skysight-inc/HackerNews huggingface dataset:
Black Basta's Dependency Confusion Ambitions and Ransomware in Open Source
Overall, would you say it was worth it? I'm asking because I feel like I'm getting myself into a comparable situation.
Linux Foundation trust scorecards to battle rising open-source security threats
> they can shut down abruptly leaving you in the bind

"We understand that this is going to be a disruptive change to many and are fully committed to working with you to help you migrate off the service over the next several months."
Then why are you on here?
This is neither a micro-benchmark nor a scam, but it is click-bait by not mentioning jq specifically.

Micro-benchmarks would be testing e.g. a single library function or syscall rather than the whole application. This is the whole application, just not one you might care that much for the performance of.

Other applications will of course see different results, but stuff like enabling LTO, tuning THP and picking a suitable allocator are good, universal recommendations.
calling the yet not internet users “naked apes”

It's almost certainly just a wanky way to say 'human', an allusion to https://en.wikipedia.org/wiki/The_Naked_Ape
Just imagine the mess in Belgium!
The notion of "apex HN discussion" assumes a kind of fealty to performative feuilletonism that I'm just not yet willing to submit to.
I built a web app (started about 7 years ago) that had used hundreds up to about 2000 DOM elements that are all draggable with lots of interactivity. The app slowed to a crawl. I used DOM elements at the time knowing it was going to be difficult to scale up to thousands of items. Using React-dnd to make the elements draggable may have been the wrong way, but it was fine for proof-of-concept. But eventually it became a gigantic memory hog and would crash the browser after a while.

Konva.js solved the issue for me. It was very easy for me to convert this entire interactive piece into Konva.js, and performance is amazing. No memory issues now at all, and I can throw thousands more interactive items than I could before. It was very easy to reuse the interactivity code with Konva, and now my web application has great performance again.
This story is entirely based on the idea that "computer programmer" is different from "software developer", which the Bureau of Labor Statistics considers different occupations. It's as though "lawyer" and "attorney" were considered separate professions.
If you want to see how moronic this is, look up the definitions and see where the definition says people with these occupations work.
Where do software developers work? "In companies that develop software"
Where do computer programmers work? "Indoors, in offices."
very curious - why did it take you 5 years to launch post YC? (It says W20 batch)
> he did pour his heart and soul

And you have this knowledge, how?

> (and personal fortune) into SpaceX for over a decade.

Using paypal money to chase government contract money.

> If it weren't for SpaceX we'd be relying on the incompetent monstrosities of Boeing or ULA.

That does not automatically follow. It's entirely possible that a company better than all of them might now exist if SpaceX didn't.
The seasonal extremes of daylight are so extreme up here in Finland that the cycle of night & day seems a bit less like a 24-hour cycle and a bit more like a 365-day cycle.

An artifact of this is that my 5yo might not see a dark sky for the entire summer, unless we keep him up awake for the traditional Midsummer hangin'-out.
Does iOS have third-party accessibility software that would have full display and interaction privileges?
Would this still apply if operating margins in excess of 3% were severely taxed if not reinvested after one year?

Example: $50mil revenue, $5mil expenses = $45mil profits, operating margins 90%; so, severe tax on 87% = $43.5mil if uninvested, leaving 3% = $1.5mil available for shareholder dividends.

In that scenario, businesses have several ways to avoid paying taxes: they could launch speculative (risky) ventures, they could invest money into equipment or efficiency improvements, they could pay workers more, they could lower prices.

Amazon’s been running this strategy voluntarily to avoid paying taxes for decades - I’m not the one who invented this idea! And it seems like they’ve innovated quite steadily in various regards, heartless as their robotics plans may be.

I bring this up because it highlights that the lack of innovation from most BigCo entities is not be an intrinsic aspect of being a BigCo — Amazon is absolutely a BigCo. I think, instead, that it’s an intrinsic aspect of permitting operating margins to grow unchecked.
Show HN: I Built a DEX That Pays You to Take Risks – and You Can Own It
Meme coins are a casino, and most DEXs just take your fees and call it a day. I flipped the script with EaglesTrader every trade you make, win or lose, gets you a cashback in SOL—real risk compensation, not just another airdrop gimmick.
Here’s the kicker: ownership isn’t locked to VCs or insiders. It’s 100% public. Hold the tokens, and you earn a cut of all platform fees—proportional to your stake.

No bots, no gatekeepers, just a community-owned trading engine. Built it on Solana for speed and low costs, sourcing meme coins from Pump.fun and other solana platforms to keep the chaos flowing.

The tech’slive SOL cashback’s handled via smart contracts, and fee distribution’s transparent on-chain.

Early users are already stacking SOL and tokens. Thoughts on this model? Is risk compensation the future of DeFi, or just a meme coin fever dream?
You are just wrong about 0-day values, e.g. exploit vendor crowdfense's publicly offered rewards for mobile 0-days:

SMS/MMS Full Chain Zero Click: from 7 to 9 M USD
Android Zero Click Full Chain: 5 M USD
iOS Zero Click Full Chain: from 5 to 7 M USD
iOS (RCE + SBX): 3,5 M USD
Chrome (RCE + LPE): from 2 to 3 M USDD
Safari (RCE + LPE): from 2,5 to 3,5 M USD

And "large" tech companies despite having "large" security teams (and "large" scope!) are far from the only ones competent at securing devices/software against PTA. Node.js, linux, bsd's, bitcoin, RoR, firefox, curl, etc. etc. There are dozens of open source projects with 0-day values in excess of 7 figures, (and plenty of private enterprises too!) and apple and google are not in any way specially equipped (or better than others) at dealing with the most dangerous PTA's in the world just because they have the largest armies of overpaid EE/CS grads.
looks like a dope product. sad they're shutting down - which means people losing jobs.
some of these things have to be open source from the get go & secure a cloud partnership.

for simple dev's like me sticking to the old and trusted relational model seems you never lose. it's always there & you're not worried about a service provider going away
Can also get you a loyal workforce like at Costco.
Every new install gets zsh, kitty, exa, fzf, bat, ripgrep, fd, neovim, ducker, qman, cht.sh, navi, and hyperfine as the first things I do.
I'm trying to push Loki developers to fix these issues to make Loki users happy. What's the point to hide these issues? The won't disappear on their own over time.

I'm very glad to know about VictoriaLogs issues, so they could be addressed quicker. If you hit such issues, then please file them at https://github.com/VictoriaMetrics/VictoriaMetrics/issues or publish an article highlighting these issues.
Vector operations are widely used in common software. Java uses AVX512 for sorting. glibc uses SIMD instructions for string operations.
This is too basic...something like Business Central offers much-much more for a bit higher price
how would it be "smart" without some kind of way to get data from your phone (or other wireless data source)? are you imagining a wired tether and periodic sync, like Palm Pilots?
Moreover, where do people think corruption comes from?

The human desire to be richer and the power to make it happen.

Do people think Trump, Musk, and Thiel don't want to be richer?

And worse, that the poorly-vetted people who have attached themselves to this administration don't?

The idea that getting rid of fraud in a chaotic fashion is going to lead to less fraud is laughable, unless the assumption is also 'All of the people who are doing this are altruistic and moral.'

If you create chaos at scale, you simply end up with different fraud.

And you can quote me on this in 6 years when investigations begin to lead to trials...

(Which, naturally, Republicans will claim are politically-motivated? But you know who complains loudest about the rule of law? People who do illegal things.)
I’m happy you gave ripgrep an option to perform replacements so I don’t have to worry about sed and its lack of a standard way to change files in-place. I realize on my Mac I could install GNU sed, but if I’m going to install an extra utility anyway, why not go with something that is overall nicer?
You can easily store (parts or complete copies of) the repos locally. It's really convenient.
> This highlights the challenge of smaller proprietary SaaS offerings

A large multinational like, say, Google would never do such a thing.... [1]

Give me a break !

[1] https://killedbygoogle.com/
Err no? grep searches contents and op is looking in filenames
I've been finding that digital only sources have been declining in quality for probably 5 years now. I have actually greatly reduced my reliance on them due to the fact that anytime HTTP is involved you add a layer of potential marketing obscuring the goal. I've been finding especially lately that I would have been better just getting a book. In fact I've greatly increased by personal library after years of stagnation as the online source quality has decreased.

Books are dense on info (assuming its not a churned out book which are also a problem now with self publishing) the internet tends to be full of fluff and greatly increases the time that I spend sifting rather than just learning and researching. My best purchase in the last couple years is a 10.3" ebook reader. Technical subject books don't work well on smaller readers and it makes a huge difference in quality of my personal development/research/learning.

I do agree that right now LLM's can help you a lot when you are starting on especially on a subject you know little about. However this will absolutely be poisoned over time because marketing will always creep in until it dominates the HTTP source. There is simply too much money to be made jamming a product in someones face no matter how subtle over providing impartial information when it comes to HTTP. The subtle ads are the most insidious because they can often waste lots of your time without you realizing it. Sometimes for years if you don't realize you were evangelized rather than educated.
Elections are one way of selecting government officials. Authoritarianism is a political philosophy that can be pursued no matter how one was selected. Yes, many/most authoritarians arise either not in democracies, or else in situations where the elections are mostly/entirely a sham, but that is not a requirement.

You could, at least in principle, have an authoritarian surveillance state where the government watches and controls everything you do...and the people could consistently (and freely!) be electing the officials enacting that state. In other words, authoritarian and democracy/election are not antonyms.
Generatorllmstxt.com: Extract content, create structured text, optimize for AI
In one of the narratives against seed oils (a large fraction of the linoleic acid molecules will be oxidized by the time they are ingested; oxidized LA is a potent cause of free-radical damage) it only takes a few months of avoiding seed oils to significantly reverse metabolic disease (by improving the function of the mitochondria).

In one of the other narratives (LA makes cell membranes less flexible) it takes about 5 years of avoiding seed oils for enough LA to leave the cell membranes to reverse metabolic disease.
> we will do what is in our interest

if that at least was true, but often it is not
I stopped using Google services at the beginning of this year. I transitioned from Chrome to Firefox and from a standard Android device to one without Google accounts and apps. While this setup is suitable for tech-savvy individuals, it can be challenging for someone like my mom.

To address this, I bought her a Fairphone with a de-googled Android operating system installed out of the box. This solution works well, especially for those who prefer not to use Apple products.

For enhanced ad-blocking and security, I set up an OpenWRT router in front of the provider's router. This includes features like Adblock, DNS over HTTPS (DoH), DNS over TLS (DoT), and DNSCrypt. This setup has been running smoothly in my parents' house for over three years without any issues.
"We're working on performance-sensitive project"

Konva looks awesome, but canvas based. For more performance I switched from canvas to pixi, which is webgl/webgpu based.

Drawing can be also expensive there(in some cases even more so), but if you can manage to put it in a texture in time, you can have looooots of moving animated shapes even on mediocre mobile phones.

https://www.goodboydigital.com/pixijs/bunnymark/
One of the services that can replace the fauna service is DocumentDB Postgres plugin (+proxy that is not open sourced yet, but will be shortly). It's available on Azure, but I can also see other Postgres Providers will start picking this up.

https://github.com/microsoft/documentdb
>The rate limit is extremely low for good minesweeper players.

This, I'm not good at minesweeper, but I've watch people who are and they generally clear a board before I even realize what's going on. I suppose it's a bit like NERTS, the multiple player solitaire, if you aren't that great at immediately recognizing solitaire moves, someone else beats you too them. I can play it with people I know but when I play with randoms that play all the time, I quickly lose.
To be blunt, your perspective does not align with reality.

The reality is that transgender Americans have been doing these things, all these things, for many decades. And nobody, and I do mean nobody, cared. Ultimately you are not inspecting penises in the Men's room. You, yourself, do not care.

What do you believe transgender people did in the 70s, or 80s, or 90s? You've never thought about it because you know, deep down, it's not a real issue. But, if you do think about it - or better yet, just ask them - you'd know they've already been doing these things.

Women do not run into burly men with beards when they go to the women's room. Do you know why? Because those transgender men have always gone to the men's room, and have never been questioned. Never been questioned, until conservatives decided to question it.

I have been alive for a long time now. We always knew trans people existed. Nobody batted an eye. Conservatives too, including conservatives that exist still, and including even you. Yes, that's correct - I am speaking for you, because I know you were not protesting these things in the 2010s, or the 2000s, or the 90s, or the 80s, or the 70s.

So no, you don't care, and no, you yourself believe these are not real issues. You might not say that now, because as I've already stated, the conservatives brought it into the zeitgeist to distract you. And now, you are distracted. Before, you were not.

And, to you and other conservatives, you should focus. The economy is in danger. Due process is being violated. Our constitution is in hot water.

The American right has been able to propagandize you, and others, so completely and so severely, that you not only do not pay attention to these issues, but you legitimately think you willingly chose to not pay attention. You didn't choose anything, this was carefully crafted for you. I challenge you to think back to an earlier time you were alive and question what you saw then.
Correct, the Chrome fix at least was to block fido:/ URL navigation, so the victim can't get redirected to their passkey application with the phished URL.
very peculiar incident. it's a stretch to construe this as "opinions not same as state" though.

I can see on the one side that police should only ever investigate crimes, not non-crimes. and that "a member of the public" is possibly committing a crime if they make false allegations.

on the other hand, we definitely need someone "official" who will investigate allegations, as a public-safety matter. for instance, if someone suddenly starts combing (hah) beauty-supply places for certain chemicals, it should attact some form of scrutiny.
It’s not implausible that someone might go through a transformation like that, see

https://en.wikipedia.org/wiki/Eldridge_Cleaver
Beats ClickHouse and Elasticsearch in JSONBench 1B Size
Same, I never remember them either. However, I use a shell (fish) that has decent command history autocompletion that helps a lot for such things.

I wish the flags between ripgrep and fd lined up as I think that's what confuses me (can't remember now haha).
"pixi webgl has a limit on the number of canvases on the screen at the same time"

But that limit is very high. What were you doing?

https://www.goodboydigital.com/pixijs/bunnymark/
> fraud

Prove it.

They keep saying “fraud” without proof of anything other than just spending they disagree with. Spending, I might add, which was previously duly authorized by Congress.

The use of the word “fraud” is a smoke screen. To unquestioningly accept it is to be complicit in their lies. And that’s what they’re doing: lying.

If there really is fraud, let’s see it prosecuted via due process, like it should be. The fact that that isn’t happening speaks volumes.
Hey! We've pivoted a few times now and prior to this our product was enterprise focused so no reason to post on HN.
"Eventually, the widespread availability of barcode scanner smartphone apps made the CueCat's capabilities mostly superfluous". No kidding. My phone will pick up pretty much any bar code or QR code it sees with the camera and offer to display it or open the URL. It's actually impressive how quickly it picks up even tiny/distant codes.
No! No!!
Mini-satellite paves the way for quantum messaging anywhere on Earth
Sorry. $170/MWh. In the end so horrifically expensive that it doesn’t really matter.

I see a whole lot of talk about how to force the consumers to pat for it.

Why do you want everyone’s energy bills to massively rise to fund horrifically expensive nuclear power?

It will simply become a race where everyone tries to the utmost degree to decouple themselves from your nuclear grid and you leave the poor to shoulder the cost.

It seems like you are working backwards from having decided that we must build horrifically expensive new built nuclear power and now are diving into one more insane argument steer the other trying to justify it.

Rather than starting from the problem: we need cheap power to decarbonize society.
FYI to those not in the lingo ERG is an "Employee Resource Group".

I don't know if it's a common thing at companies or not, but it's a new initialism to me.
If you have a few interactive elements, maybe even a few hundred or so, then SVG can work just fine. I had thousands of interactive elements, and using DOM elements (including SVG) caused massive slowness and memory issues. Konva.js solved all of that for me, it's extremely performant even with thousands of interactive elements.
This is surprising. I had always assumed that the length-of-day function is essentially a sine wave everywhere on the planet, and that the derivative would thus be another sine wave shifted by 90 degrees.

When the day length is maximal/minimal (solstice), the day length change rate is near zero, and vice versa. That's still true in the more accurate model, even though the shape of the functions is more distorted.
Black and white policies like this are so dumb

Don't fire employees immediately when they make mistakes, sure. But not firing them at all, even if they are obviously bad for your company? That's just bad management
Absolutely they are! We're not talking complete vacancy, but 10% is the bottom of what I see for new buildings in my midwest city. These are built less than 10 years ago, and several have 25+% even after all that time. It seems that they're willing to let vacancies happen instead of lower rent rates.

Anecdotal obviously, but the closest one to me has been consistently over 50% empty due to bad construction and design, with no interest in fixing it to fill in the leaking units. Another 90 unit one has had trouble renting at the "luxury apartment" rates they were built to get because they looked landlord special day 1. They haven't lowered rents, only left units vacant.
Having a vulnerable inmates unit sounds like a great first step towards fixing some of the other abuses you might be thinking of.
Disagree. It’s fine and trivially easy. It’s only hard for Linux people who build software for Linux first and only. Then have a shocked pikachu face when they need to run in a different environment.

mingw is radically more problematic than MSVC. Don’t use mingw.
Hey thanks for the feedback! What features are you looking for that Business Central offers?
So what? If workers don't get the money, it goes to company owners. I wonder what kinda mansions they have.
There is a difference between cutting back on aid to other countries and a leader starving his own subjects.
What's the effective difference between unofficial policy of discrimination and individual groups conducting discrimination en mass?

Thinking back to a unicorn I worked for we were unofficially told to favour women in hiring. We all thought it was a great idea at that time, but also I do remember a coworker saying how her group has been doing heavy favouring of women in hiring for years already before being told to do so.
> It's quiet amusingy that up ubtill recently in the usa it was easier to get surgery to turn you to your 'real' gender compared to buying yourself some alcohol.

That's not true at all. Kids can't just get surgery on their own. They need parental consent at the very least. Interestingly, one survey indicated that 97% of minors receiving breast reduction surgery were not transgender kids, but cis male kids with gynecomastia. In your hand-wringing about life-changing decisions, would you deny these boys the treatment they need and instead force them to keep their breast growth all throughout adolescence?

And it's certainly easier to get parental consent to consume alcohol than it is to get elective gender-affirming surgery. The total number of people getting GAS in the USA in one year has never exceeded ~13,000. That's for all ages. Meanwhile about 10 million young people under 21 per year drink alcohol, of whom about 10% were able to obtain it from their own home, which in some states is perfectly legal.
I don't understand why this doesn't get more attention. Is the title not sensationalist enough?
Taking canola oil as an example– pressed canola oil is too impure and has a nasty stink to it, so in order to be used in food it has to be refined.

This refining usually involves:
Extracting it using hexane, degumming with maleic anhydride and/or citric acid, neutralizing with sodium hydroxide, bleaching with clay, activated charcoal, and/or hydrogen peroxide. Then dewaxed with some combination of methyl ethyl ketone, toluene, dipropylene glycol and ethylene glycol, and finally deoderized via steam distillation.
Indoor water temp was fine for us, maybe depends a lot on the climate where you live, cool is easy here!

Hopefully we kept them well. We had them for years and in that time they spawned regularly, ended up giving our original pair up for adoption when we moved house.

Tank was smaller than 40g. You're right though bigger is better, that's the general advice with all pets (including goldfish which can grow huge!).
https://github.com/sharkdp
Nice job, its really easy to use