skysight-inc/HackerNews huggingface dataset:
Glad Gemini is getting some attention. Using it is like a superpower. There are so many discussions about ChatGTP, Claude, DeepSeek, Llama, etc. that don't even mention Gemini.
Twenty Four Hours
While framing Ukraine as a European country is not weasel-word-y ?

Would you say that the chances / motives / possibilities to invade Ukraine is remotely comparable with any other European country ?

And no, Turkey for example is not a European country.
I disagree. For one thing I think you misinterpret the legal situation. This is Germany, the provider is on the hook. Secondly, you do not have insight into the communication and I won't share it but I assure you their conduct was unprofessional.
The goal was to ensure that there was a more balanced result of education across the country. California can afford to spend way more per child than Kentucky can, so without some sort of federal level balancing, California's children are just going to be more likely to prosper than Kentucky's. This doubly applies to funds for disabled or underdeveloped children who needs extra support from the school system to be successful. Those programs are going to be largely cut across the red states.
I mean, do we need to replace user agent with some kind of 'browser signing'?
Custom trained yolo v8. I've moved on since then and the work was done in 2023. You'd get better results for much less today.
>Why would an "embedded browser engine" be any better? Electron after all is also a browser engine, and that's what makes it slow and bloated compared to native UI, not the embedded part (by which I asume you mean something like a browser engine wrapper widget).

There are legacy parts of browser layout that make it impossible(?) to optimize some rendering while being standards compatible. If you just chose a subset that is fast to implement and focused on being subset you narrow the scope of the project and enable optimizations.

Electron has to implement everything chrome has to support even though the apps running in it will never touch it.

Also web engines have to be heavily sandboxed because you cannot allow internet code break out of the sandbox.

Native apps shipped with electron already ship Node and just waste resources sandboxing stuff with security layers.
Yes. That’s how branches of government are set up. Judicial and legislative branches are supposed to keep the executive branch in check. Judicial branch is right now working to keep things in check but it will take time, resources and money to address every small thing. Opening the floodgates is a good strategy to overwhelm this branch. Which is where the legislative branch comes in. If they see the executive branch over reaching, you act to stop it. But our legislative branch is not acting (on both sides of the aisle). Btw this is the same problem a lot of modern democracies are facing and is not unique to the US.
The impacts of climate change are real. We have known for a long time that as the climate worsened animals would be more vulnerable to illness that live outside and have to deal with a destabilizing environment.
Go Supply Chain Attack: Malicious Package Exploits Go Module
> * If your visitors are using an up-to-date version of a major browser *
> * they will receive the challenge correctly. *

I'm unsure what part of this isn't clear, major browsers, as long as they are up to date, are supported and should always pass challenges.
Palemoon isn't a major browser, neither are the other browsers mentioned on the thread.

> * Nowhere is it mentioned that internet access will be denied to visitors not using "major" browsers *

Challenge pages is what your browser is struggling to pass, you aren't seeing a block page or a straight up denying of the connection, instead, the challenge isn't passing because whatever update CF has done, has clearly broken the compatibility with Palemoon, I seriously doubt this was on purpose.
Regarding those annoying challenge pages, these aren't meant to be used 24/7 as they are genuinely annoying, if you are seeing challenge pages more often than you are on chrome, its likely that the site owner is actively is flagging your session to be challenged, they can undo this by adjusting their firewall rules.

If a site owner decides to enable challenge pages for every visitor, you should shift the blame on the site owners lack of interest in properly tunning their firewall.
Or build the router image declaratively with Nix.

https://nixos.wiki/wiki/OpenWRT
But hasn't the SCOTUS also ruled that anything the President does as a part of his duties legal? Where does that ruling actually end?
There is a discussion about that on the security stackexchange (https://security.stackexchange.com/questions/133239/what-is-...).
The TLDR:

> SHA-2 family of hashes was designed to be fast. BCrypt was designed to be slow.

Slow == harder to brute-force == more secure.
please don't spread misinformation. it clearly has power, and has been demonstrably exercising that power.

> to shine a light into dark places of government spending

yes, I'm aware that this is the Official Position of the State. but quite obviously that is not what it is actually doing
Better than C++? Better than Lua?
Didn't they find out in Sweden that, given the opportunity, women were not as interested in STEM as they were in other fields?
Disclosure: I'm an engineer at LangChain, primarily focused on LangGraph. I'm new to the team, though - and I'd really like to understand your perspective a bit better. If we're gritting the wheels for you rather than greasing them, I _really_ want to know about it!

> Every time I've tried to apply general purpose RAG tools to specific types of documents like medical records, internal knowledge base, case law, datasheets, and legislation, it's been a mess.

Would it be fair to paraphrase you as saying that people should avoid using _any_ library's ready-made components for a RAG pipeline, or do you think there's something specific to LangChain that is making it harder for people to achieve their goals when they use it? Either way, is there more detail that you can share on this? Even if it's _any_ library - what are we all getting wrong?

Not trying to correct you here - rather stating my perspective in hopes that you'll correct it (pretty please) - but my take as someone who was a user before joining the company is that LangChain is a good starting point because of the _structure_ it provides, rather than the specific components.

I don't know what the specific design intent was (again, new to the team!) but just candidly as a user I tend to look at the components as stand-ins that'll help me get something up and running super quickly so I can start building out evals. I might be very unique in this, but I tend to think that until I have evals, I don't really have any idea if my changes are actually improvements or not. Once I have evals running against something that does _roughly_ what I want it to do, I can start optimizing the end-to-end workflow. I suspect in 99.9% of cases that'll involve replacing some (many?) of our prebuilt components with custom ones that are more tailored to your specific task.

Complete side note, but for anyone looking at LangChain to build out RAG stuff today, I'd advise using LangGraph for structuring your end-to-end process. You can still pull in components for individual process steps from LangChain (or any other library you prefer) as needed, and you can still use LangChain pipelines as individual workflow steps if you want to, but I think you'll find that LangGraph is a more flexible foundation to build upon when it comes to defining the structure of your overall workflow.
7-Zip 0-day was exploited in Russia's ongoing invasion of Ukraine
I use minbrowser.org/ Some sites disallow it... min suggests changing the user-agent setting to something like - Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0
Ha, yes. I started doing that but then lost the will to continue.
Lignin-based jet fuel: A novel and sustainable liquid organic hydrogen carrier
> If you assume that USAID was evil from the oustset,

I'm not "assuming", I know that for a fact.

> because you cant trust anyone who counters it.

Do you happen to live in a part of the Globe that has been under direct USAID (and NED) influence? Something tells me you don't, I do (I live in Eastern Europe), so allow me not to receive lessons from people who know nothing, absolutely nothing, about this type of organisations.
Zero power? Explain that to USAID, Treasury, OPM, and GSA. Actors working on behalf of digital services (i.e. DOGE) are commandeering IT systems and sending out ultimatums to the workforce about complying with their orders at risk of being punished with administrative leave for insubordination. It is a highly unlawful operation that goes far beyond the consult and advise mission you’re alluding to.
I was looking for a take on this that was more than just finding ways not to be inundated.

You don't have to get outraged about something when you think about how that particular article might be trying to fan those flames and how what is reported might just be highlighting the points that push our buttons (but the real set of facts might not be as bad when looked into). Even the things that really are that bad don't have to lead to outrage. I take a wait-and-see attitude about a lot of this stuff we see in the media. There are trolls everywhere, we'll see if anything comes of it. I'm also capable of not liking something strongly without feeling rage with regards to it, while still wanting to combat it if I have a say in it at all.

Of course, "just don't let it get to you" is easy to say but hard to implement. I think it's the only real path that allows the inclusion of social media in our lives, though.
I don't have any issues so far under Librewolf, Waterfox and Ungoogled Chromium.
I'm a Linux user as well but I'm not sure what Cloudflare is supposed to be doing here that makes everybody happy. Removing the most obvious signals of botting because there are some real users that look like that too may be better for that individual user but that doesn't make it a good answer for legitimate users as a whole. SPAM, DoS, phishing, credential stuffing, scraping, click fraud, API abuse, and more are problems which impact real users just as extra checks and false positive blocks do.

If you really do have a better way to make all legitimate users of sites happy with bot protections then by all means there is a massive market for this. Unfortunately you're probably more like me, stuck between a rock and a hard place of being in a situation where we have no good solution and just annoyance with the way things are.
> but how much the big companies are spending (on gpus). That's the metric!

Burn rate based valuations!

The 2000's are back in full force!
I don't know that we'll ever be able to agree on "global standards" though. Software is too specialized for that.

The only software standard that I'm reasonably familiar with is https://en.wikipedia.org/wiki/IEC_62304 which is specific to Medical Devices. In a 62304-compliant project, we might be able to do something like your example, but it could take a while. OTOH, I'm told that my Aviation counterparts following DO-178 would almost certainly be able to do something comparable.

It is going to be very industry dependent, where "industry" means aviation, or maritime, or railroad, or Healthcare, etc... Just "software" is too general to be meaningful these days.
Vulnerability Patched in Android Possibly Exploited by Forensic Tools
For what it's worth, this has been my experience as well. I've seen maybe a handful of full-page Cloudflare walls over the past year, and none have gotten me stuck in any kind of loop
Meigs Field airport in Chicago was demolished (well the runway was) overnight by order of Mayor Daley in the 90s during a contentious fight over whether to close it or not. Laws aren’t fast enough to stop someone with the will and power to act quickly.
htmx has supported moveBefore() since 2.0.3 in October of last year:

https://github.com/bigskysoftware/htmx/blob/master/CHANGELOG...

https://htmx.org/examples/move-before/

We initially asked for this new feature about two years ago and have worked with the Chrome team as they have implemented it. It is going to be a huge step forward for the web!
What would be the cost to do it artificially?
OCaml is fast enough for writing hypervisors, unikernels, networking drivers, powering all Jane Street's business.
Neat, didn't know about that program, thanks. It seems Discovery Mode is more tailored towards their Spotify-generated playlists/radio but also seems to mention Autoplay.

I think that further underscores my point of having a varied playlist, since you're only eligible for Discovery Mode if you have >25,000 listeners.
I deleted my LinkedIn several years ago.

I can only recommend it if you are independently wealthy, want to become an ascetic, or more broadly, your goal is to never be hired or really even evaluated for much in the business world again.

None of the rest of the social networks serve as a sanity check on your resume/application/meeting.
Gemini are Google cloud/service models. Gemma are the Google local models.
Yup, with the small caveat that the category for the award isn't something silly like "best use of AI in a film". I'm fine if it's like best VFX or whatever, but I'd have a hard time if the awards committee created a new category specifically to give awards for AI.
Not apparent at all. You need to update your mental model. "It ain't what you don't know that gets you into trouble. It's what you know for sure that just ain't so."
Ahh I see a liber - but no of course labels don't apply to me - tarian, they tend to believe the same nonsense trumpists believe nowadays so it can be hard to tell sometimes
> DOGE is obviously a completely illegal operation

What laws does it break?

I like to watch those "Auditors" on Youtube who film in public places. Every cop assures them that filming a police officer / police station / inside a public library is illegal. About 25% of the time they detain them, and about 10% of the time they arrest them.

When they ask what law they've broken, they never get a straight answer.
> Between Rust and Zig, the problems of C++ have been solved much more elegantly

Those languages occupy different points in the design space than C++. And thus, in the general sense, neither of them, nor their combination, is "C++ with the problems solved". I know very little Rust and even less Zig. But I do know that there are various complaints about Rust, which are different than the kinds of complaints you get about C++ - not because Rust is bad, just because it's different in significant ways.

> It is so objectively horrible in every capacity

Oh, come now. You do protest too much... yes, it has a lot of warts. And it keeps them, since almost nothing is ever removed from the language. And still, it is not difficult to write very nice, readable, efficient, and safe C++ code.
Seems odd to keep the broken one as the default[0], make the "recommended" one so much longer, and provide none which simply errors on overlong passwords.

Also neither seems to warn about the NUL issue.

[0] I assume for compatibility purpose, but it still seems very dubious.
OP here. I actually tried to delete this posting after I realized the maps are all AI generated and therefore basically worthless.
https://www.lkk-store.com/lkk-map/
[Rant] Google: Making Users Do Engineers' Work
Want to use an AI API? Here’s the difference:

OpenAI / DeepSeek:

1. Generate an API key
2. Install OpenAI client
3. Add your key
4. Make API calls

Google Gemini:

1. Learn IAM (roles, permissions, service accounts...)
2. Grant access
3. Download key file / authenticate via CLI
4. Figure out which region supports your model (because not all models are available everywhere)
5. Hope you picked the right setup—otherwise, try again!

I genuinely believe that if Google cared just 1% more about its users, the end impact would be enormous
With “Next generation, extremely sophisticated AI” to be precise, I wait say. ;)

Marketing joke aside, maybe a hybrid approach could serve the vendor well. Best of both worlds if it reaps benefits or even have a look at hugging face for even more specialized aka better LLMs.
Just a nit—Raspberry Pi often works with vendors and outside contractors (with funding and engineering support) to upstream various parts over time. For example, Igalia is officially partnered with Raspberry Pi to work on Mesa drivers which are in 6.13[1].

I don't think Raspberry Pi has as much priority on pushing everything into 'mainline' ASAP, but less than two years after launch, some things are there.

And unlike many Arm vendors, at least Pi engineers assist with the efforts (e.g. [2]) even _5 years_ post-launch.

Besides that fact, Raspberry Pi has the resources to maintain their patches against current and future LTS branches, meaning you can run their fork at 6.6, 6.12, 6.13, and beyond, which is handy in terms of broad hardware and feature support.

For years many Rockchip SoCs were stuck at ancient 3.x, 4.x, 5.x kernel LTSes, which made a lot of use cases quite difficult.

I am extremely hopeful Cix (and Radxa, to some extent) is pushing to get things in mainline more quickly. But until it starts happening at a rate better than other Arm vendors, I won't give a gold medal to them yet :)

[1] https://www.phoronix.com/news/Igalia-Raspberry-Pi-3D-Opts

[2] https://github.com/lategoodbye/rpi-zero/issues/43
FWIW, you might be doing it / ruled it out already:

- BM25 to eliminate the 0 results in source data problem

- Longer term, a peek at Gwern's recent hierarchical embedding article. Got decent early returns even with fixed size chunks
But if the name of the game is efficient spending why are we replicating much of the same work in 50 states instead of just once federally?

That would make far more sense if this was only about money.
USAID gave Politico $24k, not $8M.

The entire US govt did pay Politico about $8.2M, presumably in the form of buying their subscription products. Politico really does do deep-dive analysis behind a paywall, and I can see why government people might want access. (I have no idea how justified this is, honestly, but I wouldn't immediately dismiss it.)

This seems like a fair enough summary: https://www.axios.com/2025/02/05/politico-trump-musk-governm...

Or dig through https://www.usaspending.gov/recipient/fa0cefae-7cfb-881d-29c... yourself if you want, I guess. That site is super-overloaded at the moment, unfortunately.
I see, I do follow LLVM conference talks, but not that deep.
We in fact do make most decisions in our lives based on finances, you're just not aware of most of them.
It is interesting to basically critique a series of blog posts like its a film.

But re: design vs. increment, I do think incremental TDD is pretty useful in domains where you have low confidence that you could come up with a good design. If you asked me to implement an LLM today, 0% I could design a good one. But given enough time I could slowly start to implement one (maybe?).

The two quotes that got me are

Jeffries:

> So I try to make small decisions, simple decisions, decisions that will be easy to change when, not if, a better idea comes along.

Norvig, about Jeffries:

> He didn't know that so he was sort of blundering in the dark even though all his code "worked" because he had all these test cases.

I fear someone could say this about me, about almost everything I've ever built. I guess something like "I just kept crawling and it just kept working!"
How we used user interviews to find a startup idea that worked
“The survey highlights two interesting facts: 46% of tech employees have noticed an increase in DEI investments in 2020, and 51% companies now report on DEI metrics. However, the report also highlights the need for continued action. 14% of technology companies today do not invest in DEI programs and initiatives.”

Source: https://www.spiceworks.com/hr/diversity-inclusion/news/51-of...

I’ve found 5-10 more similar sources via a quick google search.

While the law did not compel a business to report dei metrics to my knowledge (besides boards of public companies via the SEC), the impact of mass virtual signaling had the practical effect of compelling businesses of embracing dei or face being labeled as racists or immoral, which is a form of coercion by itself. I’d argue it would have been be better if such actions were simply deemed as illegal rather than racists or immoral. So with that said, I would argue the previous state of affairs was significantly worse with dei measures in place.

Putting the power back to the law rather than to a group of loosely collected virtual signalers is a better world imo.
Take 5-HTP/eat lots of tryptophan, and get lots of sunlight, when you are getting off of it.

Also, check out the legal brief in the Paxil withdrawal lawsuits. GSK structured Paxil approval trials to record withdrawal symptoms as depression relapse. They knew Paxil is even more physically addictive than other SSRIs.
Norvig is a world level genius and he outdid Jefferies because of that. No shame in losing a basketball match to LeBron James.
One government kills

The other one, kills too
But then you still need to either need to have something to sync the aws configuration among developers for all the accounts, or all developers will have to configure the aws config themselves, which isn't very scalable when you have more than a couple accounts you need to deal with.
> I encourage anyone responding with "That sounds illegal" or "They can't do that" to also include in their response, "...and it will be enforced by [xxxx]." and try to come up with a realistic xxxx.

I encourage before doing that to find out if the thing is actually illegal, and to cite the law that it violates. This will be better than relying on sounds or smells.
I originally posted the techdirt one https://news.ycombinator.com/item?id=42952967 and it was quickly flagged. The above link is from the source, Mike Brock's blog. There's no basis for flagging it other than finding truth uncomfortable. If you don't like it, move on, do not deny others the opportunity to read and decide for themselves.
Disappointing that Zig would get the API design wrong too. I would have expected better.

If you don't see the mistake, Google 'yaml.safe_load'.
Stupid question but don't the Republicans control all branches of government? Couldn't they just declare whatever DOGE is doing legal (if it's indeed illegal)?
Which one do you use? I was looking up the Just Egg brand in the US and it was more expensive than the free range chicken eggs brand we use. We've been trying have a more plant based diet but just stick with chicken eggs for now because we don't use it every day.
How Paul Allen and Bill Gates Landed on the Idea for Microsoft
Objective surveys.
Google had a pretty rough start compared to ChatGPT, Claude. I suspect that left a bad taste in many people's mouths. In particular because evaluating so many LLM's is a lot of effort on its own.

Llama and DeepSeek are no-brainers; the weights are public.
Sonos lays off 200 employees as its struggles continue
>There are legacy parts of browser layout that make it impossible(?) to optimize some rendering while being standards compatible. If you just chose a subset that is fast to implement and focused on being subset you narrow the scope of the project and enable optimizations.

Embedded browser engines though are either wrappers for Webkit and Blink (thus also including the "legacy parts of browser layout that make it impossible(?) to optimize some rendering") OR simplistic web rendering engines that are not as capable as Chrome/Webkit for layout and not compatible with all modern CSS/HTML features.
That's very impressive. A web site that calls itself an "application," a waiting list, some AI, and a pricing page? I've never seen that before. Congratulations!