skysight-inc/HackerNews huggingface dataset:
Looks cool.

I suspect the software is doing a lot of the heavy lifting, because the mechanism is (looks) quite simple.

Here are some flaws/potentially misleading features I noticed:

By design, the robot has only 2 I/O functions (3 in 3D), which are the motors on the strings. Thus it can't be any more capable than any other machine with 2 I/O.

In fact, the design is simply a function that maps limited 2d movement and grabbing onto 2 motors.

Pulling the strings affects it's tip first, so getting it into a specific position is a pain. Making an "S" shape, would require first rolling it all the way one way, and then unrolling it the other way.

In the video, they have the robot already setup in a specific position, and they don't show how hard it is to actually get it there. All the complicated moves (around rocks+drop off) are very specifically set up, and might be non-reversible.

The "contact detection" requires one of the strings to be fully contracted. And all of it relies on the manufacturing and environment to be consistent with minimal friction.

This robot is a bit like brain*uck. You can do stuff, but you need to do it in a bit of a roundabout way. Not to say that there isn't a sense of elegance to it.
> But why risk it?

Because production is not staging or test and never will be. At the very least, you’re risking that your production configuration is incorrect and you won’t find out until customers test in production for you. More commonly, as we experienced with Authorize.net, the test environment is subtly different from production and the only documentation for the differences are 6 year old posts in migrated support forum threads.

Just have someone run a charge on their personal card and reimburse them.
Oh, right, sorry! I misread that as something along the lines of “sends to my own mailbox”. Perhaps replying on HN first thing in the morning wasn’t such a bright idea haha

FWIW Mailgun also has a receiving API (proprietary, unfortunately): https://www.mailgun.com/products/send/inbound-routing/
Not so accurate with Brave but great on Firefox
iirc with this setup, Google just changes the "reply-to" and someone can still figure out your actual Gmail address.
Well... https://docs.python.org/3/library/idle.html
CJS CD Keys. I used them before years ago for Visio 2019 and windows 10 pro. Both still purring away nicely
the only thing this proves is that you can make any tool’s UX look terrible by putting all settings as one big blob.
I’ve been using Immich for about 4 months. My original goal was to migrate off of google photos. Immich is the best self hosted option. But google photos search is so much better. You can search for a location, date, item, landmark with natural language Immich takes a little finessing to get the result you’re looking for. It’s also not great for pet photos yet. I’m running both in parallel hoping some day Immich catches up with some of those features. I’ve donated for the license that funds some of the development. Even over the last four months I’ve seen some improvement. The mobile app needs some work for background syncing but it’s on the road map for early 2025.
Can I suggest you try a month cold Turkey with no internet or smartphone. This cured my “ADHD”. I could read programming books cover to cover like it was the lord of the rings after that month.
Couldn’t LLMs cite primary sources much the same way as a textbook or Wikipedia? Which is how you circumvent the biases in textbooks and wikipedia summaries?
I had fun with it. Got 6 in a row before moving on. I needed to use Google Maps to help me with the directional references. Might be nice to have it sync on a map with guesses and show the path as the user zooms in on the solution. Would be fun to see it afterwards as well, perhaps showing the flags of the countries you guessed along the way.

I was playing from my phone and typing the country and hitting the send button did not work, it forces you to tap in the drop-down. I'd maybe have it submit if there is an exact match or at least provide a message to select from the drop-down. My onscreen keyboard was blocking the drop-down originally.
They're a very nice service. I set it up with a custom domain a few years back and forgot about it and recently realized I had negative $9 in credits. I couldn't log into the webmail to access the emails there and it seems they stopped accepting emails. But as soon as I paid the $9 and topped up with a little more credit I was able to access everything.
Way beyond my skills to say. I just use a reseller who’s been around for years and has decent trust pilot reviews. I wouldn’t use Amazon though!
You should be backing up your email locally regardless, even if you use Google Workspace or Fastmail.
Nobody in the supply chain seems incentivised to get this right. Our feeds at work are swamped with low quality CVEs and the commercial vendors we pay for "intelligence" just leech off community feeds and add zero value.

We get told there are CVSS 9s relating to kernel vulns due to kernel header packages in containers, we get 9s for "RCE" and when you go look it's applicable with extremely niche settings or compile flags that no OS distribution in existence actually enables. Nobody at the "supply chain" tool vendors seem to take 2 seconds to sanity check ANYTHING - let alone do the kind of high effort thinking that the curl or go projects are looking for.

Sometimes you go look and there's no bug at all - you go look at the github issue thread and the reporter misunderstood what they were looking at :/

I guess more "findings" = "more value" in demos when naive customers look at the output.

The way I see people dealing with this is:

* Make it easy to build and deploy regularly. Try to do that.

* Don't look at individual issues at all unless your hand is forced. Investigating low signal CVEs is net negative value when you factor in opportunity cost (i.e. the other things maintainers could be doing to make the software better or more secure).

* Keep an eye on whether issues are forever trending up, i.e. the golden signal is "is this asset being maintained at all". It's easy for things to drop off the maintenance radar.

* Pay for "overlays" that add actual signal (of exploitability) to the crap flood. Do investigate when a "high signal" vuln pops up on your dashboard. If you have a dedicated security team it seems reasonable for them to handle this bit[1].

[1] 90% of the time if you have a few staff who hang out on the right forums they will hear about the genuine "CVSS 10s" at the same time your security team does, paying for vuln intel mainly serves to formalise things a bit vs having to handwave when someone asks you what your process for detecting "critical vulnerabilities" is.
DeepSeek gets Silicon Valley talking
And FFmpeg. :)
The Müller-Lyer illusion is not cultural after all
I'll hold your hand while I offer this groundbreaking revelation: the vast, vast majority of people are in Windows-land. We're even having issues with the younger generations who do everything on their phone and this don't really have any concept of file systems. Get out of your echo chamber. That means getting off of HN and start looking at how laymen use computers.
I’m happy to use LLMs in all other contexts, quite enthusiastically actually. I’ve got DeepSeek 32B running locally on a beefy PC already.

It’s just in the context of poetry, and literary writing in general, that I feel differently about them. There’s also the fact that I haven’t read all that human writers and poets have already written (and will never be able to in this short life) so there’s no need to turn to synthetic output. No supply problem exists. Poetry in particular is something to ponder over and over. You can’t really run out.
Legit question: What can an ISP collect when most of the time I'm going to secure "https:" websites? I mean, they can only see the website I'm going to, but not what is going on there, right?

Is just collecting where people are going that lucrative to sell?
I think the issue is that one possible scam is to sign up for a stripe account, run a bunch of charges from cards you control, then when the funds from Stripe hit your bank account, you run a bunch of chargebacks. So this policy that allows them to ban accounts that have even a whiff of this going on.
It's about 80% of millionaires and billionaires.

Which sounds much more reasonable when you consider that many small businesses owners will be millionaires but not enough to be considered super wealthy. No evidence that billionaires are mostly self-made.
I used to be a NetHack speedrunner. Pressing the keys real fast. All of it in terminals. I had the fastest run for almost 10 years. Input lag was a thing I thought sometimes. Everything below is based on pure gut feelings because I never measured any of it.

I've long wondered why some terminals and operating systems felt like they were pretty laggy. In the sense that if I press my character to move, how long until they actually move?

iTerm2 on MacOS is worst offender. But I can't tell if it's iTerm2 or MacOS itself. I remember trying other terminals on Mac, and it was mostly the same. iTerm2 itself also had bunch of rendering options, but I couldn't get them to do anything I could actually feel affected input lag. One thought I had was: maybe iTerm2 added 1 frame lateness, and MacOS itself added another? But that would be ~30ms on a 60fps monitor which I can easily already tell on a server-connection NetHack.

I also have no idea if measuring "N frames late" is actually a sensible way to think about this. I assume computers know when a key is pressed at a higher frequency?

Linux xterm and rxvt were the fastest that I remember, on X11 (I've never used Wayland like in the article, well not for NetHack anyway).

I have no idea how compositors work on any of these operating systems or X11/Wayland to say anything smart about them or why they would be slower or faster.

Reading the article...I realized I have that same iPhone 15 Pro with 240fps recording. I could replicate that experiment, but testing out terminals on various operating systems instead I used to play on. So I could now test if my gut feeling was right all along or not. or maybe it lied to me all these years.

I wrote the idea in the article down on my notes, maybe when I'm bored enough I'll try it :) and I can stop saying propaganda about iTerm2 being slow if it turns out I was completely wrong. Maybe I have easier time because all my NetHack days were 60fps, so I have more leeway in measurements.

I'm not active in NetHack playing anymore, although I sometimes play it as a comfort game.
What China Got Right About Big Tech
The small California town with ties to one of Earth's weirdest secrets
Something about the writing style in this article - and especially the headline - really grates on my nerves.

But after I set that aside, it is an interesting piece of history.
I do want all the features of a Gmail, I just don’t want Google going through it.
The tool looks great. The 100KB limit is too less. I can open a small CSV file in excel and eyeball it to make sense of the data.

I would suggest atleast a 3 MB file. That's the amount of data where human cognitive limits are reached and your tool will become helpful.
These are some pretty obscene claims to make with absolutely no proof or citation.
Can you still buy phones with sim cards that don't require ID to get working?
Not in Europe, UAE or Australia.
The public went against the flow at the voting booths in 2024: "Big voter turnout this year benefited Republicans, contradicting conventional political wisdom" (https://apnews.com/article/election-2024-voter-turnout-repub...). Didn't work out too well, did it?

Sometimes it's smarter to let sleeping dogs lie.
Now let's do ls
Last year I migrated from my hosting providers email service to Proton Mail after 20 years. I too was worried about preserving mails.

I have used Thunderbird for everything, set to download everything and never delete, so had my primary backup there. I take regular backups of the profile directory as secondary measure, which are kept on my NAS and offsite.

What I did was to just decide to do a hard break. I renamed the old IMAP accounts, added the Proton Mail accounts using the IMAP bridge, and then configured my DNS to point to Proton.

DMARC and all that was easily set up as well thanks to Proton having nice guides and active verification.

Now I still have access to my old mail in my old account folder, and I can use the Proton Mail app on my phone for new stuff.

I also migrated a secondary mail, which was not using my domain and which I've had for almost three decades. There I had to do the laborious task of changing any accounts tied to it, and notify people still using it. I've been keeping it operational for a year and still get the occasional mail, but at a point where I'll be retiring it soon.

Overall been very happy. It showed me it was easier than I feared as long as I have Thunderbird and mail accounts under my own domain.
The vast numbers of low income vegetarians in India would no doubt find this argument very novel.
I think you can still add an SMTP server in Gmail, and it will use that (with a proper From header, DKIM and all).
I Tried to Bootstrap a Startup
"Calif.-founded EV maker Canoo, once worth $2.4 billion, goes belly-up after moving to Texas"

Full title. Another L for the SPAC era.
Please, refer to the article discussed here: https://news.ycombinator.com/item?id=41808013

TL;DR; 9950x peak fp16 is 10 Tops, 4090 peak fp16 is 650 Tops, and H100 is about 2 Pops.
LE took off because everyone was charging ridiculous amounts for certificates and few people needed the verification that comes with that. ISRG created ACME for LE.
did you compare with Zoho mail?
Keep in mind some OpenSCAD designs use complex library dependencies, and baked source geometry.

The simple language IDE preview pane sometimes chokes on the surfaces that are compiled, and on rare occasion must be done via command line. Thus, some complex designs may take hours to generate a model.

The slicers are meant to be more CAM tool than CAD utility, but people are mixing features as use-cases increase in complexity.

Best of luck, =3
Hedy: Textual programming made easy
In a lot of fields, p=0.05 is good enough to publish. p=0.0001 means it's really f*ing unlikely that the difference in means is due to random chance.
Used to be 55mph, it was lowered to 40 tops after an accident in 1995, some places the limit is 15mph

"The Trains Are Slower Because They Slowed the Trains Down"

https://www.villagevoice.com/the-trains-are-slower-because-t...

Similarly there's a top speed of 79mph on the rest of the country on most passenger rail since the Naperville Train Disaster of 1946

https://en.m.wikipedia.org/wiki/Naperville_train_disaster
“I have better information than the president of the United States… HE is a narcissist”

Yep. Just checking to make sure I’m following along correctly.
Huh. That's exactly my experience.

I suspect that its a combination of three things: first, they are not frequently used, second, their CLI is very complex, third, their design violates normal CLI conventions in weird ways.

I don't have the same problem with things like docker or git, which are arguably more complex.
Could you say more? Is there a tutorial I could follow?
I don't agree with you. A key reason to host your email with a reliable cloud storage provider is to have backups handled for you. Fastmail is particularly good in that respect, since it takes periodic backups for you, allowing deleted items to be accessed.

To put things in perspective, I dare say that many large commercial organisations who rely on Office 365 are not backing up emails locally. They do likely have fancy retention holds preventing nefarious actors who compromise access to the account nuking things. I think Fastmail's backup is limited to 7 days. Outside that is a risk; it's one I'll take.

Maybe we have different perceptions of risk. But I think one can reasonably take the view it is unnecessary to have an independent copy in this scenario.
Thank you for the lost hours :) Fascinating read.
I would argue that core systemd CLI interface is fairly compact and memorizeable (systemctl start-stop-restart, simple journalctl invocations). Some obscure directives still result in a trip to manpages though.

Openssl, PGP and (mentioned in the thread) ffmpeg are often run on one-off basis with changing inputs and outputs and thus almost always require searching the Internet for the correct flags.
Of what use are the peasants in an AI driven and dominated feudal society, though. Maybe us peasants be useful in wars or battles between the different lords, but this would also probably be performed by automated drones and robots.

It would seem that the Lord‘s will have nothing to Lord over though. Who’s gonna buy their crap and for what reason will they they create anything? The whole thing seems like a massive doom spiral.
All this proves is that it's possible for a protocol to not be the determining factor; which says nothing about whether it's possible that it _is_ a determining factor.
Shhhh.... don't tell the CDC.
Great article, thanks for writing it! Really great summary of the current state of the AI industry for someone like me who's outside of it (but tangential, given that I work with GPUs for graphics).

The one thing from the article that sticks out to me is that the author/people are assuming that deepseek needing 1/45th the amount of hardware means that the other 44/45ths large tech companies have invested were wasteful.

Does software not scale to meet hardware? I don't see this as 44/45ths wasted hardware, but as a free increase in the amount of hardware people have. Software needing less hardware means you can run even _more_ software without spending more money, not that you need less hardware, right? (for the top-end, non-embedded use cases).

---

As an aside, the state of the "AI" industry really freaks me out sometimes. Ignoring any sort of short or long term effects on society, jobs, people, etc, just the sheer amount of money and time invested into this one thing is, insane?

Tons of custom processing chips, interconnects, compilers, algorithms, _press releases!_, etc all for one specific field. It's like someone taking the last decade of advances in computers, software, etc, and shoving it in the space of a year. For comparison, Rust 1.0 is 10 years old - I vividly remember the release. And even then it took years to propagate out as a "thing" that people were interested in and invested significant time into. Meanwhile deepseek releases a new model (complete with a customer-facing product name and chat interface, instead of something boring and technical), and in 5 days it's being replicated (to at least some degree) and copied by competitors. Google, Apple, Microsoft, etc are all making custom chips and investing insane amounts of money into different compilers, programming languages, hardware, and research.

It's just, kind of disquieting? Like everyone involved in AI lives in another world operating at breakneck speed, with billions of dollars involved, and the rest of us are just watching from the sidelines. Most of it (LLMs specifically) is no longer exciting to me. It's like, what's the point of spending time on a non-AI related project? We can spend some time writing a nice API and working on a cool feature or making a UI prettier and that's great, and maybe with a good amount of contributors and solid, sustained effort, we can make a cool project that's useful and people enjoy, and earns money to support people if it's commercial. But then for AI, github repos with shiny well-written readmes pop up overnight, tons of text is being written, thought, effort, and billions of dollars get burned or speculated on in an instant on new things, as soon as the next marketing release is posted.

How can the next advancement in graphics, databases, cryptography, etc compete with the sheer amount of societal attention AI receives?

Where does that leave writing software for the rest of us?
All of the above, as well as the fact that the incidence of TB is already so low that the vaccine could cause more harm than it prevents.
I find it's the opposite. A lot of people think it's like a Google / Wikipedia summarizer, and don't realize it can be wrong because they think it's something like the Watson computer from Jeopardy
He's a historian. He's using LLMs to assist, a little, in the evaluation of those sources.
Thanks for the feedback. Sure, I will consider increasing the size limit.
One big blob? There are over 40 tabs.
Yeah same, I've built a few integrations with payment gateways. I make extensive use of the test environment, for sure. But when it's gone live I've always done a single test purchase with a real card, just to be sure, and checked that the transaction appeared in the appropriate dashboards and reports from the payment processor.
I'd love this for all the cli tools. Instead we'll get more boot managers and desktop managers.
I wish I knew more about the "hide" function for tucking away threads. It used to be I could hide every single thread I had reviewed until I had a completely blank page, enabling me to dismiss every thread I had already reviewed. But within the past few months, only about 50% of the threads respond to a "hide" button press. I wonder if this issue is related to my browser (Mozilla).
Roasting your Bengaluru "startup bro" vibe: you’re flexing an unreleased iOS 18.1.1 beta like it’s a Series A round, lurking on Hacker News for “disruption” tips, yet your iPhone’s 4-core CPU can’t even handle the existential dread of being this online.
32 active cases actually. 1 new case since January 1st.
A raw LLM is a bad tool for citations, because you can't guarantee that their model weights will contain accurate enough information to be citable.

Instead, you should find the primary sources through other means and then paste them into the LLMs to help translate/evaluate/etc, which is what this author is doing.
Trump made Trump look bad.
IANAL, but I think the distinction is that "give us the password that unlocks this" is forcing you to testify against yourself, producing something from your own memory and forcing you to admit ownership/control of the object. (Which might not even be yours.)

In contrast, "the device opened in response to the same fingerprint/face that the suspect has" is a form of world-evidence which doesn't infringe on your mind, much like "the key found in your pocket unlocked the safe."
I use navi cheatsheets for that. You can store commands with descriptions and easily execute them. This is where I put all the "will need only once a year" commands.

What I do google is ffmpeg, but not before every online editor/converter on the internet completely betrays my expectations and makes me reconsider my life choices.

[0] https://github.com/denisidoro/navi
Using some old tricks that used to work with gpt but don't anymore I was able to circumvent pretty much all censoring

https://i.imgur.com/NFFJxbO.png

So I'm finding it less censored than GPT, but I suspect this will be patched quickly.
Maybe not ADHD specific, but getting a prescription for Propranolol was _the_ biggest game changer for me (for the day-of). It is a beta blocker, commonly prescribed for stage fright (it numbs the flight or fight response/reduces physical symptoms of anxiety).

I only mention it because it can help balance out an ADHD stimulant (and anxiety is commonly co-morbid with ADHD).
Metacommentary: I stopped arguing because this thread is reeking of AI bro non-sense, they can't argue with facts so they continue with vague statements and deflection (e.g like the "Whatever" you've got above). The GenAI bubble can't burst soon enough.

As I said, neuroscience be damned, we've got transformers now. (/s)
I've been using this for a while now just to have mailboxes for various domains. Works well, no complaints.
Shame, I thought they had great potential.