skysight-inc/HackerNews huggingface dataset:
Fair. I appreciate the honesty — even if it's a bit brutal :)

Security is a top priority for this project, and I'm actively working to tighten things up. This initial version was launched to validate the concept, and admittedly, there were oversights (including an unauthenticated DELETE endpoint that was highlighted).

If you're open to it, I'd love to learn more about what you'd want to see from a security standpoint in a tool like this. I'm building in public and happy to be corrected where needed.

Thanks again for keeping things real.
From Linux Security Summit 2019, a retrospective on mandatory access control and bounding "damage that can be caused by flawed or malicious
applications" in Android, iOS, macOS, Linux, FreeBSD and Zephyr, https://static.sched.com/hosted_files/lssna19/e5/LSS2019-Ret...

For the past 26 years, the speaker has been engaged in the design, implementation, technology transfer, and application of flexible Mandatory Access Control (MAC). In this talk, he describes the history and lessons learned from this body of work. The background and motivation for MAC is first presented, followed by a discussion of how a flexible MAC architecture was created and matured through a series of research systems. The work to bring this architecture to mainstream systems is then described, along with how the architecture and implementation evolved. The experience with applying this architecture to mobile platforms is examined. The role of MAC in a larger system architecture is reviewed in the context of a secure virtualization system. The state of MAC in mainstream systems is compared before and after our work. Work to bring MAC to emerging operating systems is discussed.

video: https://www.youtube.com/watch?v=AKWFbxbsU3o
But the percentage we're really interested in is "what percentage of tech based startups are VC vs. bootstrapped." Especially in, say, the Bay Area. I don't know what that figure is, but I'd like to know.
Coming from the other direction, luarocks binding to just one version of Lua, is an absolute pain in the ass.

I've got some libraries that support five or six different versions of Lua. Building packages for all of them basically means throwing luarocks out the window, because linking to multiple Lua runtimes ti=o luarocks does all kinds of truly heinous things.

You can end up with the library and headers linked from different runtimes, simply because it isn't following what the local system says is available.
The API call is the same price per token regardless of how you run it!
I’ve never read that book, but this motivated me to look it up once again! Thank you!
Asking someone about an AI startup that isn't building a foundational model about "energy to run chatbots" is straight up awful gotcha reporting and people who fall for it I immediately lose respect for.
As a New Zealander who's been to Australia + a small handful of other countries I can vouch for Australia having a uniquely good convenience store dairy based drink industry. OAK is another old faithful brand I miss in NZ. Also Hungry Jacks (Burger King) there uses cream instead of milk in the soft serve and it's noticeably better.
Appreciate the kind words—and the comparison!

uncurl.dev kind of grew out of that same spirit, but with the goal of making the output shareable and executable in a browser, especially for folks who might not have an IDE set up or are outside the usual dev loop (PMs, etc.)
All those things are solvable. If you choose not to take care of your body, it’s going to fall apart
By defined format I of course don't mean random, or that it doesn't have structure, you have to be able to read it back otherwise what would be the point. I mean when you write out jpeg it has to adhere to a standard otherwise it isnt jpeg. Granted the jpeg format has evolved and has been augmented over the years. But it still is standard across iterations and devices.
> But I like to understand how tools work, and I personally found Mercurial harder to understand, slower to use, and much less flexible.

It's a relief to hear someone else say something like this, it's so rare to find anything but praise for mercurial in threads like these.

It was similar for me: In the early/mid 2010s I tried both git and mercurial after having only subversion experience, and found something with how mercurial handled branches extremely confusing (don't remember what, it's been so long). On the other hand, I found git very intuitive and have never had issues with it.
This is why we still love San Francisco.
not all of us, just some :)
Sure but Trump also doesn't support free trade, doesn't believe in it, and doesn't at all care about the fallout from ending it.

The Congress legally can revoke delegation of its tariff/tax power. But the political cost is too high. The tariffs will stick no matter what until the 2026 election. There is no chance 2/3rds of the House overrides a presidential veto.
Do American car manufacturers make right side drive vehicles for any country at scale? (I wonder how many postal vehicles are ordered these days...) Besides size, reliability, etc. that's something that Japanese manufacturers have figured out so they can export anywhere. The last thing I'd want to drive in Japan is a wrong side drive oversized American import...
Don't use Docker, use podman (which has a registries.conf for this, with many settings). You can then use podman-docker to have command line Docker compatibility. Podman is more secure than Docker too, by default it runs as a user, rather than as root.
White House Releases New Policies on Federal Agency AI Use and Procurement
They're detecting patterns predominantly bots use. The fact that some humans also use them doesn't change that.

Back when I was playing Call of Duty 4, I got routinely accused of cheating because some people didn't think it was possible to click the mouse button as fast as I did.

To them it looked like I had some auto-trigger bot or Xbox controller.

I did in fact just have a good mouse and a quick finger.
> cardiology work where they observed no such damage

How do you observe such damage without a biopsy?
Depending on a bunch of factors of how this data is accessed and actors are laid out in memory, it may be more cache friendly which could yield substantial speedups.

Or it could do next to nothing, as the data is multiple cache lines long anyway.
I don't see why not. Recursive CTEs allow you to express pretty much anything you desire.

You could also expose additional functions corresponding to the external tools that you would like the agent to have access to and pass these as arguments to additional UDFs.

You could also lean into data-driven and express much of the configuration in tables and then use the enhanced SQL dialect to tie everything together at runtime. In SQLite, during UDF execution, arbitrary queries can be ran. You could pull tool descriptions, parameter lists, enums, etc. from ordinary SQL tables without having to pass explicit args to the functions.
not really, they had 4 years of trump before and they figured that was what going to happen. Instead his crazy train completely went off the rails and now he's just a bull in a china shop, showing his true level of idiocy because he surround himself with sycophants.
lmao I did similar.
I would talk to my doctor about that if I was you.
I think so too. I would go step further though as tarrifs are way too soft, I would forbid all foreign goods and services in america - case closed :)
India's repair culture gives new life to dead laptops
Besides the memory savings, would there also be performance gains? More actors would now fit in a cache line.
Just a guess, maybe they have more complex functions that shadow can't cover, or want to test with "more granularly in the mainline code"?
GitHub Phishing Attack Detector
Given the known size of the asteroid and assuming a direct impact how big of a crater would be created?(give an existing crater as an example for extra points) And would any ejecta make it to Earth?
Wouldn't whether they are running chatbots be more key to whether the question about energy to run chatbots is relevant than whether they are building a foundation model?
Just do onsite interviews if you are that concerned.
It might be who’s migrating. Possibly the coastal PMC workers sloshing back and forth while blue collar workers have less mobility than the 60s?
If the memory savings he got were fully read or fragmented with other stuff on cache lines that are read in every frame (not likely for static world actors), it could be ~10% of CPU memory bandwidth on mobile every frame at 120hz on an lpddr4 phone.

A big problem with them is they are so heavyweight you can only spawn a few per frame before causing hitches and have to have pools or instancing to manage things like bullets.

I think in their Robo Recall talk they found they could only spawn 10-20 projectile style bullets per frame before running into hitches, and switched to pools and recycling them.
The actors in unreal are such bloated single inheritance god classes that with a few actor components they take up more like a 4K memory page not part of a cache line, especially in editor builds.

But they do have a more optimized entity component system now too.

To be fair, a single transform now that things are 64 bit coordinates I think is bigger than a cache line too.
And what do you use for a bank account?

That's been one hurdle I've seen when trying to found a business outside your own country.

The other hurdle was requirements for local directors (New Zealand, Cayman Islands)
I too work to get money or more likely build credibility.
He's not doing tariffs though. He's doing some kind whacked out plan that he can somehow correct decades of trade imbalance with "tariffs" when all he can do really is start a second Great Depression by riding the nuke all the way to ground zero like Major "King" Kong in Dr. Strangelove
it's not closed

In the 18th century, the British Empire launched two invasive wars in order to resolve its trade deficit with China
No ads here https://archive.is/aoqkl
I have implemented auto-purge all curls that are created without login will get auto deleted after 30 days of non-usage.

You can absolutely delete your curl if you have created as a logged in user.
Talking about 343 industries? Edit: No, but yes.
I think that was the first time I ever saw Tridge deliver a conference presentation and it was to a packed lecture theatre at the ANU.
He described how he 'hacked' BitKeeper by connecting to the server via telnet and using the sophisticated hacker tools at his disposal to convince Bitkeeper to divulge its secrets, he typed:

help

The room erupted with applause and laughter.
It wouldn't even make a top-100 craters-of-the-moon-by-size crater if it hit.
This AI Live Voice Translator App is Better Than Google Translate
I made an iOS app for live translating conversations and long talks.
It has many use cases, from talking with clients on business trips to talking with relatives who can't speak much english, and medical appointments.

Expats and immigrants can use the app as an interpreter in the doctor's office, eliminating the need to wait for a long time to schedule an appointment with a human interpreter.

You might be wondering, why not just use Google Translate?

My app accurately transcribe and translate detect drugs names, conditions and other medical terminology, whereas Google Translate make more mistakes.

The language exchange is also hands free, so you don't need to keep taking turns to press the mic button.
How to write great Cursor Rules
So the idea is to destroy 75% of the economy that is the service/tech economy? I'm sure that will work out well for all of us. He could have had more pro business, less regulations, trade agreements, but he didn't he just set the house on fire and wants to see what he can make out of the ashes. I guess we can all get jobs in construction to build the newest 3rd world nation on the world playing field?
Gardening leave coming to the tech industry?
> It is now believed to be 53 to 67 meters, roughly the height of a 15-story building.

> This is significant because it is bigger than the 50-meter threshold for activating planetary defense plans.

> If the asteroid still had a more than 1% chance of hitting Earth, "the development of one or more deflection missions would already be starting now", Moissl said.

Well, I hope they are right, because it appears we’re going to miss the opportunity to do anything about it if they are wrong.
I was a bit confused about the key point of patch-based versus snapshot-based, but I got some clarity in this thread: https://news.ycombinator.com/item?id=39453146
> Foxconn is doing exactly that

They did too in Wisconsin in 2017. /s

Let’s see when it actually happens.
Mercurial had its chance, and it blew it by insisting that the history is immutable and branches are heavy-weight objects (SVN-style). Turns out that's not what people want, so git won.

(And the fact that Mercurial supports history editing _now_ is irrelevant, that ship has long sailed.)
Triathlon Club when?
2/3 of the house means ~1/3 of the republicans. the tariffs as planned will have a disastrous effect on american consumers. I find it unbelievable that they wouldn't begin pressuring their representatives almost immediately.
> I just wish they'd extend git to have better binary file diffs

It's not built-in to git itself, but I remember seeing demos where git could be configured to use an external tool to do a visual diff any time git tried to show a diff of image files.

> and moved file tracking.

Check out -C and -M in the help for git log and blame. Git's move tracking is a bit weirder than others (it reconstructs moves/copies from history rather than recording them at commit), but I've found it more powerful than others because you don't need to remember a special "move" or "copy" command, plus it can track combining two files in a way others can't.
Listening habits and effects of background music in people with and without ADHD
We should redirect it into the moon if it doesn't.
For Science™.
Thanks! I’m very familiar with the first one, but never thought of the second one actually.
I would add some obasan - the female counterpart of "ojisan"
Not OP but hobby gamedev here:

Yes, but that's why ~~good~~ fun enemy AI for games is both an art and a science.

My approach is that the path from the pathfinding algorithm is just a known good solution. The path the agent gets back from the algorithm doesn't have to be just a list of Vector3's for the window centers. It could get back a list of each window quad instead, and then aim for a random point in the next quad shifted by the distance between the two quads. You can also do some raycasts from each agent occasionally to do local-avoidance-type behavior (which you'll likely have to do anyway so that enemies spread out a bit and avoid non-static geometry).
Is there a comma in there some place? Maybe between the first two words?
It isn't a political statement there are other avenues in marketing besides advertising. If a product is genuinely good it should serve on its own. Advertisements lead too much opportunity for exploitation.
I have no problem with them getting a pension. There are also plenty of other ways to invest your money that aren't putting it right into the stock market. Multiple kinds of bonds, CDs, annuities, etc.
Haha love that you shared the curl with the uncurl.dev url!

Yes, delete is unauthenticated as highlighted, will be working on a fix for this. And you can delete any API if it is created as a logged in user.
How many SG1 Furlings is that?
is it me or does the side loop endlessly loading thousands of requests?
to at least:

- https://public-api.wordpress.com/wp-admin/rest-proxy/#https:...

- https://s0.wp.com/wp-content/js/rlt-proxy.js?m=20240709

blocking these via regex made the page load up really nice and fast

edit: formatting
More DevOps than I bargained for
Hey that is weird, can you file a bug report here with the curl you were trying?

https://github.com/uncurl/uncurl-support
I don’t understand this. There are well qualified legitimate candidates desperate for a job. How are North Koreans getting these jobs instead?

https://news.ycombinator.com/item?id=43612448
Did an anonymous X account send markets reeling today?
One cool undocumented GitHub Actions trick I spotted at work was the ability to use wildcards to match repository_dispatch event names:

on:
repository_dispatch:
- security_scan
- security_scan::*

Why would you want to do this?

We centralize our release pipelines as it's the only way to force repositories through a defined reusable workflow (we don't want our product teams to have to maintain them).

This allows us to dispatch an event like so:

{
"event_type": "security_scan::$product_name::$version",
"client_payload": {
"field": "value"
}
}

Then it is far easier to identify which product and version a workflow is running when looking in the Actions tab of our central release repository.
> Another one was the farmer/fox/chicken/cabbage/river problem, but you modify the problem in unexpected ways, by stating, for example, that the cabbage will eat the fox, or that the farmer can bring three items per trip. LLMs used to ignore your modifications and answer the original problem.

This is still the case. Very few non-reasoning models can solve such variations correctly, even SOTA models. Worse yet, not only they confidently give wrong responses, but they often do so even when specifically told to use CoT, and they continue giving wrong answers in a loop even if you specifically point out where they are wrong.

Reasoning models do much better, though. E.g. QwQ-32b can solve it pretty reliably, although it takes a lot of tokens for it to explore the possibilities. But at least it can fairly consistently tell when it's doing something wrong and then backtrack.

One other example that befuddles even the reasoning models is frying-cubes-in-a-pan and equivalents, e.g. this version from Simple Bench:

> Beth places four whole ice cubes in a frying pan at the start of the first minute, then five at the start of the second minute and some more at the start of the third minute, but none in the fourth minute. If the average number of ice cubes per minute placed in the pan while it was frying a crispy egg was five, how many whole ice cubes can be found in the pan at the end of the third minute? Pick the most realistic answer option. A) 5 B) 11 C) 0 D) 20
You know what, 15 story building is more intuitive.

For a couple of meters it works, I can imagine a 3 meter wide asteroid just fine.

But at 50 meters it becomes a distance unit for me and I can’t easily imagine an object with a 50m dimension. I’ve seen actual 15 story buildings though.
Editing a comment is not the way to reply.
:) the curl command parser expects some flags of GET, POST, stupidly overlooked, will get it fixed!
Model output isn't copyrightable, and I would be surprised if them models themselves were copyrightable too, which means the licenses are meaningless.
They were probably "severely punished" for the slip up of not using their VPN...
Global solar installations could reach 1 terawatt next year - https://pv-magazine-usa.com/2025/03/19/global-solar-installa... - March 19th, 2025 (“BloombergNEF reports that the world installed nearly 600 gigawatts of solar power in 2024, closely aligning with projections that annual global solar installations will surpass 1 terawatt within the next few years. Although projections for 2025 currently fall short of that pace, early forecasts often underestimate actual deployment.”)

Sun Machines: Solar Power Is Going to be Huge - https://www.economist.com/interactive/essay/2024/06/20/solar... | https://archive.today/aXhc8 - June 20th, 2024

The exponential growth of solar power will change the world - https://www.economist.com/leaders/2024/06/20/the-exponential... | https://archive.today/T6LnS - June 20th, 2024
I find HN rife with its own form of "I'm too smart" bro-science.

Your cardiologist spoke directly with you; they're a trained, accredited, licensed, and in good standing professional. Go with your interpretation of what they told you.

Additionally, lets learn how to over-come HN's own form of bro-science because I'm pissed off right now.

Step 1: go to pubmed and throw the most basic of terms in: "marathon training cardiology damage"

Step 2: Quickly review the studies listed; we want to see studies after the advent of advanced hormone and mRNA quantification--that's around 2005 to 2010 or so--or anything within the last 5-10 years.

Step 3: Read through one study especially if it appears to be well setup or specific to what we are trying to understand--we can look at the abstract if we have some knowledge in the area, or are just getting a feel for the topic.

Step 3b: take note of terms; this study is an easy one and has everything we want to see in the abstract: https://pubmed.ncbi.nlm.nih.gov/36767963/ "Effects of Long-Term Endurance Exercise on Cardiac Morphology, Function, and Injury Indicators among Amateur Marathon Runners" in the Int J Environ Res Public Health
. 2023 Jan 31;20(3):2600. doi: 10.3390/ijerph20032600.

Step 3c terms:

- cardiac morphology, function, injury indicators;

- left ventricular end-diastolic volume and left ventricular end-systolic volume indicator;

- myocardial injury indicators, serum levels of cardiac troponin I, creatine kinase (CK), creatine kinase-MB (CK-MB), lactate dehydrogenase (LDH), aspartate aminotransferase (AST), and N-terminal pro-b-type natriuretic peptide (NT-proBNP)

- Long-term high-intensity endurance exercise (not indicated; but "High intensity Steady State" (HISS) and similar will creep into our vocabulary)

Step 4: refine search to something like "cardiac morphology myocardial injury marathon amateur"; throw on "biological indicators", "creatine kinase"

Step 5: rinse, repeat, and read deeper into some of the studies.

Anyways, "Long-term high-intensity endurance exercise caused some damage to the hearts of amateur runners." and your cardiologist said the same. Or you can believe some rando giving medical advice on this forum. And honestly, I'm beyond irritated at the consistently bad takes on medicine, biomedicine, and exercise on YC HN.
> a sort of homoiconicity of code and data (hence JSON as a data format)

I get that "sort of" was an attempt to hedge, but really, this isn't even close. Homoiconicity here would be if all javascript source files were valid JSON documents. A weaker version would be if it were common to use JSON to represent an arbitrary javascript program, but I've never heard of that, either. (For a good explanation of this weaker sense of homoiconicity, this stackoverflow page [1] is pretty good.)

[1]: https://stackoverflow.com/questions/31733766/in-what-sense-a...

To use Clojure as an example of a language that is homoiconic, you can take any Clojure source file, send it to an EDN parser (EDN being Clojure's equivalent of JSON), and not only will parsing succeed, but the result will be a complete representation of the program (you could execute it if you wanted to). In contrast, if you try to send JS to a JSON parser, you'll get an error as soon as it hits a function definition, or a for loop, or an operator, or whatever.
Wait I can finally write C for our CI/CD in production and call it a low level system job.

Probably can write assembly too.
I think you mean MIT vs GPL? MIT & BSD are almost equivalent.
You didn’t miss anything in the docs. Right now uncurl.dev only supports http/https (and technically ftp, though it’s untested). Protocols like dict://, smtp://, etc. aren’t parsed or handled correctly yet, which is why you’re seeing that “invalid URL” error.

I hadn’t actually considered dict:// usage, I see the bug report as well, thanks, will see if I can include it.
You linked to an editorial not a peer-reviewed paper. Moreover it’s from 2014-2018 and is therefore missing a more updated understanding of coronary plaque composition in runners. https://pmc.ncbi.nlm.nih.gov/articles/PMC11012899/

You should probably lace up your running shoes given that obesity and inactivity will for sure kill you.