skysight-inc/HackerNews huggingface dataset:
Listened to this video yesterday and it just makes me sad. In my opinion, Jon has been let down by the community to which he belonged. It is clear there were differences of opinion and so on, but I did not see anything that motivated his expulsion permanently. It left an especially bad taste that it was on recommendation by the Constitutional Assembly. Their mission was to propose a constitution, not to act as arbiter in moderation matters.
Your take is getting more and more uncharitable.

In what world is 60 lines of JS an SPA?

Come on, enquiring minds want to know. Show us all this SPA you know off that is 60 lines or less.
> Conflict of Interest Disclosures: Dr Chen reported receiving grants from Kowa, AstraZeneca, and Ipsen outside the submitted work. Dr Fontana reported receiving grants from Takeda Pharmaceutical Company and Kezar Life Sciences outside the submitted work. No other disclosures were reported. <
He reminds me of Tommy Vercetti from Grand Theft Auto Vice City.
A mp4 would be a much better choice instead of a gif and probably ~1.5MB.
There is thing called "higher education". Ostensibly one of its chief purposes is to arm you with all that interconnected knowledge and facts that is useful in your chosen field of study. To the boot, you get all of that from several different human beings who you can converse with, to improve the scope and precision of the knowledge you're receiving. You know, "standing on the shoulders of the giants" and all of that stuff?
"FetchFox as a company has two goals:

(1) Make the best possible AI scraper (2) Prove that crypto tokens are viable and better alternative to traditional company structures"

For everyone watching this is the opposite of pragmatism. This is idealism. Your company will succeed or fail based on your ability to execute on your primary mission. Here it should be (1). If you're labouring under a (2) then you have an idealistic company, which is fine, but don't pretend that (1) is your primary mission.
I liked the line

> My parents were machines. My parents were gods. It was nothing special. I hated them.

and how the story mixes adolescence and feeling special with philosophical ramifications (hinting that focusing on the philosophical ramifications is just an adolescent attempt at feeling special?)

The narrator falls into the same trap at the end, assuming that he is the 1-in-a-million exception. He doesn't realize that everyone has the same experience, they just process it in a healthier way. AI Catcher in the Rye.
From my personal experience native YouTube app on my TV is awful and laggy, I assume because my TV is underpowered. I would assume most are though. If it's that big a part of their revenue I would expect it to be a little more optimized though.
Show HN is for things you've made other people can try out which excludes lists, take a look at https://news.ycombinator.com/showhn.html
This is the first I have heard that Turmeric is hepatoxic.... hmmmm I take a lot of supplements of this to help my hip osteoarthritis. Am I damaging my liver?
One of the cool things about dota is that opendota and stratz provide a lot of data because steam is relatively open.

it is how i wrote a blog post on generating builds for heroes before dota plus even had the feature!
on mobile safari the numbers change position if u want to zoom in.
It sounds like a standard threat-risk assessment applies.

How big of a threat is it/what impact will it have on business/reputation/etc.?

How likely is it to be exploited and how widely would it be considered useful to the market of threat actors?
what a coincidence, my eval times have worsened over the past months too!
2009 SWOT analysis of some US Megacorporations [pdf]
Bug bounty programs are not the only (or even primary) way that security researchers get paid. Google pays employees salaries to find vulns. Bounty programs are a pretty recent development and the idea that they should be scalable and stable well paying employment for a lot of people is a bit strange to me.

If security researchers want to have stable employment doing this sort of work, there's oodles of job applications they can send out.
This is a game for which I would love some DLC. If I could buy level packs, I'd own them all... The basic games are great, I just want more!
It ran into a pole… I don’t imagine other cars’ safety systems would fail to brake there
I don’t understand that at all. Would you explain what you mean?
Apologies on missing this yesterday. I would add that saying it is "boring" with regards to "stability" means I also trust that what I learned about it last year is largely still relevant today. May not be cutting edge relevant, but is unlikely to bite me by being flat out wrong.

"Boring" works in this regard because you are saying there is not a lot of activity behind the scenes on it. Most of the work is spent doing the "boring" parts of the job for most of us. Documentation and testing.
URIs with non-ASCII characters are technically invalid. Browsers and the like should (but likely don’t all do) percent-encode any invalid characters for display if they accept such invalid URIs.
What I'm seeing in my wider family and friends-circle (outside dedicated 'computer nerds' of course) is that owning a (private) computer has become very unusual in the last 10 years. My nephew built himself a PC for gaming - but that's definitely a 'luxury item' because a game console would be much cheaper. And that's about it.

Everybody owns at least one smartphone though.
pgautoupgrade – PostgreSQL Docker image to automatically upgrade your database
We do not have plenty of resources. Lot of inequality in education, empathy, resources, cultural differences. A single human life is limited. A faulty human life has faulty and inefficent objectives like enjoying youth, family life, low energy in old age, tied up in boring jobs. These restrictions do not apply to the single SAI overmind which will dictate its policies in coherent manner and over elongated time-horizons.
One of the benefits of the patent system (that now seems to be far outweighed by negatives) is that patents are public information. Your invention is documented for all to see. I don't think that someone writing about public information is a punishable office, but IANAL
How does this help anyone?
Datadog is a monstrosity, they do so many things, most of which you don't know or don't care about, so which ones do you need?

We ended up going for HyperDX, just because I really favour fast log searches and simple alerts straight to Slack, but many of these Clickhouse-powered observability suites like Signoz, BetterStack, etc will do the job. Just depends how much you want to pay.

Also, I hope you're on OTEL already, since it makes changing providers the most easy task ever.
Just because a bad government is the worst case doesn't mean that a change in government can't improve things.
... if you got to the point where gun was pulled on you, that was already a situation where it's so fine? I'll be honest, I don't understand how can you be so calm.
We don't take for granted drinkable water and not freezing in our homes.

For a growing number people in first world countries now watching their public utilities fail them, either through neglect or deliberate acts of dismantlement, we really do understand how quickly it can all be taken away.
Perhaps because email addresses are kinda/sorta PII (business emails are categorically not) but not quite comparable to home addresses, tax/payment information, etc..

Our emails get leaked all the time in data breaches, sometimes alongside much more important information such as home addresses etc..

This was certainly a bad leak that could be used to further dox people by connecting the email to other leaked info or other sources, but from Google's perspective, all they did was leak the email.

It was a privacy breach for sure.

But further doxxing based on the email would be "not their problem" I suspect they would say.
Bit of a faster link, same content:

https://github.com/tyingq/unix-magic-poster/raw/main/ump.png
Sure. I'm not necessarily advocating others use it, but I'll post it for the curious. https://github.com/gth001/MarkdownToHTML/
That's the result of 2am swiping on my phone without looking, lol.
> Everybody who's using it right now uses it on Git repos on Git forges.

As I understand it there's also a group of Googlers using it internally at Google with an internal to Google non git backend.
Obligatory "highly rated doesn't equate to good" comment.
"Had a nazi grandpa" would put 90% of modern Germans in the same category...
Thanks for the link! Removing the post...
They undercut every other launch provider. There's no way they're burning investor money to achieve that at the scale of their operations. This is all due to the cost savings of reusable F9. If they wanted to they could jack up their rates and still retain customers and still be the cheapest. There is no reason to believe they are unprofitable.
Musk just recently had to go tour Nazi death camps to do a PR tour after promoting Nazy theories on Twitter. The people on the tour with him said touring the camps had zero emotional impact on the guy.
A former Navy mechanic defied genetic odds of inherited Alzheimer's disease
As are a lot of hobbies.

What we don’t have is an expensive car - we bought a cheap new car that is less than half the median cost of a car in the US. We don’t have expensive housing - we downsized to a 1200 foot condo after our youngest graduated. We don’t have state taxes - we moved to state tax free Florida. We also don’t have any debt besides the condo that we put 30% down on. Our mortgage is much lower than the average mortgage.

In the grand scheme of things, our travel budget is less than 10% of our gross comp and I don’t work at BigTech (been there done that). Even half of that is offset by not having to pay state taxes which we did before we moved in 2022.
> Zero-click kernel code execution with persistence and kernel PAC bypass

This is what baffles me about Apple's bug bounty program.

> $1,000,000: Zero-click remote chain with full kernel execution and persistence, including kernel PAC bypass, on latest shipping hardware. As an example, you demonstrated a zero-click remote chain with full kernel execution and a PAC/PPL bypass with persistence on the latest iOS device.

This is easily worth significantly more. You don't even need to sell it to the black market, sell it to all the 3 letter agencies in the world.
Why isn't that conceivably worth more than $10,000?

As explained by the parent comment, because there isn't a market for it. It's a novelty. Who are you going to sell that exploit to? At this time, nobody. Since Google doesn't have to compete against others for the bug, it pays low.
No, although it's not completely unrelated.
If you're actually looking for more of The Witness, there's

- Taiji, which is a very The Witness-inspired 2D exploration/puzzle game https://store.steampowered.com/app/1141580/Taiji/

- Fidel Rescue Dungeon (which I only just learned of and haven't yet played), which is The Witness puzzles, but dressed up as a roguelike https://store.steampowered.com/app/573170/Fidel_Dungeon_Resc...
Zero regulations is an asinine position. The vast bulk of regulations that were added over the past hundred years were in response to demonstrable harms. If someone wants to get rid of an existing regulation, it is up to them to show why it is no longer needed.
Localhost is an entire /8, so you have a few million possible addresses you can bind to if you want, all on whatever your preferred dev server port is.
I probably would not have hired you based on your description of things, you probably wouldnt have hired you either.

Nevertheless, based on the process, it sounds like they will end up hiring pretty medicore candidates.
I'm glad you liked it! I have one more post planned for this series, on par and using continuations for classical logic proof terms. I have two other posts in the works but they aren't part of this series, which will only have that one more post.
Much of what I learned was from blog posts like this one, or at least they got me to the point where I could understand the papers on my own. Blog posts, YouTube, reddit, discord, all helped me a ton. Originally I just wanted to make a cool programming language, but the more research I learned the more my interest shifted to the research, because it's just so unbelievably gorgeous and elegant!
Tried a lot of music players so far. Currently Deadbeef is my default one, despite two things I don't like:

a) The search could be a bit more fuzzy (search "ade" and you won't find "adé")

b) importing a directory takes ages; what takes me 5-7 minutes is done by Quod Libet in <10 seconds.

Otherwise, love it!
Correct, this is about Yao's conjecture and the implications for other hash implementations.
> Why are austrian economics fans so wilfully out of touch with reality

Because it's the only way to make their economic model work. Reality messes up everything.
Why would it be b64 encoded? There's nothing that prevents you from putting an encoded protobuf into a protobuf as `bytes` type. `bytes nestedMessage = 42;` Only delimited message formats like JSON or XML need to encapsulate messages before nesting.
It's funny how a UI can look old. This looks like what Python Tkinter would spit out. Anyway at least for me software like this is more tangible nowadays (I could make it) though I'm not much of a music person (programming related to audio).

I also used to have mp3s but not anymore, with Spotify, SoundCloud, BandCamp or YouTube with UBO.
Note that this is not the paper by Krapivin that https://news.ycombinator.com/item?id=43002511 is about.
The silver lining is at least some jobs will have to exist to solve the problems caused by hallucinations
> Everything he has ever done, will now be viewed in much worse light.

Viewed by whom? By you and a bunch of other neurotics that consumed too much CNN?
The richest person in the world, who makes enough for 10 lifetimes every day off of interest bought his way into government and immediately cut funding to people starving around the world. He is trying to get rid of the department of education, OSHA, the EPA, the FDIC, banking regulations and the people investigating his aiding of russia with starlink.

https://www.newsweek.com/usaid-elon-musk-starlink-probe-ukra...

What he did was identical to a classic nazi sieg heil, right down the forcefulness.

https://imgur.com/UFrmbJs

“The Party told you to reject the evidence of your eyes and ears. It was their final, most essential command.”

― George Orwell, 1984

The entire world knows it is a nazi salute, and people defending it do too.

This isn't "his political views", this are evil actions, it is indefensible. The person who has everything wants to take more from the people who have nothing.
California FAIR plan needs to $1B bailout after LA fires
>the 2nd game’s longest level was 18min, but that was long enough to swallow most of the earth

It went past the earth and you eventually swallowed up planets, stars etc if you didn’t know. Really cool for the hardware.
There's a Better Discord plugin that I think uses this or something similar, so you could send completely encrypted messages, that look like nothing to everyone else. You'd need to share a password secret for them to decode it though.
Maybe the government shouldn’t keep this information on its citizens without probable cause?
It's scary to think of how much software is being created right now by ChatGPT, Claude, etc by people who can't even read code. The house of cards being built today is going to lead to an epic collapse
Relearning My Mind: ADHD and My Writing Journey
> How does it handle things like `git rebase -x

It currently doesn't; `jj run` is a command to do this, separate from rebase, which has a PR open but hasn't been merged yet.

> There's also no examples for how you work out which commit has a conflict marker

Every bit of UI shows a bright red (conflict) on conflicted changes, it's hard to miss.

> And I imagine it all breaks in colocated repos too

It doesn't break in colocated repos in the sense that the feature works when you're working with jj, but you'd want to update your submodules and use gh cli on non-conflicted things.
Sure but did you read the rest of the post you're replying to?

That database only exists in theory, based on extrapolation of this vulnerability to billions of individual exploits, and I think we can all agree that Google would detect this activity and shut it down.

Hence, that database might fetch a decent price if it existed, but it doesn't.
Firefly Video Model: AI-Powered creation with unparalleled creative control
100% - I used to sell/evangelize/promote/pitch the vision of the educational non-profit I used to work for every. single. day. to. every. single. person. Loved it, still do, and still storytelling at my current gig.
A few years into being vegan and I wholeheartedly agree, too.
Here's a POC that works in emacs. Doesn't cover all of the relevant characters, but:

(setq ;;some other invisible or interesting characters
unicode-zero-width-space ?\u200b
unicode-zero-width-non-joiner ?\u200c
unicode-zero-width-joiner ?\u200d
unicode-zero-width-nbsp ?\ufeff
unicode-narrow-nbsp ?\u202f
unicode-word-joiner ?\u2060
unicode-grapheme-joiner ?\u034f
unicode-no-break-space ?\u00a0
unicode-combining-long-stroke ?\u0336
;;variation selector examples
unicode-vs-fe00 ?\ufe00
unicode-vs-fe0f ?\ufe0f
unicode-vs-e0100 ?\xe0100)

(defun show-glyphless-as-hex (char)
(let ((original (elt glyphless-char-display char)))
(aset glyphless-char-display char 'hex-code)
original)) ;;so you can see what you just replaced

(progn
(show-glyphless-as-hex unicode-zero-width-space)
(show-glyphless-as-hex unicode-zero-width-non-joiner)
(show-glyphless-as-hex unicode-zero-width-joiner)
(show-glyphless-as-hex unicode-zero-width-nbsp)
(show-glyphless-as-hex unicode-word-joiner)
(show-glyphless-as-hex unicode-grapheme-joiner)
(show-glyphless-as-hex unicode-narrow-nbsp)
(show-glyphless-as-hex unicode-no-break-space)
;;these may already be visible if the current conditions don't support them
;;but we'll force them
(show-glyphless-as-hex unicode-vs-fe00)
(show-glyphless-as-hex unicode-vs-fe0f)
(show-glyphless-as-hex unicode-vs-e0100))
I don't see those things as opposed - you want teams aligned, you want people to be able to plan and collaborate both the short and long term. A good process left shifts as much as possible so teams start out fairly well aligned and don't necessarily drift apart. A bad process requires constant interventions to pull teams back together. I think a clear, compelling narrative of where an organisation is going and why helps here, but it's certainly not the only prescription.
Do you even get a count of search results? They no longer include that number in my search results.

But I have just tried "Musk Geste" on google.de news tab (I don't know how Google is personalising either my search results or your results, but FWIW I'm in Berlin), and of the first page, 6/10 links explicitly call the gesture a "Hitlergruß" in the summary, and the other four call it that (or note that some people have called it that) in the body.
Because people in Europe are generally scared of a free market without strong social security, but believe in government oversight (no matter how often it fails).
There's no way an LLM is decoding this. It's just giving you a statistically likely response to the request, "guess my secret message." It's not a big surprise that it guessed "Hello" or "Hello, world"
Lilly Devlog 1 – File picker ordering bug
jj has jj absorb already.
It looks like a post cannot be removed after getting a comment %\
The 360 version had that. I didn't care much for it as it felt like I only had part of a game.
AI Agents Are Everywhere and Nowhere
These are the "traditional log n-bit pointers" that tiny pointers improve on.
LLMs are not programming tools. They are general-purpose pattern matchers and stereotype generators. They lack the determinism or epistemological guarantees of a compiler, an IDE, a linter, or a manual. They can best be described as a supplement to a search engine.
Ah intriguing, I didn't know about `--restore-descendants`, and I can see how that makes it feel like you're operating on edges, even if you're passing a revision in. Thanks!
It isn't always about money, even when that is the stated problem.

The dollar value of a responsible report going up means more responsibility overall and less problem leaks, exploits, etc.

I would be equally happy to see any solution where the end result is increased security and privacy for everyone, even at zero bounty.

The problem being overlooked is that the actual cost of these exploits and bugs is paid by the people who had no say whatsoever in any matter regarding the issue. Any time a company is being "cheap" at the expense of regular people is a bad time, from my perspective.

Google has the power to limit the exposure of the people who use there products (and this isn't always voluntary exposure mind you) and is choosing to profit a teeny tiny bit more instead. At no immediately obvious cost to them, why not?
Sure, but you seem to sidestep the primary accusation that Nix itself got neglected in favor of DetSys. Which is most certainly true for at least the installer.
<sigh/>

Somehow, ill-supervised secret security services always attract and empower a cadre of Creepy McNasty sorts, whose interest in their nation's actual security and welfare are 95% performative.

And, somehow, only 5% of people are effectively interested in their nation's secret security services being well-supervised.
There are some ebbs and flows, but usually everything is happening all at once. There is usually never a single product, and even then different parts of a product will be in different stages at the same time.

So you could be doing heavy prototyping or feature work on a mature product if you are enhancing it in some way, or you could be doing some maintenance / refactoring / bug-fixes on an early stage product.

The distribution of time between those tasks will change over the life of the product, but there is rarely a "feature complete" stage in my experience.
Belgian born and raised. I had 3 keyboards on my phone, all QWERTY (I can't stand AZERTY) but with different spell checks (Dutch, French & English)

When iOS 18 came out with this feature I turned it off, because it's not smart enough to infer context (at least when I used it, maybe it got better?), and messed up autocorrects.
Firefox and (more importantly) Pi-Hole.
I looked a bit into this a few years back and found it quite interesting. Despite them calling them "Tiny Pointers" I would say it's closer to a open addressing hash map. You have a specific key, and then you can "allocate" an entry in the hash map. This gives you back a "pointer". You can then later use the original key and the pointer together to determine the index of the entry. There's also a slight chance that the allocation will fail (similar to a hash collision in a hash map). The "trick" here is that two different keys can end up having the exact same pointer (because we're always dereferencing with the key). This makes them more compact.

I was struggling a bit to come up with good use cases for it. Their examples are all around combining them with existing data structures and they show that the space complexity is smaller, but it wasn't completely clear to me how feasible this would actually be in practice.
Excuses detected; no root cause analysis allowed.
W Daniel Hillis – Connection Machine and MapReduce Paradigm (2017)[video]
> Why isn't that conceivably worth more than $10,000?

If it exposed passwords as well then that would be worth a lot more, but a list of email addresses is not the most valuable of things on its own.
>This type of vulnerability is extremely valuable for private investigators, too. "Who uploaded this video which my client is extremely interested in?"

Would exploiting this vulnerability violate the Computer Fraud and Abuse Act? If so, would a private investigator really want to do that?