skysight-inc/HackerNews huggingface dataset:
The title of the submission is somewhat bait, unfortunately the Cargo.lock doesn't seem to be public. Since my current Rust side-project also has some kind of database (along with, well, a p2p system) and also totals 454 dependencies, I've decided to do a breakdown of my dependency graph (also because I was curious myself):

- 85 are related to gix (a Rust reimplementation of git, 53 of those are gix itself, that project is unfortunately infamous for splitting things into crates that probably should've been modules)
- 91 are related to pgp and all the complexity it involves (aes with various cipher modes, des, dsa, ecdsa, ed25519, p256, p384, p521, rsa, sha3, sha2, sha1, md5, blowfish, camellia, cast5, ripemd, pkcs8, pkcs1, pem, sec1, ...)
- 71 are related to http/irc/tokio (this includes a memory-safe tls implementation, an http stack like percent-encoding, mime, chunked encoding, ...)
- 26 are related to the winapi (which I don't use myself, but are still part of the resolved dependency graph)
- 8 are related to web assembly (unused when compiling for Linux)
- 2 are relatd to android (also unused when compiling for Linux)

In some ways this is a reminder of how much complexity we're building on top of for the sake of compatibility.

Also keep in mind "reviewing 100 lines of code in 1 library" and "reviewing 100 lines of code split into 2 libraries" is still pretty much the same amount of code (if any of us actually reviewed all their dependencies). You might even have a better time reviewing the sha2 crate vs the entirety of libcrypto.so, if that's all you needed.

My project has been around for (almost) two years, I scanned every commit for vulnerable dependencies using this command:

for commit in $(git log --all --pretty='%H'); do git show "$commit":Cargo.lock > Cargo.lock && cargo audit -n --json | jq -r '.vulnerabilities.list[] | (.advisory.id + " - " + .package.name)'; done | sort | uniq

I got a total of 25 advisories (basically what you would be exposed to if you ran all binaries from every single commit simultaneously today). Here's the list:

RUSTSEC-2020-0071 - time
RUSTSEC-2023-0018 - remove_dir_all
RUSTSEC-2023-0034 - h2
RUSTSEC-2023-0038 - sequoia-openpgp
RUSTSEC-2023-0039 - buffered-reader
RUSTSEC-2023-0052 - webpki
RUSTSEC-2023-0053 - rustls-webpki
RUSTSEC-2023-0071 - rsa
RUSTSEC-2024-0003 - h2
RUSTSEC-2024-0006 - shlex
RUSTSEC-2024-0019 - mio
RUSTSEC-2024-0332 - h2
RUSTSEC-2024-0336 - rustls
RUSTSEC-2024-0345 - sequoia-openpgp
RUSTSEC-2024-0348 - gix-index
RUSTSEC-2024-0349 - gix-worktree
RUSTSEC-2024-0350 - gix-fs
RUSTSEC-2024-0351 - gix-ref
RUSTSEC-2024-0352 - gix-index
RUSTSEC-2024-0353 - gix-worktree
RUSTSEC-2024-0355 - gix-path
RUSTSEC-2024-0367 - gix-path
RUSTSEC-2024-0371 - gix-path
RUSTSEC-2024-0373 - quinn-proto
RUSTSEC-2024-0421 - idna

I guess I'm doing fine. Keep in mind, the binary is fully self-contained, there is no "look, my program has zero dependencies, but I need to ship an entire implementation of the gnu operating system along with it".
> If the quantity appears in equations, I find it hard to believe that it was never given a name.

It does have a name: mass!

What I'm skeptical of is that this "stiffness" is somehow logically or conceptually prior to mass. Looking at the math, it just is mass. The term in the equation that this author calls the "stiffness" term is usually just called the "mass" term.
Eating roadkill is not that uncommon in the US. So it's not a crazy connection to make. He admitted to having a walk-in size freezer of the stuff and that he's a redneck.

https://www.newyorker.com/magazine/2024/08/12/robert-f-kenne...

> He loaded the dead bear into the rear hatch of his car and later showed it off to his friends. In a picture from that day, Kennedy is putting his fingers inside the bear’s bloody mouth, a comical grimace across his face. (When I asked Kennedy about the incident, he said, “Maybe that’s where I got my brain worm.”)

Now this is clearly a joke. But the important thing is, he clearly enjoys trolling reporters. If you are not happy with the way RFK Jr. is treated in the media, take it up with RFK Jr.
Well, normal, boring people tend to send their kids to school, so your chances of a normal, boring homeschooling experience are pretty slim. And even the most well-intentioned of counter cultural folks don't always excel at parenting, never mind educating.

I've met a fair number of other homeschooled folks over the years who had a great childhood, but I've met more for whom the lack of community/government oversight meant their parents could get away with things we wouldn't generally countenance (be that actual abuse, various forms of religious indoctrination, or just plain old "unschooling" - aka "ignore the kids till they go away").
"The trigger was Covid, but what really happened was suddenly millions of parents could directly see what their schools and teachers were like because we watched our kids work remotely all day for a year."

This kind of myopyic outlook that conflates the then-traditional instruction period to the remote instruction paradigm greatly cheapens every other point of your argument.

None of the teaching staff that had to adapt to that period of time were trained to make that experience 1:1 for the prior expectations and to use that as a basis to judge their entire ability is petty as fuck.
I'm really curious too, the only codebase I've seen that was like their description with react treated different pages/routes as one massive separate component.

Not exactly utilizing the benefit of JSX but it's a pattern you might blindly fall into if you only came from a templating background.
Show HN: AI chat client that can run on SharePoint and regulated environments
Stina is a lightweight AI chat client specifically designed for environments like government, healthcare, and large corporate settings, where IT policies prohibit the use of web servers, installations of new software, or access to online AI chat bots. Chat with with LLMs with your own API keys or a local Ollama instance after downloading the repo and opening the chat.html file from the file system.

Stina keeps all conversation history and data in localstorage on the browser, which is great when your manager asks you about data security considerations of AI chatbots.

Stina is a client-side solution that requires no server, no installations, and no build tools. Written in vanilla javascript with all dependencies bundled. This enables editing the code in environments where there is no access to Node.js, NPM or other JS-build tools.

Right now it supports Azure AI Foundry deployments, OpenAIs API, Anthropic and Ollama.

Stina can be hosted on a SharePoint server, run directly from the filesystem, or accessed through a local web server. It supports multiple language models, custom instructions, and dynamic system prompts.

I built this for my own needs at work where we have access to API keys to an Azure AI Foundry sandbox on the company tenant. By renaming chat.html to chat.aspx and putting the repo in a folder on SharePoint, I can run this as a chatbot internally.

If you want to contribute, you are very welcome to do so. I would love to extend this with the ability to chat to files, and perhaps even add an in-memory clientside vector database support to allow doing lightweight clientside RAG on documents accessible with the filesystem.
Such particles would be frictionless and collisionless - they don't interact via the electromagnetic force. As such, they would just sail through a Lagrange point on whatever geodesic they're on.

There's no particular reason to expect them to collect there, except possibly a small subset of particles that has a low enough velocity to actually be gravitationally captured. But that's unlikely if they're coming from some distance from the Lagrange point. The expected quantity of particles that could be captured like this is too low to be measurable.

Keep in mind that much of the nature of what we observe in the solar system is a consequence of friction or collisions having occurred in the past: the flattened disk shape, with all the planets orbiting on a plane, the accumulation of matter into objects like stars, planets, asteroids, and comets, and the parameters of their orbits were all heavily influenced by friction and collisions. Particulate dark matter would experience none of that, so doesn't end up being as organized as ordinary matter.
Through smart definitions I can contract any longer term as much as I want.
It may also not be a property of the ceo who bought the auger. If it’s obvious to everyone that augers are the way to go, he didn’t bring any specific insight to the table. Why does he get all the reward?
Given the running narrative that closing down TikTok is more of an effort of American social network platforms, it's probably more a form of protest than anything.
Piggybacking on the thread a little, anyone has experience to share using Pages or Workers at scale? Perhaps I bought too much into the JAMstack hype, but it seems like a much more convenient approach compared to the k8s rube goldberg machines every other shop is utilizing (assuming they work and scale as advertised on the tin). Wondering what are some drawbacks or even show stoppers.
> the KG equation is very very wrong!

How so? It's the standard equation for a scalar (spin zero) field.
I disagree; the gap is way wider in the US than the countries that the US would like to compare itself to. It's easy to say "they're all as bad as each other", but it's usually inaccurate, and always dismissive.
I believe it is the most plausible explanation. Microcomponent electronics and later microprocessors made workers more productive.
> Last time Trump tried this [...]

... It was similar to a tax-hike of $831/year on each US household [0].

https://fee.org/articles/tariffs-on-chinese-goods-cost-ameri...
The economy is enough of a mess as it is. Do you want to give Congress control of it? No thanks.
The way people are talking about the name of the app feels very stupid to me, in a way I can't put my finger on. I guess it smacks of more Red Scare paranoia, trying to tie anything Chinese to scary, nefarious communists. I doubt that they were thinking of Mao at all when making the app, Xiaohongshu is an app tailored for young, wealthy, cosmopolitan Chinese as an alternative to Douyin which is more for the masses, I wouldn't call that very Maoist.
A potential problem with a website in a wartime scenario is that once you publicize it, it has a huge target painted on its RJ45 (or SFP) ports. Google Docs and whatsapp are huge and resilient.
Thank you gonna give a spin as c2 storage layer
The whole point is it's not a direct statement. It is a lot of words which fails to answer the core question: is cloudflare syphoning data off to any of the Five Eyes (and I almost wrote Five Guys . . ) government intelligence agencies or their allies?

For example, in your link:
"One of the ways we limit the scope of orders we receive is by limiting the data we store. I have written before about how CloudFlare limits what we log and purge most log data within a few hours. For example, we cannot disclose the visitors to a particular website on CloudFlare because we do not currently store that data."

So if they are MITMing everything they totally could just send everything out straight away and not contradict what they're saying at all. Them storing the data or not is completely beside the point.
>As of September 30, 2024, the U.S. Ukraine response funding totals nearly $183 billion
>Russia's official 2022 military budget is expected to be 4.7 trillion rubles ($75bn), or higher, and about $84bn for 2023
Well that's going to really really suck.
Do you believe that Native Americans should continue receiving the benefits provided by the federal government? Considering that their land was taken and millions of their people were killed during the era of Manifest Destiny, it seems like a reasonable question to consider that maybe, just maybe, not everyone is on equal footing.
Also I think most people don't know how much you can scale with gunicorn+gevent before attempting to migrate to ASGI.
There isn't any jail time for copyright infringement, so I guess he's not part of the "30 under 30 to Prison" pipeline. But maybe he's just getting warmed up.
Big discussion yesterday (201 points, 362 comments) https://news.ycombinator.com/item?id=42700134
And with that the total number of rocket flights per year has ramped up due to SpaceX. Same thing applies to Starlink satellites "ruining" the night sky. It was a bit of an issue before, but now that there are thousands of satellites up there from one company, they're making headlines for similar reasons.
Incorrect, in most states poor districts receive slightly more funding than affluent ones: https://www.urban.org/sites/default/files/publication/90586/...

It sounds like you have a beef with how citizens socialize their children into the dominant religion of the society—which is literally considered a human right[1]—and less so with how schools are funded in the U.S.

See Article 18.4 of the International Covenant on Civil and Political Rights: https://www.ohchr.org/en/instruments-mechanisms/instruments/... (“The States Parties to the present Covenant undertake to have respect for the liberty of parents and, when applicable, legal guardians to ensure the religious and moral education of their children in conformity with their own convictions.”)

American subgroups that socialize their children into community religious norms are among the most successful. For example, Mormons: https://americanaffairsjournal.org/2020/11/utahs-economic-ex....

Prohibitions on religious education in public schools—which don’t exist in many developed countries, such as Germany and Sweden—hurts the majority of people who would do better under that system.
Because it's not a problem most corporations have. They have internet access and thus 365 Desktop Applications can call home and register.
Do other taxes go down to so that the overall tax taken across the economy is the same? The last thing the world needs is for governments to take more of people's money in tax.
Indeed, and that's a good reason to avoid third-party dependencies. But that's irrelevant to the choice of programming language; a language with a bad dependency manager might force you to build everything yourself, but you can always just do that, even in a language with a good dependency manager, you just choose to build everything yourself if you care.

Perplexingly, the original commenter seems to understand that this doesn't matter, and then handwaves away the correct conclusion.
One of the primary roles of norepinephrine is literally mediating alertness, including stress/fight-or-flight responses more specifically.
Banning TikTok Is Unconstitutional. The Supreme Court Must Step In
A marriage proposal spoken in office jargon
This is a common misconception. The high per capita funding is partially due to required emergency funding of repairs resulting from deferred maintenance - both in the literal sense, and in reference to the hollowing out of the city's industry and, therefore, capacity for stable community and family life. Baltimore is a Rust Belt city smack dab in the middle of a region that happily moved on to the service economy; poorer Baltimore residents are surrounded by people who can bid up the rates of goods in the area (and they do).

Other jurisdictions don't have to put so much into student funding directly.
> The term that corresponds to "stiffness" normally just gets called "mass", since that is how it shows up in experiments.

Then why not just call it "mass"? That's what it is. How is the notion of "stiffness" any better than the notion of "mass"? The author never explains this that I can see.
Presumably, the relevant factor here is not ownership on paper, but who has real control via being able to tell Bytedance employees (including the executives) what to do. Which, in this case, is assumed to be China’s government leaders.
You're both right! There was a good article/discussion on on this yesterday, but tldr: They are authentically fake! As in, the creators are not putting up a show with a 'real' person behind the persona, the algorithms have remade whatever person there use to be such that their 'authentic' self has become the persona.

https://news.ycombinator.com/item?id=42696691
> That said, I think you have to ask why are charter schools and vouchers (not just home school) becoming even more fashionable despite there being little to no evidence that they generate any broad improvements in the base level of education in the population at large?

People demanding it is evidence that political public education should adapt to that demand. It may or may not pay off, but this is how politics works, and education is politicized.

There is NO WAY that voters are going to see commentary like yours and be dissuaded -- that's just not how politics works. Have you ever changed someone's mind really on politics?

It would be much better to look at what's been motivating voters to demand vouchers / whatever else you don't approve of and see if you can satisfy their demands in some other way, such as reducing the politicization of education in other ways.
> (1 football field = 91.44 meters)

By? Which football? The real football, or the football played mostly with hands?
Part of it is almost certainly due to the FCC controlling licenses for what is broadcast over the air.
> it's pretty much a crapshoot whether you end up in a weird religious environment or an abusive environment, with a long-shot chance of ending up in a fun constructive environment with lots of personalised attention and the opportunity to travel the world.

It's a crapshoot for the kid, but a parent who's considering homeschooling knows pretty well whether they are going to be the fundamentalist type or not. If they are, they likely aren't here reading this discussion.
Absolutely, we already have a few Hunyuan workflows running on our H100s. If you can run it on your computer, you can run it on our cloud for sure!
> I don't like blaming users for wanting something sensible.

Are you saying that it's sensible to want email address ownership (and thus domain name ownership) to be permanently unchangeable?
In such cases: would airlines be entitled to compensation from the companies blocking their operations? Or do they just have to deal with it?
WTF is up with that site, which is just a pile of charts with no analysis?
It seems to me that there is a 1:1 correlation between mass of virtual particle and field stiffness. Given that fact, why isn't it equally correct to say "The field stiffness is caused by the mass of the virtual particle" and "The virtual particle necessarily has mas because the field is stiff"

The author states that "it is short range because the particles that “mediate” the force, the W and Z bosons, have mass;" is misleading as to causality, but I missed the part where they showed how/why it was misleading.
Same way the Singaporean CEO is part of the CCP: He's not, it's not, but there are a lot of vested interests like Facebook lobbying to treat them as the boogeyman.
Honestly haven't really had to deal with use case where json column does not cut it, but I would imaging there might be some.
Hi, original poster here. I think calling it "insane" is a bit of an exaggeration lol. Don't you think?

I like your solution better!
We ran into quite a few people in this situation and usually offer to integrate our infra with their S3/storage solution. Email me if you are interested: team@viewcomfy.com
I think this is a great resource but wish it had not chosen a hybrid architecture. All the guides on decoupled Django seem to choose hybrid. It makes sense because you get the CSRF / XSS safety benefits but I'd love to see how others tackle a fully decoupled Django stack e.g. oAuth, JWTs and how they do their CSRF / XSS security. It's an area I need to learn more about.
Lorentz formulated his ideas in terms of a motionless aether. But his aether theory yielded predictions identical to special relativity, so later physicists ditched his interpretation in favor of Einstein's theory that didn't need an undetectable global reference frame.

Overall, we can't really have 'conclusive evidence' against any mechanism, as long as our observations might possibly be simulated on top of that mechanism. So as far as evidence goes, 'what really exists' might be higher-dimensional strings, or cellular automata, or turtles all the way down, or whatever.

Instead, physics has some number of models (either complementary or competing) that people find compelling, and mechanisms on top of those models to explain our observations. If you did come up with a modern aether theory, you'd have to come up with a mechanism on top of it to explain all the relativistic effects we've observed.
Wow, it seems like the UK education system is a very severe environment. Remember Anthony Hopkins saying the same thing about it being brutal, having received abuse from both the teachers and the other students.

Yeah, just from my perspective having gone through the US public schools, the schools here seem to be a lot more open and friendly (following the American stereotype). But at the same time, we probably have a lot lower standards in terms of learning, and also the US has a lot of variation in school quality.
Yes, and breaking that final gold-dollar link to fix the overspending issue caused productivity to be disconnected from the money supply, thus allowing more of the value capture to happen to those who could create equity or be loaned money.
Why is it bad when China (supposedly) creates propaganda on tiktok but it’s good when the US creates propaganda on facebook?

You’re not a government, you’re a person. Either way you’re being manipulated, and the US government definitely doesn’t have your best interests in mind.
We say the "aether" as it was originally conceptualized in the 19th century doesn't exist for the same reason we say that Russell's teapot or Carl Sagan's invisible dragon in the garage doesn't exist: we have a model of the world that makes all the same predictions without it, so it gets scraped right off by Occam's Razor.
>Cloudflare is not profitable [1]. I’m wary of what might happen when they need to become profitable

The unit economics are sound. They have 76% gross margin, so it's not like they're selling $10 movie tickets for $8, and unlike companies like uber, they're probably not using their marketing spend to buy revenue (eg. spending $20 in promo credits to get $50 worth of sales). There's nothing wrong with a business that "unprofitable" when their unit economics work out, and are plowing their profits back into expanding the business.
You still have not given any evidence how DJI is not a national security risk?
> Adults can watch something happening and think nothing particularly significant is going on while some kids are experiencing extreme internal distress.

I think because that is also often because they regard it as normal for kids. A lot of people say things like "bullying toughens them up".

They would not think its OK for the same things to be done to adults. I wonder what the toughens them up lot would think if I showed up at their house with a few friends and gave them a light beating - I think calling the police would be a more likely outcome than thanking me for teaching them to be tough!
The way kids learn to "deal with people" is by becoming more and more like them until they fit in. This can be a good thing or a bad thing, depending on the people in question.