skysight-inc/HackerNews huggingface dataset:
> It might be highly efficient to specialize in collecting just the peak energy in green light, but that would be detrimental for plants because, when the sunlight flickered, the noise from the input signal would fluctuate too wildly for the complex to regulate the energy flow.

> Instead, for a safe, steady energy output, the pigments of the photosystem had to be very finely tuned in a certain way. The pigments needed to absorb light at similar wavelengths to reduce the internal noise. But they also needed to absorb light at different rates to buffer against the external noise caused by swings in light intensity. The best light for the pigments to absorb, then, was in the steepest parts of the intensity curve for the solar spectrum — the red and blue parts of the spectrum.

I admit there's a bit of a jump there (gotta read the actual article, not the journalist retelling I suppose), but I assume the gist of the math is something like this:

Lets say direct green light delivers a maximum 100 "units of photo-energy" -- gonna play loose with the physics to demonstrate the math.

When a cloud passes over it, lets say the intensity drops to only 75%. Lets also say for now we always convert the energy at 100% efficiency.

So with green light, your 100 units of energy drops by 25 units with each passing cloud.

Now lets say blue light delivers only 80 units of energy. When that same cloud passes over, 80 * 75% = 60 units of energy, or a drop of 20 units.

So, if your process is sensitive to changes in absolute energy, you would rather have a swing of 20 units for every passing cloud than a swing of 25 units. Yeah, you might get less absolute energy (60 units rather than 75), but if the cost of energy swings in your process was very high, the tradeoff might be worth it.

You could also play with the efficiency-of-conversion (ie have higher conversion efficiency at the lower-swing points) for some fun second-order effects.

This is just a toy example of what the underlying dynamics could be. Gotta read the actual paper to understand the actual model they developed. https://arxiv.org/pdf/1912.12281.pdf
Nope, seasoned pros I respect think trainig+$vendor is good enough. If it isn't, blame the user or the vendor!

There are shops where the goal is to have someone to blame when you get owned and there are rare shops where the goal is to do it right to catch/stop bad guys even if it means you get blamed (because management understand security is not absolute)
https://www.theverge.com/2019/4/3/18294030/tencent-xiaomi-ch...

https://github.com/996icu/996.ICU/pull/24891
That path leads to a world of hurt: what does "actually exist" mean?

Isn't it enough that we can perceive consciousness or its absence in ourselves and others? Isn't it enough to define it (my words, not very carefully thought out) as something that at least entails the capability to think about a situation, real or hypothetical, including your own state and thoughts and communications, understanding some of the consequences of action in such a state, choosing an action, accepting responsibility, etc., up to philosophy, meta-cognition and beyond?

The fact that it's hard to define, doesn't mean it doesn't exist.
Significant forms of phishing are stopped by U2F (as used by Yubikey and others), by crytographically binding your credential to the domain name , and only issuing an approval signature if the site matches. Obviously, this stops credential phishing.

https://krebsonsecurity.com/2018/07/google-security-keys-neu...

https://medium.com/@antonisikora/how-u2f-security-keys-can-e...
Tried with GPT-2. Got downvoted and never exited auto-flag.
Open source feedback form widget
Open source feedback form widget (https://appzi.com)
Tried Usabilla but it is quite expensive. Appzi is a free alternative for small sites with up to 50,000 page views per month. Appzi allows to create feedback forms: inline, sidebar and popup-forms.
While not as devastating as some shown here, 44.3171003, -91.2593236 will show you one frac sand mine in Wisconsin where they’ve leveled an entire hill and shipped it out west. They even built a plant and several new railroad tracks for it.
Chalmers is an important figure in the recent study of consciousness, in particular illuminating the distinction between consciousness and cognition.

You should consider familiarising yourself with the ideas before dismissing then as silly.
Check out your local library, or geological survey's website to see if they have historical arial photographs going back even further.
Amen. How can you make claims like that so confidently? How can you think you know better about something than the team that built it and/or works on it for a living? Imagine someone making these claims about a product you work on. "You should add feature X. Everyone will use it." No, we've tried that beforę and only a tiny subset of users actually used it and it's a massive bitch to maintain.
The spreadsheet approach makes a lot of sense: they’re dealing with what’s practically a near-infinite document (a million cells is close enough to infinity in such cases!), but people seldom actually use that many cells. Thus, the shenanigans they pull are to make the scrollbars useful, so that they typically give a fair reflection of the actual size of the document the user is dealing with. I imagine Excel does something similar.

I know so much mostly just because I observe carefully, in both desktop and web software. I haven’t implemented anything like this, but when I observe things imperfect on the web and it’s a type of imperfection I’m not familiar with, I often assess it to figure out whether it’s possible to get right. I also value getting things right in straight HTML/CSS with no JavaScript.
I believe it was Minsky who said, somewhere in the 1970s or 1980s: consciousness is simply a feedback loop. It's of course much too simple, but I too am convinced consciousness can't exist without it.
No disrespect to those challenged with protecting such a huge target, but why do admin tools even have these capabilities? I could see needing to disable a user account or change some attributes, but why would an admin ever need to tweet from it? There shouldn't be tools with God privileges even for admins. Not surprising human error was involved in a breach this huge. So, how many people had access to this tool? Is there a killswitch for the tool itself available to very few, really very few, persons? edit: I dont know if the tool can tweet but surprised 2FA can be stripped without a human being confirming (ie.. the acct owner's social media person), especially for famous people.
That's the thing, you can't,not with the way current tech is. But you can read up about having good monitoring/detection and hardening on your endpoints.

Microsoft for example recommenda privileged access workstations. If twitter's employees used a separate set of credentials and workstations for privileged twitter moderation than their regular account/machine used for email and day to day stuff I bet the attack wolf have failed.
Hold on. PIN is not secure either. With the card reader, you can verify the pin locally: You don't need anything but the card and a card reader. No internet, no nothing.

Since the verification can be done on the client side entirely it's subject to hacking. You can freeze the chip, slowing it down so you can actually see it run under a microscope. You can make it read-only (so the pin miss is not recorded on the chip, aso aso).

There are recorded cases where the card also held a digital wallet and students made it read only so they had an infinite wallet for small expenses ...
what about a phishing attack that involves the attacker talking the target through a login, which also involves the u2f part? and then obtaining the session token from memory/disk instead of username/password
Citation needed. Financial illiteracy is a large driver for poverty, many people have a hard time understanding compounding interest and what that means for the idea of consuming things with credit card debt.
I owned an St when I was a teenager, I still think it stands a lot in the shadow of the amiga. I was excited to read a bit more about the background story (I know bits and parts of it), but this article is terribly written. It is very incoherent and different characters are mentioned at random without any relation to each other. It almost feels like a row of (only marginally related) bullet points that seem to have been pulled together from different sources. There are lots of grammar mistakes kissing definite and indefinite articles...) which makes it very hard to follow.

As a note to future writers, if you put together a story like this and seemingly start with a "main" character, don't just start talking about other characters (also companies) without telling how they relate to the main characters.
Fix the 40km/h bike rides and the 85km/h downhill with a bird on your shoulder, and apart from that it’s a cool story.
Deadly Voyager: Hemisphere-wide inferno from a comet strike only 13kya
Yes, but only for you. The people you live your life with (some of whom you even love) are in the same state of mind as before, and you have no (or at the very least less) reason to change something for the better for them.
Get that “implying” crap out of here, this isn’t 2008 4chan.
So people with hearing problems need to buy a Google Pixel phone to enjoy their Google Youtube video? Smells very fishy to me.
Are all advertisements trash?

The article introduces a problem and a solution that they came up with. Are you saying it's trash just because they have a chance of making money off it? It's ok to have a conflict of interest, imo - the work should stand for itself, and in this case I feel it was a good article.
Probably mostly a start from scratch. Even if you felt like disassembling and trying to grok the PC executable, it wouldn't be especially helpful - the SNES' 65816 CPU (and its SPC700 APU, and the Doom cart's Super FX coprocessor) are completely different than an x86; especially for a performance-intensive game like Doom, you'd likely need to rearchitecture the whole thing.
There is introspection. It can judge the questions it receives as nonsense if asked to.

Free will - what is that? I presume any source of randomness filtered through a complex model would do, as it turns noise of one kind into random thoughts/phrases.

What's missing is - a larger context memory, online learning and in general being in the world (it has no body). Not being able to try and experiment with its concepts is the limiting factor.
You might be thinking of The Insider (1999), though that film was mostly faithful to the real life story behind the 60 Minutes investigation.[0]

What you were probably thinking of can be found at 2:00 in the video below. Seven tobacco industry CEOs testifying at once, affectionately referred to as the "seven dwarfs".

The Insider is in my opinion excellent, and highly recommended.

https://www.youtube.com/watch?v=1_-Vu8LrUDk
But shade affects light of all wavelength.
Why would only absorbing red or blue light be better?
I think the context is pretty clear here.
One consequence of GPT-3 is that I am now highly sceptical of the human provenance of any HN comment on an article about GPT-3. It has made my HN experience objectively less enjoyable, because I’m constantly expending effort to spot nonsense and avoid wasting time reading it.

Perhaps most worrying is not how “human-like” GPT-3 can be, but how “GPT-3 like” humans can be. When I am in “nonsense-detection” mode, I drill down into paragraphs to spot non-sequiturs etc and I find plenty of HN comments are rambling, contradictory, or I just can’t ascertain the meaning of the text.

If anyone gets this far through my comment, you may now be wondering if I’m hilariously posting a GPT-3 output (I am not). I wonder how a human might seek to convince others that they are not GPT-3. I think using unusual exotic rarely-encountered vocabulary or word combinations or sentence structure that GPT-3 is unlikely to pick up would help. Or referring to current events in a way that makes sense (that lockdown in Greater Manchester would be an example for people in the U.K.).

It certainly has the power to ruin HN and other forms of debate online. Perhaps one consequence will be more video chat and audio calls (until deep fakes become great) and then a retreat to the physical world for serious discussion.
IIRC this was basically what they said when annotations become unavailable to new videos. They're completely gone now, so probably a year or so until community contributions are completely wiped.
White is just very intense gray. There's actually no such thing as "true white", in the sense that you could always make it brighter.
Good lord. The "Deforestation" presentation is horrifying.

What an effective use of technology, thank you EarthEngine team.
I can't understand this position. A positive person often does positive things without a reason or need, especially for their loved ones, as that brings more happiness.
What was the "perversion of public institutions"? What is 'anti-national' thinking? I think you are just fearmongering.

It's true that the us was oppressing black people during this time and after (just look at it going on today), and sometimes accused black civil rights protesters of being commies. The us got involved in a sequence of unnecessary wars like the vietnam war, where the pentagon papers (written by the govt) laid out the long sequence of lies told to the people by the govt.
The only difference I find between reddits and HN are the amount of memes and the delusions of grandeur.
> The UBI must be indexed on the cost of life and updated every year.

That makes no sense at all. UBI is just an income redistribution scheme, thus it can only work if it's linked to productivity. Otherwise you create a system that's bound to fail and collapse in the times it's needed the most: an economic crisis.
This reminded me of the Flock browser which was an interesting take on browsers like 10 years ago!
Quanta magazine typically does a great job backing up their titles with real science-based content.
Unfortunately, this is going to be the situation with Himalayan glaciers after new EIA bill India is planning to pass.

https://theprint.in/theprint-essential/what-modi-govts-eia-d...
With subtitles, the obvious solution is to not show them by default, even if the user has the corresponding language selected by default for subtitles in general. The net result would be the same as with this change, except that those of us who rely on community-submitted subtitles would still be able to use them (at the risk of seeing spam occasionally - but it's better than no risk and no feature).
Between that and the ads becoming completely obtrusive, cutting my video at random moments, I really wish there was another alternative.
I don't have TV for years any more, and Youtube has become the new TV.
There are examples of other language models that learned to do hard math problems such as symbolic integration which are difficult even for professionals empowered with dedicated (non learning) software.
Hey thanks, yea - I wanted to make the download link clearly visible for people as well and have not yet had the chance to add it to the preview page itself.

But cheers for sharing this link here!
Use U2F for 2FA. If Twitter had all their employees using U2F keys it's very unlikely they'd be phished.

With U2F it's impossible to "enter" a 2FA code on the wrong domain, making you immune to phishing attacks by most definitions. This Kerbs article from awhile back says that Google had zero phishing incidents after making this switch: https://krebsonsecurity.com/2018/07/google-security-keys-neu...
At least android phones can still download apps from the google app store, older iOS devices are just cut off.

My 7 year-old iPhone 5s is still supported by Apple; it runs iOS 12.4.6 and I just installed a bunch of apps on it.

I feel really sorry for anyone buying a mac now, since they will be obsolete as soon as the ARM macs are out.

The first ARM Macs will start shipping in just a few months; the current Intel Macs won't be obsolete, since they too will get the new operating system and Universal apps will run just fine on both. What part of this are you not understanding?

There's a difference between not the latest and greatest (the ARM Macs) and current, supported machine, like any Mac that can run Big Sur.

I have a PowerPC iMac Mini somewhere—that's obsolete as far as Apple is concerned.
Right, I should have mentioned that. No longer needing to queue for a cashier was a big change.
Its really important to understand that mania is not optimism, positivism, or much of anything positive really. Its a state of euphoric destruction for bipolar folks, and chronic mania seems to spread those patterns over the balance of a lifetime. It is a disorder, and it benefits from treatment. Its not fun for anybody except for the manic.
> what's written is mostly bullshit. This is very upsetting to some.

But not George Carlin or Ludwig Wittgenstein.

> "How-to" material [...] It lacks adequate ties to the real world.

And so did we. How-to is science. Until we figured out how to align statements with external evidence, we lacked ties to the real world. Once we began aligning statements and then translating those statements into mathematics, we made it to the moon and in quite a short time.

> The shape of that space is a big unsolved problem in AI.

GTP-3 isn't a scientist. It doesn't make observations that it can axiomatize as new true premises for further processing.

Anecdotally, neither do most of us!
Maybe is for the best? GPT-3 is a lot of bla bla bla without actually conveying anything useful. And now it's shedding light on the reality that most of our words and sentences are just fillers.

Before, I used to have low patience about prose that was too verbose. But now with GPT3 more people will start doing so, amd commenters will hace to start beong succinct in order to be read.
List of Top-Level Domains
They probably had permissions to change/reset the access credentials which can be used to gain access as a the user.
what's your workflow for saving the pages as PDF/epub?
What this probably shows is, that Edge makes a difference between search engines or websites and how it handles them, which it shouldn't. They should instead be rendered like any other website. There is a chance, that it is a mere coincidence, that it happens on the Google search engine website, but if that is what anyone argues in favor of, I would like to see a technical explanation of what Google does, which no one else does, to justify Edge crashing.
I doubt the admin tweeted from the tool. The admin changed the email on the account, then did a password reset, then logged in as the account then tweeted.
"Blast radius" is a general term for the worst case impact of a specific type of breach of a given system.

The recommendation you read was probably about limiting the blast radius. It's a general security best practice, and you implement it through techniques like federating (compartmentalizing) services away from each other, limited lifetime credentials, attribution, SSO for single point of control for invalidation of credentials, principle of least access (PoLA), privilege separation with role-based access control (RBAC), session logging/audit logging, etc. Most importantly the underlying system needs to have a well-defined and pentested authentication/authorization architecture. The hallmark of systems that limit the blast radius is that they have well-defined limits on how much they trust each other.

OWASP (https://owasp.org/) is a great starting point for reading about this stuff.
Did they tweet directly from the admin tools? My impression was that they used the admin tools to reset the password and then take over the account, ultimately tweeting like any normal user would do.
I don't have any practical experience with the language, but based on the spec, it sounds like Ada generics would have much the same problem wrt compilation times as C++ templates do, at least if you try to fully optimize them (i.e. avoid boxing and similar techniques to allow generic code to be compiled just once, instead of once for every unique instantiation in every translation unit).
I'm not sure about all the regulations being for good reason. Some do exist to protect existing players, like taxi medallions. And some, are perhaps outdated in the name of "protecting the consumer" when online reviews and reputation systems tend to achieve similar results with little oversight.
>without notification

Are you sure there wasn't a notification?
This is why YouTube needs to be spun off from Google: because there are alternatives to YouTube (Vimeo, P2P streaming), but good luck finding an alternative to YouTube.
It is my understanding that they used the tools to update the email of the account, then reset the password to log into and make a new password such they could log in and tweet. Do you have any source that says that they could use the support tools to tweet directly from?
That's a fairly well-known way of doing a multi-set VD (https://en.wikipedia.org/wiki/Venn_diagram#Edwards%E2%80%93V...). It generalises to any number of sets.

But they just had to stick a background image banana in there to reduce the readability and increase clutter. Just could not help themselves.
Did you reply to the right comment?
Totally dependent on the type of training you’re doing. Vipassana tends to focus on letting go, so that you ultimately let god of both good and bad feelings. In a sense to become more neutral — less attachment means less suffering.
Do we know for sure that the admin tools can do all this? My understanding was that the tools enabled password resets, which allowed the attackers to tweet from the accounts themselves.

> For 45 of those accounts, the attackers were able to initiate a password reset, login to the account, and send Tweets.
Ppl who downvote comments like these are responsible for killing any joy and fun on the internet.
You have a need for a tool allows you to see the UI “as the user does” so you can respond to support requests and maybe someone thinks it’s easier to just copy the cookie.

This isn’t the right way to do it, but given they work at Twitter I could imagine this isn’t the first big mistake they’ve made.
Although in theory the problem is universal, in practice the problem only appears when the user is using touchpad-based scrolling; touch-based scrolling is typically unaffected.

But it’s all happening because you’re interacting with the scroll position in a way that is incorrect within the models of the platform, reading and writing the scroll position as though it were atomic and sequentially consistent when it’s not, so it could break in more situations at any time. It’s thus much better to avoid the technique and work in a way that is supported.

(I’ve decided to change the terms I’m using from synchrony to atomicity. For users familiar with that domain: the problem is essentially equivalent to the scroll position being atomics that are changed from another thread, but you’re doing a load and a store, probably with relaxed sequential consistency, rather than using an atomic swap operation, or a mutex lock over a non-atomic. There is no recourse while using this technique because the scroll position is not exposed as an atomic or something lockable.)
You and zamalek appear to be in agreement.
Founder of a competing product here. We've built an open source project so that you can self-host and we have role based access. Would love to know what you think!
You can see the project here: https://github.com/appsmithorg/appsmith
If there's an XSS attack I don't consider that phishing.
They don't train to produce a positive state, they train to produce a peaceful state where no thoughts intrude on the mind. Thought-free states of mind just happen to feel good.
I believe the Twitter attack involved tricking a user into installing proxy software on their machine (to be in twitter's internal network).

If that is the case, that same proxy software could proxy the security key requests too.