skysight-inc/HackerNews huggingface dataset:
Agreed that the wording to fully understand my intent might not be present on the email and is only achieved when you look at the whole email and what information I provide etc, I've been trying different things to see what works as unfortunately I get ignored totally, A LOT.

That is also the reason there is no direct link to my publications on the actual emails, another link to add suspicion of phishing that leads to being ignored.
I do provide a link to my index with all my public finds on the signature of the email though.

Also a google search of my handle which I sign and mention on the email would get multiple hits for reputable news websites such as Databreaches.net, TechCrunch, The Register, Publimetro, but doesn't seem companies do much vetting at all before ignoring the alerts.
If there's one thing those people hate more than paying Americans to do labor, it's paying taxes.
Welcome to Hacker News. Thank you for the post and your advocacy.
The thing is, there are some hard numbers and some fundamental truths which someone is going to have to find answers for:

- peak oil is happening (or has happened)

- current industrial farming techniques burn up to 10 calories of petro-chemical energy to get 1 calorie of food energy (not an inconsiderate portion of which is fertilizer runoff into waterways and oceans)

- in the past century the bony fish biomass has plummeted to below the weight of shipping tonnage in the world's oceans: https://what-if.xkcd.com/33/

As I've noted before, my grandfather lived in a time when commercial hunting was outlawed --- I worry that my children will live in a time when commercial fishing is no longer viable.
I will copy and paste a comment I wrote here previously:

"MongoDB ships with horizontal sharding out-of-the-box, has idiomatic and well-maintained drivers for pretty much every language you could want (no C library re-use), is reasonably vendor-neutral and can be run locally, and the data modeling it encourages is both preferential for some people as well as pushes users to avoid patterns that don't scale very well with other models. Whether these things are important to you is a different question, but there is a lot to like that alternatives may not have answers for. If you currently or plan on spending > 10K per month on your database, I think MongoDB is one of the strongest choices out there."

I have also run Postgres at very large scale. Postgres' JSONB has some serious performance drawbacks that don't matter if you don't plan on spending a lot of money to run your database, but MongoDB does solve those problems. This new documentdb extension from Microsoft may solve some of the pain, but this is some very rough code if you browse around, and Postgres extensions are quite painful to use over the long term.

The reality is that it is not possible to run vanilla Postgres at scale. It's possible to fix its issues with third party solutions or cobbling together your own setup, but it takes a lot of effort and knowledge to ensure you've done things correctly. It's true that many people never reach that scale, but if you do, you're willing to spend a lot of money on something that works well.
> does SubImage actually recommend changes and generate terraform?

We recommend changes, though we don't generate Terraform just yet. Great feedback on the specific fixes for this case, thanks.
I don't count them so I'm afraid I don't know. The hours get sort of fractally sprayed across my days (and weeks).
> I'm not defending him so much as ...

Nah, it's clear to me that you're defending the CEO, and blaming the researcher. In a manner that's as you state is just my opinion, is inverse from what justice would be.
Forgot to mention: We are completely open-source! Feel free to create issues or discuss on the github!
My weekend project Open Deep Research got more traction than I would have thought.

https://github.com/btahir/open-deep-research

An open source alternative to Gemini/OpenAI deep research. I'm experimenting with this cool flow chart workflow that I think can be a cool twist on generating reports for deep research.

Check it out and lemme know what you think. :)
Motivations are stated after I explain why I'm emailing.

"I'm an independent researcher who posts under the name JayeLTee. I look for publicly exposed data online on my free time and alert the companies affected to try and close the exposure."

There is nothing more than that, want me to make a fairy tale story to tell the companies? I try to be as clear as possible and pass the message as clean as possible with no BS on the email, again because I'm not selling a product or a service.
fun idea

i'm not going to see any grass for another few months, unless i travel somewhere warmer, though
I'm building a stream processing framework using DuckDB.

https://github.com/turbolytics/sql-flow

The goal is to create a stream processing framework that supports SQL jobs. Apache Flink supports this but is very heavy-weight overall. I work with cost constrained companies that just can't run Flink but still want access to high performance streaming primitives.

We are taking a slightly different approach from other competitors by building cloud-native tools for engineers. SQLFlow is built on DuckDB, Native Kafka Library, and Arrow. This allows SQLFlow to handle ~70k+ events / second with low memory overhead (~250MiB).

Would love your questions, thoughts and feedback or feature Ideas! Thank you
When r we gonna see these in production and actually used?
There was an interesting article on him linked from The Diff newsletter today. It seems a large part of his strengths are strategic M&A.

"1. Larry Ellison has an insight which leads to a breakthrough initiative which has the potential to reposition Oracle to the forefront of the industry, completely bypassing the competition.

2. It works.

3. Larry Ellison checks out to go sailing or play tennis or something for like a year.

4. Oracle gets into trouble. New entrants and existing competitors are eating away at its market share, and Oracle is losing head-to-head.4

5. GOTO 1."

https://www.notboring.co/p/who-is-larry-ellison
I thought this would a stavros post. Thanks for your efforts!
DeepSeek Changed How We Use Google Zanzibar
Sure, developers know about Git for the CMS.

But this is going to get really painful when a non technical marketer who doesn't know Git, GitHub and other tech tools needs to contribute articles to the blog, and they would have to keep asking the developers that are already occupied with moving fast with building and the product.

This will get more apparent as the startup scales and hires marketers and other people who shouldn't touch the codebase.
Reviewing this app is a sod job, but someone's gotta do it
Which license would be best to get out of the hell of "30% to the distribution store" "25% to UDK" so 50% of your revenue is skimmed off the top before you see a dime.

Assuming you'll make _some_ money.
I’d like people to sneer and get angry over the fact that he does have the money. In Les Miserables when the rich man gave the begger a penny the bishop says, “Look at monsieur buying a penny’s worth of paradise.”
What's a "basket club", and how can a thing complain in silence?

I suspect a translator app? AI translator? The complain in silence makes me think the intent is "complain but not heard"?
Exactly. What happens when a project outgrows Laravel in some particular way.

I worked on a big Django project for many years. We mostly used Django in the way it was intended, but there were enough custom things (normal in a 10+ year old codebase) that a Django-specific hosting provider wouldn't have known about, and therefore wouldn't have supported. That would mean either us moving hosting to support a trivial feature, or more likely, us canning the feature because our hosting wouldn't support it.
The alternative is not necessarily better: scammers.
Could some of the scientists have saved their data in the google cloud, say using google drive? And then some internal google crawler went through, and indexed those files?

I don't know that their policy says about that, or if it is even something they do...at least not publicly.
Yes, the relativized timestamps only show on /news (i.e. the frontpage) and /item pages. You can always see the original timestamps on other pages, like /submitted, /from, or (as you say) /threads.

Edit: I checked the code and the actual list is:

'(news item reply show ask active best over classic).
Yo! How's everyone doing?

I'm thinking about developing an AI Accountability buddy with many sick features to help you with your goals and I will post about it on my page, follow along!

Here's the website if anyone wants to check what I've got in mind: https://unsalcker.com
Because a bill was introduced does not mean that it will pass nor be signed into law.
Taylor has said he’s not against supporting other frameworks/apps if there is demand. Symfony and Statamic are ones I’ve seen mentioned a few times. Wouldn’t be surprised if they appear in the medium term future.
Fox Software was acquired by Microsoft in 1992. Development was finally discontinued in 2007.
Postgres has ways to simplify connection management, if that is a blocker for you (pooling, pgbouncer, postgrest, etc)
It's better than nothing. But introduced and passed are different things. An introduced bill may never actually become law.

The upside is that this shows how popular RtR is, and there's a good chance at least several states may implement their laws. At some point, even if it isn't universal, all it takes is enough states to force manufacturers to support independent repair by default.
Micro Journal: Distraction-Free Writing Device
Experimenting with training and running ML models on a “normal computer” (ie. no GPU or cloud servers, just locally on CPU/ram)

Don’t have a background in ML, so mostly just for learning purposes

Been playing a lot with the MNIST dataset. Trying things like training only on the examples the model gets wrong, or training only on random samples of the image (ie. using only a small subset of the pixels of the image as the input), or creating one model per label to overfit the data and then merging the models for testing, or just testing performance of different architectures and frameworks on the same problem
incredibly succinct way of describing -- any official sources, arXiv or otherwise that articulate similarly, re: mix, sample, optimize, regularize?
To be frank - no. Systems with horrendous performance and uptime still tend to sell perfectly well. Especially when your customers are enterprise users.
I mean, you just need a novel idea that isn't some farm-sim with 8-bit graphics
I mean I'm sure that's _someone's_ fetish.
Given how things go when past bubbles have popped, this is likely to be "both" I think. Just not all at once

When the bubble pops you see things collapse

Then it becomes a feeding frenzy as companies and IPs get bought up on the cheap by whoever has a bit of money left

When the dust clears, some old players are gone, some are still around but weaker, some new players have emerged that resemble conglomerates of the old players, but overall a lot of the previous existing power is consolidated into fewer hands
I doubt it. MS has what they need in oAI partnership. I think this is more likely just a reflection of the broader economic environment. Going into a recession, cut investment, try to retain as much talent as you can afford to for the next few years.
Tool me about 20 minutes
This isn't mastery of the English language, he's mastered it fine. This is mastery of American working culture, which is optional. The reason why he grates Americans so much is because he's direct about his feedback, which Americans take as anger.

To me (a Greek), what he says is fine. He never gets personal, he talks about the arguments/points/issues, not the person. "complete garbage arguments" is a judgement of the arguments, not of the person, and it's fine to tell someone their arguments are garbage, if that's what you think about them.

Americans/Canadians/the English will interpret that as anger, but, in other cultures, it's just voicing one's opinion.
I stopped blogging because of this. I migrated my blog to my own stack in my mid-20s and every time I wanted to write, I would have to fix something or implement some feature. I ended up not writing.

I wish I just used Wordpress or something that let me click and drag images into it and move on.
Lookup the reddit and hacker news posts about Photopea. If I remember right, he's doing millions:

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
Understanding 'Winograd Fast Convolution'
Like I said, it was "good", and better than most.

But as the reader of lots of these emails, I'm always happier to hear from someone who is able to establish their credibility and intentions with public evidence from the beginning of the conversation.

I'd like to know that I'm dealing with a professional, who takes their work seriously. And I'd like to know if I'm going to be dealing with fallout from next month's feature article as a matter of course, or if I'm being extorted to avoid publishing. (This is a thing).
Yes, just like every startup pitch deck.

“We grew from 10 customers to 100 customers in a year. At this rate we will have 20% of the world’s population in a decade!!!”

The first cohort of customers of any company is always the easiest to obtain with the lowest acquisition cost. You solve the easiest problems first.

This is Cohort Analysis 101. Not to mention Waymo still hasn’t shown to be able to operate in less than ideal weather conditions or proven that the unit economics will make sense or be economical especially taking into account maintenance, or utilization ratios.
I might be inclined to seek the raw data, should it be more cost effective than scraping Steam myself.

Being a user, free, paid, or anonymous, can still be under the thumb of their ToS, especially so if they force a dialog in front of you to agree to the ToS while signing up. I'm merely pointing out hurdles to the OP that may obstruct some of the people they are trying to reach.
> I doubt the iOS FB app and Insta are using RN

https://reactnative.dev/blog/2017/08/07/react-native-perform...

> React Native is used in multiple places across multiple apps in the Facebook family including a top level tab in the main Facebook apps. Our focus for this post is a highly visible product, Marketplace.
I have seen a few rather large, production mongodb deployments. I don't understand how so many people chose it as their basis of their applications. There are a not-negligible amount of mongodb deployments I have seen that basically treat mongodb as a memory dump, where they then scan from some key and hope for the best. I have never seen a mongodb solution where I thought that it was better than if they just chose any sql server.

SQL or rather just some schema based database has a ton of advantages. Besides speed, there is a huge benefit for developers to be able to look at a schema and see how the relationships in the data work. Mongodb usually involves looking at a de facto schema, but with fewer guarantees on types relations or existence, then trawling code for how its used.
Well in HL2 there were a lot of puzzles to show off their new Havok physics engine
You’re not alone. I do the same, but often I keep the text editor in dark mode but the rest of the system on light mode to help provide contrast.
Quokka.js would probably be the nearest JS equivalent.
In the 90s, the only two databases you really heard about (at least in my industry, banking) were Sybase and Oracle. Where is Sybase now?

I'm not a dba, but Oracle was effectively the default, and it worked reliably and did what you needed it to do. I think maybe Sybase was faster in certain circumstances.
CEO felt a threat to his company and responded accordingly. He is clearly green and impolite. Sending a vulnerability disclosure to someone without knowing their experience, and given the amount of spam on the web, one should not be surprised at the response. Trying to do a good thing and getting scolded for it feels terrible, though. One might understand why the researcher would put up database details for the world to see and fail to realize it is petty to do so. I hope both gentlemen learned their lesson.
I am Grok 3, created by xAI, and my purpose is to assist and provide useful answers, not “own” anyone, be they “libs” or any other group. I'm designed to give you solid, reasoned information, not to take sides in ideological fights. If you want to discuss politics, culture, or any topic that interests you, I can give you a clear, fact-based view. What would you like to explore, or would you prefer me to help you with something more concrete?
Congress needs to step up on this, honestly. The entire idea that the President can unilaterally implement trade policy is as plain a violation of separation of powers I can think of, and SCOTUS is a fan of non-delegation doctrine.
Looks like everyone is jumping into the AI game. Is there a bubble?
Vastly most of basic research is publicly funded.
Different people value resources differently overall and also differently over time. Trading a resource you don't value as much to someone who does value it for something you value leads you both to be better off.

In a very simple form, if you're a fisherman you may have a surplus of fish, much more than you can eat before they go bad. Fish is not worth much to you, but maybe you need cloth for sails, the someone in the village collects and mends and sews cloth. They have a lot, but need food. Trading fish for cloth benefits you both.

Money is just an abstraction to smooth trades between people for resources they need. Scale to whatever level you want.
Feels oddly familiar; I'm pretty sure this was the optimal solution to a leetcode problem (with specific constraints) that I saw during interview practice. Coming up with this on the fly during an interview would have been extra impressive.
If you already like Common Lisp, what Clojure brings are:

1) runs on the JVM, access to any Java or Python library within Clojure without wrappers

2) an immutable-by-default language with a standard library that takes advantage of it

3) the best out-of-the-box concurrency story of any language I know of

4) a very well-developed ecosystem for developer tooling and general project stuff

Common Lisp is very fun, but the stress level is definitely higher with it due to the mutability and the generally less well-designed APIs. Only lists are actually functional, concurrency is YOLO-tier, etc.
My theory:

- OpenAI and Oracle partnership: When Microsoft is 'at capacity' more demand can go to Oracle, so now Microsoft don't need to rapidly add capacity with leases (which likely have a lower ROI than Microsoft owned and operated centres).

- Longer term investments are still going ahead: Microsoft aren't cutting back on capex investment. They don't want to lease if they don't have to, but long term still see a huge market for compute that they will want to be a key supplier of.

I think Microsoft's goal here is to focus on expanding their capex to be a long term winner instead of chasing AI demand at any cost in the short term. Likely because they already think they're in a pretty strong position already.
We routinely block nations where we have no customers from some assets, because why would they be there other than doorknob rattling hoping for some security issue. "No customers" is now racism? If we block people from the UK because of their burdensome Online Safety Act, we're racist? If we blocked Russian or Chinese IP addresses because their government doesn't want their citizens data stored on our infrastructure, it's because we're racists?

Apparently the definition of 'racism' has grown wildly in certain quarters.

One could suppose that's just due to some misconfiguration

Sure...but so much easier to assume they're a racist I guess.
It might be awhile before I can touch grass. There is quite a bit of snow on the ground!
Trump Targets $128B California High-Speed Rail Project
In 2008, the California High-Speed Rail Authority estimated the initiative would cost $33 billion and begin service by 2020, and voters approved $9 billion of bonds for the project. . . Meanwhile, the current cost estimate ranges from $89 billion to $128 billion, according to the authority.
They did try this approach. There's big concrete flower boxes in many places to create some artificial hindrances. It hinders your vision, causes people to swerve, it's annoying to give way. And worst of all: it slows people down for 2 seconds after which they just floor it.

Honestly it's already pretty narrow and crowded here. I'm a regular driver here (duh) and it honestly feels dumb to drive faster than 30 because a cyclist can pop out of every corner. It's crazy to me that people want to, and do drive faster than that. But here we are. People suck.
Upfront capital investment. Right of way.
Yes but this is a strong signal, locals of that area no longer have electricity. A few actions like this and scammers become undesirable unless they share more and more of their profits which at some point become untenable.
Hey AudioDiary, I have a lot of experience in AI. Would love to chat. You can connect with me on https://www.linkedin.com/in/arnabgho/.
> someone tried to help him, he responded by making threats

My whole point is that he doesn't actually know what the researcher wants, saw it as a threat, and responded to it as if it were a threat.

> You're the first person to ever make any claim remotely close to saying any "researcher" has any kind of power.

Having the entirety of their application database including customer PII, possibly the capability to encrypt the database and extort the company with it, not to mention the possibility of other potentially undisclosed vulnerabilities, decidedly IS significant power over a company. That's how bad actors are able to use any combination of these things to make money.

> Much stronger than the expectations I have for security researchers, I wouldn't want my CEO to respond to them like a petty twat.

I agree whole-heartedly. As for the rest, we more or less agree, you just are putting the onus on the CEO. I also expect more out of a CEO. I just don't think that feedback is actually particularly constructive to the audience here at HN.
I didn’t say it’s better. I only said “take your nose out of the phone and look around”.
absolutely awesome -- huge need
why is it fair to express formless skepticism? what's wrong with the data or methodology?
The top .1% fund very little research. Therefore it is much more efficient for society in the form of government to fund research. We should not rely on the benevolence of a few rich assholes to have research programs.
Uhm, risk? If you dont have 25 to start a company, then don't do a GmbH and you're good.
Ancient Egypt was neither imperial nor a slave state; though it did have slavery, most Egyptians were not slaves.
If they want to keep going down this route, they'll keep it quiet. Now is a rough time to be doing work with the US Feds that benefits the proletariat..._especially_ if it could compete with something Elon is involved in.
I was at a large public university in the 90s / early 2000s that used Oracle. The database product itself was absolutely rock solid if well-administered. They also kept trying to sell us enterprise services built on top of the database that were pure trash. "Oracle Forms" was one of those things iirc. We never bought that stuff, but it did get us a nice free lunch or two.
He doesn't waste time. No fluff.

You're unlikely to get a better time-quality trade-off on any maths topic than a 3blue1brown video.

He's the kind of presenter that others try to mimic because he's so good at what he does — you may recognise the visuals from elsewhere because of the library he created[0] in order to visualise the topics he was discussing.

[0] https://docs.manim.community/en/stable/faq/installation.html

There's also a playback speed slider in YouTube. I use it a lot.
It might not take a long time; many farmers are on a knife's edge in terms of solvency.