skysight-inc/HackerNews huggingface dataset:
>If you don't want money and it's not a scam, why are you emailing them?

It may be shocking to you, but some security researchers notify companies when they are exposing data of their customers. That's it! Simple.

When I notice that thousands of people's personal information is available, I also will email the company and let them know that they are exposing the information of their customers. I don't want money in return. My hobby is security, my payment is knowing that I helped thousands of people out.

>I would NOT be happy to receive such an email.

You would rather just continue to expose your customer's information? Interesting... I don't think you have the ethical high ground here, if that is your position.
I'm working on a project to document all publicly accessible stained glass in North America. The tech itself isn't anything exciting (vanilla HTML/CSS/JS and using Bootstrap for UI).

All the work is in collecting and entereing data and hopefully recruiting folks around the country to go to their local church/synagogue/mosque, government building, or glass shop/studio and taking photos and collecting information on glass pieces.

Site is still a work in progress, but if anyone out there is interested you can find it here: https://www.stainedglassatlas.com
Texas Lawmakers Scramble to Stop Solar Energy but It Just Keeps Coming
Why are cloud based open source things working now but failed the first time Heroku came around ?
The Fastest Cloud Development Happens Locally (2024)
Will it soon be a crime to criticize 'El Doge' online...
I think what’s really happened is we get output that’s close enough to normal communications to “feel” human. I could say it’s all a giant trick, which it kind of is, but we’ve also gotten to the point where the trick it also useful for many things that previously didn’t have a good solution.
AWS based on https://cloud.laravel.com/docs/pricing#compute
As I read it, he wants them to secure their systems and fulfill their legal and ethical obligations to their customers and regulators by notifying them of the breach.

I'm not sure what you find ambiguous or confusing.
Curious - do people migrate due to the price tag, ease of use, sth else ?
The cars is a perfect example. Many people who want there to be much fewer car miles in toto will argue they're polluting, but will also not want anything that makes them not polluting - because they're not actually arguing for pollution reduction, they're arguing against the car.

Same with this, I feel. It's not anti-pollution, it's anti-AI.
> Sure, if you want to reduce a university down to simply existing for money's sake, then go ahead, but then you might as well say that about literally everything

No it doesn't apply to literally everything. We are talking about the Universities that are completely pausing admittance to their graduate programs while sitting on billions or tens of billions of dollars.

It is deeply twisted and perverted that these schools are prioritizing the size of their endowments over taking on any new graduate students.
It has been a while since I studied along these lines (stochastic chemical reaction simulations in my case) but I think the answer is often yes, but not always (I don't think). A random walk for example will be a normal distribution (and you know the mean, and you know the variance is going to infinity), so I do think in that case you end up with an elegant analytical solution if I'm understanding correctly as the inputs can determine the function the variance follows through time.

But often no, you need to run a stochastic algorithm (e.g. Gillespie's algorithm in the case of simple stochastic chemical kinetics) as there will be no analytical solution.

Again it has been a while though.
Working on my startup https://wetarseel.ai which uses WhatsApp API for message broadcasts and creating whatsapp bots to converse with incoming messages.
I think the data he discloses in the post is the one that he got before getting in contact with the company. He does this in order to prove that the database was accesible to anyone on the internet, instead of the "no breach at all" claimed on the response email.
If COBOL is so problematic, why does the US government still use it?
My problem is with the time wasted compared to written info, not with talking heads per se.
For me, it’s that I have a million keyword and subreddit filters on my desktop computer and Reddit is unreadable for me without those filters, so I never read it on my phone
Hey, some of us didn't understand regular chips anyway.
Then you are not writing in defprotocol everywhere style. The keyword is everywhere. All the domain objects are deftype or defrecord. Try that. It is the same as Java, basically.

It is not an anti pattern, it is the way most low level libraries and clojure itself are written.

Clojure is a tool, not a cult. This core team worship is turning people away. The core team made plenty of mistakes, and got called out, rightfully.
Hide it before Doge gets wind ?
It gets worse, some drivers seem to adopt an adversarial attitude towards the usage of turn signals and will deliberately accelerate or do something else to make things more difficult to you.
A friend tried to tell me China has a real estate crisis, because the value of houses is dropping due to building to many and people are losing on their investments. I asked him if he is sure cheap and available housing is a crisis.
It seems to me "Thou shalt not kill" is pretty clear and unambiguous.

All I can say is history is inevitably determined by the sick fucks that rise to the top.
> slowly vary parameters to evolve it to be more robust

Injecting noise and other constraints (like forcing it place circuits in different parts of the device) are totally valid when it needs to evolve in-place.

For the most part, I think it would be better to run in a simulator where it can evolve against an abstract model, then it couldn't overfit to the specific device and environment. This doesn't work if the best simulator of the system is the system itself.

https://en.wikipedia.org/wiki/Robust_optimization

https://www2.isye.gatech.edu/~nemirovs/FullBookDec11.pdf

Robust Optimization https://www.youtube.com/watch?v=-tagu4Zy9Nk
_Vast_ Chinese EV subsidies & mandates have already gotten us there over the past several years. In the developing world EVs are cheaper than new gas vehicles to buy and to operate. Prices have come down to ~$50/kwh in 2025 dollars, lower than Tesla et al even hoped for.

This is less than estimates I've seen for major new pumped hydro projects in 2005 dollars (when I did more formal research into energy transition), and it requires no site selection, no complex approvals, no environmental mitigation policies.

Grid-scale battery projects are lighting up at scale for the first time throughout the world.
Really excited for this! Had the opportunity to take part in early access over the last few weeks and the deployment process has been super smooth and insanely fast.

I'm mostly just impressed with how polished everything feels and how easy it was to add database, key/value store, etc.

Currently using Laravel Vapor for most of my hosting needs, but will be switching everything over to Cloud.
I hope you are not in a client-facing role, as you appear to lack the ability to understand another's perspective. Security researchers rely on publications and recognition from security platforms to build their CVs. That's what he wanted. Think about it that way if everyone was a n idiot like the CEO of this ordeal we would have way less white hats.
That's a nice one
I'm sure AI produced code will be unintelligible to humans soon too.
Well, who expects a private company be able to compete with a ARPA-funded system that gets an extra $26m to pull fiber optics throughout the county?

The wording here is just a tad biased. Two companies, Charter and Verizon, are said to be, "regional New York State monopolies". Yet they're competing against each other. The county government, on the other hand, is truly the only government there, yet when it owns all of the fiber it is somehow encouraging competition.

I'm not saying that government ownership of a collective resource is bad. Maybe it's the best option, especially in rural environments, but the tone doesn't seem very fair. $26m is quite a nice chunk of change, even today.
I'm working on a solution for gathering product metrics and making sure applications keep running — when you don't want to install or maintain a lot of extra stuff. https://flexlogs.com

... also continuing to not add features to my (not-much-of-a) system for getting more done each week. https://carpeweekem.com

I've also been cautiously adding AI-powered features to my Heroku autoscaling tool (https://flightformation.com/) and a simple free-text time/date input has been the most popular (demo: https://x.com/ejschmitt/status/1893268742760448497)
The same is true of US officials. I still dont think any of them are running scam centers.
That's because a lot of those people think it's a "speeding ticket" camera flashing at them.
You can always revisit that part of code if it doesn’t perform. For vast majority of code running on consumer devices there’s no difference between smart implementation and mediocre implementation. LLMs are great at being mediocre by default.

As for security, that mostly stems from the architecture. LLMs mediocracy also helps with following industry conventions and best practices.

In my case I never get the code being written at once, instead I make LLMs write pieces that I put together myself. Never got used to copilot or Cursor, I feel in control only with the chat interface.
Laravel is unique in that it has always had a lot of paid services based around it. There are a lot compared to other frameworks. If you go to Laravel's page you can see them all. One of my teams was using Forge and Envoyer probably 10 years ago.

And nobody complains because they are completely optional and Taylor Otwell's team puts so much effort into the framework.
From what I’ve seen, Instagram is better at motivating young people to go outside and do things than video games were in the 90s or even today.

With Instagram they see their friends doing things and it’s a reminder that going outside and/or spending time with friends is fun. There’s a lot of pearl clutching about people getting jealous about other people’s vacation pictures, but on the whole the active Instagram users I know are much more social and likely to spend time outside the house than the gamers or Redditors. By a wide margin.
The email that the author sends to the CEO, in which his rationale for immediate disclosure is the fact that the database was fixed.
A great piece, pls attribute.
> Maybe, someday, a court-appointed psychologist will give us an official answer.

This stinks way too much of USSR/RF treating political enemies as mentally ill. El Doge is clearly an issue we Americans need to address but the entire point is to make sure America does not become yet another tyranny.
You could also use some other way of looking at the problem instead of "lives". For example, from some morbidly accounted points of view, reducing deaths of able-bodied young people by incidentally increasing deaths of older, organ-needing people results in more "able-bodied life years" saved or something.

Of course, down this path too far and you start looking at prisoners and death sentences and organ harvesting, which I think most people would agree ain't right.
Is it possible that they simply have a good product?
I struggle to define what community is. Some years ago, I went to Las Vegas to watch some performances, and to this day, I think Las Vegas is the most social and most lonely place I've ever been. There's people everywhere and no one is interacting in any meaningful way.

My belief is that to make friends and build connections, one of the only ways is to solve problems or face adversity together. Adversity meaning: "How do I do this bouldering route? It's so tricky.", etc. I see people pointing at social media, but I don't think this is the issue. I think the issue is that life is boring; most problems are solved. There's nothing to talk about. Why go learn guitar when AI can make a song for you?
I blame national ISPs using their money to buy up lobbyists and cozy up with the legislators. I know in Texas it’s outright illegal for cities/municipalities to setup an ISP. They have to rely on national providers to pick up the slack.

In reality, these companies have under the table deals with each other to avoid competing in a vast majority of regions, largely rural areas. Leaving them with shitty and unreliable internet service.
I was looking for something like this, but $40 is way too much, particularly for something with so few features. One feature I'd like to see is to be able to save prompts that I can just select from a context menu. For example, I'd like to be able to highlight a long article and have my custom summarizer prompt run with a click of a button. Or have my custom grammar proofreader run on a comment, etc.
Even an amateur Christian theologian can tell you that this only refers to unjust death / murder; as the original Hebrew text also espouses more clearly than the English translation (לא תרצח - lo tirtsah, form of ratzach, murder). The Ten Commandments also come from the book of Leviticus Chapter 19 and not just Exodus, and Leviticus 20 onward is well known for the death penalty for several offenses described in the broader Mosaic Law; forming the religious objection that otherwise, God's chosen leader (Moses) himself ordered violations of the 10 Commandments in the very same book.
>The underlying assumption in both is that "what the electricity is doing is basically worthless" - for society or by some other measurement.

The problem is that's basically entirely based on vibes. For crypto opponents it's justified by crypto not doing anything that the traditional finance system can't do, and for AI opponents it's justified by AI only being able to rehash soulless copypasta while stealing jobs. As a result the whole argument just becomes a roundabout way of arguing "[technology] sucks".
He writes as if he has access to large quantities of data after the CEO responded to him, which implies that it was after the exposed database was fixed, as the author acknowledges in the email he sent to the CEO.
> Critics are like eunuchs in a harem; they know how it's done, they've seen it done every day, but they're unable to do it themselves.

-Brendan Behan.

I write stuff, and don’t especially care who reads it: https://littlegreenviper.com/miscellany
Nvidia Foundation Model for Biomolecular Sciences
Evo 2, a powerful new AI model built using NVIDIA DGX Cloud on Amazon Web Services (AWS), provides insights into DNA, RNA and proteins across diverse species.
I've always wanted a "literate programming" / jupyter-style notebook based on markdown. Maybe this could help make something like that possible.
Fair question! The key is keeping the infra light and the product focused.

MangoForm isn’t a heavy SaaS with tons of real-time processing. Forms are relatively low-cost to host, especially when optimized properly. I also don’t need to constantly push updates just to justify a recurring fee—it’s built to be stable and efficient from day one.

At $15 per customer, it’s all about volume and keeping things simple. Not every product needs to scale infinitely—sometimes, it just needs to be profitable enough to sustain itself.

Would a one-time fee work for every SaaS? Definitely not. But for a form builder? I’d argue it makes more sense than a $600/year subscription.
My oldest wants to do aerospace, my understanding is that Arizona is fairly good and has some connections to the industry. They slashed their merit aid last year though due to financial problems and the advice I read is to steer clear for at least couple years until they get the house in order.

We're looking at Alabama at this point, either Tuscaloosa or Huntsville, I think they're even less known/lower ranked but not that bad for aerospace. That'd likely be full ride (national merit semifinalist or finalist).

The advice about lowering income is valid. I don't even have to do anything the shitty IT jobs market took care of that for me :(
I already made the point. There is no moat. You cannot keep that technology for yourself. Much like nuclear technology. Others will develop it in tandem, and we'll reach an equilibrium.
Impossible! It's not based on sqlite, postgres or written in rust, so it must be terrible!
You've missed the point I was making it seems, so I'll condense and focus down on it.

The reason why the "AI" goalposts always seem to shift -- is not because people suddenly decide to change the definition, but because the definition gets watered down by advertising people etc. Most people who know anything call this stuff deep learning/machine learning to avoid that specific problem.

Personally, I can't wait for people who work in advertising to get put on the same spaceship as the marketers and telephone sanitizers. (It's not just people in advertising. i just don't like advertising people in particular).

--

I'd argue machine learning is actually a sub-field within statistics. but then we're gonna get into splitting hairs about whether Serena Williams is an athlete, or a professional sports player. which wasn't really the point I was making and isn't actually that important. (also, it can be a sub-field of both, so then neither of us is wrong, or right. isn't language fun!).
Those are all logical fallacies.

I've been developing software for 40 years, yet there are still times when people who've only been developing software for 5 years or less have better ideas. One secret to surviving in this field for 40 years is leaving your ego at the door and being willing to learn from anyone, including those who are "under" you.

Having said that, from a practical standpoint, there needs to be a person empowered to make the final decision. That person is usually a lead developer, manager, and so forth. If you are that person, then your job is to facilitate the technical discussion and get as many ideas as you can. Remember that every single idea comes with a set of pros and cons - there's no perfect solution. You'll do your team a great favor if you do the analysis and decision-making out in the open.
I see you read and understood the researcher's emails as well as the CEO did, then...I'm not assuming anything, I'm repeating what was said.

Are you suggesting that lacking understanding of something someone says, one's first reaction should be an asshole to that person, just in case they are trying to sell something?
Then they get acquired by BloodMoor and they squeeze every last cent out of the remaining customers.
You don’t need billions of dollars to be an arrogant tech bro, just look around at Hackernews.
> Oswego County will own the broadband network and make it available for lease to internet service providers, including Empire Access, on a non-discriminatory and non-exclusive basis. The revenue generated from these leases will support the network's ongoing maintenance and future expansion. This innovative public infrastructure model ensures sustainable, affordable access while promoting competition among service providers.

From the first link in the article.
What i can do with that?
Sorry, I didn't see this earlier.

To block Youtube I use:

youtube-ui.l.google.com - exact

youtubei.googleapis.com - exact

(\.|^)googlevideo\.com$ - regex

(\.|^)youtube\.com$ - regex

It's probably overkill but it results in no Youtube until chores are done.
Appreciate it! Right now, the focus is on keeping MangoForm simple and lightweight—no upsells, no bloat.

That said, I’m not against introducing optional paid features down the line (like payments, integrations, or advanced analytics), as long as they don’t force users into a subscription trap.

The core product will always stay one-time payment, but if some users need extra functionality, I’m open to giving them that option without making it mandatory for everyone.
The schema is not really the challenge, more about constantly polling POP and iMAP and parsing emails.
Why do you say that the cost of throwing out American tech giants has gone up by 100-1000x compared to 15 years ago?
I mean before everything became cloud/SaaS, American software companies were still essential to most European business and governmental operations. It was just on more traditional server/desktop systems?
TBH it sounds like he exfil'ed / downloaded the database before reporting.
Couldn't agree more with the necessity for fast feedback loops. I've experienced the opposite, and it's not fun.

I worked with Clojure/ClojureScript (mostly ClojureScript) for a couple of years many years ago. It was the first time I'd worked professionally with a functional language, so I made a game of minesweeper in my free time to help get to grips with it: https://github.com/robjinman/cljsmines

Back then, I fully bought into the idea that functional language like Clojure were the future, especially on the web. The way application state is managed is perhaps the key virtue of functional programming - if you get it right, you can design your program to consist mostly of completely pure functions. I remember how enlightening that was once I understood it.
Some more discussion on MongoDB release: https://news.ycombinator.com/item?id=43160731
Did you wrote all the site or only the prompt?
Because they are web-scale obviously.
I live near where the article talks about and the ISP it mentions, Empire Access, is fantastic! I have $60/mo 1Gbps fiber with 1 to 3 ms latency.
https://en.wikipedia.org/wiki/Bleu_de_France_(colour)
It looks like the CEO is both clueless and his reports are also probably misleading him. Whoever looked into the security problem probably saw the extent of it. This possibly got downplayed when reported back to the CEO. However rude, the CEO had little reason to lie about the extent of the problem towards the security researcher.
If what you say is accurate then it should have been in the article. Because, as is, GP is correct that it doesn't answer the question!
The best way is to open up the Query Log, open up the site you want to block, and deny from there, making regex blocks are appropriate.
Oh speaking of which. A lot of places i rented on holidays had internet access with that default unique password. Which is a pain to type on your phone and laptop when you get there.

Did anyone think to at least try to add OCR-ing those labels on our phones to automatically enter the wifi password?
"Oswego County will own the broadband network and make it available for lease to internet service providers, including Empire Access, on a non-discriminatory and non-exclusive basis. The revenue generated from these leases will support the network's ongoing maintenance and future expansion."

https://www.governor.ny.gov/news/governor-hochul-announces-2...
I thought of an analogy later, which perhaps colors my experience -- writing democracy software in Clojure felt disappointing, loaded with a power dynamic kinda like the Catholic bible and service being conducted in Latin before the 1960s.

It was not a language "of the people". And not just in how uncommonly known it was, but even the philosophy in how the language governed itself. It felt harmful to me: the cross-pollination between the ethos of the Clojure project (via the well-intentioned developer who brought pieces of Clojure culture into conversations and discussions) and the democracy project.
Easily predictable anything federal government funded that is highlighted by the media as "quietly helping people" is about to be nuked.

I get journalists want to write about stuff, but if they keep this up they will likely cover their own imprisonment or colleagues over the next year or two.
Nice project! Related question, how would you recommend detecting which font is being used for names like ui-sans-serif, system-ui on a given device/browser?
I'm not going to especially defend but you have a way more sophisticated model of how most burglars work than is almost certainly the case.