skysight-inc/HackerNews huggingface dataset:
Show HN: Pramaana, a simple command-line reference and full text manager
Zotero is one of the "big four" apps of my life (alongside VSCode, Obsidian and a web browser) -- I use it as a reference manager (via BetterBibTeX) plus a library (via Zotmoov).

One thing I really disliked is all the point-and-click one has to do in Zotero, because all the category structure is stored within the app itself (i.e. in a database, rather than in the trivial way on the filesystem).

`pramaana` is to Zotero what `pass` is to Bitwarden.

A simple CLI tool for managing references and full texts in a folder on your filesystem.
Seeing Radeon VII on the deprecation list is a little saddening, unless they start putting out more 16gb+ GPUs that aren't overly expensive...
> if you think this wont affect you, you are out of touch

This is a disturbing thing to me when people want to discuss the tech but without the politics (and the rocket launches but not the fallout).
Hey there, quick suggestion as a PhD Linguistics candidate and avid language learner!

The best way I've found to identify vocabulary most important to my life is through journaling in the language I'm trying to learn. Describing exactly what I did that day, my thoughts, etc, as best I can.

I had thought of doing the journal entries digitally and gathering dictionary headwords from such journal entries, whether they're written in my mother tongue (English) or not, and use the built dictionary lists to drill vocab.

Traditionally you'd use a lemmatizer with a morphosyntactic tagger for the language to identify the dictionary words, but AI is serviceable these days to easily identify dictionary words from long-form text in many languages, though honestly would be surprised if AI outperforms the traditional methods already.

Good luck and have fun :)
Nerd Reich
Nobody is asking you to drink kool aid.

In this thread are numerous nuanced disagreements with people sharing pros and cons of difficult life choices they made. I would suggest reading and reconciling these comments with your own life experience and values, in the best possible faith.

If you have zero interest in startups. These threads and this forum might not be of interest to you.
It's HN users flagging this story all day, not the mods
One of the things I often find missing in articles and discussion of these topics here on HN is the understanding that different people are really quite different.

Articles or comments like this often read like moral judgements. You should be X to succeed. Being X works for me, and it should for you. If X doesn't work for you, it's your problem. There's usually little considering that achieving X may be significantly easier for some than others, or that there may be other ways of achieving a persons goals that work better for them.

This article is better than most in that it has a well defined scope, large organizations. I don't have any major problems with the content, other than I'd like some more time spent on wether the model they are applying is really as applicable to the situation as they claim.

I must admit to some bias, as I do no do well in large organizations, and the description of frustration in the article doesn't resonate with my experience of frustration at these orgs. I left the last place I worked because it was bad for my mental health. In many ways it was a dream job. It payed extremely well, I liked the people I worked with, and it wasn't that hard. Eventually though, I just couldn't do it anymore, and left for a small startup. I didn't realize how bad it was until I noticed I could still feel myself physically unwinding three months later.

I've been at this company for three years, and still love working here. It's absolutely not frustration free. I am however, much better equipped to handle the kinds of frustrations I face at this new company.

The author of the article says:

"It’s like learning to navigate a bustling city. At first, the traffic, noise, and crowds seem like overwhelming obstacles. But over time, you see these elements as essential aspects of urban life."

I've experienced this first hand after moving to NYC, and it's true, but it's also important to remember that some people just don't like cities, and that's Ok.
The Rekordbox.xml format [1] is quite simple. Note the `<TEMPO>` and `<POSITION_MARK>` tags.

But Pinoeer can be weird and there's a lot of old (even ancient) equipment out there, so sometimes it's a case of finding the lowest common denominator and sticking to that.

[1]: https://cdn.rekordbox.com/files/20200410160904/xml_format_li...
I think most large bureaucracies are susceptible to this. They form of an overlay psychosis.
In Germany it is somewhere around 55% of the population.
Downloaded the 14B, 32B, and 70B variants to my Ollama instance. All three are very impressive, subjectively much more capable than QwQ. 70B especially, unsurprisingly. Gave it some coding problems, even 14B did a pretty good job. I wish I could collapse the "thinking" section in Open-WebUI, and also the title for the chat is currently generated wrong - the same model is used by default as for generation, so the title begins with "<thinking>". Be that as it may, I think these will be the first "locally usable" reasoning models for me. URL for the checkpoints: https://ollama.com/library/deepseek-r1
I am learning Turkish so I built something like that for me. You can highlight any word online and it will translate colloquially so you can actually use it irl.

It also has audio and pronunciation. It is around the halfway mark in the demo.

demo: https://imgur.com/a/full-demo-so-far-O2fzBJn
The linked "back to back" video in the article has been removed. Someone posted a youtube in the other flagged HN entry: https://youtube.com/watch?v=joV-9FFoA3Q

At first I figured the video would show him making some vague imitation people were overreacting to but no, full on mind blowing salute.
> the $10M Virgin acquisition

I think he wrote that he didn't make anything from that. He held onto the equity because he (unfortunately) thought Virgin would turn it into a success.
I do not use GitHub Actions for these purposes, and if I did, I would want to ensure that it is a file that can run locally or whatever else just as well. I don't use GitHub Actions to prevent pull requests from being merged (I will always manage them manually), and do not use GitHub Actions to manage writing the program, for testing the program (it would be possible to do this, but I would insist on doing it in a way that is not vendor-locked to GitHub, and by putting most of the stuff outside of the GitHub Actions file itself), etc.

I do have a GitHub Actions file for a purpose which is not related to the program itself; specifically, for auto-assignment of issues. In this case, it is clearly not intended to run locally (although in this case you could do so anyways if you could install the "gh" program on your computer and run the command mentioned there locally, but it is not necessary since GitHub will do it automatically on their computer).

on:
issues:
types:
- opened
pull_request:
types:
- opened
permissions:
contents: read
issues: write
pull-requests: write
jobs:
default:
runs-on: ubuntu-latest
steps:
- run: gh issue edit ${{ github.event.issue.number }} --add-assignee ${{ github.repository_owner }}
env:
GH_TOKEN: ${{ github.token }}
GH_REPO: ${{ github.repository }}
Yeah, what is the point of developer mode for a device you’re not “allowed” to develop for anyway?
A few years ago I had sleep issues related to my CPAP, I was essentially unable to get to sleep with it on. My doctor prescribed 5mg of Zolpidem, which was enough to knock me out without making me do strange things in my sleep (at least none that my wife ever told me about). It didn’t cure the insomnia, just overwhelmed it.

I’ve given up on the CPAP, and I’ve managed to get off the Zolpidem as well…not that it’s addictive, but it was still the most effective way of getting me to drop off, though I have a tendency to wake up in the wee hours and have trouble getting back to sleep. I didn’t feel comfortable taking the Zolpidem long-term.

My doctor suggested melatonin. 1 mg is what she recommended, and it has been as good as the Zolpidem ever was at making me sleepy, and better at keeping me asleep.
The security threat is real, they got ddos attempt to their mqtt service last year from 3rd party apps.
The fix is not good though, distributing private key.
> Charging for a new eSIM is dubious

The prices charged are often too high but depending on the setup the provider is using they might actually pay a vendor a fee every time an eSIM profile is generated.
What Classes Would You Take as a Yale Undergrad?
I mean that the extracted cert that's going around is from the client (Bambu Connect) side. Everything it would get used for is a function of the client and how it talks /to/ the printer.

Even if it is used to sign some communications, it doesn't matter if it's expired or not on the server side (the printer side), unless the server chooses not to accept it. And then updating it would be a matter of updating Connect; the client.

There's no reason -- other than hyperbole -- to infer that a certificate which expires on the client side will cause the printer to stop doing anything.

For a web-y example, think of how a website which needs a client cert for auth -- like lots of gov't stuff -- would handle a client cert expiring. It'd either accept it anyway, or reject it. But it wouldn't mean the website breaks. And thus claims of that client certificate's expiration being a killswitch for printers is simply wrong.
> At least we got some good universities out of the 19th century iteration.

You mean the ones that turned around and produced the current market fundamentalist and elite-run culture we have today?

What a coincidence.
I don't really see what having a "developer mode" offers here beyond the existing solution. The current mqtt is already locked down with a unique password and AFAIK the endpoint was read-only anyway.

Don't get me wrong I'm glad they're responding to feedback but the feedback shouldn't have been required in the first place.

I'm all for better security on products(esp ones that heat up to 300C!) but interoperability with open standards makes it a better product overall and given the direction we've seen in the IoT space I think they've done quite a bit of damage(even if not intentionally) by not taking more care in this area.
> Hum, the alternative is OrcaSlicer stops working with Bambu printers...

Which is fine, no? Plenty of other good printers available.
My point was that U.S. automakers did not have to start from scratch with regards to propulsion as you claimed.
You basically achieve the same result on github actions if you just ignore all of the github action yaml “magic” settings in the syntax and let your makefile/script do the logic which also makes it trivial to debug locally. But upvote because I do love sourcehut, it’s just so clean!
>Low information voter, reason your party lost and will continue to

It's funny, in a sad way, that after so much discussion here about how silly it is to have this us vs. them, side vs. side mentality, that we end up with someone saying this.
Just try it, it's completely free: https://mixxx.org/download/#stable

Mixxx is entirely community driven: There is no company behind it, everything is done by unpaid volunteers.
People seem to be missing that FTP and MQTT are generally insecure protocols. I think FTP is probably the bigger issue than MQTT. This kind of stuff is common in home IOT networks but would never pass security audit on a corporate network.

Bambu is growing up, serving more corporations beyond the hobby community, and probably has been asked to beef their security up to make it easier to deploy their printers securely.

Moving to Mutual TLS via a controlled client like Bambu Connect is a pretty industry standard approach to secure, authenticated communication that doesn't require an internet connection, it is done with digital signatures offline.... and thus it can be done over a LAN. It's how many web APIs inside a corporate network are secured. It's how web browsers are secured. Microsoft, Mozilla, Google, Apple, etc. all send you revised certs/keys regularly in your OS or browser patches. Client authentication via x.509 cert signature or subject verification isn't super common on the public web but it does happen a lot with mobile apps or thick client apps, or some websites, e.g. SAP's many websites often use it to verify you're a customer.
Please link to studies when referenced. Otherwise is just seems like an appeal to authority especially as your post is very anti the topic discussed.
> In short they are saying that if the nation states hadn't opted to use Matrix they would never have bothered developing this Rust version, which only shows that they were never sincere about developing a performant open source version

At that point, it's nice of you to assume that they are even capable of making it performant. But it is indeed "remarkable" that the people who started this, and who couldn't get anywhere with it, for over a whole decade, are still behind it today.
"Please don't post insinuations about astroturfing, shilling, brigading, foreign agents, and the like. It degrades discussion and is usually mistaken. If you're worried about abuse, email hn@ycombinator.com and we'll look at the data."

https://news.ycombinator.com/newsguidelines.html
Could this agi cure cancer, and would it be in the hands of the public? Then sure, otherwise nah.
Bambu Companion (unfortunately iPhone only) does more than Handy and works on LAN. Using it today in fact! https://www.youtube.com/watch?v=LZpDQN9zgUI
> Money is worth more now because it can be invested and grow in the future

This is circular. Why would money magically get more valuable in the future?

Money is valuable for its uses, not intrinsically.

The reason why you can get interest on money is because people and businesses need it NOW to do productive things, more badly than in the future.

This is the entire principle behind discounting cash flows.
The title is watering it down a bit. The video leaves no wiggle room and it should not have been met with applause.
Developer mode is just "how it works today" mode. It's insecure, and uses private APIs, and thus shouldn't be used, but people will anyway, so they're listening to their customers.
Love mixxx! I use it regular for DJing with an ancient ddj sb2 controller
People with principles are dangerous precisely because they aren’t bending the rules in support of the body politic.

You want a boy scout that focuses more on the group than the ideals.
Thoughts on FSI methodology? That's what I used for mine (my app).
Malicious extensions circumvent Google's remote code ban
As it turns out the US actually lost WW2. Well how about that?
Ah the classic door in the face technique

https://en.wikipedia.org/wiki/Door-in-the-face_technique
Please don't post about things you don't know anything about. The internet is muddled enough as it is.
Chrome Experimental Prompt API Using Ollama Instead of Gemini Nano
Chrome 127+ introduced an experimental Prompt API for local AI experimentation using Gemini Nano. I modified Chrome's AI implementation to talk to Ollama instead of Gemini Nano. The result? Any web app built for Chrome's AI API just works with Ollama's models!
The best ROI for the money is probably purchasing a SCOTUS justice.
Yes, the default workflow on the product is that all prints go via their cloud service. For the first year or two of the X1C's existence this was the only way to print, but they later introduced lan mode.

Leading to obvious speculation as to why they have stuck themselves processing megabyte g-code streams between your desktop and the printer on the same network...

But since cloud use is optional anyone with the security/reliability/longevity concerns just don't have to use it.

Personally I don't see the cloud stuff as providing any value at all though I know people whose kids print stuff from their makerworld site via their phone app that consider it useful.
He’s an awkward autistic guy. He does awkward stuff. That’s not him being a Nazi.
Yes, exactly. (Maybe I should have said "widely read".)
WW2 and Cold War.
There's plenty more evidence out there that answers your other questions. That's just to refute the main concept of a 'fish in a barrel' style massacre that's been fed to us. Media also don't tell you that the protests were largely due to economic inequality and corruption that came as a direct, predicted result of economic liberalization from Deng. Consider also that the masses were literally JUST mobilized to seek out capitalism and destroy it violently during the cultural revolution when suddenly the elites in their society opened up to capitalism and even participated. They also don't tell you about the soldiers who were burned alive or shot by protesters, prior to any gunfire. Of a million there, between 300-600 protesters and plenty of soldiers too, wheras the media pushes the narrative that thousands were slaughtered like fish in a barrel in the middle of the square. Overall a tragic event and why social stability is so important, but it's not the "spirit of an oppressed people" that we're always told it is, they're just building the pretext for a "war of liberation" or other hostilities.

This is active propaganda. You think the Gov spends billions on propaganda overseas and they make no effort internally? I mean think about it for a moment.

https://responsiblestatecraft.org/china-cold-war-2669160202/
https://en.wikipedia.org/wiki/Operation_Mockingbird#External...
>Those 3 events can easily saddle someone with 100k of debt. Surely you can understand how that might hamper an up and coming entrepreneur.

That is the case in the UK as well. If you have a start up in which you have invested capital and suddenly can't work anymore that is a huge financial disaster. The state is not going to fund your business while you recover in hospital.

Also the medical debt is something you would only have if you weren't insured. Both US and UK have health insurance, the only difference is that in the UK you have to pay for it, in the US you don't.

In any case having a well funded startup is a far better safety net than a forced insurance.
I've read a few different standards for revoking birthright:

1. Probably the weakest notion is to revoke birthright going forward on children born in US to parents without legal status.

2. A stronger notion seems to be the revocation of birthright going forward on children born in the US to parents with green cards but not yet US citizenship. This seems to be a popular form of jus sanguinis in some EU countries.

3. I'm not sure how serious is the talk about revocation of birthright retroactively for all those born on US soil but to parents who at the time only had green cards.

Does anyone have an idea of the momentum behind the stronger forms of revocation?
It's the opposite actually. This is why zionist media and their people are upset about their dead during these past months. Hamas offered a deal from the very beginning to get back Palestinian hostages, but the zionists refused. Now, the zionists have been forced to accept and it's clear the amount of upset within their government.
One really interesting omission to this post is how the architecture of GitHub actions encourages (or at the very least makes deceivingly easy) making bad security decisions.

Common examples are secrets. Organization or repository secrets are very convenient, but they are also massive security holes just waiting for unsuspecting victims to fall into.

Repository environments have the ability to have distinct secrets, but you have to ensure that the right workflows can only access the right environments. It's a real pain to manage at scale.

Being able to `inherit` secrets also is a massive footgun, just waiting to leak credentials to a shared action. Search for and leak `AWS_ACCESS_KEY_ID` anyone?

Cross-repository workflow triggering is also a disaster, and in some circumstances you can abuse the differences in configuration to do things the source repository didn't intend.

Other misc. things about GHA also are cool in theory, but fall down in practice. One example is the wait-timer concept of environments. If you have a multi-job workflow using the same environment, wait-timer applies to EACH JOB in the environment. So if you have a build-and-test workflow with 2 jobs, one for build, and one for test, each step will wait `wait-timer` before it executes. This makes things like multi-environment deployment pipelines impossible to use this feature, unless you refactor your workflows.

Overall, I'd recommend against using GHA and looking elsewhere.
I've had it as well, and it made me wretch just to smell it. It smelled like ammonia mixed with rotting fish (because that's exactly what it is). I did get a piece down, and you're right, the taste wasn't as bad. But yeah... all set with that now.
He wasn’t a “founder” at Google. Google IPO’d in 2004. How many of the $n number of startups founded around the time that Google was founded and it IPO’d were successful and how many disappeared into obscurity?

There are so many people especially on HN who succumb to survivorship bias. Most failed startup founders never admit it. The original author is not one of them and he was willing to be open about it - that’s a compliment by the way.

“Many” may benefit from them. But statistically, most don’t
How do you square away your relationship with Y Combinator, which has been by all means positive, with the eager collaboration of its leadership with the most anti-immigrant administration in history?
They’ve suffered real brand damage. Any of the changes (original, or these) seem like they would win over unconvinced potential customers, yet they’ve actively turned some away.
Children, influence, perception, politics, ideals, betrayal — all of them are hard topics to talk about and this place is almost certainly not the right place to do so, but perhaps because of that — or perhaps just because — your comment holds a real poignancy for me.

It’s a piece of information that potentially has little to no signal for many people, but for you it is very
real, and that made it real for me. Thank you for sharing.
The play here is obviously that they want 3rd party services to use Bambu Connect instead of direct protocol integration. They will make Connect easy and direct too much work. That is what all the Panda talk was about. That way, when Bambu inevitably changes the model ( eg. Subscription ), we will have to pay to get access to the ecosystem. But Bambu will be able to claim that it is not them. We still support developer mode they will say, it is the evil third parties that do not.

We need to make sure that dev mode becomes the de facto default. Don’t fall for connect.
Um no? First, Bambu is the best, by far. Secondly, Orca Slicer is a fork of Bambu Studio and the vast majority of its users are Bambu customers that want extra features.
I wasn't aware of any specific vulnerabilities in the basic MQTT design (assuming it's over TLS).

I agree that MTLS for embedded m2m/IOT auth against MQTT is pretty standard (see AWS IOT, Azure etc) but do paper printers used in enterprise which have displays typically require MTLS for printing?

Surely any corporation with a security team would VLAN and null route these things anyway - only the enterprise targeted X1E model has an ethernet port, all the others are WiFi only.
I think this is spot on. The confusion for me comes from the fact that, as far as I can tell, I've never met a prig in real life. And yet they seem to be the biggest political issue of our time. Is it because I live in Australia and it's more of a US thing? Or is it because I'm not online as much maybe? I find it really confusing.
Could you clarify how the vast majority of people in the world who will never set foot in Peterborough (including me) should interpret that?
This is serious gaslighting.