skysight-inc/HackerNews huggingface dataset:
oh wait, thats 2.8b mau but most of them are worth nothing, look at west europe and north america, and only subset of them, its like 200 million people that have to pay

>>> (89000000000/200000000) / 12
37.083333333333336
I have this idea attempted. It can work if enough engineering is put into it.
In the prisoner's dilemma isn't a core constraint that the prisoners can't collaborate? Therefore you can't cooperate for the best outcome and both are independently incentivized to defect.

In global diplomacy the goal is to coordinate for the best outcome. So I'm not sure a strike first 'defection' is the rational move.
Not sure why you're downvoted, I didn't clarify that ex-Soviet states ONLY existed during the Cold War, when the Soviet Union existed. I messed up on that point.
You can work as an obstetrician to the same end.
These are covered by the exceptions procedure as described in the script, just to clarify the Ceremony Administrator is a per-ceremony role rather than a permanent occupation so dismissal would just involve replacement with another team member.

Exceptions are evaluated, documented and acted upon from the moment they are discovered. The Ceremony Administrator decides what to do about them after consulting the Internal Witness (but the CA gets to decide), at the end of every ceremony (with exceptions or not) we ask every participant to sign a sheet saying they're happy we effectively haven't breached security (last page of here: https://monzo.com/static/docs/redacted-root-certificate-auth... ), if they don't sign, that would kick off a large discussion about whether we're happy to continue using these roots or replace them.

From memory we've had about 2 exceptions which have been resolved, both very minor (as ever, when you get into the room stuff comes up that you couldn't have planned for, if I recall one was something silly like a typo in the command documented on the script, so we just ran the command without the typo, etc).
> While it’s possible to audit the code of a crate on https://docs.rs on clicking on a [src] button, it turns that I couldn’t find a way to inspect build.rs files. Thus, combined with a malicious update, it’s the almost perfect backdoor.

Docs.rs has its own source view on /crate that's separate from rustdoc's. For example, you can see the build.rs for boring-sys on `https://docs.rs/crate/boring-sys/1.1.1/source/build.rs`.
I like working on things I want to work on not on things other people tell me to work on that only benefit them in some way.
It's no different from "a nice time in the islands," "a runty pick of the litter," etc.

What's probably tripping you up is that "rest" is usually a noun that takes predicative adjective rather than an attributive adjective. It's more common to hear "The rest of my day was nice," but less common to hear "the nice rest of my day."

But despite the ostensible grammaticality of the noun phrase here, frequency still plays a huge role in determining what we deem acceptable, so it's not sufficient to argue as a counterpoint e.g. "a nice rest of your day" is perfectly fine like these other analogously formed noun phrases, checkmate ... Language doesn't work like that.

I'd argue that your point is actually best articulated simply as "it just sounds weird," rather than calling it any kind of flub, grammatical or otherwise.
For all their math,

these studies persist in fundamental errors of assumption so basic (and IMO obvious) as to make me suspect they are long con gag.

TL;DR the presumption that any other civilization would be detectable by us, particularly one substantially more technologically advanced, is... pretty ludicrous. The only interesting exception is civilizations with a specific interest (and capability) to advertise themselves specifically to a civilization at our stage of development.

Here's a lemma to Clarke's: any sufficiently advanced communications technique is undetectable, or indistinguishable from noise.
This is, in my opinion, one of the biggest challenges with generative models right now. I'm not sure if this is the industry-adopted term, but I call them hallucinations. This is why I don't just pipe it straight into my blog, but rather use it as inspiration for a blog post that I write myself. It is easier for me to edit and expand on something that is already written, though.
Google updates Pixel 6 fingerprint reader, confirms slow 23 W charging
There are many moderately expensive hobbies that are pretty mainstream: downhill skiing, scuba diving, even "cheap" activities like hiking that involve travel to many places where you can do those activities. And many others buy equipment for their hobbies that they don't strictly need but they get pleasure from. Eating at decent restaurants on a regular basis adds up as do theater tickets. Even just having work done on a house rather than doing most of it yourself.

Very little of this is strictly necessary but many people do spend money on this sort of thing without conspicuous consumption being involved. Mostly paying only for what you have to pay for is pretty much the definition of a very frugal lifestyle.
Async: Experimental Promises in Go1.18 with Generics
Where Americans find meaning in life has changed over the past four years
The most important part is missing:
How did he managed to work 2 hours a day while being paid 1000 a day?
What does "the most determined attackers" mean in this context?

Are we talking the real most determined attackers like the US or China who can easily deploy $10B (i.e. a team of ~3,000 people fulltime for 3 years) for a strategic advantage?

Or $1B (i.e. ~300 people for 3 years) which is within reach of every government, international criminal organization, and thousands of multinationals?

Or $100M (i.e. ~30 people for 3 years) which is now just a line item for those organizations?

Or $10M (i.e. ~3 people for 3 years) which is 10x better than the "gold standard" used by every other bank in the world, but still profitable for small criminal outfits doing ransomware attacks?

Are there any legally binding marketing statements made by any associated security executive on where they sit in these 4 orders of magnitudes of "most determined attackers"?

It is frankly absurd that we continue to allow statements like "secure", "reasonably secure", "most determined", or whatever without expecting some degree of quantification within 4(!) orders of magnitude. If you can not quantify or demarcate an accurate lower bound within 4 orders of magnitude you probably have no idea what you are doing.
Similar setup here. Do you have any pointers on your monitoring setup?
I’m working on settling it up right next week, and could use a nice reference.
You can still get ACA subsidies if you fall within the income level it's not means tested, they absolutely designed it this way to be gamed. Also qualified distributions from a ROTH IRA are not considered part of modified adjusted gross income.

So do your mega-backdoor ROTH conversion and take out of that and it doesn't count against the insurance-company subsidy.
Global Times is a Chinese Communist Party tabloid ( https://en.wikipedia.org/wiki/Global_Times )

Honduras recognizes Taiwan ( https://worldpopulationreview.com/country-rankings/countries... )
Hopefully good news for Orangutans if this leads to less palm oil consumption.
Cyber is what threat actors make of it
I always wondered why they had to create their own fork. I had the feeling that this is unecessary maintenance work that they took on and a "not invented here" philosophy.

Why not just use one of the avaible distros or why not even make a deal with SUSE (a bavarian company) to have a subscription model with support directly from experienced distro makers? Surely they could've made sure that all important features and workflows can be implemented.

Of course this would've needed to be a public bidding but if Red Hat gets it or SUSE does not really matter and surely is much cheaper than Microsoft licenses.
2, 3 and 4 are not Standard Model problems, but cosmological problems. There are cosmological theories that explain them by using only General Relativity without any changes to particle physics. For example, you can check out Nick Gorkavyi's cosmological papers:

https://pos.sissa.it/335/039/

https://academic.oup.com/mnras/article/476/1/1384/4848298

https://academic.oup.com/mnras/article/461/3/2929/2608669

https://arxiv.org/abs/2110.10218

https://www.sao.ru/Doc-k8/Science/Public/Bulletin/Vol76/N3/A... (this one is available only in Russian for now)
> you call the manufacturer when you actually need their specific expertise, and when they're your best option. You're not obligated to.

That depends entirely on the terms of your lease and service agreements. For high end equipment, like the CNC systems at my work, you may not even be given the option to purchase them, and they're so specialized you probably won't have someone that can competently work on them even if your service contact permitted it. Electronics manufacturers are also notorious for sanding off component info or burying components in epoxy blobs to hide information from competitors and customers alike.
I think the contract incentivizes companies to have certified individuals. So it's a benefit to the company.

If the company doesn't pay for it, I wouldn't do it.
> They seem to be doing the right thing, in trying to steer this powerful and highly likely to turn out very influential piece of technology into a positive and constructive direction of use.

It's not going to affect society. It's little more than a markov chain.

OpenAI doesn't need to do anything to steer it.

> Yes, you might just build something that will be found in violation of their (good!) intentions,

You're giving them way too much credit. I've seen them destroy someone's business after repeatedly saying that their business model was fine. It was for an AI assisted writing app. Then they decided one day "Nope, you're not allowed to generate arbitrary amounts of text."

After that, I was no longer a fan.
Here's an article about the "Filter Bubble Transparency Act" which intends "that internet platforms give users the option to engage with a platform without being manipulated by algorithms driven by user-specific data":

https://www.makeuseof.com/filter-bubble-transparency-act-exp...
You read the article! We don't do that here.
> Live in Singapore in reality is no more or less 'democratic' than live in Japan or Taiwan or SK.

I think this is a false equivalence. TFA mentions a democracy activist who was imprisoned for 21 days because of a small, non violent protest on a subway. He had been previously arrested for criticizing the judiciary in Singapore.

Unless I'm mistaken, you would not be arrested for either of these acts in South Korea or Japan. They are both imperfect, but in some important ways more free.
I'm currently about to leave a job that fits this kind of description. The way it was presented to me ended up not fitting what it actually is like on a daily basis.

Just need to figure out the right questions that can expose the core of the role and see if it's really what you want or if red flags will come up.
I think the truth between what you say and the other person accusing you of being biased is somewhere in the middle. They basically went too mach ahead of the time. Mind you, the project started 18 years ago! The computing landscape was very different back then. I know what you mean as I was forced by my employer to use Linux on the desktop at that time and it was mediocre - but many things changed in the meantime. Probably the most important: the web revolution has happened. Nobody is using abominations like the ActiveX/Silverlight/whatever anymore. VBS is no longer omnipresent (partly because of security reasons). Hardware support in Linux is incomparable to what was in 2004. SO yes, I can imagine it was terrible back then, but I still think it's very important not to give up and I'm happy they basically restarted the project recently.
bad news for nutella eaters, though
Uhhh I mean I guess it depends on your goals, but for social media services as generic as Mastodon/Lemmy, federation seems like an obvious advantage in terms of increased "social connection" as opposed to siloed communities that cannot talk to each other.
I've seen another argument, but I lack the competence to assess its validity: if a (left-handed) neutrino has mass, it moves at less than the speed of light, which means you can pass it and look back at it. You'd then see it as having reversed spin. But that might be based on a classical physics analogy that doesn't hold.
Consumer expenditures, "Average annual expenditures for all consumer units in 2020 were $61,334", according to BLS.

Average isn't great, I wish they reported median, but anyway that's about 6% of a million, which is a pretty aggressive number.
When (not if) a domain name expires or changes ownership, how is this detected and the connection re-verified?
They forgot at least one mystery: What determines the fermion mass spectrum and specific mass vlaues? Why do these particle masses take such seemingly random values?

Related: Why are these masses so much smaller than the Planck mass? For comparison, the electric charge is sqrt(alpha_em) or ~1/11th the value of the Planck charge.
TL;DR: $40k/year in exchange for working full time = not wealthy. $40k/year without having to work = wealthy.

I consider $40k/year pretty good, and definitely enough for me to live comfortably on here in Austin TX (Source: I've lived here for 13 years now, and I'm only just now getting close to spending+taxes [retirement+charity excluded] exceeding $40k as I've started spending more liberally.) I've got friends here getting by on half that.

So no, earning $40k/year as an individual is pretty good. It's only slightly over the 50%ile (but nearly double the 25%ile). Not wealthy.

However, having enough money in savings that you get $40k/year without having to work is something else entirely. A 65-year-old with that nest egg is borderline-wealthy. A 40-year-old with that level of savings is solidly wealthy.

If you can retire by age 40 and still have a higher income than half the country in your retirement, that's wealthy. Sure, you don't have a private jet, but you do have forty hours extra free time each week.
So my specific usecase (write a Discord bot) has the solution of "write everything from scratch" or "don't use JS"?

That's kinda what I assumed, but "only run code that have been signed off on by a major company" is kinda a shitty solution.
Sooo, the article skips the biggest question: How the hell do you find a $1000/day contracts?
Welcome to bigtime shadow IT then in a white collar / high performing workforce. People will be using personal laptops, spinning up AWS instances etc to get work done especially if they collaborate with others.

I worked at a place, folks had to go to the neighboring copy/print place to FAX themselves documents, because IT in its wisdom had locked down their machines and prohibited scanning docs (ie, they faxed to a virtual fax, then took those PDFs and sent them on).

I am convinced that part of the AWS appeal for many folks is to escape this "best practice" IT control that just results in no progress / ability to get work done. This was 10x during pandemic.

When IT hasn't yet gotten Zoom into default image, and you need Zoom or whatever to talk with others practically, so annoying.
Botize – Automate Your Work
Ask HN: Am I Lazy?
I am having trouble focusing at work (IC, software architect), or finding motivation to do anything. It has gotten to the point where I fear for my job. I push through, somehow, because of this fear, of not being able to support my family, losing our home. But I’ve noticed I lash out at whoever interrupts me, which happens often. It’s like I’m on the edge all the time. I feel bad after. I am adding to already bad atmosphere at work. They tolerate me because I’ve been here for 15 years. I thought about changing jobs, but all the job ads look the same as what I do now. Am I just spoiled and lazy? Any thoughts on how to overcome this?
Brave and UC San Diego Announce SugarCoat, Strengthening Web Users’ Privacy
It depends on the country. I'm not familiar with contractors in the USA but in many countries contractors take home (with a few corporate tricks) is significantly higher than employees, especially, as you mentioned, if you can pay yourself with dividends, avoiding most of social insurance.

It's perfectly legal though, not a matter of oversight.

Countries like the UK are now closing these and other loops with IR35 but you can still do that in many places.

You also have the option of not taking money out of the company and use your company to invest your own money, paying up taxes only on the money you need to support your lifestyle.

When you're done living where you're living you can also opt for a stop in Dubai or Portugal with NHR, to withdraw the profits as foreign dividends tax free.
Do you know how to do ranking of that king without pinging anyone to setup your analytics tool and have previous history or searches?
Most people would not even pay a cent
Crisp: Critical Path Analysis for Microservice Architectures
My comment specifically called it out as a half measure. But that doesn’t mean it’s not worth doing.

One of the ways that I’d see a proc macro attack playing out in real life would be to attempt to obtain the API token from cargo login to allow the attacker to publish a malicious version of a popular crate. But if cargo login is only run on the CI instance responsible for publishing and developers test their code on their individual dev machines, the attack fails.

We shouldn’t worry about making security 100% effective. Rather, we should be concerned with stopping as many different attacks as we can and providing users with as many building blocks as possible to let them protect themselves. There will always be vulnerabilities. But using that as an excuse for inaction isn’t helpful.
It's not formatted as a script, but it is a script. This text was written first, and then he made a video where he reads the text.

A transcript, while definitionally broad, is commonly used with the implication that someone has spoken in free-form (ie not reading from a script), and the transcript is the writing down of their speech.
The Media's Verdict on Kyle Rittenhouse
>The "crime of the other families" being "censorship" elides the reality that Facebook is doing the censorship. I

The whole point of having a media blitz about Facebook censorship is to force a crackdown on Facebook censorship, to ensure that censorship is done as per the wishes of the complainers, rather than as per the wishes of current Facebook.

There is no contradiction between "Facebook is doing the censorship" and "someone else wants to censor Facebook instead".
Cool work. It would be great for scanning hotel rooms.
> Even in VHCOL areas, $40K/year is fine if you own your own home and your kids are out of childcare years.

Are you considering "childcare years" to include college? Also, in CA/IL/NJ you could easily spend $15k/yr in property taxes alone. That would leave $25k for everything else. Lastly, the average price of a new car sold in the US is $40k. You can buy used, sure, but these days even those are getting more expensive.
Do you think people deserve to know that the police may be called on them if they call a hotline?

Do you think that people deserve to know that they can be involuntarily held if someone even thinks they're going to kill themselves?

I'd rather make this known and push for laws to be changed. Because I'm telling you that a massive number of people don't reach out to people because of these (real, valid) fears.
How to Understand CSS
> In a corporate environment lack of e2ee is a deal breaker

Not in my experience. I would want a new hire to be able to search past history for context and to many businesses like to monitor the chats.

Keep in mind, IRC would generally be hosted by the business themselves so they’d have full access to the data. Why would that business want to hide their employees messages from themselves?
Interesting as I have just been thinking about this as a thought exercise. Assuming one want to switch away from M$ Office, should Office software be an Open Source Native Experience like libra office or should it be a cloud based close source but free experience ( aka Google ).
There's no such restriction in the prisoner's dilemma.

Lets make it explicit. Let me _pretend_ that I'm going to work with you on the prisoner's dilemma game. I pretend that I'm trustworthy, and coordinate with you that we both trust each other.

That's when I betray you and take all the money for myself.

------------

In an *iterated* prisoner's dilemma, I simply work with you for the first X-1 trials (where X is the number of trials), and then betray you on the final trial. Since you know I'm going to betray you on the final trial, you betray me on the 2nd to last final trial. Etc. etc. This follows like induction all the way to the 1st trial.

Which means my best move is to betray you in the 1st trial, as per the rule of induction. But you know, pretend that I'm going to work with you (so that you choose trust in the 1st trial).

---------

Where things go sideways is iterated + public prisoner's dilemma. That is, there are 3 players, and the 3rd player watches what the other 2 players do. Each iteration, we rotate who plays the game.

Finally, we have a situation where trust is a good move: if only to "prove" to the other player that you're trustworthy and possibly get more gains over the long term.
Yet another thing on the cancerogenic pile sigh

At some point you have to ask yourself if everything but water gives us cancer.
Yes the desktop environments are still using GPL but those are already established projects, not growth areas. For newer projects it seems there is a shift away from copyleft towards Apache-style licensing. The newer copyleft licenses (GPL3, AGPL) just haven't gotten that good of a reception. And in the areas I've seen that do use them it seems it's despite the FSF, not because of them, for example the FSF seems to have completely given up on license enforcement or helping with anything in that area.
The subsidies don't help with copays, deductibles, and co-insurance, right? Those can run into the five figures even on a "silver" plan, in a bad year. If someone on the plan gets cancer, congrats, now every year is a bad year.
Zeit, Spiegel, Golem… Those are the ones I frequently see, but there are probably more.
They had to offer you COBRA because it's the law. In fact, COBRA is an acronym for the name of law that requires it (Consolidated Omnibus Budget Reconciliation Act). There is no reason to be grateful.
Interesting. I've only been tangentially following the GPT3 conversation, since it's not really relevant to the kind of work I do. But I had this idea in my head that it was magic, with the ability to do the seemingly impossible.

After taking it for a spin, I'm not that impressed? At least when testing their examples using the playground. Most results would be fairly unusable, though maybe a more thorough prompt design could address that. The conversational prompt was especially bad and conveyed the feeling of chatting with someone who was a bit high and not really listening to me.

Not as magical as I thought, then. I'm curious how you could tune it to be a special-purpose chat bot, working in customer service for an insurance company or something.
The UK is one of the countries with the lowest social insurance taxes in rich Europe.
NHS is also one of the worst experiences of healthcare I've ever had and good companies in the UK routinely offer private healthcare (eg. BUPA).