skysight-inc/HackerNews huggingface dataset:
Gamers want higher refresh rates and pushing 5K@144Hz is really expensive from a GPU side vs. 1440p@144hz. While text looks better at 5K, it's less noticeable for games. So big is better but it's a different tradeoff.

Businesses are just cheap and 1080p screens are good enough.
> A Yubikey can be hacked to send arbitrary keystrokes - but that's of limited usefulness. I guess an attacker could force open a browser window to download malicious software, but that would be fairly obvious to a user.

If it can send arbitrary keystrokes, it's not just a "way in" (trying to download malicious software): it's also a way to exfiltrate the data (for example keylogged inputs) it collected.

As for being fairly obvious to the user: what about waiting for command+t (or whatever the command is) plus something looking a website to be typed, then wait for 4 minutes of user inactivity (no keyboard input, no mouse input) before sneakily opening a tab and quickly closing it? Sure, some user may notice it but many won't for after 4 minutes of inactivity they won't be looking at their screen (and the screensaver won't have kicked in already).
I don't think so, nobody's (yet) "attacking prisons with meteorites".

"And later out of nowhere they really do drop a meteor and wait for everything to be according to your analysis"

But perhaps it's a metaphor rather than a mis-translation.
> If you go out and actually study the only known systems which learn effectively (ie., animals), one does not find the need for universal approximator theorems in explaining their capacities.

What's the explanation for their capacities, then?
I'm wanting to learn APL (I'm leaning towards J or BQN) and Lisp as two languages/paradigms. APL for is expressivity and Lisp for its ML background.

More mainstream I'm wanting to learn TCL and lua.

I don't program professionally so don't need to learn anything to get a job.
exactly. burn the messengers, burn the message and still parrot the line of "free world and democracy"...

sure.

how can these same people accept that they are engaged in torture and in the interest of "national security" they want it covered up but balk at the idea that someone else might be doing just that. democracy. right.
It sounds like moving the controls is more about making it not obviously a chuto and less about drivability though the dash may be less needed than thought.
I have seen many cases where a something is pinned to a minor version, and then gets forgotten about for 2 or 3 years. In my current companies there is Production codebase that hasn't been touched for over two years. The original developers have long since moved on and no one really owns the code. That is the most common scenario leading to security breaches.

This is about succession planning, with the realisation there might not be any succession if business priorities change.
Well NNs like GPs are "basically" non-parametric methods, in the sense that one does not start with a known parameterised statistical distribution that comes from domain expertise. These are worst-case techniques when we dont have the option to start with "the right answer", eg., in the case of large datasets where we have no idea how some pixels distribute over cat/dog images.

In the case of a trajectory we would likey already know the answer, in the form of just doing some physics. The role of computational stats here then is to start with the known form of the solution and find the specific parameters to fit it.

Since we have physics, we can find the "perfect answer" to the trajectory question with very few data points -- and take as many derivatives as we like.

Brute-force ML is often used when we dont have theories, making it all the more dangerous; and alas, all the more useful. We can get a 5% improvement on click-thru rate without having any theory of human behavioural psychology --- god knows then, what we are doing to human behaviour when we implement this system.

`
Semi-related: Since few months I am digging into tinkering and electronics. It’s really great to learn about modern era solutions which enable cool projects with low entry barrier.

However, I happen to learn about new solutions (new sensors, actors, boards, ICs) more randomly than systematically. I tried to google for databases, blogs or news outlets, but couldn’t find anything suited for my consumerish needs. Going through hundreds of pages for similar products on online shops also didn’t yield any good output. Do you guys know any such source? How do you keep yourself updated on interesting new products on the market?
Rubocop is awesome. The amount of configuration allows it to be tailored to a company’s preferred rules. (Rubocop’s defaults do not match the common stylings I see in the Ruby in Rails community.)
Contrary to the recent top comment on this, which fails to show that such a net existing could be no coincidence, I guess, the answer to your problem might be deeply physical and information theoretic, as soon as you speak of time. Simply speaking, any model is good enough if the approximation is tolerably accurate. In that sense, crude nets as well as expert systems that trigger off clear signals and ample evidence may already exist.

In particular, the way the stockmarkets are distributed the function of time is likely relativistic and every participant is acting under incomplete information even in the infinite limit.

Also, you have to be cautious what any function in this context really means, as I imagine it means differentiable functions (after somebody mentioned the Ackermann function, which is not anywhere differentiable).
How is Russia in a corner? They're expanding into the second largest country in Europe.

Unless one accepts the argument that because there were different historical borders in the past Russia is now entitled to demand Ukraine either remain a buffer state (with no guarantee except Russia's boyscout promise) or join the Russian federation--by force if necessary.
> A big part of Ukraine’s citizens are willing. Crimea and the two breakaway republics are for sure.

This is over-simplifying it: Crimea has a big divide between the 60% ethnic Russian population and everyone else (e.g. the Tatars know they’re much better off in Ukraine as an ethnic and religious minority), and while the other occupied territories definitely have some supporters of rejoining Russia it’s not clear that this approaches even a plurality — and especially after the invasion, a lot of people will have reconsidered their positions as they see an illegal war featuring indiscriminate attacks on civilians.
This reminded me of a quote by Kissinger: "What political leaders decide, intelligence services tend to justify. Popular literature and films often depict the opposite – policymakers as the helpless tools of intelligence experts. In the real world, intelligence assessments more often follow than guide policy decisions."
I meant the Screen Time feature of iOS, and Digital Wellbeing app, which is made by Google. Both enable you to put a widget with the app/time breakdown right on your home screen. Some older versions of iOS or Android might not support it, though.
> the same guy gets your password and also gets you to use his own fake key.

The article started from an event happening at a conference. I haven't been at many, but I assume: 1) at some you have a badge identifying you; 2) even if you don't, depending on who you are, it could be easy to identify you from other sources. At that point, if your identity is revealed and you're using the fake token, you're no longer using 2FA. This is not the same as "some guy finding your lost token on a train", unless, of course, that person saw you losing it and knows who you are, but even then - if you lose your token, you wouldn't/shouldn't keep using your spare...

I mean, if you get a notification from HIBP that some password has been compromised on some account, I assume you'd change it, you wouldn't just go "meh, I have 2FA, why bother". Why would you ever keep on using a (potentially) fake Yubikey?
It’s a little odd to me that the author hopes FIDO keys as a single factor is rare. This is explicitly supported by FIDO and Yubico, and available in the Microsoft ecosystem (https://support.microsoft.com/en-us/windows/sign-in-to-your-...)!

As tomxor said elsewhere here, though, batch attestation allows you or relying parties to check that the key is a “real” Yubico key.
Show HN: I made a privacy-first minimalist Backblaze
Creator here. I was looking for something as simple as Backblaze Personal [1] but privacy focused and open source. This is my attempt to build that.

Uses PyQt6 [2] for the GUI and Pyinstaller [3] for creating the platform specific binaries. The backup engine under the hood is Restic [4]. The server code is written in Laravel [5]. All the code is on GitHub [6].

I actually really like Backblaze (even use B2 for this offering behind the scenes) so this isn't meant to throw shade their way. Just wanted a private open source alternative. Something like Bitwarden but for backups.

[1] https://backblaze.com

[2] https://pypi.org/project/PyQt6

[3] https://pyinstaller.readthedocs.io/en/stable

[4] https://github.com/restic

[5] https://laravel.com

[6] https://github.com/blobbackup/blobbackup
Not to say such attack scenario does not exist, but:

A USB HID device cannot listen on what other keyboards typed, except for NumLock/CapsLock/ScreenLock indicator.
The idea that a limited nuclear exchange is OK, even inevitable in this conflict, and that things will somehow magically go back to normal afterwards is ludicrous.

All leaders must know that any use of nuclear weapons will be met with the complete annihilation of their country. This is the ONLY sane policy.

Tit for tat is for bullets.
A year ago, the US was energy independent.

One of the first things Biden did was to cancel pipelines, stop all new oil leases, cancel existing projects, etc. This has made us vulnerable to people like Putin because renewables have not been built out to keep our independence.

If the idea is to put in place renewable energy, it is unnecessary to prematurely dismantle the existing energy solutions, making us vulnerable to foreign despots in the process. First build out the renewables, then scale back on petroleum as renewables prove their worth.
I'm an amateur, so I rarely push myself to a point of making real predictions. Mostly I think in hindsight: I just observe what happens, and see how it aligns with different hypotheses. It is not rigorous enough for a modern scientific method, but it works good enough to me.

To be more rigorous means not just making a single prediction, but making a lot of predictions, drawing distribution of probabilities over them, and it would need some kind of informational system to fix it because it would be a lot of predictions, too many for my memory.

My way is easier. The most threatening to a validity is a hindsight bias: it is really hard to overcome it, even when you know about it. There are other threats to a validity, but I think not it is a right place and time to dive into this topic.

> this specific text does not seem useful to me in this regard

My guess it is because you didn't interested in a management and inner workings of organizations including long-term social processes taking place in organizations, and suchlike. I do not try to reproach you on this, to tell you that you should be interested -- no. I'm just trying to explain the difference.

Science can see facts because of theories. Some people say, that science grows from objective facts, but it is not so simple. Science can see facts because it have a theory. Theory says what is a fact, and what is an unimportant noise. A precession of an orbit of Mercury was deemed in XIX century as an important fact, because classical mechanics and Newton gravity told so. When you have no theory, then the precession would be at best an unremarkable curiosity, at worst it would go unnoticed.

I have some ideas of how organizations work. I wouldn't call it a theory, because it is not, it is unsystematic and mostly intuitive, but I use it as a theory nevertheless. And it allows me to see facts in places where people who have no theory at all see a random noise.

So my guess is: you see nothing useful in this text, because your understanding of an organization is not nuanced enough. (Once more: it is not a reproach, I do not think that everyone must be interested in what is interesting to me.)
Rule 8.1: ... And don't listen to podcasts while outside.
That abtract has big hermeneutics of quantum gravity[1] energy for me. Probably I'm just ignorant, but is it actually necessary to the march of science for academics to write this way?

[1] https://physics.nyu.edu/sokal/transgress_v2/transgress_v2_si...
Yes, they publish very little that would upset their backers, but the nice thing about them is that they tend to share evidence. When there is not much public evidence (like in this case) they are the first to say so.

Grozev was a traditional investigative journalist before he worked for Bellingcat. They have also worked with The Insider and many other traditional investigative journalism outfits in the east. It is not at all implausible that they should be able to contact two FSB people for feedback (especially when one of them is retired).
Indie dev for VR apps and games.
My cynicism is running the other way. I have been burned too many times by “factual” documentaries that leave our context and information that run counter to what the documentary is selling. Especially all the Netflix garbage which is designed to just increase the number of hours of content they have.

The audio seems to be from a sales pitch, so Cambridge Analytica has incentive to lie that they did something.

The “Do So” movement seems to have started due to someone not allowing the incumbent, extremely unpopular prime minister onto their property:

https://en.wikipedia.org/wiki/Percy_Villafana

I have not found any good evidence that Cambridge Analytica orchestrated anything. At best, I am guessing they acted as an advertising firm and used an organically growing movement against an already extremely unpopular leader.

But the Netflix documentary attempts to make it seem like Cambridge Analytica started the movement and succeeded in swaying an outcome that would not have gone the way it did without Cambridge Analytica. Maybe it did, maybe it did not, but a sales rep from Cambridge Analytica trying to sell their services is certainly no proof of anything.
If you’re asking how to solve difficult differential equations in general, we use numerical methods like finite elements or finite differences
I think I have seen this before and skipped through it slowly enough the get the gist, all the details and which fake news were spread is not really too interesting to me. I have no reason to doubt that the USSR or Russia did use those active measures.

The interesting thing is the gap in the timeline which aligns with other resources I found. There was a time when all the current mess was avoidable, a time at which Russia was eager to work with the West, a time at which Russia was heading towards a NATO membership through the Partnership for Peace program. But things went south and Russia turned against NATO and the USA again, Putin's 2007 speech at the Munich Security Conference is probably the most well known expression of Russia's or Putin's frustration [4].

M. E. Sarotte: Not One Inch - America, Russia, and the Making of Post-Cold War Stalemate (2022) [1]

John Mearsheimer: Why is Ukraine the West's Fault? (2015) [2]

Vladimir Pozner: How the United States Created Vladimir Putin (2018) [3]

Vladimir Putin: Speech at Munich Security Conference (2007) [4]

[1] https://www.youtube.com/watch?v=RXBKGRPwfZw

[2] https://www.youtube.com/watch?v=JrMiSQAGOS4

[3] https://www.youtube.com/watch?v=8X7Ng75e5gQ

[4] https://www.youtube.com/watch?v=hQ58Yv6kP44
That’s counter intuitive (at least for you) because in modern society it’s customary to think that people are born tabula rasa and then “it’s all a social construct”. Perhaps we are indeed born with innate preferences, biases, and default sexual orientations …
A day before the war:

Half of Russians say it would be right to use military force to keep Ukraine out of NATO

https://edition.cnn.com/interactive/2022/02/europe/russia-uk...
I feel like this is a masterpiece of emotional IQ.

Knowing when you may be in a position where you cannot properly represent the intentions of a role and resigning with this kind of grace and thoughtful words is something any leader anywhere should read for inspiration.
Zelle is the banks' answer to Crypto, therefore it works (kinda) the same.
> 6. When outside, treat your phone like it’s a book

I do this. But I think of my phone as a toolbox. I grab it when I need it to do something for me.
I've had a really hard time finding a balance with dating apps, they're easily my most addictive phone habit. I recently hard-deleted all of my dating app accounts to take an extended break.

Before that, I tried several different things to modify my dating app behavior:

I would set Screen Time in iOS and give myself a one hour limit per day with a separate Screen Time password. This worked OK but it was still too easy to keep requesting 15 more minutes at a time. To deal with this, I would delete the app from my phone when I reached my time limit since they're way too easy to access from the iOS app tray and the app icon is a major trigger for me.

The major thing that helped was setting a month-on month-off schedule. I would pay for a premium account for one month only and cancel the subscription right after purchase and get to inbox zero on my app when it was time to turn the app off.

At the end of the month on, I would put my profile into hidden mode so I know that I won't get new matches in my month off, and I would also delete all stale matches. I would keep all active matches and just talk to them until we either met or went silent and then I would delete them. Keeping my inbox as clean as possible really reduced temptation.
Renovate is great, far better than relying on somebody remembering to upgrade dependencies in 12 different places.

But if you want full coverage, there will be a need to write a few regex managers. And testing can only be done in production on the mainline branch. The best way I found to do that was forking the repo to configure and try out renovate separately.
Go learn a bit more history - the use of Blackletter/Fraktur was banned by the National Socialist government because it was "Jewish". Earlier Nazi posters and publications used it, but so did the Social Democrats (SPD - Sozialdemokratische Partei Deutschlands) and even Communists (KPD - Kommunistiche Partei Deutschlands) - here are loads of examples, provided by a Social Democratic historical society (Friedrich-Ebert-Stiftung)[0], and a very specific one - the edition of the "Vorwärts" announcing the abdication of the Kaiser (something the SPD was very excited about)[1].

Most older German books and newspapers, regardless of point of view, were typeset in Fraktur.

[0]https://artsandculture.google.com/partner/friedrich-ebert-st...

[1]https://artsandculture.google.com/asset/%E2%80%9Evorw%C3%A4r...

There's a whole site devoted to Weimar Era (1919-1933) era political campaign posters[3], and just about every party, left, right and center, used Fraktur on occasion - and to be fair to the parent commenter, repeatedly by a certain someone complaining about being cancelled[4][5][6]

[3]http://www.wahlplakate-archiv.de/

[4]http://www.wahlplakate-archiv.de/wp-content/uploads/2015/06/...

[5]http://www.wahlplakate-archiv.de/wp-content/uploads/2015/06/...

[6]http://www.wahlplakate-archiv.de/wp-content/uploads/2015/06/...
Hmm... https://en.wikipedia.org/wiki/Noam_Chomsky ...from a quick skim, I'd say he believes WWII to be the only justified war that the US has fought in the past century. So "Chomsky advises against war" is barely more newsworthy than "warm water is wet".

Throw the article's heavy Hagiographic slant on Dr. Chomsky himself (https://en.wikipedia.org/wiki/Hagiography)... It sure looks like the article is a sermon aimed straight at the choir of the One True Church of Chomsky.
No, not blocked. Nothing on the console too except that the loading of "plausible.js" was blocked.

PS. Played with it a bit and .box divs are zero-height. You need to have some content in <a> tags for them to not collapse vertically. This fixes it (somewhat) -

document.querySelectorAll('.box a').forEach(e => e.innerHTML = '&nbsp;')

PPS. Also this .box rule is marked with "invalid property name" -

aspect-ratio: 1/1
I tried HTMX and actually found it quite refreshing, but (in my experience, could be a lack of understanding) it has two major flaws.

1. There is no simple way to have it handle the response with JS. You could add a global listener to the htmx response and somehow handle the response and overwrite the default HTMX application handling. I could not figure out how, and besides, it is global, not per element.

I want `hx-preinsert="myfunc"` where myfunc gets the element and response, and the html it returns will be handled as if it were gotten from the server

myfunc(callingElement, serverResponse){ return modifiedServerResponse }

I spoke to some other devs and they had the same issue. Which brings me to the second issue.

2. They say quite clearly, "we don't want any feature requests, suggestions, or bug requests unless you are interested in implementing it yourself."

I spoke to someone on chat about what I thought was a bug, and got a response "feel free to fix it, or shut up". Don't know who I spoke to, but still..

So, it could be that everyone is using things like TurboLinks just because of obvious things. Which is discouraging, as it is really a pleasure to use.

EDIT: It no longer says you have to write your own fixes. Great!
I live in the USA.

I do not live in one of the 20 largest metropolitan areas in the US. The closest top 20 metro area is 250 miles away (I suppose this meant more before Covid and WFH).

I do not have a college degree.

In terms of programming work, I have some part-time experience at very low pay at very small, pre-seed startups for a few years, and then two years of programming at a big company where I work full-time. At the time I was at these places I was also taking college courses and working another non-tech job.

My W2 last year was over $165k, all pay from my company. I have to check the numbers, but with 401k matching and stock discount, I think my real TC was actually more like $175k.

If I cared more about getting money in the near-term, and spent more time doing Leetcode I am sure I could make tens of thousands more in TC. Over $200k easily (easily be able to make it, spending weeks doing Leetcode is not easy for me to make time for currently).

At my company I know people just out of college for a year or two who are very good but who made <$100k. One left and is making more than me now, the other joined last year.

Levels.fyi used offer letters, W2s etc. The numbers look real to me, and everyone I talk to seems to agree. I do not work at a FAANG, I work at a traditional Fortune 500 company.
> It all sucks doing it remotely though and frankly not worth it.

I find this perspective wild. I cannot possibly imagine pair programming as productive, or tolerable if it was being done in person.

Whereas doing it using screen sharing tools from the comfort of my home (or private office but who's had one of those recently?) - well I've actually done this, and it worked great. No body hygiene or smell issues to get with, no one snacking or drinking near you, no crowding or extra CO2 and sweat - just a nice tight feedback loop which people can dip in and out of without disruption, join and stop easily etc.

The idea of pair programming with other people physically in the room with you...I can't think of anything more unpleasant.
Funny quips aside, how about some actual data:

https://en.m.wikipedia.org/wiki/Public_image_of_Vladimir_Put...