skysight-inc/HackerNews huggingface dataset:
It wouldn't have to go that deep. If we made not following robots.txt illegal in certain jurisdictions, and blocked all IP addresses not from those jurisdictions, then there would presumably have to be an entity in those jurisdictions, such as a VPN provider, an illegal botnet, or a legal botnet, and you pursue legal action with those.

The VPNs and legal botnets would be heavily incentivized to not allow this to happen (and presumably already are doing traffic analysis), and illegal botnets should be shutdown anyway (some grace in the law about being unaware of it happening should of course be afforded, but once you are aware it is your responsibility to prevent your machine from committing crimes).
Here in North Texas a lot of the area has less density than a lot of the bay area, average incomes aren't as high, home values aren't nearly as high. And yet a large portion of the population is served by fiber to the home with 1-5Gbit symmetrical speeds available.
What you are describing does not sound like a victory to me.

If victory means "we are now bogged down in some decades-long occupation against guerrillas that drains resources and has no meaningful benefit".
> The guys behind Prince of Peria lost crown were brilliant in every aspect.

You seem to assume that people want to keep working together forever. Gamesdev can be really intense and for a lot of devs the end of a game is the opportunity to part ways cleanly and try something else.
This is cool!:-)

How come this is not the first “tip” on a fresh Mac?
43-year-old Family Canoe Trip
Okay stranded might be the wrong phrase but not being able to get home for 9 months doesn’t seem like the right outcome for a 10 day itinerary to me. I’m glad everything is working out the end though.
I don’t see how this changes the problem where there is an expected guarantee of a rapid response except that now two people are expected to be available and would now need to directly coordinate in order to ensure one person’s going for a swim doesn’t interfere with the other’s WoW raid.
I would extra: avoid any activities which does not add any value to your thesis and obviously weight it against potential conflicts. Having PhD year earlier is better value, than year later with "better experience" (depends on situation, but having written thesis makes things little easier)
> They just wanted to use dynamite.

It's not uncommon to break up large cadavers so they can be eaten by scavenger animals before the rot causes olfactory issues or poses actual health risk.

In Austria for example, cattle which died on the alpine pastures (about 20 a year) was usually blown up to allow scavenger animals to quickly dispose of the remains as that was way cheaper than hauling the carcasses off with helicopters [1], but after some outrage in 2001, eventually the government decided in 2004 that the practice would now be banned, in exchange the government took over the helicopter transport bills.

[1] https://de.wikipedia.org/wiki/Sprengung_verendeter_Rinder
Had this very same payment scheme as an SRE on call in Europe almost a decade ago.
https://archive.is/m3TcW/share
Business Metrics Broke the University
Is there a similar trick for non-letter characters ?
You should have to pay us each $550 for having to look at the word solopreneurs.
Which choice could they have made differently here? They took the "pay for it" option that you suggested and then you still blamed them for giving the company negative incentives.
The corruption in the new administration is no longer covert, so Google figured it should be an easy deal.
I know that I, as a user, ultimately have 2 choices: to pay for a subscription, or the choice to not use these services.

Option (1) does not block infinite scrolling content, it only removes adds. So this is missing the point. All i want is to not see these dumb shorts videos that I genuinely give no fuck about, but that manages to catch my attention regardless.

Then sure, I can always delete my social accounts, and ultimately i might end up doing it. But let me try to explain why I think this is difficult, and also unfair.

I give 2 purposes to these social networks: First, they play a role in personal-life balance as a way to be more integrated in my group of friends / local communities. Second, they play a role as citizen of my region (in my case, France and switzerland) by being a (sorta reliable) source of information through following accounts and newspapper on them.

Initially, none of these social-networks came with this super-fast / addictive content. They only started to integrate it, in my experience, since 5 years. So it seems to me that these companies have broke the initial contract that they "sold" to us: to connect with our friends & communities and to allow us to follow a specific set of public influencers.

I guess that I am mad that we, as a society, have allowed these companies to gain such an important role in our daily lifes (social life and public life) that they can now say : we will allow you to interact with some of our friends, but you will also have to watch our stupid videos... And unfortunaltey, it's not easy at all to spin up a concurrent social networks that would be full-filling this initial contract. Probably lots of people actually like to scroll on insta Reels and youtube Shorts.
For DNS, Gandi is also French?
> if most people can't read it?

By reading the headline
It can be part of a viable solution.

Someone’s plan when investing in early Solar panel R&D went something like: If everyone would just… “follow their economic interests” driving down the cost of panels will dramatically increase adoption further driving down costs in a feedback loop.

Unlike most “if everyone would just” plans that one actually worked because the desired behavior aligned with people’s interests.
To be fair I don't know any Sikhs, though there is a Sikh community where I live (there's a Sikh temple at the bottom of my road).

I'm going to listen out for how Sikhs pronounce it.
I use these a lot when available, often called "passkeys".
Diagrams AI can, and cannot, generate
1) Dark pools are not as secretive as folks in this thread think they are.

2) Those trades are happening at the public price. Its not too often that the dark pool trades will happen outside of the NBBO and usually those exclusions happen for very large block trades.

3) Most (all?) pools are reporting to FINRA by closing some may even report sooner after the trade.

So I am not sure what your question is as the data is fairly public already.
I couldn't find the advantage of using leases and it's pretty straightforward to rent month to month.
Israel shatters Gaza ceasefire as +400 Palestinians killed in IDF strikes
Recently I've been annoyed with Youtube Premium. I pay for an ad-free experience and do not see ads in the traditional (wait 5 seconds to skip) way, yet more and more content has inline product promotion where time is spent thanking a sponsor and pitching their product. So I'm paying not to avoid ads, but I'm still seeing paid promotion...
What's more problematic is that Cloudflare is obviously reading and storing and analyzing passwords. So every service that uses Cloudflare on a login page is compromised. I bet that there are several Excel files with all scraped passwords circulating within Cloudflare.
Paying make it worse, paying doesn't prevent ads to be forced later (e.g: Netflix, Prime, Disney+) and split people fight against ad, as the ones with enough money to avoid them will berate the other for not paying, will still providing benefits to an ad-driven company.

Never pays to avoid ad, block them or get the content by other means.
It's akin to "never negotiate with terrorists" or "never pay ransom", you have to remove the incentive.
I found this screenshot of the partner program contract that says it's a 55% split for either https://imgur.com/YjOHAAr

But for Premium the amount is distributed by watch time, whereas for ad-supported users it's by number of ad views. This means that for short videos where the value of the ad is higher then the value of the watch time, a "free" user wins, but for longer form videos where the watch time is longer, the Premium user wins.

LinusTechTips once showed the YouTube income breakdowns for some of their videos that showed this - for their hour+ long PC build streams, Premium income was higher and for shorter videos, Ads income was higher.
And yes I see your edit, Sometimes with google captcha I just end up in a never ending loop.
It's a "holy shit, two cakes" situation. I don't think anyone who's devoted enough to being an astronaut to go through all it takes is going to mind more time in space doing space stuff.
Clicking the link hits a paywall, but copy-pasting it gets me the article.
Yeah, the anti-AI responses I got to this seem to come from people who don't actually need to use GIMP to do real world tasks, but they are sure vocal in their opinions as to the direction that tool should go. Hilarious.
I'm not going to trust that until its on F-Droid.
I've taken a liking to using a self-hosted Bitwarden instance via vaultwarden, and it's been a pretty good experience. The vaultwarden server is only accessible through my Tailscale network for extra security.

https://github.com/dani-garcia/vaultwarden
Not having API-s for models would suck terribly. It would kill tools like Aider or Cline, where I can switch models as I prefer, paying only for tokens I have used. The only option would be to purchase overpriced application from a model provider.

I hope the author is wrong and still there will be someone who would like to make money on "selling tokens" not end-to-end closed solutions. But indeed, market surely would seek for added value.
Where are you from that you consider all of these groups to have the same pronunciation?
Why would you use an account to do that?
Some of them are in multiple languages, which surely violates the principle?
How I'd learn ML in 2025 [video]
The vast majority of authors hardly make any money, and DRM will not change that.

And given books are so easy to duplicate from the form that needs to be available to users to read, there is no world where DRM will ever stop duplication of books.
They didn't though. Every single streaming service bar Netflix loses money. On top of that, they've all poisoned the well by creating as many subscription tiers as Dell has laptop SKUs and raising the price every 9 months so nobody knows what the service should cost.

This ensures that people start and stop subscriptions just to watch a single series, instead of sticking with a single service all year.
Show HN: I made a platform that automates back end API and database workflows
I don't understand the thing about the cache. Presumably they have a model that they are training, that must be their cache? Are they retraining the same model on the same data on the basis that that will weigh higher page ranked pages higher or something? Or is this about training slightly different models?

If they are really just training the same model, and there's no benefit to training it multiple times on that data, then presumably they could use a statistical data structure like https://en.wikipedia.org/wiki/HyperLogLog to be check if they've trained on the site before based on the Last-Modified header + URI? That would be far cheaper than a cache, and cheaper than rescraping.

I was also under the impression that the name of the game with training was to get high quality, curated training sets, which by their nature are quite static? Why are they all still hammering the web?
Botnets would not surprise me. By chance can you post one of the log lines for them? Any unique characteristics at layer 7 or even 3/4? Are they using HTTP/1.1 or lower? If so try dropping anything that is not HTTP/2.0 when you are under attack. This can break unmaintained API clients. All major browsers support HTTP/2.0 whereas many old bots do not.

if ($server_protocol != HTTP/2.0) { return 444; }

Another thing to check for is cors and navigate headers which bots often lack (Nginx example):

if ($http_sec_fetch_mode !~ (cors|no-cors|navigate) ) { return 444; }

If you run:

tcpdump -p --dont-verify-checksums -i any -NNnnttvvv -B32768 -c16384 -s0 proto 6 and port 443 and 'tcp[13] == 2'

do you see nominal MSS values such as 1280 to 1460? If not try dropping any SYN packets that are either missing MSS or have a strange value. In Netfilter IPTables in the raw table it looks like:

iptables -t raw -I PREROUTING -d ${My_IP} -i eth0 -p tcp -m tcp --dport 443 --tcp-flags FIN,SYN,RST,ACK SYN -m tcpmss ! --mss 1280:1460 -j DROP

Test these things in a staging environment of course. These things assume you have a device at the edge that can do something similar or that you are running iptables on the node itself and that gets into topics of state table size, stateless rules, etc... Example from the raw tables

-A PREROUTING -i lo -j NOTRACK
-A PREROUTING -i eth0 -p tcp -m tcp --dport 443 -j NOTRACK
-A OUTPUT -o lo -j NOTRACK
-A OUTPUT -o eth0 -p tcp -m tcp --sport 443 -j NOTRACK

Otherwise the attacker can fill your state tables even if you increase the size.

Another common option is to require an account and then regardless of IP address limit how many requests per (second/minute/hour/day) can be made by said account and limit that account to existing in less than 3 CIDR blocks per day or perhaps 3 /16's per day and then make it harder to botters to mass create accounts. All of this should be adjustable on the fly by DEFCON status. If you are not under attack DEFCON 5, ease the restrictions so the site is more usable and friendly. If under attack DEFCON 1 then rules and account restrictions are tightly enforced but still usable by real people using the site the way it was intended.
Wow congrats. There was an interesting article about Wiz discovering RCE and tenant isolation issues in AI-as-a-service: https://www.wiz.io/blog/wiz-research-discovers-critical-vuln...
The argument appears to be "last-mile" specialisation of AI models by massive-compute-companies will be entirely proprietary, and walled-off to prevent competitor extraction of data. And these scenario/domain/task specific models will be the product sold by these companies.

This is plausible insofar as one can find a reason to suppose compute costs for this specialisation will remain very high, and the hardwork of producing relevant data will be done best by those same companies.

I think its equally plausible compute will come down enough, and innovations in "post-training re-training" will occur, that you'll be able to bring this in-house within the enterprise/org. Ie., that "ML/AI Engineer" teams will arise like SEng teams.

Or that there's a limit to statistical modelling over historical cases, that means specailisation is so exponentially demanding on historical case data production, that it cannot practically occur in places which would most benefit from it.

I think the latter is what will prevent the mega players in AI atm making "the model the product" -- at the level they can specialise (ie., given the amount of data needed), so can everyone else.

Perhaps these companies will transition into something SaaS-like, AI-Model-Specialisation-As-A-Service (ASS ASS) -- where they create bespoke models for orgs which can afford it.
It's more or less covert subsidies for the usual suspects. In Germany that means the like of Fraunhofer-Gesellschaft, Atos, Bosch, Deutsche Telekom, SAP, BMW and Siemens get some millions (and by "some" I mean around 200 million euro). If there's no outcome, like in the GAIA-X case, it's just bad luck for the taxpayer.
You know who is the best target demographic for selling stuff? People with money.

So that's who you want to show ads to.

And do you know a proxy for "have money"? Paying for premium, when there is free.

Therefore, every time you pay for premium, all the advertisers look and say "I'd pay a lot to show ads to that guy". At some point, the premium service includes ads, because of so much potential extra revenue!

And that's why I don't pay for premium.
Show HN: Free Influencer Pricing Calculator
Colleagues of mine are using it to verify concurrent programs: https://iris-project.org/tutorial-material.html
> It was killed because Steve beleieved that touch screen is always better.

No, it was killed because people much preferred Steve's product than Blackberry's. In large part thanks to trading off a 5% of keyboard effectiveness in favor of 50% additional screen space.
We are on the cusp of being able to plow through vast quantities of literature and data in an instant using multimodal machine learning models. Journal articles are written for people. The landscape is changing. We are headed toward a future where scientist upload data and thoughts en masse into the cloud to be consumed by interpreter models that in turn feed back into the scientific machine. Data quality and attribution (scientist performance rating) is automatically allocated by models.
Yeah that's fine if you can do it. His point is that most software is not that simple. I work in RISC-V verification and the spec is full of ambiguously worded or easy to misinterpret or just plain unspecified requirements. Even if you formally verify your chip against a formal specification there's a huge gap between the asciidoc ISA manual and that formal specification where bugs can exist.

Something like compression is the absolute best case - you have a trivial property that covers everything. Mostly it isn't like that though.
The solution here is simple: require user logins for data retrieval. Each user gets a quota as per a standard bucket algorithm. Don't overcomplicate a non-issue.
to stay with the analogy, people won’t wear the stab-proof vest or at least not stop there. People will stab back.
The magnitude of the attack by bad actors in the AI space is potentially life ruining and they shouldn’t expect not to have their lives ruined in retaliation if this keeps up.
Design for a Small Planet
> Typescript looks nice to work with but the tool chain is horrible (this isn’t really Typescripts fault though, more a synonym of it having to compile to JS).

It's not even inherent to TS that the toolchain must be a morass of moving parts and multiple config files, as shown by Deno in contrast to Node.
I just couldn’t get into React on an aesthetic level, so I can’t speak it what it offers practically. But for the times I’ve needed to wade into frontend, I’ve had a really pleasant experience with Vue. It has a gentle learning curve and good documentation. The declarative templates and single-file components are especially nice. To me, React is the JavaScript of JavaScript frameworks and Vue is the Python (but not in adoption/third party library support, obviously).
We use Plane.com, as they are one of the few companies that support hiring in Palestine. Deel doesn't even list Palestine on their countries page, which tells you a lot about their ethics.
Test Driven Development Wars: Detroit vs. London, Classicist vs. Mockist (2018)
A tool to generate realistic fake data for security testing–how effective is it?
Hey HN,

I’ve been working on Veilgen, a tool designed to generate fully synthetic, encrypted fake data for security testing and red teaming. Unlike real or scraped data, Veilgen creates randomized structured data, making it ideal for:

Testing AI-driven detection systems without exposing real data.
Simulating SSRF/RCE payloads with obfuscated and encrypted inputs.
Eypassing security filters using structured yet unpredictable fake data.
Running on Android/Linux with optional root features for deeper security analysis.

Since modern security systems rely heavily on AI-based anomaly detection, traditional evasion techniques are becoming less effective. How do you approach generating fake data for testing? What’s the biggest challenge in bypassing detection systems?

Would love to hear your feedback
RealMe concept turns a smartphone into an interchangeable lens system
I use mistral-small-24b as my daily companion, and my AI project. It is truly amazing. The model is fast and does everything I need. I often feel the output of mistral's models are better than most of the other open models out there including the recently released gemma-3-27b.

I believe mistral just released Mistral Small 3.1, I can't wait to try it out.

There is also a reasoning variant from Nous Research which I've recently got up and running.

Mistral's model is in a class of their own. I'm inclined to try out their larger models via API. I wish they had a reranking model as well.
There are exchanges that already do this and it goes back to the whole attack on HFT even though modern markets have the tightest spreads in history.
Ah, the sci-fi tight beam.
> I'm paying not to avoid ads, but I'm still seeing paid promotion...

It seems like you have shifted from having a problem with the platform to having a problem with the content producers. Can’t win?
context: Zoho is incorporated in US and made in India.
Just cancel it, make a new Act with a different name and equal purpose, claim victory. Seems to be the most likely procedure with the current administration.
This article delves into the artful journey of becoming an exceptional engineering manager by mastering self-awareness—a process comparable to a craftsman perfecting their trade. It explores how tools like DISC analysis and Clifton Strengths assessments can illuminate natural tendencies and talents, while examining critical leadership dimensions that exist on spectrums rather than absolutes: autocratic vs. democratic approaches, hands-on vs. hands-off involvement, strategic vs. tactical thinking, pragmatism vs. precision, and emotion-driven vs. data-driven decision-making. The piece argues that effective engineering management isn't about finding the "correct" style but rather understanding your unique strengths and leadership dimensions to build a management approach that authentically leverages your natural abilities while creating balanced, high-performing teams. Much like a master craftsman who intimately knows their tools, the engineering manager who understands themselves can skillfully navigate the nuanced art of leadership to foster excellence and collaboration.
I am not so sure this makes sense. Training a model to directly use certain tools (web search etc) makes the model very specialized and less flexible. As long as other solutions are more flexible and less costly, training a specialized model would not be worth it.
I don't think those statements are contradictory at all. Making the thing is getting more expensive, but using it is getting cheaper. Electric cars could be a good analogy here, compared to an ICE, the upfront cost is higher, but once you have it, it's cheaper to use.
Most paywalls are easy to bypass. Most HN readers know this.

Some of us also have FT subscriptions though.

That'd be an interesting poll. What % of HN readers (poll participants) subscribe to the big paywalled story sources? NYT, FT, The Economist, ...
ENAIL: Mailbox.org (germany)
Just FYI, changing icons/themes/tool groups is even simpler in 3.0. In the Welcome Dialogue that pops up on start, you can change all those settings in the Personalize tab.

You can also access that dialogue under Help.
Can't get over paywall, but from experience:

NoVa/DC Sluglines are a cool example of self-organizing communities. There is a set of informal rules and etiquette around passengers and drivers. A lot of it comes from the military background of the participants. The locations of pickup/dropoff sites were largely spread word of mouth in the pre-social media days.
If we're getting to the point where we need to decrypt things and reverse engineer protocols, maybe we should... not use these devices? Maybe we should opt out of this economy? Maybe we should do other things to entertain ourselves?
Just tried emailing you and your contact form doesn't work.
In Finland I pay 20€/mo for unlimited data (bandwidth capped at 200 Mbps). With some shopping around it can be cheaper/have more bandwidth. The pricing has been similar at least since 3g. And I recall having a similar deal in the UK five years ago.

There's also 28 GB EU roaming per month included, and 2.23€/GB after that.