skysight-inc/HackerNews huggingface dataset:
Yeah, but they get to rebuild the lighting shot by shot, and there's a crapton of CG.
Any specific reason you believe that Deel was founded by spies or is your statement based on some general principle?
you just did tho

(I am currently reading and infected by Hofstadter's "Surfaces and Essences: Analogy as the Fuel and Fire of Thinking" which I think would side with using unalive, which might also construe a set larger than that of "dead.")
Beta release of GNU Awk 5.3.2 available
I don't know anything about cloud VMs, but I'm confused about how this is possible. Wouldn't determining whether you are HIPAA complaint depend on auditing all kinds of application details about how information flows through the system and how authentication and authorization are done? How could this be validated statically by looking at cloud VM config? Is Wiz doing some kind of AI magic over your whole codebase?

I am sure I am misunderstanding something, but I'm not sure what.
Things that have a bias:

1. Making money. Specifically, making a rich person richer; earning you a margin less than the topmost in your risk class in their portfolio.

2. YCombinator, or startup philosophy. Doesn't rule out critiques of corporate philosophy, your approach just needs to tick more boxes.

3. There's this rule: business itself doesn't hold grudges. The smell of grudge means it's something else -- could be lots of other things: sports (Moneyball), politics (Marc Andreesen is articulate about how to remove ethics from politics), signalling network loyalties (Ivy League), but -- worthwhile or not -- those are costs. Be prepared for any business audience to form a consensus on rules; and in the non-business dimensions, individual humans to self-select.

It's interesting to look outside this, though. It's academically interesting when a project succeeds in defiance of these rules, or any academically-evaluated rules.
Certificate pinning prevents MITM. It doesn't prevent blocking.

What could prevent blocking is if the device uses DoH for DNS.
they'll sit through the ad to avoid sitting through a black screen

Bold claim.
You made a specific argument, that the Taliban defeated the US military. This absolutely did not happen.

I’ve said what I had to say, have a nice day.
I'll be hanging out here - happy to answer any questions you have!
And comic books.
The blog post mentioned correlated failures in an availability zone. You likely could reduce this a bit, but still run into this frequently enough
>SourceHut says it's getting DDoSed by LLM bots

How do they know it's LLM "bots"? Did they provide any proof? Is it crawlers or automated user agents? The guy behind SH hates all "AI" and is vocal about it; it would be reassuring to see some evidence, all I've seen is them saying "it's those pesky AI bots!"
Fog and heavy rain are not “tests he intentionally created to make Lidar look better.”
Multihoming is broken for most people in IPv6 space. It's stupid easy in IPv4.

https://blog.ipspace.net/2010/12/small-site-multihoming-in-i...
https://archive.ph/T3S2P
I don't think that this is what GP wrote about. They complain about the paper and not the software. Imho, most scientific papers are really badly written, because most scientists (and most people) are bad writers.
> (ending with a non-downvoted comment!)

Only after I had to comment asking for reasons. Also, it's not the first time, https://news.ycombinator.com/item?id=43379510.

> tropey, generic comment

I don't see how it's generic. It's about one specific example of a general trend.
> the code itself would be far easier to read and maintain.

As it happens, my boss, who wrote the app, quit, started his own company, and did rewrite it, from memory. He did it in QuickBASIC 4: it became a compiled binary app, in structured code. That made it more readable, sure: the point here being, it wasn't necessary to rewrite it in another unrelated language to get that win.

But QB was a cut-down version of the MS BASIC Professional Development System. It was intended as a pro tool, not as a thing for learners.

In other words:

• Don't mix up simple BASICs intended for beginners with pro-level ones.

• Don't assume that a more "serious" language means more readable code, because it doesn't.

• The flipside: don't assume that more readable code needs a more serious language. It doesn't.

None of your criticisms address what I'm trying to say, which is that BASIC was in its time a good tool for beginners, and the evangelists of, say, Python have failed to understand _why_ it was good at what it did. Python is _not_ a globally better thing.

Tools that are good for pros may be bad for beginners, just as tools for beginners can be bad for pros. This is surely not a stretch or a controversial statement.
BYD says its new technology charges EVs in five minutes
Even if they're confident that Intel can't or won't enforce their old trademark, "Core 2 Duo" has to be up there on the scale of unnecessarily un-Googlable names.
It was going to happen last year but Wiz said they wanted to IPO. Wonder what that implies about the larger IPO/exits market.

Here's the letter sent by the CEO Assaf Rappaport to his team at the time (2024):

"Wizards,

I know the last week has been intense, with the buzz about a potential acquisition. While we are flattered by offers we have received, we have chosen to continue on our path to building Wiz.

Let me cut to the chase: our next milestones are $1 billion in ARR and an IPO.

Saying no to such humbling offers is tough, but with our exceptional team, I feel confident in making that choice."

https://techcrunch.com/2024/07/22/wiz-walks-away-from-google...
Yet his approval rating is higher than its ever. There is a segment of the population that seems love the bull in the china shop approach to governance.
Forty Lines of Code Sped Up iOS End to End Tests by over 50%
Very exciting! I've since left the Pebble ecosystem for Garmin/Withings but I have always had a very fond and memorable experience wearing Pebble watches.
hyperbole would be the wrong word. It think misinformation would be the correct word since the allegations were false rather than exaggerated.
It's answering a question I never asked.

To recap:

>>> Tesla didn't innovate, they just made a triangle.

>> The triangle actually has several innovations, it's basically a concept car

> Concept cars usually don't enter production for a reason

Those reasons, in this case, being unrelated to the technological innovations, as far as I can tell. Correct me if I'm wrong. Tesla's problem isn't a failure to innovate, it's their leadership deciding to make stupid and impractical cars.
> Unless you're already a name brand (e.g. the NYT, a handful of very high profile columnists, etc.) you can't just assume people will know the value of your work

Sure. This problem is conserved across private enterprise.

> providing half your content for free while keeping half behind a paywall seems like a perfectly reasonable strategy to address this discoverability problem

The New York Times runs a 12% operating margin [1]. Giving away half their content without sacrificing quality would require incurring the same 88¢ of costs for 50¢ of revenue; it just doesn't work. Sales and marketing is usually a single-digit percent of revenue for a reason [2].

The partial-reveal strategy particularly fails for news because I can now decide which articles I'll run through the Internet Archive. If you paywall everything, that's too tedious.

[1] https://nytco-assets.nytimes.com/2024/11/Q324-Press-Release-...

[2] https://bfi.uchicago.edu/wp-content/uploads/2024/11/BFI_WP_2...
Having an AI engine understand ascii diagrams and output the JSON would be ideal. Till then here is the PR (1) for a simple import and export.

(1) https://github.com/casparwylie/cascii-core/pull/5
New platform lets anyone rapidly prototype large, sturdy interactive structures
got myself the Core 2 Duo - other one was a tad too big for my taste, also I enjoyed the idea of having a compass and barometer for hiking. pity about the lack of HR sensor on it, though.
They were already doing stuff that's squarely behavior for which the board will fire you (and plausibly criminal), so prudence already departed.
Isn't that pretty unethical without an IRB and informed consent?
More like: Kind of weird time doing business with Americans, given that they're exporting Nazism across the globe.

Or rather, kind of weird to be identifying people with their governments, and to do this only for Jews.
The state (and city of LA):

1. Created dangerous conditions through inadequate fire management.

2. Prevented the private market from adequately communicating the risk through price increases. As a result, 7/12 of insurers stopped or restricted selling new policies.

3. Created a moral hazard by selling it's own policies to homeowners who were dropped by the private market.

4. Failed to respond to the fires.

5. Failed to cover claims through its insurance program.

6. Is trying to bail itself out by extracting $1 billion tax from the rest of the state.

Yet we're supposed to be thankful for this?

You could say the people whose homes burned are grateful they are being bailed out at everyone else's expense. But I bet they would be much happier if their homes had never burned down in the first place - a debacle that was entirely avoidable.
Hours of Updating My Bios
Preventing smuggling of data where you don't want it is definitely an aspect of security.
I could see this information on the website being encoded in some form in pypi such that it could be updated to support various platforms.
Why would Google, a leader in security, spend so much on another security firm? Wiz must have something amazing under their sleeve.
(Posting as separate comment because wall of text)

Also - Honestly don't even understand why so many people would need to scrape for training data.

Is it naïveté (thinking it necessary), arrogance (thinking it better than others, and thus justified)?

Aren't most advances now primarily focused on either higher level (agents, layered retrieval) or lower level (eg. alternatives to transformers, etc.. which would be easier to prove useful on existing datasets)?

Genuine questions, all of these - if I'm off the mark I'm keen to learn!
Financial Advice I Ever Got (Or Gave) (2013)
their stated reason [0] for that is "It’s almost exactly a Pebble 2, upgraded with modern chips and new tricks. Duo is short for ‘Do-over’."

[0] https://ericmigi.com/blog/introducing-two-new-pebbleos-watch...
From the comments of that post:

> Hopefully this can put closure to the speculation. Our organization is a databank and is a big user of mdisc for archiving. We reached out to Verbatim last week about this Media Identification Code (MID) discrepancy. Here is their reply, in their own words ---- "The creator of the MDisc technology- Millenniata went out of business in 2017, they sold the technology to Mitsubishi, who until 2019 owned Verbatim. Due to this, the stamper ID changed, but the formula & the disc materials stayed the same. Mitsubishi sold Verbatim & all the technologies to CMC in December of 2020. Verbatim is the only company authorized to sell the original technology. Any Millenniata discs available were all produced before 2017 when the company shut down and any other brand is not the original technology." ----- So there it is, mdiscs with either the 'VERBAT' or 'MILLEN' prefix are fine. Just different production periods. Cheers.
Physicists Bend Time Inside a Diamond, Creating a Brand-New Phase of Matter
Be careful if you see yourself spending too much time on the devops side of things. You can be building a tower of work that has zero customer value in the end.

Even the supposed quality improvements found in an automated way may just turn out very expensive compared to just spending the time doing the QA yourself at specific milestones. Unless your career is devops be very skeptical and track your time and return on that time.

I learned this the hard way although I am a build/devops person professional I came to realise I had a tendency to build really complicated processes that would be ok in a hundred person team, while I actually was working solo. The upside is that there is lots of reusability for future projects and I also became very skeptical of custom CI jobs and CD tools, and try to reduce everything to env variables 1 line bash scripts. I also am very skeptical of automated integration tests as they are incredibly expensive to build and maintain.
To clarify, assume in good faith that pivot in context means compelled towards involuntary action---i.e. unexpected loss of local data, as opposed to a matter of routine shift in workflow---where the remote forge is being tapped for its secondary function as off-site backup.

The question was more intended to probe remote UX resilience near the limits of pain when faced with massive git repos which primarily capture binary assets/artifacts.
Youtube do their own re-encoding on upload to different quality levels, so they could theoretically hook that and make sure to provide suitable splice points and record them in the metadata.

> your HTTP sessions cease to be stateless

There's already pretty heavy magic around preventing people from simply grabbing all the HLS blocks, I think? All the work that yt-dlp does.
The far side of the moon was once a magma ocean
Deep-learning system uses smartphone camera for heart rate monitoring
The article's first para correct the headline to "your website can outlast".

But TBD whether you are able to stay in that game long enough to win. Even assuming you don't lose interest, and drop out at some point.
How'd you manage the transition (back?) to low-level? I would love to do chip work (or really anything systems-y) but all my experience is fullstack/webdev. Every time I apply I get bounced for insuffficient domain experience.
There are ways around it. If they look into specific customer's usage it is looking at customer data. If they look at more customers it will just be called anonymous analytics.

Then you slice and dice the analytics data to extract what you need in the name of planning & improving the product.
Stop this you’re getting yt dlp shut down you dimwit
I am suspicious of the acquisition and critical of its founders. But at the same time I'm sitting here looking a Wiz logs and dashboards. The product is certainly real.
Really is. Seems like they lost their nerve. Their credibility is in the toilet now. Clearly not good faith actors.

Which is a shame because seems like there's a real opportunity to really shake things up with an open voice model that's competitive with the proprietary ones.

Oh well. Someone else will do what they claimed to want to do.
I know battery life is impacted but I really want exactly this with GPS.

I want to be able to track my runs.

I love the banglejs because it is hackable but the GPS was very difficult to use. But it is such a fun device to hack on.
I write server-side Kotlin at $DAYJOB, for several years.

Kotlin used to be a marked improvement over Java.

A series of large language changes, starting with JDK 16, have leveled the playing field somewhat.

Nowadays Java has Record types (data classes), sealed interfaces, pattern matching, etc.

Java's pattern matching actually got the ability to use guard clauses in match expressions BEFORE Kotlin implemented it:

https://kotlinlang.org/docs/whatsnew21.html#guard-conditions...

If Java had the ability to write free-floating functions outside of classes, and to declare function types succinctly like:

(String, Number) -> Number

It'd probably be on-par with Kotlin for me.
> going to a seedy part of town, picking up a dropped cigarette butt, and leaving it at the crime scene

I've sometimes conjectured collecting hair from barbershops and making a dusting bag that steadily fluffs out hairs to dirty up a crime scene. Maybe get some saliva from grocery store sample spoons.
> the RTX Remix application lets modders drag and drop lights, move objects, copy-paste existing objects into a scene to increase clutter and grass coverage, convert lights to be fully ray-traced, AI enhance textures, and add DLSS to improve image quality and accelerate performance.

https://www.nvidia.com/en-us/geforce/news/rtx-remix-half-lif...
Also, dynamite doesn't last forever -- so if you are a municipality with excess dynamite that is approaching its end of shelf life, and disposing of it unused is tantamount to admitting you wasted money buying it ...
Making sense of card range query EXPLAIN plans
It works completely fine with a single drive - just as well as any other filesystem, if not better. As a single root/boot drive’s fs, it’s far batter than any of the “standard” alternatives (HFS+, NTFS, EXT#, APFS). No you can’t pool arbitrarily sized drives, but you can’t with any of those either. And yes, you lose data if your single drive fails, but you also do with any of those.
Rendering is significantly faster and more energy efficient on a GPU.
A lot has happened in the last 56 days that has resulted in significant uncertainty in the stock markets. That, combined with the higher offer, apparently changed the board's mind.
Thanks to Warren Kinney for distinguishing the British pronunciation of "new" and "knew"

I'm confused about this. I'm from London, and I say these two words exactly the same way.
It's more like you downloaded a .desktop file from someone untrusted.
Defeatist nonsense. You could spend a half hour with a tutorial, but instead write here.

The UI is 95% the same as every image editor since 1985.
What does Intel think about that name and was it intentional?

Any plans for a more sporty model (i.e., HR, GPS?)?
Ask HN: Alternatives to Vector DB?
A while back I was looking for a vector database that would work across Windows / Mac / Linux platforms. Some of the options required specific processors like Intel. I am curious if there are any alternatives to a Vector DB that can run cross platform and are easy to setup?
Why does a personal opinion gets downvoted?

I would not use this visualization when i trip. If the OP is interested in a more indepth i would provide it but otherwise, its a product which is directly correlated to a personal experience.
GP's lists fall somewhat short of explaining the two most important differences:

1. Kishoutenketsu prefers to introduce the primary conflict as late as possible, whereas any writer in Hollywood will try to introduce it as early as possible.

2. Kishoutenketsu prefers to frame the primary conflict as a difference in perspective that must be bridged from both sides, rather than outright competition between irreconcilable goals.

These differences aren't fundamental (you can find all the counterexamples you like, especially if you cite movies with twist endings) but they are encouraged by style guides and deliberately (or even subconsciously) prioritized by writers, to varying effect.
Is this going to be like the 240W "SuperVOOC" charging for smartphones? It works, but also decimates the battery lifetime very quickly.
Sounds like a good use for Severance (the process from the show).
HIPAA was an example.

Yes there are other parts to HIPAA than just VM config, but it’s just giving you policies and checks out of the box
High time DOGE cuts funding for this sort of thing. Most likely fraud... :-p
I was at the tender age of 21, and a mere contractor at my first job. I recall being paid hourly, but never filling a time card.

I had just been promoted to a systems admin role, after demonstrating prowess with coding and system configuration, and also the actual qualified admin had quit. One of my projects involved a rewrite of server code for efficiency as our /etc/passwd balooned to thousands of users, and too many logging in simultaneously.

So on Thanksgiving Day, we just got in the door with Mom after shopping, and my supervisor rings the home phone; his first words are "There's a hacker on [production shell server]". And I told him a few commands to try, and we did not seem to suffer downtime or need our backups.

That may have been the most consequential job I had for a decade. There were thousands of customers depending on us giving "four nines" of available service, including the corporate customers, but we had no formal on-call agreement, not even a way for me to access systems from outside the office, and I was still a novice after a few college courses and a lot of unstructured hacking.

My [salaried] father, on the other hand, often brought a pager [which never seemed to beep] home, and one day we were all sitting around the living room when an explosion rattled our windows. We were still a bit rattled ourselves when the phone rang, and it was his cue to go down to the site and respond as a health & safety officer.

So my mother said that our household policy would henceforth be: "if something explodes out there, nobody answers the phone!"
There are weightlifting shoes with an elevated heel for this reason
Interesting. Link or something?
When it comes to behavior, individual behavior generally exceeds that of breed. There are behavioral commonalities within breeds, but they are also mixed with the health of the breed, size, and how fast they mature. A breed with inherent narcolepsy and poor strength tend to be more easier to handle and get perceived as having calmer behavior. In term of domestic behavior, breeds with higher independence and intelligence tend to be more difficult and often get describe as having a energetic and strong willed behavior.

I disagree with the whataboutism. Comparing risk is a under utilized skill in society, and people are commonly surprise when informed. If we are talking about risk to children, parents with a pet dog has a different risk profile than that of a pet horse or a pet cat. If we are assessing which kind of parent has a higher risk factor in their pet ownership, then we should not limit it to simply dog breeds. It also makes no sense to just compare pet owners, but also owners of other objects which carry risk to children. A simplistic proxy for comparing risk is to use life insurance and see what kind of risk that insurance companies find to be higher or lower. People who converts risk assessment into money don't usually care too much about the object that causes risk, but rather reduce it down to how high the risk is.
For now, sure. But there's lots of free hosting out there these days: Cloudflare Pages, GitHub Pages, Netflify, new stuff that pops up from this point forward... But for every Twitter you point to, I can point to five Friendsters
There are always details within details. The overall idea is easily understandable. You are being pedantic.
> I am sure I am misunderstanding something, but I'm not sure what.

You're missing that a lot of "security" is in reality just a bunch of check-boxes for a form that someone asks you to fill out.

The security you need to really think about is outside of those checkboxes, and it seems like Wiz is not for this type of security, but the former.
A central part of experimentation in scientific fields is to document the experiments in a very comprehensive way, including

- which other options you also tried, but which failed

- write down hypotheses that explain the worse results of the other options

- write down hypotheses why the chosen options gives better results

- ideally formulate testable predictions that these hypotheses imply

- etc.

Simply saying "other alternatives were tried and those happened to work" is not science, but tinkering around combined with magical thinking.
My buddy from Germany showed me a site once where they had honest reviews. I just have not seen anything like this in the US. There is this incentive to make money with affiliate ads or to pump sales.

It is a very hard problem to solve.
I want to challenge the assumption that resources aren't there.
getting downvoted for asking a question ... cool
Cloud configuration can create compliance issues that are distinct from codebase compliance issues
I have not heard of these apps, but - I'll go look them up (well, the first two), and learn something. Thanks.

About back-end - I would repeat my question but I don't want to derail the conversation too far away from the original subject.