skysight-inc/HackerNews huggingface dataset:
You can't grow your brain as large as you want. There are physical limits on power consumption, power dissipation, and organisational complexity. And size doesn't even correlate with intelligence.

It's even debatable if you can grow an Einstein. What if GI is NP-hard? What if the belief that GI - never mind consciousness - can be modelled with our version of computing hardware is just plain wrong? What if a GI System is uncopyable for practical or philosophical reasons?

The singularity looks more like plain old religious thinking than anything that could be recognised as real science.

"What if we made a golem? We could do anything! What if we put ourselves into the golem? We could live forever!"

And so on.
Re your first paragraph, I don't agree - people will consider it safe to drive and not pay attention 'because the car will stop me hitting anything'.

During rush hour in my UK city I reckon on about 1-in-50 drivers I see using mobile devices in hand whilst driving. Most appear to be lone female car drivers, most dangerous are male lorry/van drivers (who presumably are using delivery/routing apps).
Same for me: Had to use IPv6 via my home cable uplink. The IPv4 gateway was located at the ISP. This translation service was called "DSLite". The performance was horrible, connections frequently dropped. This was basically last year.

Now I pay more (like 35€/m instead of 20€/m) to get an IPv4 only connection.
Ask HN: Done with macOS: to which Linux distro are you going?
With all the MacOS shenanigans people suggest linux as an alternative.
As a team lead ? The decision was made on the business side of the company and had nothing to do with the technology or our effort, we simply started development too early before any proper due diligence was made.
It's not the government's job to figure out what blind and partially sighted people are and aren't interested in buying. Would you really support regulation that attempted to distinguish between "products blind people are interested in" and "products blind people aren't interested in"? That seems entirely unworkable.

If you wish to continue making unwarranted assumptions about what blind people are interested in buying, that's your call. But the law doesn't (and shouldn't) back you up.
OpenFaaS Is Also a PaaS – Part 2: Vert-X and Gitlab
Prolonged Meat Diets with a Study of Kidney Function and Ketosis [pdf]
Interesting example to consider. I can usually mostly understand Apple (and others) making batteries unremovable, as it allows them to pack the maximum battery into the minimum space (and sometimes a awkwardly-shaped space which wouldn't support removability anyway). However, in the AirPods example, the 'stalk' doesn't appear to hold anything except a battery, charging contacts, and an antenna for bluetooth reception.

This being the case, it should have been possible to design the 'stalk' as a self-contained unit which would then have been easy to swap out; it would have needed maybe a millimetre extra to incorporate contacts to transfer power and the antenna signal.
Please respond to trhway’s response. You’re being the generic HN person that misses historical understanding here. It’s not flamebait to be highly concerned about political developments, please try to understand.
No Linux distro has ever just worked with Sleep and/or WiFi. My last Linux machine (Ubuntu) would never be able to connect to WiFi after sleep mode. Believe me, I tried everything you can think of and find in various StackExchange posts.

When a GRUB update destroyed my dual-boot setup and made my system completely unrecoverable, I ditched Linux and never looked back. Using OpenOffice or LibreOffice was also more akin to self-punishment usually seen in medieval monks.

As a student, all these problems were okay, but nowadays I don't have the time to constantly fight against my own OS to finally figure out that I have to adjust my fan speed rotation coefficient to make the third party WiFi driver work.
Billions are being spent by DeepMind and OpenAI explicitly targeted at AGI.
Not at all...
You don't seems to know a lot about AGI.
Google, openAI, Microsoft, Facebook, Baidu etc, do NOT fund AGI.
They don't fund AGI nor have even a sketch of a roadmap.
They fund narrow AI, that is:
they fund researchs on specific problems not on an architecture for general intelligence.
Moreover, they only fund statistical AI, not causal AI, which is a pathetic local minimum.
What you are looking for is opencog or Cyc.
> looking at the Libra/€ price

But that's affected mostly by factors other than money supply?

> all big fiat currencies aren't stable enough even gold or BTC

BTC does not provide price stability. Hardly anyone quotes long term fixed prices in BTC, they quote them in USD/BTC spot converted prices. You can see this in how BTC has tracked up and down against the dollar across a huge range.
Against Live Phishing, both SMS 2FA and TOTP are ineffective. If anything the SMS 2FA might actually falsely reassure naive users that they're not being phished.

Alice is tricked into visiting fakebank.example a site which looks exactly like Alice's real bank. She enters her username and password, the site says it will send her an SMS, behind the scenes Alice's details are plugged into realbank.example automatically, triggering an SMS to Alice from her real bank.

Alice types the SMS code into fakebank.example, it stalls a little bit, very common for banks, meanwhile it plugs the SMS code into the realbank.example site and successfully logs in as Alice. Cool. The fakebank.example site finally gives an error. "Code 418. We're sorry, this service is temporarily wormhole phasers galactic transwarp. Please try again later". Alice is annoyed but decides to try again in an hour. By then her account will be empty.

WebAuthn / U2F work fine here, because they don't give Alice the opportunity to mistake this for her real bank, the FIDO token will cheerfully mint credentials for fakebank.example which are no use to log in as Alice on realbank.example. There's no "I'm sure" step, no "Actually this is my real bank", no opportunity for human error to betray her. The bad guys still annoy Alice with their bogus site, but they don't get working login credentials.
My Wife's Show HN Pt2: Climate Change News, Bandwidth-Optimized, with Adblocking
CSS needs an equivalent to an SQL query planner, so that mere humans can understand how it works.
But what experience would you recommend here instead? If 2 programs that require access start 5 minutes apart, do you stop/suspend the first one until another program starts and then show a dialog listing both for a good "experience"? What happens if another doesn't start for a while? Do you show the dialog after a certain time period? How can it see into the future and know what other program you are going to run in order to show the items in a nice neat single-window list?

Or do you show multiple dialog prompts (like in the screenshot) because there is no way of knowing what disparate applications will access at any given time?

My experience of corporate IT (having been a subject of someone else's policies) was to have my machine locked down to the maximum because someone somewhere once ran a random EXE they'd been emailed or downloaded and it contained ransomware and encrypted everything it could access (network servers too). As irritating as it was, what would you do to stop that happening again? It was a developer that ran that...

This includes "professional" users who saw Edge or IE as "the Internet" and would get "IT" to add an ODBC entry for a database server, despite having worked there for 10 years. Most of my colleagues didn't know the difference between a database server and a terminal server. And this included management.

What would you do instead then??
I would think other people would ponder those questions before giving someone else their money.
I think the argument is that you cannot force a foreign country to burn less fossil fuels. If you stop selling then someone else takes your place because the demand is still there. The problem needs to be solved at the root: reduce demand for fossil fuels.
I think this fear is based on a huge overestimation of the marginal utility of raw intelligence in the political/power field. When there’s a coup somewhere it’s usually not the math department that rolls triumphantly through town. Oppenheimer was a superintelligence compared to his rivals in the military industrial complex, and we know how that turned out. I could go on, but you get the point.

I think what we should be more worried about is the power dynamics/balance between groups of people in society. The relatively morally bankrupt “power people” within the military still needed the cooperation of people like Oppenheimer to get their hands on the bomb. That constraint could soon be gone...
(1930)
Announcing Support for Native Editing of Jupyter Notebooks in vs. Code
Productivity Myths That Aren’t True
Studying?
From all those years of studying, what has been learnt?
I feel like this is deeply stagnant.
Because if you would REALLY CARE, you would walk by foot or not leave the house at all! ;)
Without even issuing a warning?

This account was created a year and half ago, I may have written a little over 200 comments (it's one every 3 days average) and I have just posted more recently in light of the events regarding Stallman, which I admire since the middle 90s.

Is this really policing or just plain and simple censorship?

> and not create accounts to break them with?

What do you mean?
Well, as a computer guy I prefer a transparent system where I control what "safety" means. The promises of "absolute safety" from "hackers" is hard to hold, given that the screenshots of this "brand new OS" look as if it is an Android distribution. Sure, they can integrate their own "always-on" VPN solution which helps in "fishy public cafe Wi-fi's". But I rather install LineageOS and am in control of the VPN I want to use myself. Plus I can really control my device because I can review the open source code.
Many years ago, I copied an implementation of the Cohen-Sutherland algorithm (for line clipping) to C++ from pseudo code (I don't remember where I got this pseudo code from, but other sources used equivalent pseudo code).

The code (it was a backend server code for a web app) was heavily tested with ab [0] and JMeter [1] against extreme load, everything seemed to worked fine. Fast-forward 6 months, when we had a sudden peak in users (for a few days, we went from around 500 visitors a day to around 500.000, which roughly meant > 5 million requests per day). Suddenly, the backend, which ran without problems for half a year, crashed in production every 5 hours or so with a segmentation fault. I could not for the life of me reproduce this. After some panicking, I let the backend run in gdb in production against the ~50 requests per second we were still getting. After a few hours, the segfault occurred again, and I figured out that on extremely rare edge cases, the pseudo code I copied to C++ divided by 0, which lead to chain of problems afterwards, eventually resulting in said segfault. If I remember correctly, the fix was trivial.

[0] https://httpd.apache.org/docs/2.4/programs/ab.html

[1] https://jmeter.apache.org/
Looking at eg The last of us part 2, which is coming to ps4 and not being a ps5 exclusive, and various videos on Youtube (eg Unreal engine speed level designs, Quixel material libs), I think the huge moves forward these last years have been in the toolchain.

Now, even small studios (not meaning Naughty dog here) can make really high quality games, since they can buy/license the engine, textures and models, and focus on the game mechanics.

What the next generation brings is more firepower, which likely translates to more dynamic NPC and enemy behaviors.
We'll also see the removal of artificial barriers meant to hide eg load times (as mentioned in the article), or workarounds.

Not in the game or console business, just my observations and speculations.

edit:
speed level designs:
https://www.youtube.com/watch?v=TUM2Qc9TP9s
https://www.youtube.com/watch?v=-HFnR43ms1k

quixel, megascans:
https://www.youtube.com/watch?v=9fC20NWhx4s

etc etc
Settings should be under ~/Library somewhere (perhaps ~/Library/Preferences?) and not in the Documents directory.
> Can you provide an "enterprise class embedded OS" to device manufacturers and address post-deployment updates?

There is already vxWorks, they don't have to start from scratch and they're already widely used in the industry. (There are others as well).

Anyway: The devices in question are running some Linux with a custom web interface on top. Patching this specific flaw is just about having one engineer add a few lines to the webif git, trigger a rebuild, flash to a qemu VM (could happen automatically) and test if the interface still works. If that's the case (which is likely), put the firmware as "unsupported"/"alpha" on the company FTP.

This assumes they have proper tooling (e.g. tagged git, automatic&deterministic build server, an efficient test environment,...). If they don't have, they probably wouldn't buy it (or, maybe they would?).

Automatic post-deployment are only the end of the chain, and for cheap embedded consumer systems there are good reasons against it: "My router didn't react, so I powercycled it" is problematic if it was just applying an update (resilience against this costs money, which is tight). And then your 1st level support has to explain your grandma how to use tftp to flash the firmware via the bootloader (this is bad for 1st level support suicide rates). Did I mention all the crap should be cheap? What good is a well maintained IoShit device if it costs 4$ more than the poorly maintained competition? Chances are high you won't sell enough to sustain your company - unless you go into a premium segment and just charge twice as much as the competition, which might still be problematic (consumer expectations change a lot with price - cheap and vs. expensive and nice).

Also, at the other end of the embedded spectrum: Industrial embedded systems should probably only be updated if really necessary, e.g. if something is broken due to bad firmware. Downtime is really expensive for huge manufacturing plants, especially if unscheduled (in addition to the machine[s] not producing value, your 500 workers a fiddling their thumbs), so you want to reduce the number of opportunities for this to happen.
The Miasma
Why would that be dangerous?
We can shut down AIs in real time.
Just tried out Tree style tabs, how does this prevent this issue? I have two pages in two tabs open. To read one I resize the window, I go to the other it has been resized also.
Have a migration tool window with table where all requests are appended instead of popup being displayed. Blink that tool anytime a new requests comes in, have explanations on migration tool window. Apps who ask for permission will be hanging in background until you approve/deny permissions from migration tool. You can do migrations on your time when you need particular app, and not be forced to choose permissions for all apps at once.
Tldr is: they call him posing as a fraud prevention team, "we are sending you a pin to confirm its you", they trigger the password reset flow which sent him a pin, he reads out the pin, they get into the account and read some recent transactions, but needed another pin to transfer money, he wisens up.

Mitigation: password reset pins should say "this is your password reset pin".
Seems to me the bank should take more care for resetting a user's internet banking password. For example as far as I know, all banks in the UK need you to call them up and answer a couple of verification questions before reseting any login details.
If a program calls fopen, how is static analysis going to help?

It will just know that the program will open a file of some kind, not the location of said file.
Saw this on Twitter this morning. Sounds like they must have engineered it and set things up beforehand because they (a) knew which bank he was with and (b) had everything set up ready to log in when they got his ID number and received the password reset code from his text message.

I guess one thing that could have mitigated this quicker is if the text from the bank had said "Here is the code you requested to reset your online password" instead of a generic "Your authorisation code is..."
If it was easy, folks wouldn't have to ask how it could be done and everyone would that THAT good. ;)
Its clearly that Morey using his influence that NBA gave to loudly interrupt others business at PUBLIC.
By the way I am Chinese and stay at China. I like Basketball sport very much.
Last time I checked we were hitting tipping points faster than the IPCC predicts.
Euro NCAP has a category named "Vulnerable Road User Protection". Test try to determine how forgiving the front of the car is when you run someone over.

Cars can get extra points in that category if they have AEB features. But if it turns out that AEB isn't effective, this just makes dangerous cars (like SUVs or vans) appear safer than they really are.

So I'd say it's fair to criticise AEB. It's misleading to claim "AEB makes your car safer for pedestrians" when in reality a car with a lower hood and bigger windows without AEB would be a lot less dangerous for pedestrians.
> Can you provide an "enterprise class embedded OS" to device manufacturers and address post-deployment updates?

Yes. At least for routers, the topic of the article, OpenWRT is that OS. Any manufacturer can make it work on their router very cheaply. Any customer can install and upgrade it indefinitely.
books. You just said books. Only faster.
It sounded sketchy from the moment they asked for a pin code that they sent to your phone. It's easier to talk from the outside, but that should always be a red flag. What exactly would they be confirming by sending a PIN to the same number they were already contacting?

But that's a great heads up. Phishing is not just about obviously fake e-mails to hotmail accounts.
Some parking spaces in central London are more per hour than minimum wage
The Apple dialogs fwiw are at least easy to understand, and are distinctive for each security nag type. Having used Catalina in public beta over the last month it really does not feel like using Windows Vista, you get asked once for each application and after that, nada. The experience would be far better if macOS did not re-launch every open application after installing a major OS update so that the dialogs could be drip-fed as each app was used.

I do agree that better monitoring and reporting would be better, but these nags are for basic folder access and notifications. I do find it strange however that macOS now requires permission for an app to send notifications, whereas it is no longer required to provisionally send notifications to a user on iOS (until they turn them off).
Software can auto actuate.
Changing hardware is useless.
You're wrong with the "large margin" terms. A lot of Chinese universities have stepped up in the recent past. You can take a look here : http://csrankings.org/#/fromyear/2017/toyear/2019/index?ai&v...

3 of the top 10 (all in the top 5 even) are Chinese in origin. This is a list of publications at the top venues in AI / ML for the past two years. If you extend it to past 5 years, you get a slightly better picture, but that doesn't change the 3 in top 5 comment either.
I don't see the sophistication of this attack... Just a regular one...
> Apple doesn't want to ship a new version because they don't want people to see how they've modified bash.

This is just false, the old bash is GPL2 and Apple publishes the source for their bash on their open source compliance page. The reason they don't upgrade is the GPL3 patent grant clause, they ship the last GPL2 release for all GNU utils. The linux kernel is GPL2, so Microsoft doesn't have this problem.
How?

It shows it at the point of access request. If 2 programs request access 5 minutes apart, how would you show that in a single window?

Do you suspend the first program and wait until another application makes an access request? What happens if another doesn't make a request in a given time period? Will the user wonder why the first application has stopped doing anything useful for 5 minutes?

Honestly, how would you show this in a single window?
This is very scary for the average person. I've taken to simply not answering any questions (not even to confirm my name) if someone calls me. If my bank calls me then I call them back on a number that's on their web site.
Globally Affordable University Degrees
Mailbird| Senior C# Software Engineer | Remote | https://www.getmailbird.com/

Mailbird’s truly the best email client in the world – simply because it’s beautiful, smart and unifies the clutter of communication and productivity tools we use today

We are looking for our new Senior C# Software Engineer to join our amazing team!

You will work closely with our CTO and other developers to further develop the core Mailbird platform, as we work towards implementing more advanced and business-oriented features.

You will be expected to take the lead when it comes to the research, planning, and designing of these new features, and you will participate in our weekly sprint meetings with the whole team on Skype.

Because of our diverse team in different timezones, you must also be comfortable working remotely (yes, this is 100% remote role), with a high level of initiative and self-motivation.

Our stack:
C#, WPF, MVVM, XAML

You can find more information or apply for this opportunity here: https://www.getmailbird.com/jobs/j003-c-technical-lead/
The Secure Enclave should protect against that type of attack. And why would you assume it is a low entropy key? Also, my iPhone is autocorrecting Secure Enclave to capitalize it for some reason.

You should probably read this before believing your “inner skeptic” https://www.apple.com/business/docs/site/iOS_Security_Guide....
I keep getting astonished by how bad online banking security is in the UK and US.

Here in scandiavia, we've had hardware tokens (or phone apps) to offer 2fa for ages. And you need a new token for every transaction. In addition to the password for logging in. When you reset your password, you get an email and an SMS saying that your password was reset.

Last time I needed a new token issuer dongle, I had to actually visit the bank and sign stuff.
Is it just me, or is the author determined to be scared by giant robots?

The whole section about "we can always turn the power off" was refuted by "ah, but it will already have thought of that!". Um.. no.. we don't have telepathic power switches. Unless we give the AI the capability to control the power, it can't control the power. Just because it's hyper-intelligent doesn't mean it automatically assumes control of the mains switch. That's bad Hollywood scripting you're thinking of.

I know there's money in making people scared of stuff, but this is pretty blatant.
I always err on the side of "deny" and trying to fix it afterwards, particularly on Android. Typically well-written apps will alert you that you are about to receive a system prompt and explain the reasons why.
Soap vs. REST
Mathematics can scientifically predict some dynamic systems e.g global warming.
Don't think I ever bought anything, think I only used it for Hearthstone.
Easy Pipeline in Csharp
Javascript naming conventions
Additional recommendation: _Talking to my daughter about the economy_, by Yanis Varoufakis. It’s a slender, engaging read that explores the history of economics and works its way to some modern day questions. In general, while learning I think it’s important to keep things fun, and I thought this was a fun read. Once these books get you warmed up with some concepts and footing you can take that fun curiosity and apply it to digging deeper.
Well, with Subversion you can sort of have different repositories in one repository... I think just about nobody had a checkout of the monorepository (it was too large), so changes (e.g. in public API) in several parts of the stack were not perfectly synchronized. There was one check-in per atomic repository for such things.