skysight-inc/HackerNews huggingface dataset:
cursor dev here. reasonable assumptions, but not quite the case. the snyk packages are just the names of our bundled extensions, which we never package nor upload to any registry. (we do it just like how VS Code does it: https://github.com/microsoft/vscode/tree/main/extensions)

we did not hire snyk, but we reached out to them after seeing this and they apologized. we did not get any confirmation of what exactly they were trying to do here (but i think your explanation that someone there suspected a dependency confusion vulnerability is plausible. though it's pretty irresponsible imo to do that on public npm and actually sending up the env variables)
anecdotally I think I've had to scoop about 30l of snow in a stuff sack, to get about 2-3l of melted water (of which I've probably added at least a cup or 2 of water to get started - to prevent the bottom of the pot being scorched by heat before the snow melts), so that sounds about right.
They have a lot of faith in billable hours.
https://www.timesofisrael.com/hezbollah-pager-explosions-put...

Just months ago, some of those "kids who are very good with computers" caused compromised pagers to explode, with no knowledge of who would be near them. Civilians, including children, died as a result. It is right to think people who are "good with computers" in this way might not have the best intentions in their other applications of computers.
I like the theory of traffic that basically says traffic will always make the best mode of transportation as bad as the second best.

The problem with buses is that car traffic can never be bad enough to make cars worse than buses. Buses are doomed to always be worse than cars unless they have dedicated lanes or parking is unbearable. So cars slow down to equal the metro system, bikes, ferries, etc.

A dedicated bus lane can speed up cars more than another car lane because it pulls traffic off the road until driving convenience equals bus convenience.
I agree that wokeness is a big problem on the serious left. It was analyzed in high-profile leftist's Norman Finkelstein's "I’ll Burn That Bridge When I Get to It! Heretical Thoughts on Identity Politics, Cancel Culture, and Academic Freedom".

Many point it's from the professional/managerial/bureaucratic class, which never was into free speech to begin with. Take pg's mention of the Soviet Union. That's actually a country where that class overthrew the capitalists to become the ruling class. (They were called "The New Class" there. In countries like the US, they're above workers but subordinate to capitalists.)

And all this is a useful distraction: criticizing wokies distracts from the structure of power that leads to homelessness and working your one (1) life away under some boss. Which is ridiculous in the 21st century.
Imagine being worried about this when buying a house. Who cares what your neighbor thinks?
I don’t think it’s as bad as you imagine in west coast faang. I’ve worked at a few of them. When we do talk about politics (offline, in small groups), discussions are nuanced and people have their own opinions. If you’re able to speak respectfully, and not attack people who disagree with you or have lifestyles different from what you’d choose, you would do fine.

If you have an habit of announcing controversial and extreme opinions in widely-subscribed comms channels, you would not do so well.
> All of these packages have just two files: package.json and index.js (or main.js). This is one of several flags that you can use to determine if a package is legit or not.

Wouldn't a lot of small packages consist of just these two files, meaning seeing just these two files in a package may raise an eyebrow but hardly be a smoking gun?
The behaviors and reactions to benign, relative ideas and thinking from anyone they disagree with are uncannily identical. There is no shoehorn to be found here.
That's a different problem. In jbentley1's scenario, A could be better, but this algorithm will choose B.
It costs $500-1k a month to park a car in Manhattan
Oh yes, measuring things in Lake Meads. What is that even the only lake in California or something?
No one should be forced by the government to suffer these people.

https://www.instagram.com/reel/DDqZ9M0u-Kc/?igsh=MTRuY3c3ZHd...
"Anti-woke" itself has become something of a religion itself with no real core principles or guiding ruleset. In opposition to something that is poorly defined
Explicit Dependencies Principle
Ok, getting it now. I said upgrade python, and you thought I meant upgrade the system python in conflict with the distro. But that's not really what I meant. To clarify... I almost never touch the system python, but I upgrade the distro often. Almost every Ubuntu/Mint has a new system Python version these days.

So upgrade to new distro release, it has a new Python. Then pip install --user your user tools, twine, httpie, ruff, etc. Takes a few moments, perhaps once a year.

I do the same on Fedora, which I've been using more lately.
It's not just the IDF, you have a CHOICE to join the spymaster side of it, vs being a regular grunt. That unit is part of Aman, the military version of Mossad.
I think everyone agrees with you. The issue is who is building API first interfaces? The value an agent provides here is that it moves control from the publisher to the consumer (in the technical sense).

“Twitter doesn’t want to let me access via an API? That’s fine, my browser/agent will automatically automate what I want it to do for me in the UI.” Is a major shift in how we interface with other services.
I mentor at a public high school that has a dozen metal lathes, a half dozen wood lathes. Plasma cutters. CNC everything. A giant planer. My favourite thing is that half of it is super modern and half of it is indestructible WWII surplus, which looks really cool mixed together.

I cannot imagine the concept of lathes being taken out of schools because of accidents. What a self destructive cultural attitude.
Most supplements aren't worth your money. This one is
The other alternative that those kids were given was to shoot guns or missiles. Are you really comfortable blaming them for the rest of their lives for choosing the option that likely gave them the smallest chance of killing people?

Any Israeli citizen in that age bracket today is going to be running a real risk of killing people. They don't have a choice (dodging the draft doesn't count as a choice). If you're going to hold that over for them for the rest of their lives I don't know how that's distinct from racism (or countryism if you prefer).
That's exactly what Github does already. I wouldn't bet on my own org being better at hosting github than github.
I would think that a lot of apis are designed for human users and we may need new apis designed for a usage patterns more natural to bots.
I dunno, I ran my mid-2012 MBP until ~October 2021. In that time, I got it serviced once for a screen issue that they fixed under some program (after the warranty period). I think it got security patches as recently as then. That seemed like a solid run to me.
> If that's the case, then there's not much to see here.

Allowing someone full access to the contents of your environment (i.e. output of env command) is a big deal to most, I suspect.
CometAPI is a globally renowned API aggregation platform for AI models, integrating APIs from over 500+ AI data models worldwide. This includes well-known models such as GPT, Suno, Midjourney, Sora, Luma, and others. CometAPI is designed to provide customers with convenient and efficient AI API service integration and management. Users can effortlessly connect to all AI models globally with just a single API.

Main Advantages of CometAPI:

High Cost-Effectiveness, Pay-As-You-Go
Compared to similar products, CometAPI is 20% cheaper, with transparent billing and no hidden costs. It offers users high-value services while allowing payment based on actual usage. Balances do not expire and can be recharged at any time, providing flexibility and efficiency.

Simple and Efficient Integration
Integration is straightforward and efficient, requiring only a single API command. The entire setup process can be completed in just 10 minutes.

High Concurrency
CometAPI supports a large number of concurrent requests, meeting the majority of users' concurrency needs by default. Dedicated customization is available for those requiring even higher concurrency.

High Stability
It provides public logs that record the speed of each model request. Its stability far exceeds that of reverse proxy solutions, ensuring reliable service.

Here is our website: https://www.cometapi.com/

I hope everyone like it!!!
Show HN: PollGen – Create Polls with AI, Share and Get Responses
Hello HN! I’m excited to share my latest project, PollGen.

PollGen allows you to generate polls in seconds using AI, share them instantly with friends and colleagues, and gather responses in real-time.

Polls can be public or private and can be created & respond to anonymously.

I hope you find it useful and look forward to your thoughts and suggestions!

Try it out: www.pollgen.com
Mistral's new model: Codestral 25.01 - new SOTA coding model, #1 on LMSYS
My company is replacing the entire system we built with Github actions. Our previous DR plan involved running our automation scripts to reprovision the infrastructure that manages the rest of the infrastructure (runs jenkins jobs, etc).

They are replacing everything with Github actions. I wonder what they are going to do when Github is down.
From TFA:

> LLMs and the platforms powering them are quickly becoming one-stop shops for any ML-related tasks. From my perspective, the real revolution is not the chat ability or the knowledge embedded in these models, but rather the versatility they bring in a single system.

Why use another piece of software if LLM is good enough?
No systemd, these just start a shell script on init that launches the WM.
They're based around the open-source component of this product:
https://www.kasmweb.com/docs/latest/index.html

I find that they are slightly more sluggish than Moonlight/Sunshine for remote streaming, but generally faster/better than x11vnc. Not quite good enough for gaming yet, but plenty for web browsing, Blender, etc.
Use cases such as?
Snyk is founded by people from the Israeli Army's Unit 8200.

I wouldn't install it if you paid me to, because it feels a lot like Unit 8200 pumps out entrepreneurs and funds them so that (like the NSA) they have their foot already in the door.
Bruh...
That's not fair. He's been vocal about it on Twitter for years, for example.

Btw pg is as anti-Trump as he is anti-woke. I wonder how many heads in this thread would not explode if they really took that in.
Too much money chasing too few goods in the market causes Inflation

Too much Content chasing limited human Attention is causing very very similar issues.

It took centuries to connect the fact that increasing or decreasing the money supply at a faster or slower rate than goods arriving in the market causes all kinds of chaos. The chaos made it hard to see the connection.

Central banks finally emerged to manage money supply and target a healthy inflation rate.

Handing Attention management off to the platforms is very similar to the state of affair when Kings and individual Banks printed their own money. That provided funding for wars. And created panics, bubbles, bank failures all the time which lead to the reluctant handing over of money printing to Central Banks world wide.

Today thanks to similar dynamics in the Attention Economy we are probably in a hyperinflationary state. As content keeps exploding, it gets harder and harder to be seen or heard unless you "buy more ads", win ad bidding wars, or "pay for visibility".

And guess what?

China can easily "buy more ads", win ad bidding wars, or "pay for visibility" to make things worse. They can/will also just flood the platforms with content via GenAI. Business will be pushed to spend more, Politicians have to raise more and individuals will struggle to focus on anything. Everyone will get exhausted or loose their minds. China or whoever won't have to fire a single shot to trigger collapse.

It doesn't matter who owns platforms if the way platforms manage Attention does not change.

We either need a Central Attention Bank that measures and targets healthy Attention extraction/consumption rates across different content types or Regulation placed on platforms on how Attention is managed (time limits, limits on ads volume, limits on marketing budgets all broken down by different content types (long term value/short term value/no value ie entertainment with individuals deciding the breakup just like they do with money - investments/savings/current etc etc).
I work on one part of a huge suite of interconneted services that have extremely strict SLAs for up-time. It really is an interesting problem, and the quantity of engineering resources devoted to ensuring availability and avoiding downtime -- basically fighting to make inherently unstable, complex systems stable and reliable -- is dumbfounding.

When I'm trying to explain to people what it's like to work on this kind of software, I like to use an analogy: it's as though I have my own personal brick, or group of bricks, in the great pyramids of Egypt, just a a tiny piece of a stupefyingly, inconceivably larger whole -- and when I twist my chisel and strike my block just so, at exactly the right (or rather the wrong) angle, I can shake the very foundations of Egypt.
Maybe that's its style.
And why would choosing to be a grunt be more morally pure?

I'm a techie, if I were forced into conscription I would absolutely choose an option that let me use computers over one that forced me to shoot a gun. There's no way on Earth I can hold it against a bunch of kids who were forced to make that choice that they chose the intelligence arm.

And frankly, I have a hard time seeing how someone on this forum could hold that against them in good faith. Nearly everyone here would make the same call given that choice. If you think you wouldn't have, you're probably deluding yourself.
Have you ever commuted to manhattan? Parking is very expensive. You already had to have money to be driving in.
Laser technique measures distances with nanometre precision
That's an example of something that can be done well or done poorly.

AirBnB, UberEats and Facebook are all built with React Native and they have excellent performance.

Using a JS framework for your UI doesn't inherently mean it will suck. It can be done well.

If you expect it to be half as much work, you'll be disappointed.

If you expect it to be a tradeoff that makes some things easier and some things harder, and you're willing to invest in making it excellent, then it can be a very reasonable choice.
Isn't it still an easter egg though? Just one that is very hard to find.
> I feel the same way but with cheaper Japanese ball pens, my favorite being.

Torture for a pen enthusiast! Your favorite being what? Is it the Sarasa Clip you mention later?
Recent top posts: https://news.ycombinator.com/best

https://news.ycombinator.com/lists

> The url news.ycombinator.com is of no use to 99% of us

You are cordially invited to get your dopamine hit from whatever site you prefer. PG hasn't posted anything since 2023. https://news.ycombinator.com/submitted?id=pg
Craft CMS vs. WordPress
A Systematic Review of the Whale Optimization Algorithm
It's not a credible argument. The "overcharges" led to a guilty verdict and sentence. That could not have happened if they were truly as you portray. Believing that your less-informed opinion overrules those of everyone actually in the courtroom is pure hubris.
Not driving is gonna make the drivers happier? A lot of good, depends on who you are really
Took them like ten years to manage pagination…
I think a lot of the issues in this particular example is the ease with which api keys, once leaked, are single factor passwords.

If you ran a key logger on my machine you would never get into any major site with mfa. You couldn't watch me log on to the azure console with passkey and do much with it. But if you scrape a saved key with publish abilities bad things happen.
This is a non-informational take which is just ahistorical, as evidenced by the fact that just 30 years a lot of European cities were very much car-centric and were much more awful by pretty much every metric than they are today.
If that AI system looked too close at my car, I'd be worried it would feel obligated to pay me.
Those "kids who are very good with computers" designed a black-box AI that has been designating people terrorists which the military then uses to bomb not just them but their entire family.

https://www.npr.org/2023/12/14/1218643254/israel-is-using-an...
Literally a test in production. The dev commit their work go to home thinking "not will happen"
Thank you for that source, I do not discard it as biased.

While some people do, I am not choosing what sources are biased based on whether their findings align with my beliefs. I am choosing based on whether their results consistently align with a certain ideology or political stance, what their goals are, and where their money comes from.

The Manhattan Institute consistently publishes findings that align with American conservatism, their goal is explicitly to influence policy, and while we don't know exactly where their money comes from because they don't make that information public (which I think is generally a bad sign), information revealed by tax filings shows that most substantial donations are from conservatives. This is why I consider them to be biased.

I don't have any specific criticism of the study, because I did not spend the time to engage with it. I have limited lifetime, and I must choose where to spend it based on what is likely to be fruitful. I do not consider engaging with articles/studies from biased think tanks, whether liberal or conservative, likely to be fruitful.
This wouldn’t work in NYC even if they did try because the congestion pricing start date has been moved around a lot, including days before it was supposed to start the last time.

But even more relevant is the fact that people have seen Manhattan gridlock for decades. If they were planning a move like that they would have had to start it in the 1980s at least.
Right, and that's why honeypots work against many targets. Why serve them an actual file, when a cgi script or whatever can just generate output in a loop.
Not true. The rich just get extra car with different plates.
> As is often postulated though, how would a network of rogue AIs power themselves?

Smaller and smaller models are reaching higher and higher benchmarks; the 35B I can run on consumer hardware today is better than a 605B from years ago. I bet there are also advancements reducing the power usage at each model size.

I think the answer boils down to the same answer as any other rogue software "roaming" the internet: hacked consumer devices.
An AI agent is an LLM attached to some external tool.

That's it.

What people are confused about is what groups of agents are, how they are managed and how they interact with each other.

They are confused because no one is building real multi-agent systems in the open which work.

Trying to build multi-step logical LLMs with the paltry memory we have today is about as effective as trying to play 8k video on a Intel 8008.

All the attention is on the LLMs themselves, which is the same thing as being excited about a CPU in 1970. Sure they are amazing engineering, but you will need another layer on top to make them actually useful.

Historically it was apple that first got the software right. We are now waiting for the first company to get a multi-agent system right - but again thanks to the tiny memories we have because of NVidia it will have to run in the data center, or it will be a decade away.
I think we'll have HUDs like Meta's Orion, with always monitoring AI agents, before long.
Probably this law that erases the concept of climate change https://www.npr.org/2024/05/17/1252012825/florida-gov-desant...
I have some old Sonos speakers that have been gathering dust for a while.

I decided to sell them because they still have some value but I don't really want them, especially with what the company has done recently.

However, I wanted to set them up again to make sure they work. I spent hours trying to get them to set up again with no luck. I'm sure this is exactly what other users are experiencing. The old app was so nice and reliable. I don't have an opinion on the new app because I just literally can't get it to connect.

And I know they're not dead. One has an audio-in jack and still plays. It works great. There's no reason any of them shouldn't be fine. The only thing that changed was the app. I just want to get them set up so I can sell them on Marketplace for a good price as fully working.
Size seems to be classified. Their officers seem to be classified as well.
I understand how getting into the unit might be very normal. But doubt here is the healthy thing. Especially as a goyim.
When I was a child, I read a Soviet book titled How the Steel Was Tempered. There is a line in this book that I will never forget: 'When he looks back on his life, he will not feel regret for having wasted his years, nor will he feel ashamed for having achieved nothing.' I think this is also the motivation behind my blogging—to record life, reflect on it, share it, and use it as a personal notebook of my own journey. That's all.
It's still way more diverse than any other platform. Blue sky is still mostly a "tech bro" related, western tech circles centric platform. You absolutely do not get even close to the variety and diversity that X has.
$9 is for personal vehicles.

Cabs get charged per trip with no limit.

Delivery trucks get charged a higher amount and I don’t believe (I’m not sure on this) they have a daily cap, so they can also be charged multiple times.
In the first blogging boom (funded by Google to get people posting more so they had more results to serve and get them reading more to be advertised to) most blogs were hosted by LiveJournal, blogspot, Automattic, etc. In the second blogging boom (funded by Substack's investors) most are hosted by Substack, Autmattic, etc. Self-hosted blogs (and newsletter blogs) were always few in number, although the handful of big blogs tended to go independent or get a corporate or university sponsor.
I don’t have a blog for anything professional. But I do have a blog that is a public personal journal of our frequent travel, including on an off “digital nomadding”.

I don’t have ads, affiliate links nor do I care about traffic or have any analytics. I doubt that it gets any real traffic. By keeping it public, the only benefit I see is that it encourages me to at least care about my writing. It’s just my spot on the internet.

https://digitalnomadder.micro.blog/
> Ask for fresh insights (just explaining the problem to a mannequin may help!)

You can’t trust a thing this person says if they’re not recommending a duck.
>but it’s important to note that deliveries into downtown would be important for it to be a thriving destination for shopping, residential or business. Not to mention space for heavy equipment to come in to do repairs and construction. Minimal maintenance corridors may not be enough.

I used to work at a warehouse, the whole street of warehouses had a street width of at most 10m (30ft) wall-to-wall. People vastly overestimate how much throughput is needed purely for shipping, due to all the passenger cars on the road.

Heavy equipment is also less of an issue than you'd think, because it tends to expand to fit the space it's permitted - like all engineering projects.
Professors, judges, lawyers, journalists, politicians, tech moderators, probably anything in the arts or education. On reddit and bluesky you can get banned for having the median voter's opinion on gender norms and immigration.