skysight-inc/HackerNews huggingface dataset:
Doing similar idea with asymetric cryptography is problematic due to the size of messages involved that are not exactly convenient to type. Lower bound for the signature size is going to be something on the order of 128bits if we include "weird" signature algorithms (ie. string that looks like MS Product Key), 240b for Schnorr with safe-ish parameters, at least 512b for anything widely accepted.

You can probably come up with something related to S/KEY (which was kind of a precursor to HOTP) that can be made to work with arbitrary sized one time passwords and is technically asymetric (and quantum resistant at that), but the security trade-offs involved in that and somewhat wild user registration step of S/KEY make HOTP/TOTP more sane choice.
(disclaimer: I'm leading the Docker Model Runner team at Docker)

It's fine to disagree of course, but we envision Docker as a tool that has a higher abstraction level than just container management. That's why having a new domain-specific command (that also uses domain-specific technology that is independent from containers, at least on some platform targets) is a cohesive design choice from our perspective.
I don't think anyone is arguing that a loan is income in a legal sense. I am going to generously assume you misunderstood.
That whole acquisition always was a head-scratcher to me. OK, you pay nearly 17B for the thing, and then do absolutely nothing with it. How does that work? Even during its best years 17B was big money for Intel.
Wow that would never happen now! Interesting how

A) that would be considered bad law now.

B) despite all branches of government going after Alcoa (Congress passing a special law to support the case mid way through), nothing happened upon remanding the case to the lower court due to the successful argument that other companies began competing

C) that would never happen now primarily due to only anticompetitive practices being scrutinized, not merely having the ability to control prices. But now I see where the confusion comes from, a 13 year saga in support of the Sherman Act

D) it’s so interesting how much the country changed solely from trying to differentiate itself from communism. So its gone to more of an extreme of private maximum extractable value.
>It really has nothing to do with their system of government.

It's about who has the power here, which is the same principle you would take against a colonial authority. There is no right why Ho Chi Minh and the CPV should rule autocratically against the wishes of other factions. When they are sending that same opposition to concentration camps it is functionally no different to colonial authority.

>$800B, a 100K US lives and a couple of million Vietnamese dead. You know, mercantilism.

If North Vietnam didn't invade and kept to themselves we'd also save all that money and lives, and the Vietnamese wouldn't waste decades of economic stagnation. But, in the words of the late Lee Kuan Yew, the war at least gave other Southeast Asian nations the critical time to build their economies against Communism.
> I have written more than 200 reviews on Amazon

Why did you do that? Did they pay you? Or did you get the stuff for free?
Yeah, clicking this link is causing my browser to download a "Human_fart.wav", not sure what it actually contains for obvious reasons.
It's certainly possible. Tracing the MCUs IO lines to LEDs/buttons/relays etc on a PCB is usually pretty straightforward.

I have just finished doing this and writing replacement firmware for the Aqara E1 series of Zigbee switches, after getting fed up with them not supporting basic Zigbee binding functionality.
given all the comments, it turns out that a post on entropy has high entropy.
A friend who developed a game engine from scratch and is familiar with inner workings and behavior of NVIDIA driver calls it an absolute circus of a driver.

Also, their latest consumer card launches are less then stellar, and the tricks they use to pump up performance numbers are borderline fraud.

As Gamers Nexus puts it "Fake prices for fake frames".
>I'm pretty sure a team of two or three senior developers with great domain knowledge would be competitive with a team of 10 average devs.

You are comparing senior vs average devs here.
What will happen if a team of 'two or three senior devs' with AI/ML tools compete with equally skilled 10 senior devs with AI/ML tools?
(disclaimer: I'm leading the Docker Model Runner team at Docker)

We are not packaging models as Docker images, since indeed that is the wrong fit and comes with all kinds of technical problems. It also feels wrong to pure package data (which models are) into an image, which generally expects to be a runnable artifact.

That's why we decided to use OCI Artifacts, and specify our own OCI Artifact subset that is better suited for the use case. The spec and implementation is OSS, you can check it out here: https://github.com/docker/model-spec
Cool work! Thanks for citing our (InvariantLabs) blog posts!
I really like the identify-as feature!

We recently launched a similar tool ourselfs, called mcp-scan: https://github.com/invariantlabs-ai/mcp-scan
How is it "jumping to conclusions" to take what the president of thr United States says at face value?

>I understand completely that if he could get away with it, he would detain citizens, but I am not convinced yet that he can.

He already did. Thars the issue. Visa holders are already citizens. Do I need to to show you thr footage of a college woman being kidnapped off the street by un-badged men?
Better late than never ;)
I find the outlined scenario well argued and plausible.

What's more interesting to me though is the complete lack of mention of labor unions as a potential defense mechanism for engineers (either in the OP or in the conversation here, at least so far).

For a while now I've felt it's quite arrogant and completely naive of us to not accept that we're just keyboard workers, and not rare special flowers that will forever be economically privileged.
They have a 30 day time frame to leave a review. That's why so many reviews just say "Everything arrived on time" and none of them say "this thing broke after 31 days".
Instead of bending over backwards to secure an MCP server why not just run it as an OS user with very limited minimal permissions?
I have to say there are some extremely talented, creative and productive "software artists" or ICs coming out of France. Not sure if that's a French thing (the Ecoles or whatever) or something else, but it's noticable.
It doesn't, but makes it economically unviable. There's hot much point selling something your customers can duplicate for free and give to your other customers for free. grsecurity barely manages it and only because they don't have many customers and make it hard to become a customer.
The community guidelines rejection is such BS. I've done thousands of Amazon reviews and get about 1% rejection rate, and it's always baffling as to the cause. You develop superstition over time over what is the cause. I avoid certain words (sexual, violence, mention of other brands), blur our barcodes, etc. "Sticky" would trigger my "uh oh, sounds sexual" alarm and I'd word it something like "tape around chopsticks left adhesive residue". Like I said, superstition.
Yes. But again, this authority is "people they see on TV" over their trusted family and friends (who I assume, aren't homeless doomees. I hope). That's just such an inverse of the human element.
Thanks for the feedback. I’ll support brew tap / install today or tomorrow:)
As loathe as you may be to admit it, there is such a thing as truth. Both sides claiming something doesn’t mean both sides claims are true (or conversely that neither sides claim is true).

You don’t seem to be thinking very well.
Most of the improvements in this model, basically everything except the longer context, image understanding and better pricing, are basically things that reinforcement learning (without human feedback) should be good at.

Getting better at code is something you can verify automatically, same for diff formats and custom response formats. Instruction following is also either automatically verifiable, or can be verified via LLM as a judge.

I strongly suspect that this model is a GPT-4.5 (or GPT-5???) distill, with the traditional pretrain -> SFT -> RLHF pipeline augmented with an RLVR stage, as described in Lambert et al[1], and a bunch of boring technical infrastructure improvements sprinkled on top.

[1] https://arxiv.org/abs/2411.15124
Bun does this with;

bun index.html

https://x.com/jarredsumner/status/1886073859138580506
> Obviously YMMV, but I bought some Amazon MTB pedals rated 4.7 starts @ 9k ratings.

Every site is different, no? Amazon isn't AliExpress. Though lately Amazon if flooded with marked-up AliExpress stuff. I'm not fond of Amazon, their customer service is more of a hit and miss since various years.

That said, I've been watching Trace Velo. He reviews a lot of AliExpress cycling things. It's often bad after prolonged use. Meaning, yeah, their testing is lacking. But some brand do seem to be trying to become a trusted brand. E.g. Ugreen nowadays is often trusted. It used to be one of the many things listed on AliExpress.
Popcorn Time did this and it worked great. Starting a torrent wasn't instant, but once a buffer was built up, it streamed just fine.

Popcorn Time got taken down pretty hard because they became too popular too fast.

A commercial solution could have a seed server optimized for streaming the initial segments of video files to kickstart the stream, and let basic torrents deal with the rest of the stream.
Ask HN: LLM for application generation – which model is the best?
LLM leaderboards aren't telling the whole story. Curious to hear from folks here — based on your experience, which model actually handles full application code generation best (not just bug fixes or tiny code snippets)?
Another great resource for hypothetical space stuffs (with math!) is Atomic Rockets / Project Rho, here's some of their articles on laser propulsion: https://www.projectrho.com/public_html/rocket/enginelist.php
It's about punishing their enemies.

> Feels like they’re ghost riding the economy for the lulz

Yes. The abstract of "the economy" doesn't matter. The priorities are "owning the libs" on Twitter and other media, and their own personal bank accounts which can benefit from insider trading the tariffs, state-sponsored memecoins and so on.
All I can find are those parroted, meaningless definitions of koc, not when to use them, how much to invest and when to not use them.
I am a contributor to Iroh ( https://github.com/n0-computer/iroh ), an open source library for direct QUIC connections between devices that can be behind a NAT.

Our library is general purpose and can be used whenever you need direct connections, but on top of Iroh we also provide iroh-blobs, which provides BLAKE3 verified streaming over our QUIC connections.

Blobs currently is a library that provides low level primitives and point to point streaming (see e.g. https://www.iroh.computer/sendme as an example/demo )

We are currently working on extending blobs to also allow easy concurrent downloading from multiple providers. We will also provide pluggable content discovery mechanisms as well as a lightweight content tracker implementation.

There is an experimental tracker here: https://github.com/n0-computer/iroh-experiments/tree/main/co...

Due to the properties of the BLAKE3 tree hash you can start sharing content even before you have completely downloaded it, so blobs is very well suited to the use case described above.

We already did a few explorations regarding media streaming over iroh connections, see for example https://www.youtube.com/watch?v=K3qqyu1mmGQ .

The big advantage of iroh over bittorrent is that content can be shared efficiently from even behind routers that don't allow manual or automatic port mapping, such as many carrier grade NAT setups.

Another advantage that BLAKE3 has over the bittorrent protocol is that content is verified incrementally. If somebody sends you wrong data you will notice after at most ~16 KiB. Bittorrent has something similar in the form of piece hashes, but those are more coarse grained. Also, BLAKE3 is extremely fast due to a very SIMD friendly design.

We are big fans of bittorrent and actually use parts of bittorrent, the mainline DHT, for our node discovery.

Here is a talk from last year explaining how iroh works in detail: https://www.youtube.com/watch?v=uj-7Y_7p4Dg , also briefly covering the blobs protocol.
Show HN: Free Online Tip Calculator – A Clean and Simple Gratuity Calculator
I discovered this tip calculator after constantly struggling with splitting bills and calculating tips when dining out with friends. Math anxiety is real, especially after a few drinks! I built tipcalculator.top to solve this everyday problem with a clean, simple interface that works perfectly on mobile. The reverse calculator feature (which helps figure out the original bill amount from the total) came from my own frustrating experience trying to reconcile credit card charges. I'd love to hear how others use it and what features would make it even more helpful - maybe custom presets for different countries or integration with expense tracking apps? Your feedback would really help shape where this goes next!
What's the use case for that? Multitenant server web hosting where customers provide containers and you want to lock them down I guess? Mostly SaaS/PaaS?
(disclaimer: I'm leading the Docker Model Runner team at Docker)

We decided to start with Apple silicon Macs, because they provide one of the worst experiences of running LLMs in a containerized form, while at the same time having very capable hardware, so it felt like a very sad situation for Mac users (because of the lack of GPU access within containers).

And of course we understand who our users are, so believe me when I say, macOS users on Apple silicon make up a significant portion of our user case, else we would not have started with it.

In production environments on Docker CE, you can already mount the GPUs, so while the UX is not great, it is not a blocker.

However, we have first class support for Docker Model Runner within Docker CE on our roadmap and we hope it comes sooner rather than later ;)
It will also be purely OSS, so no worries there.
Electric propulsion using high power laser beaming makes way more sense outside the atmosphere for non-launch use cases, where thrust requirements to achieve desired delta-V usually aren't measured in kN and the mission longevity implied by higher Isp matters so much more and there isn't a pesky atmosphere in the way of power beaming or any concern about accidentally ablating airliners.

Numerous startups are tackling the power beaming issue with relatively short timelines and in some cases a lot of funding, but the scale of what's actually been publicly demonstrated with lasers is unimpressive...
ZFS's delayed compression of written data
V1.14, released yesterday [1], ships with a search embedding cache. Most of the time you see is spent waiting for an OpenAI embedding answer. We also just shipped composite embedders to reduce the network latency when you need to respond quickly to user searches (by running embedders on the Meilisearch server) but still use external APIs to index many documents in batches. Note that it can only work with open-source embedders, the ones HuggingFace serves.

[1]: https://github.com/meilisearch/meilisearch/releases/tag/v1.1...
So build it? God, when did HN become self-entitled unhackers. This site is filled with non-stop comments complaining about how whatever AI product cant do something right out of the box. So hack together a solution that DOES.
The issue is everyone is watching the same part of the file at the same time. Offsetting by 10 seconds does not change that.
Yup. The word I should have used is "triage".
Unfortunately not, since the container won't have access to the Apple silicon GPU.
That's why in our architecture, we have to run llama.cpp as a host process and wire it up with the rest of the Docker Desktop architecture, to make it easily accessible from containers.
You will find the exact same items on Amazon, except usually more expensive.

There are many items sold on Aliexpress that are of decent quality.

I think the point is to buy what you really need, and focus on quality, rather than impulse buying cheap stuff that ends up in the garbage after a month.

Our consumerism is hooked onto cheap crap, the factories producing it are only fulfilling the demand.
we need to stop pretending humans (as a collective species) are intelligent
I’d like to get out while I can, but to what country? Any suggestions?

By the way the answer to your question is simple: the American people are fascists, not just the president.
You could use the paywall bypass posted by 'bookofjoe.
We also know that incompetent management is widespread, so many companies would replace their humans workers with LLMs even if it is not possible, and we know many investors are also incompetent, so these companies might even be allowed to continue to exist and might even grow really big.
You dont like using and building tools imbued with intelligence that you can control. Why.
> Partly because they do it badly, and partly because it's harder for other applications to read the pixels.

I can select text in a web browser or a spreadsheet or a chat app just fine.

> The application just told the display to write some text there, but the clipboard has to ask again what text is there, wait for a response, and let the other program know. Meanwhile the terminal just knows, so it's faster.

How does a terminal emulator render text on the screen then? Your screen is made of pixels.

> And you learned that somehow. You can learn other things too.

You're missing my point entirely, but you seem to enjoy taking an hour to open every new door. I won't judge that.
Because projects like these were missing back then, I got creative with nginx and do not need any config changes to serve new projects:

server {
listen 80;
server_name ~^(?<sub>\w+)(\.|-)(?<port>\d+).*; # projectx-20201-127-0-0-1.nip.io
root sites/$sub/public_html;
try_files $uri @backend;
location @backend {
proxy_pass http://127.0.0.1:$port;
access_log logs/$sub.access;
}
}

Configuration is done via the domain name like projectx-20205-127-0-0-1.nip.io which specifies the directory and port.

All you need to do is create a junction (mklink /J domain folder_path). This maps the domain to a folder.
> Parameterized queries.

Also happy to be wrong, but in Postges clients, parametrized queries are usually implemented via prepared statements, which do not work with DDL on the protocol level. This means that if you want to create a role or table which name is a user input, you have a bad time. At least I wasn’t able to find a way to escape DDL parameters with rust-postgres, for example.

And because this seems to be a protocol limitation, I guess the clients that do implement it, do it in some custom way on the client side.
> a better single-user server would be nice

There's GotoSocial[0], Takahē[1], epicyon[2], etc.

[0] https://gotosocial.org

[1] https://jointakahe.org

[2] https://libreserver.org/epicyon/
I can imagine he wouldn't be interested in any of that. The joy of hacking only emerges when there are no external demands. That's why work sucks and you need to pay people to work for your demands.
OCRs are AI/ML in the sense it meant to everyone before 2020.
These days the trick when motocamping in the east is to look up the KOA location, and then check the rate at the local campsite across the street or down the road.

Out west of course you usually have free options.
Fair point, though they typically only become problematic (aka are acted on/legislated against) when they significantly distort the market to a degree people start really complaining about it.

Usually due to either a monopsony/cartel/monopoly which controls most of the market doing it successfully.

If the companies in the lower 5% of a market price fix or the like, no one usually cares. Even 20%, usually.

The Sherman antitrust act speaks about ‘restraints of trade’ because it has to actually restrain trade, which requires a significant degree of control - which a successful/actual monopoly, monopsony, or cartel can do.

Technically, even attempting to do it is illegal, but going after every company that tries has a bit of the same feel as locking up every single toddler because they took a swing at someone or threatened them with their cute little stubby kid scissors.

It’s a waste of resources, not in anyone’s interest, stops behavior most people would consider necessary/healthy to some degree, causes much worse problems than it solves, etc.

On the other hand, locking up a successful serial killer is just good public policy.

The difference between the two is more a matter of the success and effectiveness of their tactics, not really intent.
If we are talking about a live stream (and not a stream of a static file), having the start be more seeded is useless.
There aren't many VMs that can run in browser

https://copy.sh/v86/

https://webvm.io/

https://bellard.org/jslinux/

https://jamesfriend.com.au/pce-js/ (https://github.com/jsdf/pce)

https://www.pcjs.org/ (lots of hardware and OSes) (https://github.com/jeffpar/pcjs)

Mac OS

https://infinitemac.org/ (https://blog.persistent.info/2023/03/infinitemac-dot-org.htm...)

https://jamesfriend.com.au/projects/basiliskii/BasiliskII-wo...

https://jamesfriend.com.au/pce-js/pce-js-apps/
My theory is that all our modern junk doesn't necessarily cause depression, but it allows us to take on more chronic depression and other mental problems (distraction, dopamine hits, etc.) Like the way added safety features to cars just caused drivers to drive worse to compensate.
I use regularly AI music services to build rock songs out of my lyrics, old poetry or popular songs, etc. and sometimes they hallucinate in creepy ways, adding after the song ends either evil laughter or horror sounds, demon-like voices, starting singing in completely made up languages. They're creepy but fun and interesting at the same time. Creepy sounds aside, I've had a lot of fun experimenting with AI music hallucinations as they sometimes create interesting and unusual things that spark more creativity (I'm already a musician); I sometimes felt like someone who grew up listening only bad pop trash being suddenly exposed to Frank Zappa.
I don't think the price of those small shipments from China is necessarily crazy.

Looking at flights for people: you can get a return flight to China from the UK for less than £350, which means less than £175 one way.

Let's say that's about 100kg (person plus luggage) then this means that flying 100g from China to the UK costs less than 17.5p or 20c in euros.

I expect that cargo will be cheaper than passenger plane, so shipping small stuff from China to Europe can indeed be very cheap. It's about volume and efficiency.
yes benchmarks are on github/com/dust-inc/duistdb with full head to head battle with redis,memcached,dragonflydb
AliExpress highly encourages leaving a review. They also encourage taking pictures. As a result, loads of random pictures in reviews.

You can do an additional remarks later, but I often don't bother. It's drowned out anyway.

What I often do is read the reviews. What's usually done is a critical review and still 5 stars. The fake reviews are pretty easily spotted. It shouldn't be this way, but in my experience it's still better than Amazon. With Amazon more effort is made to fake a review.
> when the Democrats lost the election through a series of unforced errors that have left the country – and the world – teetering on the brink of a whole Bronze Age prophesy's worth of omnishambolic polycrises.

I just like to point out that it's somewhat strange that almost every tech post nowadays has to contain a mini rant about Trump.
Another scheme of the administration to blackmail a big company into submission. I'm not against sued a big company because of antitrust/monopoly but my fear is that Meta gets off the hook once Zuck jumps through Trump's hoops and sells out the customers to the new dictator.