skysight-inc/HackerNews huggingface dataset:
> Then we could secure the agent (there's more work to be done here anyway)

That's the problem, though. How do you secure the agent? How do you make sure that the program talking to the agent is doing something good and not evil with the request?

Yes, there is some defense-in-depth advantage to making this change, but the thing you're trying to solve here is that you can pip install thing X and have thing X run ssh with your credentials if thing X isn't evil, and you want to automatically determine whether it's evil.

> Imagine you run a job, which reaches out via Paramiko to fifteen servers, you see a brief notification saying the agent signed 15 logins for Paramiko. That makes sense. An hour later, reading the TPS reports, the agent notifies you again, Paramiko just signed another login. Huh?

That seems like it defeats only the most naive malware. Why wouldn't the malicious Python module sit around and wait for you to make a legitimate SSH connection? Would you notice if your agent signed 16 connections instead of 15? (What if it made one of the requests time out so it kept it at 15 notifications?)

Remember that the problem you're trying to solve is to prevent arbitrary code from being evil. This is basically equivalent to the antivirus problem, and there's a long history of appealing-sounding, naive, and ultimately useless solutions to the antivirus problem.
The problem is the significant input lag most modern TVs have.
Evolution to---shit!
Defeating fraudsters and spammers without tracking users
I spent some time in the Lyme disease communities after I tested positive for Lyme disease under the official two-test CDC criteria. The pop-culture version of Lyme disease discussed on the Internet has almost no resemblance to the actual medical science. There are a lot of people genuinely suffering unexplained symptoms, real pain, who are drawn into the seductive explanations of the “chronic Lyme” communities online.

Quackery like this is commonplace. Usually there’s a thread of potential science buried somewhere in the treatments, like the idea of bee stings triggering a beneficial immune response. However, the common theme is always a complete lack of actual research and total hit or miss response rate among people who try these experiments on themselves.

One common theme in the chronic Lyme communities is that people who go into remission tend to attribute their response to whatever technique, supplement, or medication they were trying at the time. These people are desperate for relief, so they’re often cycling through 10s of supplements or quack treatments at a time. If they spontaneously go into remission, they’ll swear it was due to the supplements. Yet others fail to have the same success with the same supplements. You end up with long lists of “things that might help” according to anecdotal reports, and the desperate sufferers start trying them one by one until something changes. When they exhaust the basic supplements they move on to more exotic treatments like bee stings.

The sad part is that these people really are suffering, but they’ve become so militantly attached to the disproven chronic Lyme infection hypothesis that they’re stuck in a research wasteland. Self-diagnosed Chronic Lyme patients have gone so far as to harass researchers who publish results that disagree with their theories. It’s such a delicate topic that researchers and doctors don’t even want to touch the subject these days. It took me 2 weeks of calling infectious disease specialists and screening my positive test results before someone would let me step foot in their office. Apparently they’re buried under self-diagnosed “chronic Lyme” patients who order questionable self tests on the Internet.

As for Lyme disease: The actual infection can be treated with a standard course of antibiotics. The infection does not persist indefinitely, although some people experience long-lasting effects after the infection is gone. This is what “chronic Lyme” refers to, assuming the patients had legitimate infections in the first place. Many of these patients are self-diagnosing based on vague symptoms alone, or ordering quack tests from Lyme labs that will give anyone a positive result as long as they’re willing to pay for it.
Not a typical home user setup given the lack of pretty UI, but we sync our various individual devices to our server using scheduled jobs and then back up everything relevant from the server using Tarsnap.

It’s not perfect given the lack of snapshot functionality of both the local devices and the server, and technically we’re vulnerable to corruption if we get something like a database or Git repo at exactly the wrong time, but in practice we run the important jobs at the end of a day when we’re not doing anything else anyway so it’s very unlikely to cause a problem in our situation.
Not even just the recycling business owner. Hire Joe over here, he works there, learns the systems and how to unlock the devices legitimately.

What happens when he leaves, or is fired, or decides he's going to make some side money...
I believe users have the full right to filter content they listen to both manually (by skipping forward) and via automated means (by having a robot skip forward)[0].

The benefit of podcasts being an open system -- of them being raw MP3 files, is that users can manipulate and control the content they're being served. An open, ethical system that can only exist because users don't exercise their rights is of little value.

There are already segments of the industry that want to turn podcasting into a closed system (see Spotify), because as good as the current model is, it's still more profitable to turn podcasting into a top-down controlled system with gatekeepers. If business interests are currently what is keeping the ecosystem open, then I think we're doomed, because Netflix is always going to be the more profitable business model.

[0]: https://anewdigitalmanifesto.com/#right-to-filter
Second generation sequencing is fast and in wide use. Third generation sequencing is the new hotness

https://en.wikipedia.org/wiki/Third-generation_sequencing
Shutterstock Domain Blocked by Russian Authorities for Insulting State Symbols
Which Linux? There are plenty that use MUSL instead.
Cool project, interesting decision to monetize something like this though.

I made SponsorBlock (https://sponsor.ajay.app/), which is a similar premise for YouTube videos except free, open source, and with a publicly downloadable database. I posted about it on HN back in August.

I'd be curious if you'd be willing to do what I've done here and make it more open. When you are dealing with things like this (ad blocking), it gives you more of a responsibility to share.

Anyway, how do you do this? Is it a reporting system? Or is there some kind of algorithm you made?
Thank you for this. We are definitely seeing the declining use of centralized domain-resolution. It has advantages only when it is not _itself_ being gamed, and increasingly companies and governmental orgs have found ways to do just that. At the very least every domain should have dual central + decentral resolutions, and browsers should give you options when the resolutions conflict.
> To the best of my knowledge there are zero remaining manufacturers of CRTs in the world.

I have seen plenty of stores selling (small) CRTs in stores in Asia. They are usually quite small, and I bet they are quickly disappearing, but they are still around.
>80s/90s

>Deeply cared about the customer experience.

>Cared

And then they started installing rootkits on their customers computers.
Lately I've been imagining what it would take to create an AI-generated food image. It's super hard!

Just the rights management issue of the training set is a tough question. Then you have to account for quality, direction and dimensionality of light, food styling, props, custom products or ingredients, the list of challenges goes on an on.

Then after the image is produced, if you're a food company, all your imagery is a kind of 'claim-based' imagery meaning consumers assume it is real and in some cases, there are laws preventing the use of fake foods in ads.

I'm curious about the implications of a world where AI stock photos are ubiquitous, but some styles of imagery are pretty far out at the moment.

Source: Spent 15 years in the commercial photo industry.
The absence of content while the ad plays is obviously not the issue. It's the presence of other, malicious content.
It's also too small
The problem is that there are no good offline alternatives.

It's trivial to get a camera setup and recording. The hard part is getting useful data out of that 24x7x365 (per camera) stream.
The poor encoding struck my eye too; my guess is that is neither camera nor youtube but the editing in-between that is the cause for those. Feels weird that they go through all that effort to produce the ad and then stumble on the final step in a way that really compromises the whole thing.
My problem with the 'Bayes=rationality' type of argument is that it ignores context and isn't really a case for reporting Bayesian vs frequentist estimates. If I am a researcher publishing results then I have an audience who interpret my results. If my audience is Bayesian and accept my model then all I need to do is report sufficient statistics and they can make their own Bayesian inferences given their priors, or better yet, I can just post my whole dataset. The very reason we need to report things like credible sets or confidence intervals rather than just sufficient statistics is because audiences in the real world want summary stats that they can easily interpret and are transparent. The best approach to inference is one that is the most useful to audiences, and that depends on context and practicalities rather than on some underlying philosophy of subjective vs objective probabilities.
Elon Musk Tries to Explain Twitter in ‘PEDO Guy’ Defamation Case
If you don't want to haggle, then you get the listed price.
I had the same experience. Had my website designed by a designer, then a few years later received a threatening letter saying that if I didn't fork over 4-figures for a small image that they used, they'd come after me. I ignored the letter and several follow-ups and never heard from them again, but I could absolutely see how they could intimidate a small business to pay up.
Come on, safety is a huge stretch. You built this because you want to profit off of other peoples' work.
I on the other hand have no interest in buying a $30 t-shirt emblazoned with a garish podcast logo, that was manufactured in a sweatshop for $0.50.

Let them read all the NordVPN and Dollar Shave Club ads they want. I'd rather put up with that than the wastage that goes into production of merch and swag.
Your first point is fair, though, again, you can't completely ignore the utility these services bring. And while it is possible to have Cloud-less alternatives, not everyone is a Hackernews type person that can setup local opensource alternative on a linux box in their spare time.

Your latter point doesn't really make sense. I'm fairly sure all of these devices use encryption to the cloud, it's just that the NSA has access to the unencrypted data on the cloud itself, theoretically. Unless you mean storing your own encrypted data on the cloud, which again goes back to the point above.
I think the controversy is mostly around 'chronic' Lyme. It's not clear there is such a thing. It's profile (being mostly female for example) suggests it's not Lyme but some other condition that is undiagnosed. Having multiple family members with Lyme at some point I know it's a terrible disease and difficult to treat.
Exactly. And if you don't like what's in the MP3, you have the option of not listening to it.
The Funnel Doesn’t Care About Customers; the Funnel Only Cares About the Funnel
> aarch32

But aarch32 adds a whopping 0.8 mm^2 to the core! sarcasm
Fine, so the voters of California should start voiding the corporate charters of companies that engage with ICE, PRC, etc. I'm cool with that, too, but I suspect that simply putting pressure monetarily is a much more accurate and flexible banhammer to swing.

Corporations ARE political entities--at the state level, to boot. It's only recently that "corporations solely exist to make profit for shareholders" has perniciously taken root. Corporations used to have to at least acknowledge "the public good" in order to get a charter. People have forgotten this.

Perhaps it's time to bring it back.
You're clearly here to "gaslight" people with extreme rhetoric and hostility, not facts and reason, so I'll simply wish you a wonderful life.
Sure, it's contributed where it's convenient. I still don't see a list of committers so that I can look at what those contributions were.
I do not agree.

Apple could play the go-between. They could alert the previous owner that the device has been found, and provide a grace period where a user could request return, for a fee, including Apple's S&H, and a finders' fee for the reporting agent.

At the expiration of the grace period, Apple could provide a device reset code.
To be clear, I think alcohol, cocaine, and even caffeine do cause significant stressors on a life, to varying degrees and in different ways. They just aren't mutually exclusively with being highly productive in any given field.

Alcohol may be better aligned with physical labor, where there's some benefit from not noticing as much when you hurt + adrenaline spikes as it wears off. Cocaine probably aligns better with writing, when word vomit helps get something down that can later be edited. Neither has a particularly great track record with living a happy life.

Sometimes taboo makes it worse than it needs to be, though. An addiction, treated as a crime, leads to an even more desperate addict.
We are talking about those who have commited crimes & are caught in the act, not alleged/unsubstantiated claims.
I would assume that ICANN itself may give up its non-profit status in time. That doesn't make them untrustworthy in general -- they will only exist so long as the system they administer is reasonably useful -- just trustworthy for fewer things (don't expect them to implement any sanity check on prices, for instance)
Sounds like the premise of the Korean movie "Parasite". Great movie!
... or just parts of it.
I've done contracting work off and on for 20 years. The day some sort of forced surveillance or micromanagement of pee breaks becomes impossible to avoid, will be before the day I stop doing contract work.

Trust works both ways. As a contractor, I have to go "way" out on a limb to trust you. Trust you to pay me, trust you to pay on time (I'm not a large vendor with multiple accounts to fall back on for cash flow), trust you to make decisions and supply content/assets on schedule, trust that you won't end up crazy and hard to work with, etc., etc.

If you can't trust me, why should I trust you?

That said, it's very easy. If the work gets done and as expected, you did well.
As are police cars, radios, handcuffs, and computers. What's your point?
My fav utility was the File Explorer predecessor, Norton Commander. Hopefully someone else remembers these great tools. :)
Can you elaborate please? Apple's own Podcasts app lets you skip the ads with a button. This app does it automatically.
What I would really like is for unit tests to become full fledged features of a language. Any object can contain a Test method (which would be static), this method contains all the unit test code for that object. Select "Run tests" from your compiler, it compiles everything and goes through calling any Test methods it found but the main entry point is never called. A release compile doesn't link the Test methods, nor any method marked [Test] (support functions only needed for testing.)
I will say I do agree for the most part. I did try out square space for 2 months when I had a business idea. The idea was flawed to begin with... mainly because I came up with it when really drunk... but hey, I wasn't displeased with them (their ads are pretty honest) and I never would have tried them out if they didn't slap checks in a bunch of youtuber faces.

Actually... now that I think about it... I think I do respond better to podcast ads. There's 5 or 6 instances, this past year, that I checked out companies because of them. I've only done that once for a tv commercial in my lifetime and... I don't think I ever clicked on a banner ad before... on purpose. Never on purpose. Accident, yes.

I think it's because they're not, "OH MY SHIT LOOK AT ME! PAY ATTENTION TO ME!" types of ads.
EMR isn't open source but Spark is. What does the EMR Spark Runtime if not offer Spark as a service? And the changes to optimize spark runtime, why were they not contributed back to upstream Spark?
What's the current state of the art on embedding malware in audio files?
There is being prudent and then there is being negligent - I think people conflate them. I don't think there is any publicly traded company that does not care about profit - Boeing is not somehow unique in this. If the profit is competently pursued then you won't jeopardise safety beyond a certain point though - because that will in the long term impact profits and shareholders who appoint execs are not benefited by reduction in long term profits and therefore the value of the company.
Haskell is one of the few pure languages, pure meaning it's entirely referentially transparent, only allowing pure functions. This is not the case with Lisp, Clojure, or many languages that are described as functional programming. Referential transparency means that a function returns the same output for given input. This is not the case in Clojure, Python, or most all programming languages, and in contrast what makes Haskell safe.

Haskell's purity combined with strong typing is what ensures its safety at runtime. In other words, it's trivial to write a program that crashes at runtime in CommonLisp, Clojure, Python, etc. Haskell eliminates this issue by construction. In these other languages, incorrectness can crash a program. Haskell intends to eliminate this.

One of the major tests of referential transparency is if you can lazily evaluate it. Only a 100% pure language can be lazily evaluated. Which Haskell is, excluding warts and historical baggage from its development as a research project.

https://en.wikipedia.org/wiki/Referential_transparency

https://en.wikipedia.org/wiki/Pure_function

Haskell functions are pure like math functions. If we have a function f(x)=x+2 then f(16) is always 18. In Python or Javascript or Lisp I can write a function where f(16) returns 18, 1000, or "foobar" depending on the time of day. In impure languages the output of a function can change even with the same input. That's why from a Haskell perspective most languages are unsafe by design and encourage programs riddled with bugs.
The arms race is inevitable. Podcast companies haven't been receiving investments because of that sweet SquareSpace money. They want to track everything there is about how a podcast is listened to and by whom and then monetize that every way they can.
I've heard more and more sysadmin's liking go for this reason.
“chronic Lyme” is probably something, just probably not literally 'chronic Lyme'. The problem is, if you think you know the cause you'll stop looking for the actual cause.
> This is an anti-theft feature. Hard to argue against features designed to reduce the potential for someone to target it for theft.

And a 9pm curfew for anyone not currently working would prevent a lot of bad behavior too. Also, it would be idiotic. Not all things that have _some_ good aspects are good things.
Dear GitHub 2.0: open letter to GitHub from maintainers of open source projects
How to make realistic painting Photoshop Tutorial #1
They're not wealthy because they've collectively decided to go for the easy money, jumping on-board the Getty train who takes an absurdly large cut of their profit.

As consumers we get hosed, but at least they've looked out for number one, right?
Anyone else who inserts themselves in the URL should be fought as well.

I guess you're making a minor technical point, and it's technically correct. Someone else could do AMP better. But until someone does, why not shorten "Google's implementation of AMP" to simply "AMP"? Is there any other?
> a book about Mexican migrants

No, it's primarily about the people of Honduras, Guatemala, and El Salvador.

Just one of many trivially falsifiable positions you hold.
Lyme disease is easily curable with a large course of antibiotics. Now, there can be complications that persist after the infection is cured (arthritis, cardiac issues, and - controversially - fatigue and post-treatment Lyme syndrome). But the infection itself is curable today.
Because their traditional extend, embrace, extinguish strategy no longer worked. Windows Phone and Internet Explorer failed and they were losing so much mindshare switching from one failed api to the next. The monopoly was becoming pretty fragile.
Authentication Vulnerabilities in OpenBSD
How are you going to get "high-quality original photos" if you won't pay pro photographers as you'd like to be "inexpensive"? By outsourcing it to Papua?
You keep posting this, but it's simply not true- Qantas flight 72 did not experience an AoA sensor failure, and even if it had, the A330 uses all 3 independent AoA sensors and all 3 independent air data inertial reference units to command control movements.

The issue was caused by one of the ADIRU CPUs corrupting valid sensor data to produce a series of very specific spikes, hitting a specific edge case in the AoA cross-check logic that made the flight computer behave as if the erroneous data it was seeing was valid.

It's undoubtedly a serious design flaw, but it's not even remotely in the same ballpark as the Max's flagrant disregard for all process and well known design standards.

http://code7700.com/accident_qantas_72.htm
> As I understand it, if the people being held at ICE are asylum seekers, then entry into the US is not illegal (even if they are not granted asylum).

This is not true.
Sounds a little misleading. I'm not sure that most people would feel violated due to being included in a "2% of users pressed Do Not Share button" statistics. It's not like Ring is giving actual user data or any way for the police to pin point said users.
It costs billions and take a decade. This is something to need to time very right, otherwise you can miss a shift in the market (see A380) or a new technology (like a new engine) after you started, or get a competitor to release before you. In the meantime, the current backlogs are full, so there's no rush; everyone is waiting for somebody to make a move and enjoying profits in the meantime.

But it will happen in our lifetime.
Day in the Life of a Japanese Game Programmer [video]
I thought the same way when I got out of college, but changed my mind after a decade or so in the industry. What changed could be neatly summed up by this post:

https://www.kalzumeus.com/2011/10/28/dont-call-yourself-a-pr...

Basically, I used to program for the intellectual challenge and the thrill of programming itself. If that's your goal, by all means use Scala or Haskell or Lisp. But at some point that faded, and now I program because somebody has a problem that they will pay me to solve or (for various startup ideas) because I want to understand the market or some data source that has the potential to be worth a lot to a lot of people. For these, my focus is on the problem - the programming is a means to an end for solving the problem, and so anything that lets me spend less brainpower on the programming and more brainpower on the problem domain is a net win.
Furthermore, if there are recognizable people in them, they don’t have model release forms which are needed for things like ads.
There are at least 2 other projects with the name PyLucid:
- https://github.com/jedie/PyLucid
- https://github.com/yelantingfeng/pyLucid

You might want to consider other names