Hacker Newsnew | past | comments | ask | show | jobs | submit | poorman's commentslogin

I wonder if this could be used to track location of the vehicle


Isn't that the point of the project? I'm seeing a bunch of tracked vehicles, although they all seem parked at the moment.

Does Graz not have night bus service?


The night bus service only runs the nights "before" Saturday and Sunday[1]. It's a small university city with 300k population (600k greater metropolitan area).

[1] https://www.verbundlinie.at/en/customer-service/arriving-in-...


> It's a small university city with 300k population

Made me smile, I'm from outside a city we used to call "big city" when I was growing up, it had ~110K population and is the 9th largest in the country or something :P Anyways, that city still has night service, so not sure why a city with three times the population wouldn't, especially if it's a university city.


If it's not able to support a robust bus system, it's not a city, just a really big town.


They acknowledged the bug. Screenshot and chargeback


Yeah I think there's a dependency issue going on there. Something isn't installed that needs to be.


As one of the only people running a Mac Studio M3 Ultra with 512 GB of RAM on the network, I can tell you at sustained 100% GPU utilization I am measuring 250 watts max (at the power outlet). My solar panels are easily producing this. The power calculation goes away once you connect a solar panel. You can get a 400 watt solar panel on Amazon for $300.


> You can get a 400 watt solar panel on Amazon for $300.

Too expensive. It's probably producing 200 watts average for 8 hours a day. That's 1600 watt hours, which is about $1.60 at PG&E prices. That would take 187 days to recoup the cost of just the panel.

If you include installation costs and "what PG&E steals if you wire it to the same grid" it's probably more like 4x that, which is too long.

Tell me when we can have 400 watt solar panels for $50. Stupid capitalism literally forces solar panel prices to make it unprofitable.

People should never have to take out loans for solar. Solar should be subsidized and forced by the government to be so cheap that it repays for its cost within a month. Then we're talking. Most things I buy to save money, I expect them to repay within a month. Maybe 2 months max.


You can get them used for that price, and new for $107 if you buy qty 10+. See signature solar as one example.

Installation costs and inverters not included, however.


If you are worried about a $300 solar panel you are not going to like the cost of a Mac Studio M3 Ultra 512 GB! haha


I'm not "worried" about that cost, I would rather just pay PG&E electricity if the solar panel cost $300.

Just pointing out why capitalism + solar is a failure. Capitalism reprices the good thing to be equally expensive to the bad thing, so that nobody buys the good thing anymore.


Are you actually seeing demand?


Same. I installed Forgejo two months ago when Github wouldn't let me create agent accounts. It's been awesome. Any time I want a new feature I open my agent on the server and tell it to add the feature to Forgejo. Took all of 15 minutes for it to add a working Show/Hide "Viewed" files on the PR reviews.


You mean you upstream those changes or are you running your own fork?


I am going to say this for all the people thinking like this. This attitude will get you nowhere in life. It historically never has and in the future it never will.


> When Nick is not at a computer, you can find him out racing sailboats and involved with various entrepreneurial ventures.

Says the man who is going to be the feudal lord in GP's scenario…


The man who thinks he's going to be the feudal lord in GGP's scenario.

In GGP's scenario, there isn't much room at the top. :)


Nah thats petty nobility that will get wiped out for taking the wrong side in the first dick measuring war lmao.


That's right -- the best way to succeed within a system is to hustle as hard as you can, and definitely don't stop to question the system itself.


Better than those who just want to burn the system down with no real plan for what comes next, and unable to comprehend the inevitable bloodshed of the 'glorious revolution' that they crave.


You think you are describing the Bolsheviks, but your description is equally fitting for those who want to abolish human labor without providing people alternative ways to make a living.

And no, hand waving about "UBI" doesn't count unless they start actually doing the politics required to implement UBI.


There's a lot of bloodshed going on under the status quo. Why do you think people are 'unable to comprehend' it? Maybe they just want to reallocate it and aren't especially sympathetic to those who who have avoided it up to now.


Do you comprehend the scale of the inevitable bloodshed that maintaining the status quo is bound to lead to? You don't do so any better than those you're chastising.


Most of them fried their brains with stimulants long ago. Thankfully for them, they no longer have to think. An LLM does it for them.

But it’s just the same idiots were rabidly cheering the latest JavaScript framework a decade ago, NFT’s and all manors or ridiculous things anyone with 2 working brain cells saw transparently though.


Not sure if you're being sarcastic or not, but I think this is actually good advice. It's great to be a free-thinker and question things, but I do think there is some (monetary) value in just not asking too many questions, but optimizing to be the best at whatever you're doing.

Edit: to give an example, I probably would have done better in school had I spent less time questioning the education system and more time just accepting it and trying to get good grades.


Yeah, succeed in the system, fuck everybody else. If the system is making the world a worse place, all the better, you can take advantage since you’re in the system. All that until you find yourself spat out by the system and get to experience what you’ve been part of with no recourse.


Your interpretation of the comment in this way says more about you than anything else. Because that's not what I or the parent comment said.


and your conclusion on this situation says a lot about your current state of economic privilege and/or ignorance


The trick is to compartmentalize


Historical data is never a guarantee of future performance. The downside of your attitude is that you can’t really point at the right thing to do, so then you invest your time and effort on the same things, when it could be the case that the rules of the game have changed.

I don’t see the comment as necessarily defeatist. If anything, it’s an invitation to rethink what might work instead, and whether there are things worth lobbying for/against beyond what can be solved at the individual level.


> I am going to say this for all the people thinking like this. This attitude will get you nowhere in life. It historically never has and in the future it never will.

I'm picturing a 12th century French feudal lord saying these words to some of his serfs complaining from a lack of firewood.


You can use AI because you know its good for you, but still think it won't make all people better off


I am going to say this for all the people thinking like this : lol


Hmmm ... there is definitely historical precedence for the article's assertions.

There is also precedence for what happens when such a big wealth imbalance is present (spoiler: it's a revolution).

This article is methodical in its points.

Your retort reads like an easily dismissed hot take.


And your retort (and this report) are doom and gloom. Humans are remarkably good at adapting and have adapted through far worse conditions than economic systems. The negative net is easy and very popular today but positivity is just as possible. It’s all about how you read data and there’s a lot of room for interpretation. If you’ve fallen for the doom that’s on you but calling something with so much historical precedence as hope for humanity ‘an easily dismissed hot take’ doesn’t make you look very bright.


>And your retort (and this report) are doom and gloom. Dinosaurs are remarkably good at adapting and have adapted through far worse conditions than _______, hell, they were around 99 million years longer than humans.

Species go extinct all the time, most species go though all kinds of things before then, so there is nearly zero correlation between surviving something bad in the past and surviving something else bad in the future.

Modern humanity is not anti-fragile any longer like we were in the past.


The articles argument is fine, but it takes as an axiom that AI is better right now at much cognitive work. I haven't found that to be true in the tasks I've looked at.

It's certainly cheaper and faster, so there's potential for it to unlock more demand but I'm sceptical that current models will replace a large fraction of knowledge work.


I was just thinking about this project the other day. Seems we have a whole lot of unused compute (and now GPU). I wish someone would create a meaningful project like this to distribute AI training or something. Imagine underfunded AI researchers being able to distribute work to idle machines like SETI@home did.


Asked Gemini about that: "are there efforts to train big LLM in a distributed fashion à la seti@home ? "

answer was really interesing: - https://github.com/PrimeIntellect-ai/prime - https://www.together.ai/


All SVGs should be properly sanitized going into a backend and out of it and when rendered on a page.

Do you allow SVGs to be uploaded anywhere on your site? This is a PSA that you're probably at risk unless you can find the few hundred lines of code doing the sanitization.

Note to Ruby on Rails developers, your active storage uploaded SVGs are not sanitized by default.


Is there SVG sanitization code which has been formally proven correct and itself free of security vulnerabilities?


It would be better if they were sanitized by design and could not contain scripts and CSS. For interactive pictures, one could simply use HTML with inline SVG and scripts.


GitLab has some code in their repo if you want to see how to do it.


This is what they actually use: https://github.com/flavorjones/loofah


Sanitisation is a tricky process, it can be real easy for something to slip through the cracks.


Yes. Much better to handle all untrusted data safely rather than try to transform untrusted data into trusted data.

I found this page a helpful summary of ways to prevent SVG XSS: https://digi.ninja/blog/svg_xss.php

Notably, the sanitization option is risky because one sanitizer's definition of "safe" might not actually be "safe" for all clients and usages.

Plus as soon as you start sanitizing data entered by users, you risk accidentally sanitizing out legitimate customer data (Say you are making a DropBox-like fileshare and a customer's workflow relies on embedding scripts in an SVG file to e.g. make interactive self-contained graphics. Maybe not a great idea, but that is for the customer to decide, and a sanitization script would lose user data. Consider for example that GitHub does not sanitize JavaScript out of HTML files in git repositories.)


Yeah I’ve worked on a few pieces of software now that tried SVG sanitizing on uploads, got hacked, and banned the uploads.


I guess it is a matter of parsing svg. Trying to hack around with regex is asking for trouble indeed.


just run them through `svgo` and get the benefits of smaller filesizes as well


svgo is a minifier, not a sanitizer.


I should have clarified `svgo + removeScripts`

https://svgo.dev/docs/plugins/removeScripts/


This is huge. A lot of these are the underpinnings of modern computer science optimizations. The ACM programming competitions in college are some of my fondest memories!


> A lot of these are the underpinnings of modern computer science optimizations.

Note that older articles have already been open access for a while now:

> April 7, 2022

> ACM has opened the articles published during the first 50 years of its publishing program. These articles, published between 1951 and the end of 2000, are now open and freely available to view and download via the ACM Digital Library.

- https://www.acm.org/articles/bulletins/2022/april/50-years-b...


In a concurrent environment, I wonder if the overhead of wrapping every API call with a synchronized would make this significantly slower than using ConcurrentHashMap.


Thanks. This is actually one of the topics I really want to tackle next.

If we just wrap every API call with synchronized, I'd expect heavy contention (some adaptive spinning and then OS-level park/unpark), so it'll likely bottleneck pretty quickly.

Doing something closer to ConcurrentHashMap (locking per bin rather than globally) could mitigate that.

For the open-addressing table itself, I'm also considering adding lightweight locking at the group level (e.g., a small spinlock per group) so reads stay cheap and writes only lock a narrow region along the probe path.


I think that's a great idea! I just checked one of my larger projects and it 55% ConcurrentHashMap and 45% HashMap so I'd personally benefit from this plan.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: