skysight-inc/HackerNews huggingface dataset:
The Three Body Problem is a first-contact trilogy of books that starts just like this:

Someone ponders what the most powerful thing in our area is (the sun) and then finds a way to influence it just enough so that it can send repeating signals. From there the alien armada heads our way and sets up the plot of the rest of the trilogy!
Wow, I just totally assumed the index was a tree object. It seems much less elegant that it isn't.

Maybe it isn't because it would necessitate creating a lot of blob objects as you staged and unstaged changes, which might not get garbage collected for some time. I can't see any other reason.
Back when flash was a viable option, people were animating everything, so maybe it indeed is the tool.

Although, hardly anybody is littering their webpages with animated gifs, so maybe we've just grown tired of tiny animations.
Rights once given away are nearly impossible to get back. All rights, I might add, not just your right to privacy. You may not care about <thing> today but at some point in the future, you may.
Obviously neural networks created with current technology are not persons in any sense, legal or otherwise.

I think the more interesting questions are whether the operator of the neural network is the legal author of its creations and whether such creations satisfy the creativity requirements for copyright.

I think the operator would be the author of the work, similar to how the operator of a camera or word processor is the author of works created by those tools. However I think in some cases the work may not meet the creativity requirement.

> “[T]he requisite level of creativity is extremely low.” Even a “slight amount” of creative expression will suffice. ... An author’s expression does not need to “be presented in an innovative or surprising way,” but it “cannot be so mechanical or routine as to require no creativity whatsoever.”

https://www.copyright.gov/comp3/chap300/ch300-copyrightable-...
Thank you for having actually tried it then having a real opinion about it.

I have a Tesla, I usually use autopilot for highway traffic only, summon it like a valet to where I am in my parking lot, and not have to idle in hot and cold weather.

I agree, I wouldn’t use it for local roads and unclear highways, but isn’t this what they tell you? I don’t think they ever tell you that it’s full self driving right now. Also, I’ve experienced it being janky but over time it’s improved dramatically.
Especially since this was just posted because of a news story that was released yesterday about the exact same thing. The other thread (with an actual current news story) already has 300 comments.
A country like Switzerland or Liechtenstein?
Actually in my experience Firefox CSP debugging is light years ahead of Chrome's. Not only debugging - CSP in Firefox at least works as intended, while with Chrome(ium) it's hit and miss. [0]

That said, it does happen that Firefox gives a cryptic error message, and running in Chromium gives enough clues to solve the problem. But usually FF is much better with CSP, at least in my experience (and I work with CSP pretty often).

[0] EDIT: "miss" meaning that the request, forbidden by CSP rules, is not stopped. Firefox correctly stops the same request.
because they use publicly available data and sell it just for packaging it nice.

Aren't you missing the part where they're sending it to you 10,000 feet in the air via a satellite constellation? That's a little more than "packaging". You're free to access the public data by any other means you choose.
ACME's secret sauce is the name validation challenges, not present in SCEP and other prior standards. The same people, roughly, worked on two things, one of which is made very visible in ACME a published standard, but just as important is the other side of the coin.

The Baseline Requirements https://cabforum.org/baseline-requirements-documents/ from the CA/Browser Forum set out shared rules for how a publicly trusted CA must do its job. From the outset the BRs have been clear that a CA needs to somehow validate that it's issuing the certificate for some-fqdn.example.com to the people who actually have some-fqdn.example.com or else this PKI is futile. But until relatively recently the BRs were pretty vague on how exactly they ought to do that. As a consequence some CAs did an admirable job, many did a passable job, some were a bad joke either through not grasping the threat model or just ordinary incompetence.

A trusted CA for example once had a system which would check you owned www.example.com by connecting to example.com over HTTP and making a request for a magic document, say http://example.com/xyzzy.html then it would grep the reply from the server for a magic string, which was the same as the name of the document, in this case xyzzy, and if it was found the check passes. But wait a minute, this means if your server says "404 Not Found: xyzzy.html was not found" the check passes and you get a certificate. Oops. Now, not checking for a 200 OK was a bug, but even if you do check for 200 OK this validation clearly more of a polite "Keep out" notice to bad guys rather than any sort of actual defence.

So in the same period Let's Encrypt was being set up and ACME was being defined, the CA/B Forum also reformed the BR definition of how to validate DNS names using some of the same personnel. The result is the Ten Blessed Methods (although right now there are actually more than ten of them) and ACME is an automation of just three of those specific methods. Since then CA/B Forum has also worked on obsoleting the riskier and less useful methods and creating newer safer ones. Today that would be /.well-known/pki-validation/xyzzy.html safely in a reserved namespace, and it'd need a value inside it that's either entirely random or is determined by some other factor not under an attacker's control (in Let's Encrypt the equivalent string is a hash of the LE user's public account key).

Some of the Ten Blessed Methods are inherently kinda manual. Some just aren't very universal. So ACME and Let's Encrypt focus on the three which are most suitable for automation, surfaced in a way that is hopefully even more secure than required by the BRs and made available to everyone.
The fact that Crypto AG was an intelligence front has been publicly known since at least the 1990s [1]. Why did the Washington Post rehash this story recently and pass it off as news? I'm glad that they did, because it spreads awareness - I'm just confused as to why.

[1] https://www.baltimoresun.com/news/bs-xpm-1995-12-10-19953440...
DynamoDB Importer
This has been my takeaway from the whole situation. It says something about the exactly how safe this stuff needs to be for it to be considered reliable.
Aperture is actually a 64-bit app but it depends on some system frameworks that weren't migrated to 64-bit and dropped in Catalina.

It's possible to get it running in 10.15 by removing the references to those frameworks, it breaks some of the features like slideshows but the app will still run: https://medium.com/@cormiertyshawn895/deep-dive-how-does-ret... (the author has also made an app that automates this process, I haven't tried it so I can't vouch for how well it works)
A neverending salvia trip... I would not wish it upon my worst enemy.
(For those who aren't aware, parent is the executive director of LE).
I don't have any trust in any secret agencies :) Their job is literally to deal with all the shady stuff you don't want to see in the news.
I was quite confused by this. He knew the car was taking a consistently erroneous action that was likely to have fatal consequences, but he continued to use autopilot on that same stretch anyway.

To be clear, I think Tesla has been cavalier and careless in their approach to autopilot.

But Walter Huang knew what he was doing and did it anyway. His death is largely by his own hand. I don't see this as different from people who knowingly take other careless risks and pay a price.
The consensus was that the training set in question was not used for any real life situations.

The only player in autonomous vehicles that doesn't understand the gravity of the technology is Tesla/Musk.
> Using React for a blog is kinda over-engineering it nope?

No? Use what makes you happy as an engineer. If that's react, use react. Sure, you might miss some viewers who haven't enabled JS, but if the above comment is representative then they weren't going to give constructive feedback anyhow.
If it is know it is stolen a hi tech truck can be remotely ... of course there is another kind of risk. But if one just ensure only one guy can open the container or the container is fixed with pin certain distance from a driver etc.

Ther is always a way.
"0" was coded with 10 pulses
There's a simple proof of this; an optimally compressed signal will have all symbols occuring with equal frequency (otherwise you'd be able to compress it more). So yes, an optimally compressed signal is indistinguishable from noise.

However that's the theory; in practice the range of frequencies the signal occurs over and how strong it is at each frequency tells you a lot about whether it's likely to be an information carrier or not.
> You have to pay to rewind stuff apparently

This is true. It is also the worst piece of hostile-UX I've ever seen. I'd love to have seen the Product Designer and Product Manager tie this one back to revenue forecasts. Who knows, maybe its a huge converter?

It just seems overly hostile to me, as if thats the only way they could think to increase revenue - instead of, you know, working on their core value proposition.
Nobody’s holding a gun to their heads. This is a voluntary transaction.

Even if we paternalistically shake our heads at the interest rates and the way these companies do business... they are giving people an option that did not exist before. Those people are strictly better off for the existence of that option, since they are free to turn it down.
This one is pretty much the same thing, but there are plenty of others that combine shopping/residential in one. Effectively a suburban mall with apartments on top. Not my cup of tea, but clearly a step up in walkability over a traditional suburb.
No; if you look at an old rotary phone, you're counting the number of finger holes in order to determine pulses.

To dial a 0, pulse the line 10 times.
> The point being, I imagine this same thing happens with adults. And I think we, as a society, do a horrible job realizing how deep trauma can run and how it can manifest itself.

Uncertainty is scary. That is why trauma victims are placed in boxes, but it is wrong to do.

We have celebrated people who persevere and overcome their circumstances and we must continue to do so. We must give the gift of believe and faith to people who exist through circumstances that are destructive to the development of faith, belief, and trust.

Any victim has the potential to do that if their environment is supportive to providing that. It always depends on surroundings and belief of everyone. Everyone matters.
No, 0 is ten pulses.
While not an NSL, we do know USG leans on companies to implement weaker/breakable cryptography. There is at least one public example (attempts to compel Apple), and presumably there are many more successful undocumented attempts.
> it's insane how many people would rather copy something that works than try something new themselves.

Is it though? If an idea is proven to be profitable it seems to follow that the idea is worth pursuing.
You think "autopilot" is bad? Do you realize Tesla has a DLC mode called "full self driving"?
Really wish Apple still offered Time Capsule, even if it is without AirPort Function.

Along with iOS Time Capsule. Instead they keep pushing their "Cloud" Solution.
Even if writing it all the in the same language, you could still separate the concerns - having different modules for e.g. fetching data and rendering.

Is there a particular application you are working on?
Not exactly. Don't get confused by false equivalencies.

This company is a problem because it's controlled by an American intelligence agency. The owners knew that was a problem, of course, and went to great lengths to hide that fact. Note that Crypto AG appeared to be a Swiss company, not an American one.

Typical American companies aren't controlled by the CIA or other government agencies.

Typical Chinese companies are substantially controlled by the Chinese government.

It's a rather important difference when trying to figure out the risks of how much you can trust who you work with. There's subterfuge, of course, so there aren't hard and simple rules. This is an exercise in risk management.

It's a rather large mistake to conclude Chinese Owned == American Owned.
You mean like just like Boeing?

https://www.reuters.com/article/us-eu-usa-aircraft-wto/wto-s...
OOP Destroyed Encapsulation [2015]
All I'm saying is that the interesting part of the code will run just fine on your host machine, so you don't need any complicated tricks to develop and test it. Obviously in production it will run on the microcontroller, so you get the functionality you desire without OS drivers.

Do keep in mind that /usr/share/dict/words is about 10x larger than the flash on microcontrollers. This is why most people do the steno conversion in software, not on the keyboard itself.
Would it really take an Armada? Coronavirus infected 40k people, we have some of these viruses in labs. I’d send one agile team and drop a nice virus on Earth (minimal viable product).
I find Nick Szabo's argument that money-like collectibles were in fact the key technological advantage Homo Sapiens had over Homo Neanderthalensis an intriguing one:

http://www.fon.hum.uva.nl/rob/Courses/InformationInSpeech/CD...

It's safe to say that something-like-money is substantially older than agriculture.
>It's a reseller of a reseller of banks -- namely the services of Hackensack, N.J., cash sifter Total Bank Solutions. It sells access to, and the means to use, a network of FDIC-insured deposit accounts, much like NYC vendors MaxMyInterest or StoneCastle. See: StoneCastle storms into RIA market with high-yield, FDIC-insured accounts in direct challenge to MaxMyInterest for the title, King of Cash.

That seems confusing and ... strange.
From yesterday:

How the CIA used Crypto AG encryption devices to spy on countries for decades

https://news.ycombinator.com/item?id=22297963
Maybe if nobody called their code crap, it would be better code?
If you visit Europe you can see this system working with a much less dense population and connections for small towns.
This makes me think of a lot of development projects in Detroit. They are promised to be these new urban multipurpose spaces and we don't even end up with the facade. Just tons of parking lots where there were supposed to be life.
If you can build a database, great, but you can probably get by with a device based adaptive ping frequency, reset when connectivity changes.

Start at a 1 second ping, and after each successful ping, double the interval until you get to over a minute. Then add a minute between each ping until you get to 10 minutes, then add ten seconds between each ping. If a connection drops, use the last successful interval for tenish pings, then probe with an additional one second. If the connection drops again while probing, reconnect and wait longer to reprobe. If the first ping failed, then assume the network changed and reprobe from the top.

And yes, you do need to start at one second; I've seen networks with a ten second NAT timeout, which was amazingly disruptive, and thankfully temporary.
Because, at least according to him, Etoile is targeting a MacOS level of UX, which is not his preference.

That, and the last activity on Etoile was quite a while ago, and seems to have stalled out rather badly.
A question to Europeans reading this-

If you had to assume that U.S. 5G equipment manufacturers would provide backdoors to U.S. officials, and Chinese 5G equipment manufacturers would provide backdoors to Chinese officials, and Europeans had to use one or the other, which would you choose?
Interesting: https://gizmodo.com/can-deaf-people-hear-voices-1675963437

Apparently, deaf people do get Scz, and some even hear voices.
Are there any other TLS cert providers that currently talk ACME? I'm not aware of any.
Wildcards can be used to get around problems in managing access to resources in a multi-tenant environment. If you have 10 product teams, and they all serve different products under a single zone, you may need to grant them all access to modify your nameserver as well as be able to create their own certs at will, if they were going to do independent automated certs. But with a wildcard, you simply give them all the same cert and independently configure the nameserver to point the right records at the right ALBs, and now none of them have any access other than to just serve whatever request hits its ALB.
I've had the same experience with melamine. I'm currently liking my 3M stick-on whiteboard surface. I think it's mainly made for resurfacing old whiteboards, but I just stuck a sheet on my wall and it has been great: https://www.post-it.com/3M/en_US/post-it/ideas/dryerase/

But it looks like they've discontinued the larger sheets? That's a shame.
I wrote a simple excel formula parser a while ago, and I used a counter too -- just for parentheses. Your comment made me realize I might have been going about it the hard way.
This might be one of the few cases where it'd be better to not try to have all devices have the latest update all the time.
Are Apple's new machines with T2 secure enclave less vulnerable in this regard? They claim all storage encryption goes through the chip, making it more like an integrated phone design.
just so we're clear, are we talking about lawful intercept (ie. capabilities built into the system so the telecom can comply with warrants), or dragnet or otherwise warantless surveillance? I'm not against "backdoors" for the former, but am against "backdoors" for the latter.
The UK government argument has been "we're not putting this stuff where a Chinese wiretap would get them anything", as I understand it, it's isolated to low security contexts. And they want Huawei because it's technically superior (needs fewer masts).

The panicky US response makes most sense if the reply they can't say out loud is "but you're putting it in places where it interferes with our wiretapping!"

This is probably not accidental.
Neither China, Germany, nor the USA care about you enough to spy on you.

They only care about what is valuable to protect and advance their geopolitical and commercial interests, which are remarkably similar.

Crypto AG was gold because their products were used by governments and perhaps high level business executives.
You can be sure it servers someones agenda.
My job is flexible and I could work from home 1-4 days/week. But I still come in 4 days. The socializing is something that I really find worth it. I’ve made a lot of friends at work, and it’s also just nice to discuss technical problems in person.
I think the answer would be none or both.
Probably echoing something that's already been said here, but my number 1 advice to being high performing from your bedroom is _don't_ work from an actual bedroom. There's a psychological baggage of being in the room that you sleep in that shorts circuits the part of your brain dedicated to being up an active. It's not always possible but if there is another room with a flat surface in your home, do anything to make that your distraction free workstation. Did wonders for my productivity.
So exploiting people's ignorance or lack of knowledge and/or experience is ok, you say?
>I avoid new technology, exactly because I'm an engineer.

There is a saying where all software (security) engineers dont have IOT or any "Smart" devices in their home.
Airliner aircraft burn more fuel closer to the ground, at takeoff and landing, and less fuel at cruising altitude, where the air resistance is less. On shorter trips, the proportion of the trip spent at lower altitudes is greater. Some flights might not reach optimal cruising altitude at all.

One can adjust the flight profile for maximum fuel efficiency, but this tends to be uncomfortable for the passengers and crew, and it takes longer to reach the destination. Most US passenger airlines don't do that, but military and cargo carriers will.

That aside, some portion of the fuel is spent continuously keeping the weight of the aircraft aloft, and with ground vehicles, the equivalent expenditure is the rolling resistance of the tires. Furthermore, an airliner plane tends to carry all the fuel it needs for the entire flight on takeoff, which translates to additional weight, whereas the ground vehicle can refuel enroute at a truck stop or gas station. Some aircraft can refuel in flight, but another plane has to carry it up there and maneuver it into place. A train on electrified rails need not carry any fuel at all.

So to some extent, it depends on the ground vehicle and the aircraft. In a contest between an ultralight or powered paraglider and a heavy pickup truck towing an RV trailer up in the Rocky Mountains, the flyer might have a lower footprint. But for a trip over flat ground, such as Chicago to Indianapolis or Cincinnati to Cleveland, in a medium-sized hybrid ICE+battery sedan, driving at or below the posted speed limits on US Interstate or Autobahn-like restricted access divided highways, I think the car will win against anything other than a solar-powered lighter-than-air craft.

I haven't done the bar napkin math, so I could be wrong.
You can't say definitely that American companies are or are not controlled by government agencies.
Show HN: Script to set up pi-hole style blocking on your MacBook
This is the ethics of Tesla.

They are marketing primarily, function second.

My biggest concern is that since the company isn't profitable(?) That these highly risky things are acceptable. Other profitable auto companies cannot be this wreckless.

It's not like they can go after Personal assets.
In the book, they start by sending as little as 3 protons, and it completely debilitates humanity.
One place where China could do worse than US (or in the case of Syria, Russian) influence is internet access. In the Middle East there is some filtering and blocking on internet connections, but it remains trivial to circumvent and many computer-savvy teenagers already know how. China has already shown that it is interested in exporting its Great Firewall technology -- which is very challenging to circumvent -- to nations with which it establishes close ties.
Skip the rake and leave the leaves for a healthier, greener yard
Would be great if he targeted Debian. It's after all the upstream base for millions of Linux users.
It takes an unfathomably myopic worldview to read this article and just wave it off as “voluntary transactions” while conveniently ignoring the several disparities of exploitative economic power on display between the people making these apps, which are CLEARLY and blatantly taking advantage of people without the financial literacy of those raised in comparatively more developed economies and the people using them.

And yet I’m not at all surprised to see it.
Are you two using a different Airbnb than I am? Fees are included in the search when you have dates, and I've never seen the "other people are looking" ever. Are you sure you're not thinking of Booking?
Autopilot is only going to be enabled on freeways, where accident rates will always be much lower than surface streets. Not a useful statistic, even if true.
> There are so many examples everywhere in Europe and Asia, but I can’t think of many (any?) in North America.

Manhattan.
That doesn't mean that this much parking is necessary, however.

I'm curious if the developer chose this much parking, or if land use requirements mandated it.
Ooo, fancy. There is still a long way from just that to actually getting the savings in a real program running on a real operating system. For example, if I have thousands of source files, each with a few hundred bytes of cold exception handlers, do they get coalesced into a single block for the whole program?