skysight-inc/HackerNews huggingface dataset:
A bit late but for those of you who still really like physical controls , want a family capable vehicle (I’ve done 3 nights with two under five) and something off the beaten path it’s hard to go wrong with the Audi A4 allroad wagon. Absolutely fantastic suspension and pretty quick for a family wagon. Midrange package gets you adaptive cruise control and all the other safety stuff. Mild hybrid.
Just to add to this... even if the parent comment's conjecture is correct, under that hypothetical you're already paying twice now, and if they privatize the profits you'd be paying three times.
NTSB did release some follow up data. They have the bottom of the jet at 325', +/- 25'. Helicopters add a tough element to any airport operation and DIA is one of the more challenging airports with the extra restrictions on routing.

(Never flown into that one as not an ATP. I'd never be able to get closer than College Park. Even that was a non-trivial exercise in paperwork.)
Furthermore, this "story" is actually a promotion for his book. It's amazing how many articles in legacy media these days are paid advertisements for someone's latest book.
FSF to auction off original GNU drawings, awards, and historic tech
See: https://news.ycombinator.com/item?id=5371725
How that drama unfolded? Where did it started?
used to do early calls with my QA team in Croatia. Nice folks.
Tesla's robotaxi strategy looks a lot like Waymo's
remotely related:
When I used nearley.js [0], it had a very good learning curve. Tooling also looks quite nice.

[0] https://nearley.js.org/
Tail Winds + Vision into-> Mission into-> Purpose. A world class leader understands deeply the coalescing ripples of shift across multiple sectors that result in the change their business is addressing, using this knowledge and extending it out into the future is called vision. If you can paint a good vision, you can then explain some missions people could go on over the period of time that matches your vision that results in positive things for the group, this is how an individual finds their purpose and is a prerequisite for a high functioning team (see tuckman's). The reason this is hard from a leadership perspective is that humans do not hear messages the same way, so you have to do what we call message modulation, where you tell the story many different ways depending on the constituent you're addressing until or such that, they understand what you are saying. You also have to be careful your modulation doesn't introduce confusion, 1 2 | 3 4 - if pipe is your baseline message, to be good at this, you have to think about what happens when 1 and 4 converse.
Original title is: We stay strong against hate and hatred.
I’m actually in agreement with you here. I think it’s probably reasonable to assume that through some kind of combination of home grown talent and their prolific IP theft programs that they are going to end up with that capability at some point the only thing in debate here is the timeline.

As I understand things (I’m not actually a professional here) the current thinking has up to this point been something akin to a containment strategy largely based on lessons learned from years of nuclear non-proliferation work.

But things are developing at such a crazy pace and there are some major differences between this and nuclear technology that it’s not really a straightforward copy and paste strategy at all. For example this time around a huge amount of the research comes from the commercial sector completely independently of defense and is also open source.

Also thanks for that anecdote I hadn’t heard of that before. This is a bit of a long shot but maybe you might know, I was trying to think of some research that came out maybe 2-3 years ago that basically had the ability to remotely detect if anything in a room had been moved (I might be misremembering this slightly) and it was said to be potentially a big breakthrough for nuclear arms control. I can’t remember what the hell it was called or anything else about it, do you happen to know?
And then what?

Exploits need to plug into a business plan. Like any business plan there has to be somewhere that money gets extracted and that money needs to be more than the exploit cost & infrastructure costs & a risk premium.

If you can’t trivially say how the exploit explicitly gets turned into cash you probably are on the wrong track. Doubly so if it’s not a known standard and commoditized way that’s happened before.
Simple uses of quantifiers can make regexes take quadratic time unnecessarily
100%. Every product not a part of the core mission is attack surface area, ongoing maintenance to ensure it works with the rest of Google services and infra, and drag on the rest of the team and velocity.

The part that sucks for consumers is that they often kill things that people like. I wish they had a better way of doing this.

Bravo to brutecat for this excellent discovery, productionization, and writeup.
"Chewing through lead! How do they know something is worth it on the other side?"

I wish I knew, it's something I've been curious about since I first saw the photos. Perhaps it's because lead can taste sweet, or there's residual smell on the outside of the cables, or maybe they've learned from elsewhere where the telephone pairs exit the main cables.

Incidentally, it's a long time since I've seen those photos but I vividly remember them as it seemed so strange. I'm almost certain the photos were in the Electrical Engineering Supplemently Volumes of the Newnes Encyclopedia. (The exact name(s) of the supplemently volumes could be slightly different, memory's short given the length of time since I've last seen them. BTW, I think there were four supplemently volumes.)

Edit: I've since found this reference but I don't remember that number of volumes, perhaps we only had part of the set or I just can't remember: https://www.worthpoint.com/worthopedia/newnes-complete-elect...
Many of those fact checks make a huge deal about minor distinctions that in no way redeem the amount of money that was spent on their """""intended""""" purposes. Example:

"
“$32,000 for a ‘transgender comic book’ in Peru”

This is wrong. USAID did not fund this, and it was not specifically transgender. Instead, the grant says the State Department provided $32,000, under the guise of public diplomacy, to Peru’s Education Department “to cover expenses to produce a tailored-made comic, featured an LGBTQ+ hero to address social and mental health issues.”
"

So the comic existed, but it was funded by another equally corrupt department? This doesn't make USAID look any better at all, it just means Trump and Elon's team need to do MORE of what they have been doing, and expand their scope further.

I don't really care that a 2500 page omnibus spending bill that no one could read in full (minus an AI) specifically said that some pork goes to some unethical and corrupt action. Its evil and it needs to stop. If the government's normal checks and balances cant fix it, the answer is not to give up and let corrupt liberals desecrate the union. The answer is to fulfill the promise of the 2nd Amendment and to break the system of government in whatever way is necessary until it is no longer tyrannical. Remember that a 2% tax on tea without sufficient and effective representation is an acceptable threshold for such actions.
It's a pretty big part of most black markets that vendors don't ask too many questions about the buyer.

Do you really want to know what the FSB plans to do with your exploit?
Canada had a case a couple years ago where a disabled person wanted canadian-medicare to pay for a wheelchair ramp in her house and they instead referred her to their assisted suicide program.
My commentary was precisely about the state-of-the-practice.

That $10k is "an extraordinarily high sum for" what was likely weeks of work on this bug, and probably months of work poking in other places, reflects the very, very low focus on security industry-wide. This is why we need significant civil -- or possibly occasionally criminal -- liability. Civil if it's simple negligence, and criminal if it's gross negligence leading to harm.

If Google were to pay me $200 if it leaked my data, that would:

- Be worth much less than my privacy

- Amount to damages of $400B worldwide if there were a compromise impacting all $2B users (although, realistically, damages would be lower in middle and low income countries)

This would represent a 20% fall in Google's market cap, which feels about right.

At that point, I expect the bug bounties would be set many orders of magnitude higher. Security bugs should be rare. They're common. This is a problem, and one created by our market incentive structures.

You are correct that Apple is an exception, and seems to mind security.
Who can she a light on where these claims „far right forces“ originate? What were these spam emails saying?
> For every person who won't buy a Tesla because they disagree with Elon's political views, there is a person who would buy a Tesla because they do agree.

"Yes, making Nazi salutes is good actually" is a _rather niche position_ in most of Europe (particularly in wealthy countries); even _actual neo-Nazis_ sometimes shy away from the imagery a bit.
Gamer judgement on "quality" is often misplaced and skewed towards cosmetic novelty though...
The message is the humor and the entertaining writing.
At big companies you may have something like a cash cow and it is on maintenance only type of efforts. No major product enhancements being done but more internal work and maintenance like database indexes, disk space, server upgrades, etc. There might be other teams building new products/features based on your systems and data so there are internal integrations needed. Then whenever some CIO comes along that was sold a bill of goods on an ERP system you have to go thru those transitions.

At a SaaS company now and it feels like product development is where the majority of the focus is, to the detriment of maintenance. For example being a few versions behind the latest security patch level while someone is making promises at a conference on things that aren't even built yet.

In my experience, the longer an application has been running and in service, the less time developers are spending writing fresh new code or even prototyping, etc. I think this is where that "itch" comes in for developers to invent new things. I totally understand that, its fun to build a new application.
Stop Chasing AI. Start Reimagining with It
Why are we still optimizing hammers when AI lets us skip straight to hanging the picture? Winners are returning to first principles and asking "What problem are we really solving?" No to AI features. Yes to reimagining what's possible without historical constraints.
Some cars have an option for how "intense" you want the system to be.
test, do emojis work on hn?

󠅤󠅕󠅣󠅤
edit: apparently not
edit 2: oh wait, the bytes are still there! copy-paste this entire message and it decodes to "test"
I’m so sorry for your loss. Something did change, and i think it’s good you feel that. Someone I used to work with, their wife was a professor at Rochester university and her research was around happiness. She would tell me that our baseline happiness in life is virtually constant (on large timescales, we all have good/bad days etc), there’s not much we can do to alter it in adulthood to shift it. There were a few exceptions, loss of a child, partner or critical illness.

I’m not sure what comes next but really hope that energy and happiness finds its way back to you with time.
Honestly the hieroglyphic buttons are a deal breaker for me. It's just a cognitive load I can't overcome without frustration. The vertical labels were just perfect and Jetbrains actively ignores feedback on that. On a second place, not having bottom toolbars anymore is such a downgrade! I would use it to have a convenient console at hand constantly. I did use the Git buttons constantly, and now it's either hard or impossible to customize some buttons, plus they'll be hieroglyphical. And at the end, I just don't like how there's less information like where my file is located (as in, "which index.js was I looking at?"), visual separators marking button borders and tab borders are now gone, and so on.

Now, there's the classic plugin but it's got an expiration date. I also could get used to all of this, and I did, I migrated to VSCode. It has a surprising (yet hilariously complex) amount of theming options and I got the contrast to previous JB defaults. Because Jetbrains' communication has been just awful throughout this change these past couple of years, I just don't trust them anymore to not destroy my workflow on a whim, it's a portent of enshittification.
For a person born and raised in metric system, MM/DD/YY is just as bonkers as if someone decided that MM:HH:SS makes sense.
You have to remember that fascism's application of othering is not logical, it's just a convenient method of gaining leverage. The Nazis targeted Jews because it was easy to weave a narrative about them, and because their population within Germany itself was so small that it was electorally inconsequential to victimise them. You see this with the Musk-Trump regime's position on trans people; trans people are not a threat to anyone, and are so few in number that you can easily weave a narrative about them and use it to push a more extreme agenda.

You are absolutely correct that modern Nazis are not really bothered by the Jews, but you have to remember that fascists just look for easy targets to hate.

Essentially, yeah, fine, he's not a card carrying member of the NSDAP. But he's a hateful individual pursuing a hateful agenda all the same, and he did the salute to signal to edgelords that he sees them.
New Zealand? Are you blaming us for Peter Thiel? That seems a bit harsh.

"to extend its influence in Latin America". Its influence could hardly be more extensive there; it gets (we get) sniffy when the occasional country there pushes back.

Asia, I don't know. Our ventures there have had very mixed success...
Weird comment considering that the most common failure point of that contraception method is _failure to actually use it_. Other than that they're pretty much unrivaled in safety.
Show HN: LLPlayer – A media player with AI subtitles, for language learning
Hi HN.

I created a free open-source video player for Windows, called LLPlayer.

It has many unique subtitle-related features mainly to support language learning.

Features

- Dual Subtitles

- AI-generated subtitles, powered by OpenAI Whisper

- Real-time Translation

- Real-time OCR for bitmap subtitles

There is a demo video on GitHub. Thanks for reading!
I'm not sure Jonathan Blow, visionary video game developer and appearer in many documentaries on the video game industry, would appreciate my answer. But in my view: yes. Especially Rice Krispies.
Read the linked article, it's all about that.

Far-right and alt-right trolls have been spamming projects hosted on Codeberg that either enable or favor diversity and inclusivity.
That's due to Elon's weird sycophants flagging such articles, not admin action.

(If this website were actually important, this would be a pretty significant vulnerability; it's fairly trivial to suppress the visibility of any given article with really quite a small number of people.)
As Miguel said, the commitment from the Rust project is making Rust for Linux build on stable Rust, rather than using nightly. We care about that for a variety of reasons: we don't want folks to get a negative impression of Rust's stability based on nightly Rust, and Rust for Linux is a good exemplar of projects needing certain features, and it's an important effort in its own right that demonstrates the ability to incrementally add Rust to an established project.

It's up to the awesome Rust for Linux folks to work on the integration and upstreaming and policy needed to ship the kernel with Rust. And they're doing incredible work, based on the ability to write more and more kinds of drivers/filesystems/etc in Rust.
“This kind of comments” is pointing out a completely valid reason for which you wouldn’t want to do business with a company, let alone have them implant something in your brain.
I experienced this few years ago. I was hired with a team of consultants (I know.. I know..) because the system in question would have data randomly disappear from their databases every few weeks and it would take the operation team a month to notice, so by then the issue was harder to rectify.

The engineering team in question had proposed to rewrite an old Java app with AWS Amolify and replace their Postgres database with Dynodb. The whole thing was then ducktaped with Lambdas and spread across multiple regions. They had not bothered writing a single line of test, never mind having any kind of build and deployment pipeline.. they didn’t even have basic error reporting.

After doing a deeper dive, we discovered that engineers didn’t have a local environment but only had access to staging, however they could easily connect to the production database from local by just updating environmental variables. It turns out that one of them had forgotten to switch it back after debugging something on production from his machine and had forgotten to switch it back.. he had a background cleanup job running in intervals which was wiping data..

It was a complete nightmare, the schema less nature of Dynamo made it harder to understand what is happening and the React UI would crash every 15 minutes due to an infinite loop.

The operation team had learned to use the Chrome console and clear the local storage manually before the window feeezes..
Kind of like the chip from Lumen on Severance. I don't understand why anyone would want a chip placed in their brain, unless it's to help overcome a disability.
seconding the soundtrack. it's weird and entertaining. all of the songs are about rolling and rolling things up.

my fav has to be the lounge singer track, or maybe the one with a bunch of kids singing.
Original article: https://labs.watchtowr.com/8-million-requests-later-we-made-...

I suppose the lesson is to not publicize your bucket names, if possible? Or if not, leave them present but empty in AWS and don't actually delete the buckets?
Plasma donation can reduce microplastics https://pmc.ncbi.nlm.nih.gov/articles/PMC8994130/

Maybe being a rich guy's (Peter Thiel / Bryan Johnson / etc) blood boy is a win/win after all.
"Depression" isn't just the name of a disorder.
Killing Google Reader killed blogs. You personally can replace Google Reader as a product, but since most people didn't and just sort of moved on to closed platforms, there was less content produced on blogs and less discussion activity on the blog posts that were created after.
And I'm a lazy fucker: I want to set a temperature range and then not bother until I sell the car. Under the range? Heat it. Over? Freeze it. But a range, not a single point. So if the temperature is between min and max, the AC stays off.
Why would you pay more than necessary to attract the voice talent you need? There aren’t (m)any businesses that pay multiples of market rates just to be nice.
> But this makes no sense. You're proving the "counterintuitive answer" with the probability theory but when confronted with the fact that your proof is not mathematically correct you say "this is a simple brain teaser"

The answer IS mathematically correct. It's just counterintuitive and it made some PhDs trip.

Nobody here -- not even you, before -- was arguing it's mathematically incorrect. Some people, when told the right answer, claimed the problem is underspecified and admits more than one context that may change the answer, which is not at all the same as saying the answer is mathematically incorrect! Not even Diaconis, the person some of you are so eager to defend (for some bizarre reason) claims it's "mathematically incorrect"!

It seems you're grasping at straws now.
> not getting caught in the process is work

Caught for what? If someone sells information about a vulnerability, what law are they breaking? In most jurisdictions, unless you're dumb enough to ask questions about whom your selling to and have active knowledge you're assisting someone in breaking some law, selling to the black market is perfectly legal, at least so long as you pay your taxes.

If you're doing grey market, it's even more legal. If a dictatorship wants to unmask a critic for assassination, and one is selling this information to a government security agency, it's legal by definition.
It's just an automatically translated schema file from their internal .proto definition. Google relies on real cryptography not security through obscurity.

Furthermore the discovery endpoint is publicly documented[0] and specifically meant for external users. Nobody internal would read the discovery endpoint: they would just pull up the .proto file through code search.

Another observation: from my experience at Google it took multiple weeks of effort fighting against the bureaucracy to be able to expose an API to the public. It's not like an AWS S3 bucket that could just be accidentally public. The team knew this is public and had fought the bureaucracy to make it public.

[0]: https://developers.google.com/discovery/v1/getting_started
There's still a surprising lack of good video call recording services that can be controlled programmatically, unlike the end-to-end SaaS apps like Read.ai or Otter.ai.

The only open-source one I could find is Amurex, which looks promising. But it only supports Google Meet for now, it does it a bit differently with a Chrome extension, and it is generally rather immature, but I do wish them the best.

The only API services available are Recall.ai and MeetingBaaS, they both support the big three (Google Meet, Microsoft Teams and Zoom), but they are rather expensive at $0.5 - $1 per hour. The Calendar Syncing feature is also locked behind enterprise tiers with additional monthly fees in the hundreds, and it is rather important real-world use.
the enemies it came up with were hilarious. my fav being the porn elemental
How do you feel about what word processors did to the typist career?
We are talking about dynamically quantizing KV cache, not the model weights.
The RCA Studio II Lives On: A Package from Belgium
My mom worked at a jeans factory in Switzerland, in the early 80s. Apparently they used some sort of punch cards to create certain patterns in the trousers (flowers and stuff like that).

Very interesting article, will ask her if they looked like those.
Given the great benefits, I wonder why there is no country on Earth that has open immigration.
Unless you can stumble on Google vulnerabilities casually, it's showing quite the opposite -- how unprofitable it is to work from bug bounties.
E-petition urges Denmark to buy California from Trump
Understanding the trade-offs of using Tailwind CSS
Show HN: No-BS Speed Reader
NeedForReadForSpeed is a simple, free speed reader app.

- Works with URLs, files or text

- Options like number of words, text size and more

- No signups, payments, advertisements - just use it

Honestly I just needed something basic that works and supports multiple input types. Apps I've used in the past don't have all of these features in one place, at least not for free or that work reliably.

Hope you enjoy it.
How to run Firecracker without KVM on cloud VMs
Ah, but 'conservative' doesn't mean 'conservative' anymore, you see!

(In the US, and to some extent the UK, 'conservative', in political terms, is now usually used to refer to radical far-right policies.)
Oh it's definitely still driven by hype, I think it's just a slightly more extreme version than your normal tech hype cycle.
Honestly, all the stock investing advice one needs
The back of an envelope can get you making silly claims quickly (ex. 26 ^ 8 is 208 billion)