HN user

pickettd

40 karma

You can reach me at gmail using the same username.

Posts2
Comments33
View on HN

Reddit and GitHub are littered with people launching new projects and appear to be way more feature-rich than new tool/app launches from previous years. I think it is a lot harder to get noticed with a new tool/app new because of this increase in volume of launches.

Also weekend hackathon events have completely/drastically changed as an experience in the last 2-3 years (expectations and also feature-set/polish of working code by the end of the weekend).

And as another example, you see people producing CUDA kernels and MLX ports as an individual (with AI) way more these days (compared to 1-2 years ago), like this: https://huggingface.co/blog/custom-cuda-kernels-agent-skills

I also want to add on that I really appreciate the benchmarks.

When I was working with RAG llama.cpp through RN early last year I had pretty acceptable tok/sec results up through 7-8b quantized models (on phones like the S24+ and iPhone 15pro). MLC was definitely higher tok/sec but it is really tough to beat the community support and availability in the gguf ecosystem.

I Run LLMs Locally 2 years ago

Depends on what benchmarks/reports you trust I guess (and how much hardware you have for local models either in-person or in-cloud). https://aider.chat/docs/leaderboards/ has Deepseek v3 scoring higher than most closed LLMs on coding (but it is a huge local model). And https://livebench.ai has QwQ scoring quite high in the reasoning category (and that is relatively easy to run locally but it doesn't score super high in other categories).

I Run LLMs Locally 2 years ago

My gut feeling is that there may be optimization you can do for faster performance (but I could be wrong since I don't know your setup or requirements). In general on a 4090 running between Q6-Q8 quants my tokens/sec have been similar to what I see on cloud providers (for open/local models). The fastest local configuration I've tested is Exllama/TabbyAPI with speculative-decoding (and quantized cache to be able to fit more context)

I experimented with both Exo and llama.cpp in RPC-server mode this week. Using an M3 Max and an M1 Ultra in Exo specifically I was able to get around 13 tok/s on DeepSeek 2.5 236B (using MLX and a 4 bit quant with a very small test prompt - so maybe 140 gigs total of model+cache). It definitely took some trial and error but the Exo community folks were super helpful/responsive with debugging/advice.

The CapOne 2% business card is called Spark Cash and doesn't have the redemption restrictions that you're describing (I think you may be thinking of their Venture card or another personal travel card). The only two downsides to the Spark card (in comparison to the Fidelity cashback card or Citi double cash) are that applying for it likely dings you in all 3 major credit reports (as opposed to just one like most cards) and also that it carries a $59 annual fee after the 1st year.

Or somewhere with great solar power potential. For example Kihei on Maui - you can power a whole house with central air and still have enough energy to charge up an EV just with rooftop photovoltaics.

There is a "Dragon Box" on Amazon that sells for $270ish and appears to be a lower-powered Android Kodi box. I imagine that a second generation Pi could perform just as well.

My first generation Pi was significantly slower at Kodi (things like menu traversal, library updates, API consumption, etc) than a second generation Pi (I tried a friend's). So I was already considering $35-40 for a new Pi when I saw the sale price on the Nexus Player. But the bigger deal for me was Google Cast support. I wanted a single device that could run Kodi and also that the family could cast Youtube, Soundcloud, etc using phones.

Regarding remote - the Nexus Player comes with a simple, bluetooth remote (as does the Shield TV now apparently). It works great for simple Kodi interactions but doesn't work for everything (the biggest one that I've noticed so far is the lack of a context button). But as thoughtpalette mentions - I use Android and iOS remote apps when I need more control over Kodi (Yatse is what I use on Android). Also there is an Android TV control app for Android phones that has the same buttons as the simple Nexus Player bluetooth remote.

I picked up a $50 Nexus Player (Android TV OS) last month for this purpose. It replaced a first generation Raspberry Pi B that was actually pretty decent as a Kodi box (I used the Xbian distro).

So far I'm really happy with the Nexus Player. I like that it gets Android TV apps (like Kodi and Moonlight for game streaming from my desktop) and also supports Google Cast. It also has a usb port that supports things like keyboards, ethernet, external disks, etc with a usb hub.

I also strongly considered the Nvidia Shield TV (also Android TV OS). It's $200 with a lot better hardware, getting good reviews, supports 4k, and apparently can decode H265 in hardware.

I think there are certain stores that routinely report itemised info. I just posted this link in another comment thread but check out the https://www.visa.com/supplierlocator/ search results for the column 'Enhanced Data Level'.

If you search for the Safeway grocery store at 14444 124th Ave NE Kirkland WA 98034 - the data level cell contains 'Level III Line Item'. I believe this means that at least for Visa, that store is using level 3 credit card processing and line item receipts are reported to Visa.

Yeah, I saw that section on Wikipedia also. But I believe I've found a link indicating that level 3 is being used for consumer purchases in at least some individual stores.

If you look through Visa's supplier locator at https://www.visa.com/supplierlocator/ you can search for a business (or category of business) at a particular address or zip code. It will tell you the MCC (category) and appears to also show the data level reported to Visa.

I looked up Safeway grocery stores near Seattle. If you take a look at the one at 14444 124th Ave NE, Kirkland WA 98034 the data level is 'Fleet, Level III Line Item, Level III Summary'. I take this to mean that anyone using a Visa card at that particular Safeway will have their line item receipt sent to Visa. I would be surprised if the other credit card processors don't have setups like this as well.

My understanding is that there are three levels of credit card processing (1, 2, and 3 - corresponding to different amounts of information transmitted about the transaction). I've heard from individuals supposedly familiar with payments systems in stores and payment processing that many big chains have a level 3 credit card processing system in place for consumer purchases.

One part of level 3 processing is a line item list of what was purchased. So if it is true that there are stores using a payment system that routinely transmits level 3 information for consumer purchases then it would follow that the credit card processor does currently have the information on exactly what you are buying from those particular stores (not just the merchant and the total amount).

I just did a quick minute or two of web searching and didn't see a trustworthy looking link describing the practice of level 3 card processing for consumer purchases. Maybe someone with experience in the card processing industry could comment on this?

So far I've been able to get by in Windows (for my projects at least) if I use Cygwin for interacting with paths that are longer than MAX_PATH. For example - if a project has node_modules committed in git then I have to clone the repo using Cygwin. This doesn't help with the problem related to install scripts on deeply nested components though because npm doesn't support Cygwin. In Windows I still run npm and node commands in a regular command prompt.

I have a full-time, remote, software development job that I started while travelling. It is doable. You may find that it is hard to be motivated to do work when you'd rather be out seeing the place that you are visiting though. I also find that it usually takes me a week or two to get into a daily routine in a new place. So when I plan to go places I generally make it fit into a (long) weekend or I plan to stay for 2 weeks or more.

My working space is pretty much always just wherever I'm living at the time. Which means that checking ahead to make sure I'll have a decent internet connection is part of picking a place to live. I especially like when I can find a place that has at least a separate office nook.

In contrast to what other people seem to be saying in this thread, I personally appreciated your explanation of the logic behind your decision. It didn't feel sleazy to me and I think I would have been somewhat turned off by a confrontational tone.

I am definitely biased though. I used PadMapper a ton in May when I was looking for a sublet for the summer. Last week I started browsing again for the next apartment and felt the distinct lack of CL listings. Honestly, my solution was to start using PadMapper (for non-CL listings) + another site that shows CL data on Google maps. I can't imagine going back to CL's vanilla interface for apartment searching.

In conclusion, thanks for making an awesome service and good luck with figuring something out with the Craigslist folks.

The TLS handshake is to work out identities and exactly what type of encryption etc they want/support. Then before sending any actual data they encrypt a "Finished" message and both sides verify they can read the message. The server will only be able to create a correct "Finished" message if it has the private key to go along with the presented certificate.

It seems to me like the overt change in the handshake security boundary is that in a FalseStart handshake, a man-in-the-middle attacker can make the initiating side send application data encrypted with relatively arbitrary parameters (until the TLS implementation realizes it can't decrypt the final handshake message properly). There is a good chance this is just annoying (like, on a denial-of-service level of attack) but my intuition is there could be some application circumstances where this is a significant problem. Off the top of my head I can't come up with a specific example however - so I could just be imagining things :)

There are also operating system/application level architecture challenges as well. For example, I'm not sure the idea of FalseStart is compatible with the calling convention of Windows SSL/TLS (InitializeSecurityContext and AcceptSecurityContext) given the separation between transport layer and security context negotiation components. And because of that existing convention, the recommendation in sections 4 and 5 of the draft that "TLS implementations allow the application layer to query whether the handshake has completed" could be potentially tricky for applications using Schannel (Windows SSL/TLS).

"Creating an Schannel Security Context" : http://msdn.microsoft.com/en-us/library/aa374781(v=VS.85).as...