skysight-inc/HackerNews huggingface dataset:
I see what you are saying and don't completely disagree. I however feel that the spirit of free software is to set all software free. From that it follows, that if we are going to follow the current route of complete disregard for authorship and licenses, then the free software movement should continue fighting to liberate all software in existence. In other words, those LLM's that you mention that are to enable software freedom for users who cannot code themselves, in a fair world, they would be trained with both free and proprietary software. After all, a derivative work from a proprietary software should also be subject to fair use. The output produced by the LLM wouldn't necessarily be a literal copy-paste of any particular proprietary software... as the models would just be "learning" from them. The company could just continue doing business as usual, build on their brand and yada yada yada.

Regarding the licensing, I'll restate my point that the Affero license was created precisely in a moment where the existing licenses could no longer uphold the freedoms that the Free Software Foundation set out to defend. A change of license was the right solution at that particular point in time and, if it worked then, I think we can all agree that there is at least a precedent that such a course of action might work and should at the very least be considered as a possible solution for today's problems.

That said, my own personal view is more aligned with demanding the nation states to pressure big corporations so that currently closed-source software becomes at least open-source (either by law, or simply by stopping using it and invest their budget in free alternatives instead). Note I said open source and not free. I just would like to read their code and feed it to my LLM's :)
haha this is some solid astroturfing Eugene :)
Deadly bacteria have developed the ability to wipe out competitors
Can people be persuaded not to believe disinformation?
https://archive.ph/cItZH
That should be the server. Your Nextjs app should have zero access to business data without at least an auth token. And if you're relying on middleware for auth, it'll be responsible for providing that auth token to the rest of the app. And if you bypass middleware, then there's no auth token, and no vulnerability.

This is only a vulnerability if you have pages you don't want to render for some people, regardless of upstream data it would need to fetch.
Trapping Ai for misbehaving??? I smell something fishy
That very much depends on where you live.

Also, on what you're optimizing for. If, like many, you're looking for a job that makes sense, for instance (e.g. working to develop technologies or research that you think can change the world for the better), you're probably never going to strike that particular gold.
Hey thanks for sharing, that looks good
Annoyingly, cathode-ray oscilloscopes are extinct, too, but it still is food for thought.

To edit audio on a large vector display with crisp, luminous waveforms piercing its black glass... that is the dream.
I'll never go back to a pre-React rendering library. Newer ones, sure. jQuery was awesome in its day, but it made beautiful spaghetti.
> This model is based on the TurboS fast-thinking base, the world's first ultra-large-scale Hybrid-Transformer-Mamba MoE large model released by us at the beginning of March.

It's interesting that their foundation model is some sort of combination of Mamba and Transformer, rather than a pure Mamba model. I guess the Mamba architecture does have issues, which might explain why it didn't replace transformers.
Apple doesnt believe you https://www.pcmag.com/news/apple-intelligence-prompts-warn-t... :)
Ask HN: What would you do with a year off?
I like to prefix it with `echo` so I can see what it's trying to run, especially when wildcards are involved. Or things like `find`.
The middleware should fetch auth, not check it. Each page should check the auth provided by the middleware. Skipping middleware wouldn't bypass anything in this case.
A (Long) Peek into Reinforcement Learning
The world will always need talent, but specific companies don't necessarily always need the same talent for years. The concept of job security will be obsolete. Everyone will become a freelancer, selling their talent where it's needed. There will be a slack+fiverr like social network where people are collaborating and chatting with different companies at the same time.

Everyone will have access to everyone else in the globe (global talent pool, global job market), unless politicians decide to ruin that by creating virtual borders like they do today with money movement.
I'm admire and appreciate the software industry's dedication to ensuring that security folks like me will never be out of a well-paying job.
The alternative to technology is the Malthusian trap. It was made with the assumption that nothing changes, but time by time we've had exponentially effective revolutions.

Also that might have been "peak" from a colonist perspective, but remember that millions lived in colonies then. Plenty of people with relaxed lives ended up being colonized by those with the tech.
ThePrimeagen: Programming, AI, ADHD, Productivity, Addiction, and God
But the point I think being made is that those 2 senators are not supposed to represent the people of those states, they represent the states themselves. The House represent the people of those states.

The fact we use an electoral college or count senators and house reps equally is separate and after the fact, we don't have to do it that way

We see a similar hierarchy in the order laws are passed. The people get a law proposed via the House, once it passes it goes onto "state review" in the Senate, and finally "Federal" review by signing of the president.
It can do it well as long as you authorize it with relevant personal information.
This idea is amazing! I never thought deaf - mute people would need it before.
Musk is suddenly a fan of remote work?
As a metric user: This is about your lack of familiarity.

E.g. can picture lumber expressed in cm or mm very easily. E.g., if you work with beams that are 48mm / 5 cm or 98mm / 10cm a lot then those sizes becomes second nature. Just as easy to picture as 2 inch, 4 inch, 1/2 inch, 3/4 inch etc that is in use in US.

And saying that something is 200m away is exactly as intuitive as however many feet that is. A large meter has a usecase.

I feel square metres for houses is very natural unit and square feet sounds awkward (each patch of house area is so small you can do nothing with it, a square metre gets you somewhere..).

Making yet another system of units sounds like massive pain and as someone who are used to metric I see no advantages.
Key Papers in Deep RL
They already do this surely? I would think to implement high quality Bayesian type spam indexing, it's much the same.

They parse over header all the time. All mail providers do to implement procmail type functions. They parse body because they support complex boolean logic over string search.

I get it: this feels like a meta step "upward" but really, I am unsure it is. I am also of course like you concerned. It's my mail too.
Thank you, yes there is an option to choose student age from kindy through to adult. GPT does a great job of choosing language suitable for the target student age.

It's actually kind of fun to generate presentations for e.g. Quantum mechanics and target a year 1 aged audience hehe :) produces some surprisingly insightful content.
I guess open a social media app and post a PM accidentally in public, like:

Hi Laszlo, I'm making the trip on Friday, we can meet at 10 and you can put the stuff in my purse, it should be fine. Don't forget the jewels, that's the only reason I'm doing this.
Have a Look at the statistics, before nitpicking. Solar and wind dwarfs nuclear in China and increasingly so.
> It is great for the Chinese that the government's allowing these AI's to be built into products

allowing? the CCP is arguably the world's largest investor behind AI. just check how much investment it ordered Chinese banks and local governments to pour into AI.

you read way too much censored western media.
I’m not so sure. Unions (social progress) brought us the 40 hour work week more so than technology. Factory workers could potentially work more hours than farmers who had very busy periods mixed with slower times. I suppose they exist, maybe you have seen them, but I’ve not seen a real study of the hours worked by subsistence farmers in history. Though technology brings many other benefits, it’s not clear to me how it plays in to work hours.
I never let Firefox update when it wants to. I update it after Windows does so that everything breaks at the same time. I noticed that as my Firefox version gets two versions behind, I start hitting Cloudflare human test every single site I go to.

Obnoxious. I like the extensions I have, thanks. It's my computer. It's the same fingerprint it was 5 minutes ago, and last week.
> Now consider this: trans people have been pioneers of reinvention for decades (if not centuries). We’ve redefined our bodies, identities, and lives in defiance of societal norms and biological determinism. In many ways, we embody the spirit of transhumanism—breaking free from rigid definitions of self and forging new paths toward authenticity and empowerment.

So does being homeless break free from a lot of things.

The point is, what is there of human to transcend, if you consider nothing is rigid enough to remain?
This question reminds me of another brain-dead and rather incredible password policy I encountered. I was trying to set a password for United Healthcare. Their password requirements were shown, and I was complying with all of them. Yet it was failing over and over.

I finally called them to report the problem, and the first question out of the rep's mouth was, "Does your password contain swear words?"

I shit you not, UHC secretly audits your passwords for "swear words." Doing so is bad enough, but not mentioning it in the rules is doubly offensive for deliberately stealing users' time.
In closed systems, e.g. bacteria in an agar medium petri dish, the classic population size goes through exponential growth, steady state, and finally the death phase as the medium is depleted and waste products accumulate.

If we map humanity on to a similar system with the earth as the closed system there are some high level similarities that would suggest a similar end result. Exactly where we are on that curve is something that we will only be able to determine with hindsight.

What's different with humanity is that we have opportunities and the ability to re-engineer the system. Opportunities that bacteria don't have, so they die.

What we lack is desire for a long term steady state. Maybe we'll need to mutate into something else to get there.
Use “survivor” frameworks, things that last a decade will likely last another. Tailwind, React, Vue, PHP/Laravel, Rails etc. are all very much alive and kicking.

Plus there is nothing wrong with using outdated front end framework other than being unfashionable.

The web is the most backwards compatible platform ever invented,
> including no access to ~/

This is such a headache with snap and flatpak though.

If you're trying to do something that the package maintainer thought of in 5 minutes of testing then it's usually fine, but still inside any non-trivial application you'll often find parts that try to use extra privileges that aren't documented because they're not normally considered "privileges".

Some examples of sandboxing issues:

* FreeCAD doesn't have access to /usr which means when you try to make a Draft ShapeString you can't pick any fonts

* FreeCAD stores the path to the shape of a milling cutter inside your project, but that path is inside /mnt/.FreeCAhjhffg or whatever so it doesn't work after you restart the program

* Inkscape gcodetools has its own "idiomatic" way of saving out results which doesn't use a file dialog, and therefore can't save any gcode because it can't write to your home directory

* Matrix is only allowed to access ~/Downloads/ which means you can't share any files with anyone unless you copy them into Downloads first

* "Recent" in the Gimp file picker doesn't show any of my recent files, presumably because it is using its own sandboxed file dialog which doesn't have access to the actual "Recent" files

* Docker can't access /tmp/.X11-unix which means you can't give docker containers access to X

In all of these cases you can work around it of course (mainly by having an accurate mental model of the problem and guessing a path that the program is allowed to access), but the user experience is just made worse for no benefit.

The general theme is that the user wants the sandboxed program to be able to do something that the person who assigned privileges didn't think of.

So maybe if we must do sandboxing, let's make it easy for users to break programs out of the sandbox when it suits them?
I’m not saying technology makes our lives easier. I’m saying technology makes it more possible than ever to build a world where everyone thrives. But it takes human social systems to make that happen. Understanding just how much good we could do with modern technology underscores the value in fighting for the right human social systems.
I'm also very nervous that "vibe coding" will quickly become a term with a whole lot of negative connotations associated with it - there are already horror stories emerging of inexperienced developers who shipped full vibe coded SaaS products that turned out to be riddled with security holes.

It would be very disappointing if the team "vibe coding" became associated with bad, insecure code written by people who don't know what they are doing... and simultaneously become the term for any code written with the assistance of an LLM.
They do, ad fraud is a huge thing because people are making bots “watch” ads and making advertisers pay for the privilege.
a slightly improved version of NixOS (or Guix) would have automatically caught this backdoor once it reached their repos.

they are relevant.
The difference is that the President of the USA currently has a popular mandate to annex more countries and is an actual threat to world peace.
I am an „environmentalist“ and I’m in full and public Sport of the hundreds of windmills in clear view of my town and the solar on every new residential development, including my own house. As are all other „environmentalists“ I know.
That should be very doable, shouldn't it be? 2200/(4*365) ~= 1.51 pages per day. Of course, that doesn't exclude weekends and holidays.
> Compared to the rest of the exotic UT arsenal, these seem unremarkable, boring even. They don’t fire bright bolts of plasma or glowing, exploding goo.

There is also the lightning gun. I recall using this on newer variants of facing worlds.
The Earth regenerates food with input of solar energy, unlike a petri dish, so that model doesn't apply at all. Animals still exist, after-all. We may reach steady state like they did, or oscillate perhaps.
Immigrants pay 19.2% of taxes in the United States, more than $650B
Interestingly, I saw a graph of Fediverse posts and servers that were online or offline. The months of September, October and November, there was a sharp dip from like, you know, 15,000 to 5,000 say. And then after November it went back up.

If I remember to look at this comment tomorrow, I will post an image link that I grabbed or post the source info. I asked the person who collected it, or the group who collected it, and I said, hey, what happened there? Why is that huge dip in the graph?

I don't think I've gotten a reply yet.
Well, that makes sense; when you do that you're stealing from Google and or their advertisers.
The real answer here is downloading a tarball generated from a tag - those are generated by the GitHub backend.
So there will be several controls here on both the issuance and reward stage. Letters will be issued to vetted privateers, and will be for specific targets rather than a blank check to hack whoever they want.

Victims won't be suing, but maybe they can bring potential targets for privateers or those issuing letters of marque, they will simply be involved in the prize courts when seized funds are distributed.

It's easiest to envision what the privateers are seizing in crypto and ransomware because you're mostly dealing with funds, but privateers can also go after systems and bounties for affecting the capture of malicious hackers.

Most of the current attackers are situated in non extradition countries so currently there's no real recourse.

The scammer gets exposed type video are because the video can't do anything right now except what they are currently doing without breaking some serious laws.

The general process is congress will identify an attacker, or have a submission process, and white hat groups will petition for a letter of marque, where they go through a vetting process. The white hats will then steal back any stolen funds, and go before a prize court that will determine if their actions were legal, if the target was valid, and how prizes should be distributed between victims and the privateers.
Sure, but writing those is just coding in a fuzzier and more verbose language.
When being a douchebag becomes a proper economic principle.
And this is why we can't have good spam filters: people will flag anything unwanted as spam, no matter if they signed up for it a while ago (like a newsletter email), or didn't enjoy a comment related to AI on an AI comment thread (like here). Wikipedia adds that spam also typically has a commercial, or otherwise prohibited, purpose

Not saying this shouldn't be flagged ("Don't feed egregious comments by replying; flag them instead." this arguably meets that bar in low effort and low value/quality), but it's not spam if they aren't pasting it indiscriminately to many places for some illegitimate purpose

Speaking of which, welles-nietes replies (what's that in English, »"yes it is, no it isn't"-replies« perhaps? Or a »yes-no argument«? I tried a translator and chatgpt but neither gave options that seem correct) are at about the same level, no?
Big Tech is striking secret deals to make you foot its electricity bill
This is really great. It's really awesome to have free access to such resources.
Next.js and the corrupt middleware: the authorizing artifact
?

the article demonstrates how to imorove NixOS (or Guix) to automatically catch any such discrepancy in the future.
I mean, it’ll be fine again when they’re older, they won’t want anything to do with their old man. But right now it takes all the time you have ;)
Such sandboxes would only work well, if the whole OS would be built around supporting them.

You would essentially need Android or iOS for it to not be a pain in the ass

Nonetheless, in this year and age this should be the bare minimum from a security point of view.
The beauty of this is that these technologies all tend to be optional, backwards compatible, and interchangeable. You make your choices when architecting depending on what you want to solve. You can build Hussain Bolt or Frankenstein. On the FE, just the landing page is a mission.
There are many instances of people being questioned, harassed, and even framed based on circumstantial evidence. Western judicial systems are specifically engineered to address these problems via the process of discovery and adversarial argument. There has never been any documented instance of a death being caused by quantum tunnelling.
My worry about this is on the repair and re-use side. How are we going to be able to pair+initial sync, restore firmware, or get logs over usb/serial from a irregularly functioning device?
I think the same, people are not organized - even with things that make them money and being organized could earn them much more.
I see plenty of freelance work available, but how much and how well it pays depends a lot on the kind of work. If all you have to offer is a couple of years writing React or installing WordPress plugins the market looks terrible.

At the same time I get small/medium businesses asking for help with cloud infrastructure, security, compliance. Experienced cloud infra people don't grow on trees and the big providers snatch them up. I could probably coast into retirement just tuning relational databases left behind by the "move fast, break things" cohort. Today, in this market, experienced Salesforce and Oracle consultants (freelancers and agencies) can't find enough time or people to meet demand.

The software business follows trends and fad and fashion, and developers follow along. I wouldn't call that a cycle, it looks more like the constantly-changing fashion of teenagers. Look back a few decades and see what has lasted a long time (Unix/Linux, relational databases, system administration, networking, C-family languages, security) and make some of those the foundation, rather than whatever has buzz on Hacker News this week.

Anecdotally when I talk to or read posts from young developers, sometimes recently laid off, about how they can't get a job or break into freelancing, a few things stand out:

- Few or no professional contacts.

- Limited tech skills, often just one language and framework.

- No business domain expertise.

- Thinking in terms of what they want/need rather than what their potential employers or customers might want/need.

That's what happens when you follow fads to the exclusion of everything else, and just want to get left alone to code and ignore the business that writes your paycheck, and make fun of the people in management and marketing and other departments for calling too many meetings or socializing around the proverbial water cooler.
I'm a paying subscriber to the South China Morning Post.
They could have just kept it at customs and sent a letter saying it's illegal and let that be the end of it.

Whoever was involved in creating a circus out of it should be fired.
Show HN: I am launching board for open-source SaaS alternatives
If the production cost of SaaS drops to zero, it makes sense to make it open.

That's why I am launching a community-driven board for sharing suggestions about what should be built or listing existing alternatives to SaaS products.
I use cursor, and if there’s a nice interface for cursor to use grok I don’t know about it. Which leads to pain if I try to have the built in options try to fix things because they’re nowhere near as competent currently.
We’ll oscillate likely, not perhaps. The whole-world has shown no ability to solve critical issues without “oscillations”, yet, not unlike animals.
Recycling a comment on another submission yesterday:

> idempotency

Even with the ability to detect that something is a retry, there are more wrinkles, like a query that involves NOW() which would be correct to run now-now [0], but would not accomplish the desired result if run 15 seconds later. Or uses of RAND(), unless there's some control over the seed.

[0] https://www.youtube.com/watch?v=nRGCZh5A8T4&t=1m17s
I was gonna say this guy's never heard of a hill, but I don't know how far I can see with my drone, but I'm pretty sure it's not 100 miles. I'm not even sure it's more than 20... It is over 8. That's the level of certainty I have without getting scratch paper and a scientific calculator.
MFA is bad idea for as many reasons if not more: complexity of implementation, variety, digital sovereignty... to name a few.
Show HN: Build and Customize Your Read-It-Later App with Shortcuts
After years of relying on Pocket, Feedly, and Reeder for my reading and storage workflow, I discovered that simple text files work better for processing notes with AI locally.

I wanted a solution that would: Work seamlessly across Apple devices; Let me read content in any app of my choice; Preserve metadata (URL, date); Save in simple .txt or .md files for AI processing; Sync across devices via iCloud or Dropbox.

Surprisingly, Apple Shortcuts can handle all this! The only UX challenge involves macOS/iOS privacy settings, which require "Always Allow" access for each website you request. However, there's a simple workaround: using a proxy server and granting access only to that domain.

Demo: https://github.com/dshayan/save-text-shortcut