skysight-inc/HackerNews huggingface dataset:
In my experience, a huge number of people spend the most they can on housing. So the local price level is set by the local income distribution. Their observation lines up perfectly with my experiences.

This also suggests two solutions that are bound to be unpopular:

* To make housing prices more reasonable, give everyone a pay cut.
* Trying to set a "living wage" is futile since boosting income will feed right through to the price of housing.
Good ol' zip bomb

https://furry.engineer/@niko/113728467796605323
It's to waste CPU cycles. I don't want to touch cryptocurrency with a 20 foot pole. I realize I'm leaving money on the table by doing this, but I don't want to alienate the kinds of communities I want to protect.
Yep and those asking the smart questions and strategically only the smart questions do get higher social points and promotions and raises.

One of the many reasons I couldn't square being an authentic human and being in corporate and left to do my own thing.
Yah. Meanwhile you can be robbed and/or knifed anytime, no matter where, or pushed down stairs from behind your back because pusher felt like you looked wrong at him/denied him a cigarette/your smartphone/some euros, pushed down onto the tracks of mass-transportation from the platform while a train is coming in, sitting in (front of) a cafe/diner, or being intentionally driven over by a car, steered by a madman on a mission, or simply being at the wrong place at the wrong time, while some unrelated madness ensues.

Especially in Germany.
Ecosystems: Big Tech vs. the Real World
> They're looking for commits because it's nicely chunked, I'm taking a guess.

They're not looking for anything specifically from what I can tell. If that was the case, they would be just cloning the git repository, as it would be the easiest way to ingest such information. Instead, they just want to guzzle every single URL they can get hold of. And a web frontend for git generates thousands of those. Every file in a repository results in dozens, if not hundreds of unique links for file revisions, blame, etc. and many of those are expensive to serve. Which is why they are often put in robots.txt, so everything was fine until the LLM crawlers came along and ignored robots.txt.
My biased answer, because I work at Temporal[0], is to use an existing workflow solution that solves all of these problems instead of reaching for a solution that doesn't help with any of these but happens to be AI specific. Most agentic AI workflows are really just microservice orchestrations, the only "AI" involved is prompting an HTTP API that uses AI on its end. So use a good solution for "agentic X" whether that X is AI or any other orchestration needs.

0 - https://temporal.io/solutions/ai
You forget that because the company cannot enforce copyright, I can just take whatever bits the company distributes to me and do what I please with them. I wouldn’t he opposed to a broad law requiring software companies to make buildable sources available for all software they use to deliver a product, but I doubt we’re that liberal yet. That is essentially what Stallman was asking for and the GPL is a means.
This seems like a decent analogy. Still, one product might use lots of different processes in different places. It's a bit like mixing many different web frameworks within one web app, for example.
Yeah, fair enough, you're right, a lot of the churn is created by companies who do FOSS too.

But I think the original point stands regardless of how popular the library is, or who is backing it. Just because Facebook today cares about React, doesn't mean I'd implicitly trust them to care about it for as long as I want to care about my own project, and I certainly don't trust their use cases to always match mine, and that's OK.

I think what I was trying to get across is that "npm install lib" carries a far bigger cost than most people realize, just because it gets hidden behind "our code" while in reality, as soon as you include a library/framework into your own codebase, you need to see it as "our code" immediately.
I like electronics and I think one of the design features that can be desirable in lots of different final products is robustness.

Not just reliability but one of the clear advantages is when your product is highly robust in the face of dramatic price swings for commodity components as well as specialty items like uncommon chips or transformers.

This may not apply to you, but with commodities, for a distributor ideally the internal cost can be zero when the parts are languishing on the shelf after being fully depreciated. Regardless of whether they account for it like that or not. Their pricing can realistically be based on what it costs them to get the parts to you, not what the part cost to acquire in the first place. That can be a lot of leeway, things are not always ideal but maybe more common depending on where you look.
If they block access to all Pebble watched AFTER it has been shown to be opening a dangerous gateway to spammers despite valiant attempts by all to engineer it to be safe, then that would be a lot less of a scandal.

If they further block it by default but allow Pebble users to bypass the block with some very scary warning message then My God there wouldn't be a scandal at all. People who know and accept the risks can use the thing they paid money for as they please then.
My understanding is that China recognized the potential of solar power around 20 years ago and decided they wanted to be the world's manufacturing hub for solar panels. The government invested in R&D early, and today we are reaping the fruits of that investment.

The same thing is happening now with storage, but western governments are weary of losing that battle as well. To address this massive tariffs were put in place by the previous US administration, and are likely to be increased by the current administration. Hopefully this doesn't slow down the production of batteries, but instead just moves the production out of China and into other countries, but that remains to be seen.
honestly didn't know hr actually stood for that, huh
I think using a card is friendlier than using an app.

It takes fewer “clicks” so to speak and is more accessible to the elderly.

But anything government which doesn’t require to keep track of a purchaser’s identity should accept cash. Otherwise what’s the point of cash if your own state doesn’t accept it.
The current version of GHA is "Azure DevOps v3".
IIRC, it came after Microsoft purchased GitHub and I think it was part of a plan to discontinue/kill Azure DevOps altogether in favor of GitHub. I don't think they have feature parity yet, specially on the issues and permissioning parts.

Although, I never saw a public announcement of this discontinuation, ADO is kind of abandoned AFAICT and even their landing page hints to use GitHub Enterprise instead [1].

[1] https://azure.microsoft.com/en-us/products/devops
Okay so they are starting with suppressing first amendment rights of foreign nationals.
It's pretty for sure, but it breaks reader view which I use a lot, so I don't like it. also it requires a lot of unnecessary scrolling to read since the text is broken up so much
Looks like it's fixed

If you're into micro-feedback, there's a horizontal scrollbar on the home page.
If it was the difference of reviving the proposed subsidies or not?

Maybe?
Over the past two years YOShInOn and I have gotten more complaints about posting ArsTechnica and TechCrunch articles to various places more than anything else, mainly for reasons that don't have anything to do with politics but when they do have to do with politics it is frequently the opposite of the kind of politics you have in mind (e.g. whatever your politics are)
Just to be clear, I'm not advocating for anything specific because I understand that the problem is hard. But I feel like some people want to have their cake and eat it too. If you don't silence certain types of discourse, you alienate certain participants (and HN understands this to a degree - you can't use racial slurs here, for example). Maybe that's acceptable - but you just have to be honest about it.
> If an AI model recongnizably regurgitates the essay it trained on then it has infringed.

I completely agree — that’s why I explicitly wrote ‘non-copy paintings’ in my example.

> The AI argument that passing original content through an algorithm insulates the output from claims of infringement because of "fair use" is pigwash.

Sure, but the argument that training an AI on content is necessarily infringement is equally pigwash. So long as the resulting model does not contain copies, it is not infringement; and so long as it does not produce a copy, it is not infringement.
You can have a whitelist for allowed users and ban everyone else by default, which I think is where this will eventually take us.
No, just overly capitalistic, but that's probably more because of your environment than anything, and very possible to change if you want :)
Wouldn’t it be expected that those most capable with technology and software be routed to the intelligence agency, rather than the front lines or something?
When I lived in Oaxaca it was a massive issue with portable water only being available through private means from private springs in the nearby area. All hotels and tourist attractions had access to water, while the rest went without, some for months.
But I should say that my mother-in-law did make dandelion salad now and then, with bacon-and-egg dressing, the bacon cooked but the eggs raw.
If you could conclusively identify bots, you could not serve them anything and save yourself some work (and bandwidth).

If you can't conclusively identify bots, you'll end up serving 'poisoned' responses to actual users. Doesn't seem like a viable solution.
I like Ars still.

Hard to avoid “politics” not bumping into technology these days.

I would argue that at times if you see a lot of politics in tech articles, there may be good reason for it.
I mean, it doesn’t bring any actual value to the conversation so probably not. I was trying to be nice about it.
Anything perceived as negative towards the current US administration has been getting flagged on HN recently. Maybe bots? It's some kind of obvious campaign.
HTTPS-only for Cloudflare APIs: shutting the door on cleartext traffic
Proof-of-work crypto is interesting here because it is fungible with computation, so these solutions that charge computation to users are literally equivalent to crypto.

It's a solution that already has adoption, does not require everyone to sign up with a centralized service, and does not require everyone to pay money (they can pay with small amounts of computation instead) so it remains accessible to ~everyone.
`pnpm` was released back in 2016. It's 9 years old at this point.

I think part of the problem is this thinking that

- you must change things all the time (yarn is still good why switch?)

- the things you change to are somehow really new (pnpm is 9 years old)
I'm a marine geophysicist by background, just to give some context on why I'm starting this by griping about journals. Before I start trashing Nature Geoscience, I'd like to point out that this is an open access article and I give the broader Nature organization a lot of credit for their recent moves in that direction.

See https://www.nature.com/articles/s41561-024-01480-8 for the paper. It's quite short, and very much a geochemistry and/or geomicrobiology paper, so I am not the best person to really comment on it.

Now for a bit of ragging on the journal... The fact that this is in Nature Geoscience says a lot. I have an abysmally low opinion of that journal after seeing the first crop of papers published in it (it's fairly new). Lots of things that just didn't pass basic sanity checks of "is this physically plausible?". Hopefully it's improved... So far it's been "here's all the wacky crap that got rejected from Nature and couldn't be published in a reputable domain-specific journal".

Right now I treat it as a journal that has no clue how to pick peer reviewers. Therefore, stuff gets published that really shouldn't make it through peer review. While this _probably_ isn't one of those papers, I have trouble trusting Nature Geoscience to have picked relevant reviewers.

Despite having worked a lot on related topics, I don't know enough about deep marine ecosystems to really peel things back. With that said, we know there are plenty of different microorganisms that can produce oxygen in these circumstances. It seems odd to me to dismiss biological production immediately. Even if these samples were fully "poisoned" and that really did kill all microbes, why would electrolysis be the dominant source of oxygen for the entire ecosystem? Microbes are a lot easier to explain... But I am likely missing something critical there.

That's a key part of why I I'm focusing on the journal it's in. Based on previous publications, I have trouble trusting Nature Geoscience to have picked good peer reviewers on this. If it holds up, it should have been in Nature. I suspect it was rejected from Nature for some fairly fundamental reasons and then got through much lighter reivew in Nature Geoscience...

But I hope I'm wrong!

There are a lot of zany ideas that are unlikely but also aren't impossible. Those are pretty common and quite fun. Occasionally, they're correct. Much more frequently, they're not. But they make for a lot of interesting discussion and are incredibly important science. I hope this fits into that category.

I'm sorely tempted to ask a friend of mine who works on these exact types of microbes what she thinks of this... It'll make for an interesting discussion at least!
To be fair,

>I'm Not a Robot (film)
https://en.m.wikipedia.org/wiki/I%27m_Not_a_Robot_(film)
> Should I avoid visiting German Christmas markets?

Yes. Glühwein can be enjoyed in more comfortable setups anyway. If that's your thing.

Is there anything else to marketing X-mas?
This is how we handled this in the FreeBSD infrastructure.
https://blog.sysopscafe.com/posts/ai-crawlers-hammering-git-...
It has been running this way for a month, and the workload is fine. I hope it continues this way.
> no need for compliance enforcement stuff

I find github actions works very well for compliance. The ability to create attestations makes it easy to enforce policies about artifact provenance and integrity and was much easier to get working properly compared to my experience attempting to get jenkins to produce attestations.

https://docs.github.com/en/actions/security-for-github-actio...

https://docs.github.com/en/actions/security-for-github-actio...

What was your issue with it?
Hello HN. I built a free, fully managed software engineering platform that handles auth and payments through Stripe Connect. The platform is entirely free to use and takes a 10% fee from any revenue generated. There’s a live preview for each project where you can enter product requirements and feature requests in plain English and let the LLM powered backend handle the implementation for you. Subscriptions are optional and can be set in the project dashboard, and deploying will generate a public URL to share. Below are a few example of live apps I generated! This is still in beta but I think the progress so far is very promising. Would love some feedback :)

HackerNews Clone https://saas-quick.com/view/67d7457398ec5f26f1214eff

Note Calendar https://saas-quick.com/view/67d7a4c898ec5f26f12152cc

ChatGPT clone https://saas-quick.com/view/67db0fb598ec5f26f1217a5b

Email generator https://saas-quick.com/view/67db1db598ec5f26f12181b0
> ...15% is due to Amazon

And you just know they'll gladly bill you for egress charges for their own bot traffic, too.

EDIT: Actually, this is an excellent question. By default, these bots would likely appear to come from "the internet" and thus be subject to egress charges for data transfers. Since all three major cloud providers also have significant interests in AI, wouldn't this be a sort of "silent" price increase, or a form of exploitive revenue pumping? There's nothing stopping Google, Microsoft/OpenAI, or Amazon from sending an army of bots against your sites, scraping the data, and then stiffing you with the charges for their own bots' traffic. Would be curious if anyone has read the T&Cs of their own rate cards closely enough to see if that's the case, or has proof in their billing metrics.

---

Original post continues below:

One topic of conversation I think worth having in light of this is why we still agree to charge for bandwidth consumed instead of bandwidth available, just as general industry practice. Bits are cheap in the grand scheme of things, even free, since all the associated costs are for the actual hardware infrastructure and human labor involved in setup and maintenance - the actual cost per bit transmitted is ridiculously small, infinitesimally so to be practical to bill.

It seems to me a better solution is to go back to charging for capacity instead of consumption, at least in an effort to reduce consumption charges for projects hosted. In the meantime, I'm 100% behind blocking entire ASNs and IP blocks from accessing websites or services in an effort to reduce abuse. I know a prior post about blocking the entirety of AWS ingress traffic got a high degree of skepticism and flack from the HN community about its utility, but now more than ever it seems highly relevant to those of us managing infrastructure.

Also, as an aside: all the more reason not to deploy SRV records for home-hosted services. I suspect these bots are just querying standard HTTP/S ports, and so my gut (but NOT data - I purposely don't collect analytics, even at home, so I have NO HARD EVIDENCE FOR THIS CLAIM) suggests that having nothing directly available on 80/443 will greatly limit potential scrapers.
I looked at a few Banglejs-in-action videos and the limitations look so bad that I'm not sure what you'd even build for it. The app store only seems to confirm this.

Here's someone showing what it's like to use the GPS system and lack of mapping: https://www.youtube.com/watch?v=BtEdM2w1VDM

Pebble only has to be a little better to be 2x more usable. Looking at old videos from 8 years ago, the software was much, much better than anything I'm seeing on Banglejs today.
Yeah, that's where I disagree. This phenomenon is inherently in poor taste, it deserves a bad name.

The actual phenomena that require serious discussion like lack of market protection, lack or consumer protection, lack of contractual protection all have serious names that allow for the discussion. So the bad name isn't an impediment to anything important.
Most publications accept money from companies that wish to sway public opinions. Just as purely political sites sway back and forth so do all the tech publications. Same reason many movies have gone down the drain yet the same crap is being churned out even when movie producers are losing money for allowing external manipulation that offers no artistic value.

I think it would be a fun experiment to have a uBlock Origin section for sites that accept money for paid slants. One click could silence much if not most of the internet.
I'm not aware of any indication that class components will be deprecated.
> was actively condoning and encouraging violence against teslas

> Violence is often defined as the use of physical force or power by humans to cause harm and degradation to other living beings, such as humiliation, pain, injury, disablement, damage to property and ultimately death, as well as destruction to a society's living environment. The World Health Organization (WHO) defines violence as "the intentional use of physical force or power, threatened or actual, against oneself, another person, or against a group or community, which either results in or has a high likelihood of resulting in injury, death, psychological harm, maldevelopment, or deprivation

You can't be violent against cars. You can vandalise them, which is a crime against property, but that's still not violence.

> Reddit is well known to be a primarily Democratic instituion.

I'm sorry, but you've been woefully misinformed. Reddit is mostly young, and thus socially progressive. Any relation to the US Democratic party is completely by accident, and in fact, I've seen tons of criticism towards them for going the wrong way (trying to entice "centrist Republicans" instead of being more progressive).
It depends if you're the only one out of a job. If it really is everyone then the answer will likely be some variant of metaphorically or literally killing your landlord in favor of a different resource allocation scheme. I put these kinds of things in a "in that world I would have bigger problems" bucket.
Ether Whale Prevents $340M Liquidation with Series of Last Minute Deposits
Apple products are not server grade equipment.
Just by sheer numbers, the comment you're replying to must be one of the provably wrong-est comments in history of hacker news =).
How would legislation in the US or EU stop traffic from China or Thailand or Russia? At best you'd be fragmenting the internet, which isn't really a "best", that's a terrible idea.
I kept hoping they'd provide a reference of Tenochtitlan. Possibly the most striking thing I learned when visiting Mexico City.

https://en.wikipedia.org/wiki/Tenochtitlan
Which version of react?

Hooks or classes?

Or whatever comes next.
Much of the tech churn in frontend is likely attributable to it being an entry door for beginner coders over other pathways. Most of us got started in web dev and made big messes using frameworks we didn't understand. So e of us got better and changed the framework to make it more x, y, or z. Some decided, I'll build my own that doesn't have those x, y, z problems. And so here we are. TBD if HTML standards can ever replace this cycle.
Sounds like a "make better warning messages" issue.

Most users are not able to root their device due to the number of steps needed and will give up on an app that needs root access. Make it so that you have to do something other than just clicking a warning message to enable using your Pebble then.

Warning messages can be made idiot proof with some thought.
Maybe I'm missing something, but doesn't this mean the work has to be done by the client AND the server every time a challenge is issued? I think ideally you'd want work that was easy for the server and difficult for the server. And what is to stop being DDoS'd by clients that are challenged but neglect to perform the challenge?

Regardless, I think something like this is the way forward if one doesn't want to throw privacy entirely out the window.

client
Guess we can move from ACARS to ATC in a little bit...

https://www.liveatc.net/search/?icao=SEA
No better? Maybe something shorter. I love that little imp but it's quite a bit of time to invest in something that ended up failing.
There's source repository browsers (git/svn) way, way leaner than GitLab that have the same issues. Any repo browser offering a blame view for files can be brought down by those bots' traffic patterns. I have been hosting such repository browsers for 10+ years and it was never an issue until the arrival of these bots.
It is not the scope of DMA to identify and regulate an OS, or demand a hardware-vendor to open and document his OS at his own expense.

They identified something more abstract and much less arguable:

They identified that Apple has created a closed market of significant size, made themselves the gatekeeper and invited companies to compete there.

But ON TOP Apple decided to enter the market also as a player, and skew the playing field in their favor.

So it's an unjust market where forces are unable to flow freely, and the EU is attempting to rectify that.
I must have missed the ownership table in that video.

How much of the company does she own?