skysight-inc/HackerNews huggingface dataset:
I don't think its the job of Security Researchers to defend a OEMs customers. That's the OEMs job? If the OEM does not want to protect its customers after a research has literally given the vulnerability to them its no longer on the researcher. In fact its probably bad ethics for the researcher not to publish because just because there is no report does not mean the bug is not exploited or known by malicious actors. The researchers last recourse is to publish a notification to let the OEMs customers there is an issue since the OEM won't acknowledge it.
I annoyed my friends at an Avengers premiere by pointing out all the iconic Cleveland buildings in the New York scenes after the movie.
Severance was distinctive and gorgeous, while maintaining a very consistent and unique look.

Foundation was gorgeous too, in a completely different way; again very self consistent.

'See' was fun, lush, and again, totally different.

None of these were like Ted Lasso.

I wouldn't have guessed any of these were on the same network, either for sound, look or plot. That's all I've really watched there though.
> In a world where every celebrity is having sex with gorillas, doesn't such an image lose its charge? Will Norms and values around sex/body shaming change?

I hoped this would happen with social media. Everyone says stupid shit online and everyone has past beliefs they’ve outgrown. So what’s the big deal?

Instead we went the opposite way. Everyone is super self conscious and censoring at all times because you never know who’s gonna take it out of context and make a big deal.
I remember back in the 90’s and early 00’s my cousin and his neighbors had a neighborhood LAN going. They had stretched I believe Ethernet cables across the street and from house to house. It might actually have been coax cables in a ring network of some sorts. Anyway. They had an IRC server going and shared files and played games. Seemed like good times.
because I disagree with this statement:

> but when on the public internet you kind of accept existing in public

I do not accept this
> From 2009 to 2021, the share of American high-school students who say they feel “persistent feelings of sadness or hopelessness” rose from 26 percent to 44 percent, according to a new CDC study.

It's literally in the first paragraph of the OP.

It is a fact that anxiety and depression are increasing, not decreasing, as adults become more overprotective about things like letting kids play football.
Eye test could screen children for autism
How messed up was Germany's energy policy?
That's the problem for me too. This tech is cool for games, stock images etc but for actual art it's pretty meaningless. The artist's experience, biography and relationship with the world and how that feeds into their work is the WHOLE point for me. I want to engage, via any real artistic product, with a lived human experience. Human consciousness in other words.

To me this technology is very clever but it's meaningless as far as real art goes, or it's a sideshow at best. Perhaps best case, it can augment a human artistic practice.
"the army has always run things"

sounds like Turkia but like 40 years ago
"It's not as bad as a lot of people are saying"
I thought it’d have something to do with tech author and Dart programming language guy: Bob Nystrom aka @munificentbob.
I think the main thing is it’s really rare to just have one project in the works anymore. So you buy the 5day turn and work on something else in the interim. If somehow you really blew it in the project planning stage, and you simply must have it now, then I guess it’s kinda a toss up. In those emergencies rarely does cost matter but definitely your geographic location will limit options.
Worst offenders in the UI for me are the autoplay (why can I not browse in silence
?) and the amount of steps needed to get rid of something so it doesn't turn up in 'continue watching' anymore. But yes frame-by-frame would be neat to have, though realistically: none of the major video platforms really have that right?
What is the success rate of the 'Magic' based treatments vs Medical Establishment treatment?

Myself I'd trust the Witchdoctor more than the Medical Establishment doctors from personal experiences with the latter.
The difference is that YT tried to carry Khan and were censored for it, rather than directly censoring Khan themselves. Also, NetBlocks don't really care about the political angle, which is fine for them. That is a fairly small difference.
> The thing is, "releasing our findings to the public" puts the vendor's customers at risk

If vendor denies there is a problem despite repeated submissions of evidence then customers are already at risk indefinitely.
The 2nd sentence sounds like hobbyists worrying about such things.
I don’t know how to say it but it feels like it has no gravitas. Like the original lord of the rings had gravitas, battlefield galactic a has gravitas, the wire has gravitas. What’s making this so… bland? It’s not just the writing I presume, I don’t know.
How much is really being said by the highest dollar-valued modern music?

https://youtu.be/oOlDewpCfZQ and https://youtu.be/L2cfxv8Pq-Q come to mind for different reasons.
> For the opposite word, "expensive", it all depends on the word before it: "as expensive" or "more expensive".

Frustratingly, I find this isn't always true in practice. Lots of people use "x times as y" and "x times more y" interchangeably. To avoid ambiguity I try to only use the former in any context where precision is useful.
Much bigger fish to fry.

Think things like forged evidence in trials.
Telling the customers that there's a vulnerability will make them turn to their vendor. The vendor will obviously lie and say there's no vulnerability, everything is fine, ignore the panic.

Without the necessary details telling the public about a vulnerability is like shouting at a wall. Publishing the details forces vendors to release fixes when they deny the existence of the vulnerability.

This isn't some hidden password or evil DoS attack, this is an attack only processes with admin access can leverage on infected machines. This command is either executed by a computer user (which should flag a warning in the management software) or it's executed by a virus with admin permissions that went undetected by the antivirus solution on the machine. The stakes are low enough and the vendor is irresponsible enough that I don't see a problem with publishing a PoC when vendors lie about these kinds of bugs.

Of course remote exploitation and auth bypass PoCs shouldn't be released into the wild without trying to get a patch out first, but even still vendors like D-Link just don't seem to care if you don't at least threaten them with releasing the details to the public.
Electrically, there's not much reason to look down on Twisted Pair. It is an ingenuous way to achieve what coax does as an unbalanced transmission line with, well, a twisted pair of wires that form a balanced (differential) transmission line. You might need to add some shielding in some situations, but that's just a piece of foil.

Most importantly, the two wires that make up the pair really just are common single-ended wires, not elaborate coax or anything else.

A single coax transmission line supporting 10Gbps Ethernet would likely be much more expensive than the little bundle of twisted pairs we typically use nowadays.

In many ways, for its applications, twisted pair and RJ45 connections are better than coax wiring with BNC.
zf6hp28 and getrag GS7 DCT were far better. GM was only better than the older 5 speed autos.
I much prefer a company that asks me to not abuse it but lets me, then a company that treats me like child and force filters it out for me.
That small percentage of people who can't mark their phones as stolen is not zero but it's small enough for theives not to bother stealing a device which 9 out of 10 times is unusable. The upside however of being able to recover a non stolen phone is so much higher.
Its only unreasonable if you need the car for something. By implication, i assume having a TV is a necessity for you.

If you want a TV in your life so badly, you can say just that. Like "But i love Star{gate,trek,wars} and i can't watch it comfortably without a TV/Streaming". The thing with the 95% is a unecessary pretense.
Sounds like Netflix learned the wrong lessons from the success of Sacred Games (at least season 1) and tried to apply that show's gritty luridness to every other Indian production.
It can't. Well, maybe at its triple-point, but that is another story. It is just a quirk of the language due to it being know as molten salt. For example, my drink is full of molten water that has been frozen into cubes.
They’re not all actually students. Based on a simple google search and the information that one of the co-founders posted here, they’ve already graduated and this is their way of “getting out” of the debt they already have, not will have to take on to pursue their education.

Pretty sure this doesn’t constitute doxxing as I got the information from a publicly available LinkedIn and from the posters themselves who use their full names as handles, but here’s some more background on at least two of the people behind this:

https://in.linkedin.com/in/abhishek-fundingfyre

https://www.linkedin.com/in/ayushsoni1001/

The misrepresentation of their backgrounds, and the fact that this site is potentially illegal (based on comments in this thread) sends up some real red flags for me. Buyer beware.

HN mods, please let me know if I’ve broken any rules and I can remove the direct links.
I bullied kids because I was insecure and enjoyed the momentary feelings of power. I was not aware of it at the time; rather, I felt I was a victim of bullying.

I figured out that both were true once I became an adult.
You get the same thing on desktop. A couple months ago I wanted to share a clip of a show that was very relevant to a conversation and just ended up with black where the video was. Had to use Firefox to be able to capture it since that doesn't support the same DRM as Chrome-based browsers and Safari (the lack of that DRM support is also why the services limit what quality is streamed to Firefox clients).
This kind of thinking does not protect customers though. We can all pretend there is no vulnerability but that does not mean there isn't a vulnerability. This is kind of "Don't look up" thinking. The spectrum here was they tried with the OEM and the OEM said let it burn by snubbing the researchers. The researchers than attempted to let customers know since the OEM did not want to protect them.
It isn't every day you see the Tao Te Ching as reference #1 for a Nature paper. Here is the relevant chapter: https://www.egreenway.com/taoism/ttclz78.htm
> Let's say you're gambling 10k ETH on the last bit of RANDAO output being 1. You pay 5k to enter, and get either 0 or 10k back.

Ethereum does not let you make a gamble like that on the protocol level, so it sounds like your proposed attack is against a theoretical gambling platform that naively relies on RANDAO as its sole source of randomness for resolving bets, and that naively allows a user to resolve their bet based on a user-selected RANDAO round, correct? From your previous comment, I somehow got the idea that you were going to describe an attack against Ethereum's Proof of Stake.

This section of this article does a good mathematical analysis of RANDAO biasability in the context of leader selection in Ethereum's beacon chain, in my opinion:

https://eth2book.info/altair/part2/building_blocks/randomnes...

The takeaway from the math is that while it's true the RANDAO is biasable in one-off circumstances through the last-actor pre-image withholding attack you describe, trying to use such an attack to influence network consensus is a no-go. The majority of honest actors ensure that any attempt to bias the RANDAO is ephemeral, where it's only useful for doing a bit flip attack at an unpredictable block height against improperly implemented casino software.

I have to say I am a bit disappointed. I thought you were going to describe an attack against PoS.
Ask HN: What are your weird ideas about Distributed Systems?
Most weird ideas are either unlikely to work because they miss key insights, or unlikely to gain traction because they seem too weird or against-the-grain. It's easy to dismiss weird ideas for fear of them living in the first category, but it's interesting to discuss them in case they're in the second.

What are your weird ideas with respect to distributed systems?
IMO there is still a lot of untapped potential in the south eastern German states Saxonia (the state where Dresden is located) and Thuringia. Both states historically had gread, very advanced industries and craftsmanship, which suffered a lot during socialist times. There are still great people, but it obviously takes a long time to catch up once the whole industry lost its competitiveness due to a failed political system.
On the contrary: https://www.urbandictionary.com/define.php?term=doomposting

There is an entire generation raised on "doom porn", having almost constant exposure to tech.
Does this work on Mac M1?

Last time I tried setting up libvirt/libguestfs on my work Mac M1 I ran into various problems and gave up. This was somewhere around April 2022.
AI will just replace existing jobs. It is unethical since a lot of people will be destroyed but our leaders sponsored by the majority's insatiable appetite for power will soon make it legal.

AI is a new tool that will automate away a lot of workers like other machines.

What happens with these workers is what defines us.
If it is made illegal it'll probably be applied to the sites that distribute stuff like that, not this model itself.
I use borg backup for this very use case.

Not free, certainly. But it's a system requirement there to be able to rebuild the system in a non AWS environment.
That seems unlikely, given that making up hurtful stories about people and transmitting them via text or voice is still a thing. Everyone knows that anyone can make up any story they want without any technology whatsoever, and yet spreading rumors is still a thing.
> ...I didn’t have a clear direction...

Yeah, that's one issue that i have as well. While, yes, i mentioned motorcycle mechanic as one option for me, i have other directions which i can take...and just can't decide. Sadly, i lack the cushion that you made for yourself, so i feel like whatever directions i decide, i'll have to be careful, lest i get to my latter years a tad too poor to stop working full-time, etc. ;-)
My hunch is that the real geopolitical upheaval of the next 50-100 years will be post-decolonization. A number of these nations were thrown together by a completely foreign power not just with an interest in splitting countries up or grouping them together but doing so in a way that prevents them becoming a peer level opponent.
Which means realistic micropayment solutions must be discovered first.
This is a kind of poor engineering writing in which the author finds a product to not be tailored to his precise tastes and concludes it is because the company is user hostile and/or doomed.

The bit about Snowflake not being incentivized to care about costs are trivially untrue. The rest of the article perceives trade offs as simple feature gaps.

For example, Snowflake gives the user more latitude to distribute workloads among “warehouses” than other offerings. With poor distribution the author will experience the workload provisioning issues he describes.
Probably has more to do with how slowly the field evolves (esp. wrt what undergrads are learning)... so I imagine there's a huge training corpus for what is ultimately a very limited number of meaningful assignments to give.
So what's the intermediate step on the spectrum? Publicly call out the vendor and model, yet vaguely enough that others will have to find the specific gap(s)? Tell the press?

If one publicly discloses some mitigation it's usually enough to give malicious actors enough to go on anyway.
An acquaintance bought one and sent it back within the day. iOS is apparently "the worst non-meme OS" they've used in a while.
Ok lovasoa, we will definitely give this a thought!!! Just out of interest (and so I can understand your position / usecase better), how would the current license prevent you using it in any open-source projects at the moment?
hotpot.ai should offer stable diffusion later today and available via API as well.

we're also building an open-source version of imagen, if anyone likes working on this kind of applied ML (need ML + design help).
We can tell the difference between muzak and "real music"; we just dislike the muzak. But the real risk and likelihood is that we get to the point that AI will be generating art that is indistinguishable from human-generated art, and it's only muzak if someone subscribes to the idea that the content of art is less relevant than its provenance. Some people will, particularly rich people who use art as a status signifier/money laundering vehicle, but mass media artists will struggle to find buyers among the less discerning mass audience.
Strangely powerful data. I occurs to me, you can get crows to hate your enemies without befriending them first. Just by masquerading as your enemy and throwing a pinecone at them.

Maybe a website, pay to have someone put on the crows' 'shit list'?
This wouldn’t work because you have to somehow remove most of the copper under the soldermask without removing the soldermask.
I have a Firestick 4k Max on our main TV and a standard 4k stick on the other TV. They just work compared to my Shield TV which always seemed to fighting my home theater setup. I got them through a Prime deal, so I think I spent a total of $75 for both.

I've been tempted by some in-app features that only seem to work on AppleTV devices but not enough to spend that much when my current devices do the job so well.
Ask HN: Why disable SSH root login with key only?
After they burn through series A and have upset investors, expect a drone delivering a dead pigeon with a message tied to its foot and a statement about pivoting.
Parent comment seems more focused on the probability/distribution than in the reasons why.

The anecdote seems true from my experience as well; people tend to either break their phones often or very rarely/not at all. Of course it could be that you are far more likely to take notice of someone breaking their phone if it happens often.
> Specifically, that weight loss in the long term is not only practically impossible but also actively harmful.

Depends what you mean by “long-term” but now at 30 I am both lighter and more muscular than I was at 18. Based on the results of a recent physical exam I don’t see any harm having been done.
Yes - to elaborate, a constructive logic is a logic without P or not P. This doesn't have much to do with whether a tool can tell you what obligations you haven't proven. The separation logic based provers I've used have all had excluded middle.
Check out the melodies I made with an AI assistant I created (human-in-the-loop still but much quicker than if I tried to come up with them from the scratch): https://www.youtube.com/playlist?list=PLoCzMRqh5SkFwkumE578Y.... There are also good AI tools for other parts of making music, like singing voice generation.
> So, in a conventional reactor, you use nuclear fission to heat/pressurize water and then use your hot, slightly radioactive steam turn a turbine.

Only in the more primitive reactor designs (BWR, Boiling Water Reactor). Most are of the PWR, Pressurized Water Reactor, design. In these, the water in the reactor is still liquid due to being held at pressure. This pressurized water is run through a steam generator [1] that boils non-radioactive water that never comes into contact with the reactor.

1. https://en.wikipedia.org/wiki/Steam_generator_(nuclear_power...
There is also indirect method - ECU precisely comparing each wheel's rotation speed, with assumption that lower-pressure tire would have smaller outer radius, thus slightly higher angular velocity. This method is somewhat common with European cars.

It's very cheap (assuming car already has rotation sensors for ABS, and adding a software routine doesn't cost much either), and maintenance-free.

But there are drawbacks, too - it doesn't detect all tires deflating at the same rate. And also, ECU has to be very conservative to avoid false-positives, average a lot, pause comparison when turning, etc. As a result, you only get the tire pressure warning like 10 minutes later that dTPMS would've flagged it.
The problem comes from the early adult newsroom interns responsible for sourcing content. They don’t know it’s fake, it sounds like a good click-baity article to them, so they run it. It happens.
I hope we manage to improve the design over the 1960s version MSRE which cost $130m to clean up due to unforeseen problems including a near-criticality incident. Certainly there is a lot of research to be done.
A Brief History of Drywall
and .... it's buggy

try https://www.google.com/search?q=timer+724+years

click on start, looses most of the time
imo I think there is something indescribable that links some of those shows to some degree. Gorgeous, expensive, high-production values and a "mature" form of color-grading, perhaps? Or maybe that just means they look distinctly better than Netflix shows.
Oh no, the people we kicked off of the establishment platforms and told to build their own platforms actually did so!
It depends on the domain. Artsy will do better with Stable Diffusion, but realistic/coherent output with Stable Diffusion is harder to do especially compared to DALL-E 2.
Seems like Indie Hackers like site but for former/wanna-be developers might be a good idea.

A dedicated site where one can explore various options, transitions, pros and cons, etc.
CopyAI uses fine tuning extensively
These are very cathartic as well:

https://youtube.com/playlist?list=PLuSOaenJ4rbROEqpAew6ULXJf...
Historical reasons for the resistance to recognizing Covid-19 is airborne
Thanks! By digging seven layers deep in that link, I did eventually find it.
"Use Restrictions

You agree not to use the Model or Derivatives of the Model:

- In any way that violates any applicable national, federal, state, local or international law or regulation;

- For the purpose of exploiting, harming or attempting to exploit or harm minors in any way;

- To generate or disseminate verifiably false information and/or content with the purpose of harming others;

- To generate or disseminate personal identifiable information that can be used to harm an individual;

- To defame, disparage or otherwise harass others;

- For fully automated decision making that adversely impacts an individual’s legal rights or otherwise creates or modifies a binding, enforceable obligation;

- For any use intended to or which has the effect of discriminating against or harming individuals or groups based on online or offline social behavior or known or predicted personal or personality characteristics;

- To exploit any of the vulnerabilities of a specific group of persons based on their age, social, physical or mental characteristics, in order to materially distort the behavior of a person pertaining to that group in a manner that causes or is likely to cause that person or another person physical or psychological harm;

- For any use intended to or which has the effect of discriminating against individuals or groups based on legally protected characteristics or categories;

- To provide medical advice and medical results interpretation;

- To generate or disseminate information for the purpose to be used for administration of justice, law enforcement, immigration or asylum processes, such as predicting an individual will commit fraud/crime commitment (e.g. by text profiling, drawing causal relationships between assertions made in documents, indiscriminate and arbitrarily-targeted use)."

The last point seems to be the only thing that's not illegal, all other restrictions seem to be covered under "you are not allowed to break laws", which is somewhat redundant.
That's relatively trivial by going at relativistic speed.