn't mean need to stick with old patterns forever.

When I said 'in the context of Node.js' I meant if you are in a JS module where you already import other node: modules, ie. when it's clear that code runs in a Node.js runtime and not in a browser. Of course when you are writing code that's supposed to be portable, don't use it. Or don't use setTimeout at all because it's not guaranteed to be available in all runtimes - it's not part of the ECMA-262 language specification after all.
This would not be meaningfully addressed by namespaces, since there's no authoritative, authenticated unique name system across indices. Two separate indices can (and will, based on what ecosystems like piwheels do[1]) advertise `foo/*`-namespaced packages, leaving installers where they are today.

(I think namespacing is a good idea regardless, if only because it eliminates artificial scarcity in a one-level namespace.)

[1]: https://www.piwheels.org/
I am not sure about that particular car but some cars have a electrically switched valve on the power steering pump which lowers the pressure for higher speed travel (less responsive).
You may be able to get "some" control just by disconnecting this (assuming it is there, my 93 Mazda 626 had one).
... except for where you aren't wanting to replace.
You mean other than the reduced risk of compromise from the latest js engine exploit? Or that it also prevents some xss injection? Or that often many sites will still function with most external scripts disabled, i.e. it disables spyware that many sites don't need to install, but still do?

Besides all of that, it makes the web more usable in most cases. Not more functional, more usable. I don't want your site to hijack my browser scroll, nor do I want your modal popups to interrupt me. Plus, I like knowing the level of competency of the site's developers. If it doesn't function at all without enabling a half dozen external scripts/sites, even if I still want to use your site. Which is then unlikely, I know to lower my expectations about how much I can trust you or your site.
They don't have to accept the contribution if they think it's not worth it. If they think it's worth something, they can pay for it.
Sorry to hijack the thread. If I wanted to use my garden to plant things, where should I start and learn? Does anyone have any good resources for this?

I'm not very good with my hands and don't know anything about plants. I'd love to grow some vegetables and/or fruits as they seem to be the most useful for me.
> Restricting arbitrary downloads from curl, wget or bash (or better, any binary) makes these attacks pretty much useless.

Any advice what that looks like for a docker container? My border firewall isn't going to know what binary made the request, and I'm not aware of per-process restrictions of that kind
Mercedes Benzomino and El Benzo: The W100 Pick-Up Trucks
Also consider that every company has their existing roadmap. Getting the work scheduled can be difficult.
That's a pretty one-way relationship though. Australia and China are literally thousands of miles away from each other, but China is still important to Australia because all the continental landmasses are far from Australia.
> Why can't we have the same for desktop?

Morally? No reason why, and people are working on it (slowly).

Practically? Because sandboxing breaks lots of things that users and developers like, such as file picking (I hate snaps), and it takes time to reimplement them in a sandbox in the way that people expect them to work. If it requires the developers' cooperation, then it's even slower, because developers have enough APIs to learn as it is.
The child is in more danger from medications during the process of brain development.

Thats why their are different prescribing protocols for adults and children and why pregnant women do not take any drugs because they can damage the developing fetal brain.

Neuroplasticity refers to the ability of the brain to reorganize and modify its neural connections in response to environmental stimuli, experience, learning, injury, and disease processes. NOT taking while DRUGS,

Neuroplasticity refers to changes in brain structure and function throughout the entire lifespan of a human being.

damage the brain when a child is young and it is damaged for life.
As a home-grown Texan--Exactly this.

Boot-cut and baby boot-cut jeans are required for proper boot wearing.
... Because if he did this with a model that's not open that's sure going to keep everyone happy and not result in lawsuit(s)...

The same method/strategy applies to closed tools and models too, although you should probably be careful if you've handed over a credit card for a decryption key to a service and try this ;)
diet

a busy mind aint cheap to feed

and if he is physical,ie: will do grueling work to
achive an objective, then double down on the food

nothing wrong with the ocasional ""meat" coma"

food coma

the simple comfort of satiation

your proof, is that if he does not get fat, just bigger, stronger, faster, happier

many an ox, has gotten through school just fine,
and wised up latter
Whatever the reason. “But it has a USB-C port”.
Apollo patches would require new strands of wire, and then literally woven through the proper rings. There was no git push and no CI/CD available.
You clearly come from a country without a social safety net. Most people never make it to the olympics much less professional sports. So all the people who don't make it die? No they transition into other industries.Trying and failing is much better than never trying at all. Long live the dreamers and artists.
>and not apply anywhere near the same enforcement to the Chinese company

About two years ago China imposed regulations on its own tech sector so strict that it killed the entire "ed-tech" sector overnight and wiped out a decent chunk of the country's tech market value. What other country has done this to its own companies?

The US has slapped a 100% tariff on cars, bans on Chinese hardware and software in autonomous vehicles, ripping out 5G equipment, tried to basically destroy Huawei specifically, and the list goes on. Whatever local favoritism may happen in China, you realize that pales to the full blown protectionism that the US engages in. China hasn't even retaliated in kind. You're complaining about being poked with a stick while throwing a sledgehammer around. Am I supposed to believe the "TikTok ban" is anything other than completely absurd security theater? Like do you think the world is so naive they think this is how the "rule of law" works? You realize every time a Western politician utters that term everyone just laughs right?
> I never imagined I would have to go to the lengths criminals do just to keep me safe from my opinions.

Friendly reminder. Treat criminals the same way you want to be treated, because the line separating a good citizen from a criminal is very fuzzy at times.
Define "something that mattered", because over half the stuff posted on hackernews is a complete waste of time and effort if your only real metric is profitability. The vast majority of "hacking" in general is of negative financial value.
I have slowly been getting into Rust for some personal projects. Already ported one of my Clojure applications to Rust and really enjoy the the tooling (and resource efficiency!) compared to Clojure.

Would like to try Axum, but couldn't find reliable code generation tools. Has the tooling improved on that front? I would love to hear if anyone has tried the rust-axum[1] OpenAPI generator and whether it generates decent Axum-based code.

OpenAPI isn't a hard requirement. I'm open to using Protobuf or Smithy as an IDL if the Rust ecosystem offers better server code generation with them.

[1] https://openapi-generator.tech/docs/generators/rust-axum/
Hello! In your view, did the move to IEEE 754 floating-point make things easier or harder for CPU designers?
> everyone fulfills more jobs than their official title. (There's an elastic clause in government worker job descriptions, "and other duties as assigned.")

That's boilerplate language for pretty much every job description in the United States (which is where I'm guessing you are). It isn't unique to government jobs. Almost everybody that doesn't work under super-strict bureaucratic oversight has to do work that isn't explicitly called out in their job description.

> I live in fear of the day I'm called upon to climb a tower because they need me to do that. My regular job is software development!

Your boss isn't going to come to you saying "go climb a tower or ur fired lol" while pointing to that clause. Tower climbing requires many special considerations like training, permits, insurance, and so forth that you don't have. They will contract that work out or hire somebody to do it specifically at the appropriate rate.

> my position isn't union protected

Last I checked government positions have about half the turnover that private-sector ones do. You're already doing well as far as job security (reorgs, funding SNAFUs, furloughs, etc. excepted).

I can only infer how you came to any of the conclusions that you did in your post but it sounds like you might have uninformed coworkers saying these things. If this is the case then stop listening to them.
Well, I'm glad that we can at least agree that the US has protectionist policies and has had them for a long time.

If you want a bigger protected industry, perhaps checkout any Farm bill from the past several decades. But that's neither here nor there. China is not weird for having protectionist measures - like you said - it's pretty normal - the scope and size is what may be unusual for a country that's not a hegemon.

> What does this have to do with Akamai, and many other American companies, ending services in mainland China?

Glad you asked: China has protectionist policies that are designed to help its domestic tech companies. Consequently, foreign (read American) tech companies like Akamai may find the operating environment much more challenging that they would without those policies. Other non-protectionist policies don't help - such as working with the great firewall, or complying with censorship requests.

TL;DR version: China protects its tech industry like the US protects its farmers and merchant marine. Acknowledging that will help frame whether the respective countries have the political appetite to temp or undo those policies.
Really... Some people do need to be taken down a peg here at times though.
We're talking about "simple website". You can use any number of LLMs to generate you a boilerplate or use something simple and lightweight like Bootstrap. For a simple website, the things you're talking about add time and effort, not remove them - especially for someone who knows how to do neither.
Speeding up message parsing by 3x to 10x by switching from serde to nom in Rust
I get what you're saying, but you're disregarding the point of my (admittedly tongue in cheek) proposal. I'm not saying there shouldn't be ads. Currently, the ad industry is subsidized by consumers because they pay for the traffic. Instead, the advertiser should pay, since they get the most of it.

Besides, this argument that without ads content can't exist is bogus. Firstly people have been creating art and knowledge without thought for pay since time immemorial, it's a basic human instinct. Were there ads paying for the paintings in Lascaux? In the early days of the internet there was little money to be made online, and yet the quality of the content was excellent - and yes there were banners and tracking cookies but it's interesting how the best sites had little or none of that, and when they did have ads the quality of the ads was very high too - relevant to the audience and not some worthless crap that is much worse than competitors.

To this day people freely publish quality content with 0 monetization, just because they want to. That type of content gets shared on this site daily. Technology has advanced greatly and simply putting a website up is very cheap now, and people have a decent number of hours to put into their hobby.
Whilst it's possible you may be correct, I do have to point out you are, I believe, lecturing John Nagle, known for Nagle's algorithm, used in most TCP stacks in the world.
(Disclaimer: I work for a headless CMS, but not an open source or self hostable one)

If you're primarily writing docs, have you considered a system for that (like Docusaurus) or a simple MDX (Markdown with JSX) system like Astro or Grav CMS?

The proper headless CMSes are good for managing complex schemas and relationships in a GUI. But if you're primarily documenting code and APIs, IMO being able to write freeform and easily add example snippets and maybe actually workable examples would be nice.

You can also make a pretty good headless CMS off WordPress by using Advanced Custom Fields. However, that was recently taken over by Automattic and part of their war against WPEngine. I'd be afraid of using it.
Ads. Tracking scripts. Interface hijacks. Dynamics that change the page as I read it. A myriad of other poorly executed ideas that someone who considers themselves "very clever" thought were good at the time but only make my experience worse.
Would be interesting if someone could detail the approach to decode the pre-post processing steps before it enters the model, and how to find the correct input encoding.
The world of 1930s public health posters
I don't think this question really makes any sense... In my opinion, it's kind of mish-mashing several things together.

"Can you elaborate on how it's not comparable?"

The process of individual people interacting with their culture is a vastly different process than that used to train large language models. In what ways to you think these processes have anything in common?

"It seems obvious to me that it is -- they both learn and then create -- so what's the difference?"

This doesn't seem obvious to me (obviously)! Maybe you can argue that an LLM "learns" during training, but that ceases once training is complete. For sure, there are work-arounds that meet certain goals (RAG, fine-tuning); maybe your already vague definition of "learning" could be stretched to include these? Still, comparing this to how people learn is pretty far-fetched. AFAICT, there's no literature supporting the view that there's any commonality here; if you have some I would be very interested to read it. :-)

Do they both create? I suspect not; an LLM is parroting back data from it's training set. We've seen many studies showing that tested LLMs perform poorly on novel problem sets. This article was posted just this week:

https://news.ycombinator.com/item?id=42565606

The court is still out on the copyright issue, for the perspective of US law we'll have to wait on this one. Still, it's clear that an LLM can't "create" in any meaningful way.

And so on and so forth. How is hiring an employee at all similar to subscribing to an OpenAI ChatGPT plan? Wacky indeed!
Surprised that you haven't included Detroit. Detroit metro is top 5 for number of software engineers in America and I don't think that definition includes Ann Arbor. Grant you they won't win on the weather score but cost of living is low.
IBM itself made PS/2s with PC-DOS in ROM. The 5150 had ROM BASIC and that also continued through to the early PS/2s.
A video tour of the Standard Model (2021)
What could be the issue with exposing WireGuard at a random port to the public internet?

It works over UDP so it doesn't even send any acknowledgement or error response to unauthenticated or non-handshake packets.
I think Axum has been pretty great... like a high perforance version of Oak/Koa/Hono in the JS/TS space. Mostly used it for straight web services so far.
Appreciate the honest and thoughtful feedback - I'll work on bringing up a cache that will help it push towards a more consistent response. Super helpful, thank you once again. May I shoot you a message when the next version is ready ?
As an open source dev, I like GPL for that reason. It was a kind of trick which kept some monetization paths open for the dev. It no longer works though because now most companies refuse to incorporate GPL libraries into their products. They have tools to check for dependencies automatically. Now open source is almost impossible to monetize.
Calling Functions Across Languages • Richard Feldman • Goto 2023 [video]
For app developers considering tflite, a safer way would be to host the models on firebase and delete them when their job is done. It comes with other features like versioning for model updates, A/B tests, lower apk size etc.
https://firebase.google.com/docs/ml/manage-hosted-models
The term is "content marketing", and yes, ads are ads but ultimately people trying to release quality content for free to shill their brand is not very high on the list of worst things about advertising, I'm sure you'll agree.
Mobile data sucks even in the densely populated northeast parts of the Amtrak system. Cell network congestion and dead spots where the railroad takes a path away from population centers and highways.
I guess im wondering if other researchers in DoD are having the same sentiment as me. I find it hard to believe they arent but it's something that not talked about much because from my point of view, there arent many researchers with 20 YoE left in the DoD. If i am wrong, point me to them as i want to join their ranks!
I am not talking about fables, I am referring to lying in order to sell one’s self, perhaps for business, or love, or networking, or even just for a laugh. Maybe even because people are lying to themselves.
> i would expect better from Meta

I'm surprised you would expect better.

Everything I hear about their processes, everything I experience as a user, says their software development is all over the place.

Uploading a video on mobile web? I get the "please wait on this site" banner and no sign of progress, never completes. An image? Sometimes it's fine, sometimes it forgets rotation metadata. Default feed? Recommendations for sports teams I don't follow in countries I don't live in. Adverts? So badly targeted that I end up reporting some of them (horror films) for violent content, while even the normal ones are often for things I couldn't get if I wanted to such as a lawyer specialising in giving up a citizenship I never had. Write a comment? Sometimes the whole message is deleted *while I'm typing* for no apparent reason.

Only reason I've even got an account is the network effect. If the company is forced to make the feed available to others, I won't even need this much.

If they stopped caring about quality of their core product, what hope a billing system's verification emails?
Ne, nije. Autor je slovacki inzenjer u CERNu.
> 10. Incremental is better than perfect#
Your site is not going to be perfect from day one. You are going to run into hiccups with discoverability. You’ll find out that nobody can find it on Google for the first month. That’s OK. You can pull through this.

This is the last item that the article ends with. I think it gives a misleading impression of how easy it is to get a website to rank on the Google SERP. The author writes "hiccups" with discoverability, and "nobody can find it on Google for the first month".

My experience with blogs is that Google SERP is extremely competitive these days for popular keywords. Anchoring on "the first month" is unrealistically fast SEO results.
A radio antenna is semi open though.
I feel like you and grandparent are the only people who read the article, because I'm wondering the same thing.

The article never properly explains how the attack happened. Having a port exposed to the internet on any container is a remote execution vulnerability? What? How? Nobody would be using docker in that case.

The article links to a blog post as a source on the vulnerability, but the article is a general "how to secure" article, there is nothing about remote code execution.
When was this time?

I listened to "The Shadow" radio episodes from the 1940s, sponsored by "Blue Coal". At 0:45 of https://www.beyondthebreaker.com/the-shadow-of-blue-coal/ "All signs point to a severe winter. Be prepared! If you want to be sure of even, dependable, helpful heat in any kind of weather, insist on Blue Coal. America’s finest anthracite mined from the fields of northern Pennsylvania. The coal that is colored a harmless blue at the mine for your protection."

That's about 20 seconds, and the blue color was 'a marketing ploy to distinguish its coal from that of its competitors. But the company took it one step further by actually promoting its product as being superior, longer burning, and even more “healthful” than other coal. No wonder the PR “spin” profession was so poorly regarded in that era!'

Also, 1971's "I'd Like to Buy the World a Coke", was 1 minute long, and did not inform.
Those regulations targeting EMI with aviation communications would no longer make sense, I think, when we're talking about the airliner's own wi-fi; that should be flight-qualified for that purpose.
Japanese Companies Are Pulling Out All the Stops to Recruit Young Workers
That's a little simplistic. You're almost trying to say blank and white sands gray can't be compared which is a bit weird.

Strangely like the situation itself.

The question is just looked to how can we guarantee a model is influenced rather than memorising an input?

And then is a human who is influenced simply relying on a faulty or less than perfect memory?
This is OUTRAGEOUS!! I am a licensed Mental Health Clinician. I have been working from home since day 1 of COVID. No unemployment or food stamps for me! (I am happy for those who needed them at the time). I have been all hands on deck with people struggling the whole time and I am NOT privileged. These two privileged weasels have now idea to know what it's like for someone like me in a high tax bracket (paying for their privileged tax breaks) who wears a coat the cost me 5 bucks at Walmart and is wearing shoes that a friend of mine passed onto me from my Church (nice shoes by the way)!! Privileged is eating Mickey Dee's on Trump the Chump's high class jet, or golfing every weekend on our hard earned tax dollars. Weasels and Chumps!! Go enjoy your Maralago movie tonight which is a bunch of horse manure! I would rather have the truth on my side than be privileged any day of the week!
>The story would have been no different if OP had created an Alpine Linux container and exposed SSH to the internet with SSH password authentication enabled and a weak password.

What? The story would have been VERY different, obviously that's asking for trouble. Opening a port to your database running in a docker container is not a remote execution vulnerability, or if it is, the article is failing to explain how.