skysight-inc/HackerNews huggingface dataset:
I had no idea what that meant, even though it makes perfect sense.

This is absolutely amazing. Far better than I was expecting.
Please don't post swipes to HN. It would be fine to explain what the point was, in a neutral way.

https://news.ycombinator.com/newsguidelines.html
> Permitting standard users on a Linux machine to open 445 has security impacts for windows machines

I can connect my phone to your WiFi and now I'm not a "standard user on a Linux machine" anymore but an administrator. The only way to protect the Windows users are with proper network security/firewalling.
Case insensitivity was a huge mistake in computing really. Most languages don't have cases and its very non trivial to convert between cases. Should have treated every char as completely unique.

Sure. At the user signup side, block emails that are too close in ways like case, but as a sender you should always treat them as unique emails.
True, at the end of the day there is still a huge amount of work to be done modelling the access your application needs. But I do think that can be conceptually simple, and all the horridness of the SELinux toolchain makes it far more scary than it needs to be.

That being said, I feel like like with containers and a generic SELinux/AppArmor policy that restricts the containerized app, there's really no need to even bother anymore.
> Read the stack trace / error message

Unless you're using golang. There's no stack trace by default. It's left as an exercise to to programmer to wrap and add context to errors.
The Go Language Collective on Stack Overflow Has Been Decommissioned
yeah that's the biggest issue with node/npm. 90% of your code lives on the registry, and you probably not even sure what 99% of it actually does.

would be nice if you could somehow reverse the compilation of your build back into a source folder, instead of having node_modules - but i think that's probably not possible.
thanks for sharing. that is really well done. monument guesser was great.
The title of this piece is clickbait and inaccurate compared to the content.

And low quality media source.

The speaker is credible (being CM, but it assumes it's an entirely authentic video).

This is partly a redux of the ideas of Chalmers Johnson but extends farther into macro economics, history, and current events. https://www.youtube.com/watch?v=Q2CCs-x9q9U

It's also doom prediction, in the spirt of people like Thom Hartmann.
The most relevant definition (i.e. the only one that states anything about evidence) from your link seems to agree:

> 2.b. firm belief in something for which there is no proof

With respect to the Christian Bible reference, I don't read it as saying there's no evidence for what they believe; I think you'd have a hard time finding a Christian who does.
i thought leetcode interviews was all you needed, and, screw senior people with actual experience?
Great. But it's not working. Hopefully majority realize that it is just agenda for sell many unused doses.
Isn't that exactly what bundling does?
Anyone who automatically trusts non-MSM as somehow superior, a priori.
Biren is made at TSMC, exactly as NVIDIA A100 and H100.

Biren is designed in China, like A100 & H100 are designed in USA.

As long as TSMC is not forbidden to export to China, forbidding only the export of chips designed in USA can no longer affect China, when they have pretty much identical chip design capabilities with USA.
Depends on the libraries involved. Do you write anything in assembly?
Yeah, you have to first describe what the image is supposed to be and then it picks it up from there. Got some good results with digital art.
NYT editors knew exactly what they were doing when they published that article with that photo. They’re no strangers to the art of skeevy subtext.
I try to only use 20+ year old tech and it's done me good...

Currently SQL (SQLite), Perl, PHP, Bash, text files, csv (psv), HTML, JS, CSS.
Just a slight clarification/correction/question: as far as I can tell, M in MURI is for multidisciplinary. That means the DoD is seeking interdisciplinary research (and maybe intra-university collaboration), not explicitly inter-university work -- is this correct?
ISBN-13: 978-0984782857
“small l” liberal, not the political faction
There's technically no reason that copy-pasted skyscraper apartment buildings can't be built to a high standard, quality-wise, and it certainly may yield savings to the entity commissioning the project.

But there's no reason they can't be built to a low standard (and this subthread is about Hong Kong, where that is certainly the case) and there's nothing preventing cheaply-built, shabby, cookie cutter housing from being sold at exorbitant prices (ditto).

Your statement, in taking issue with someone else's completely accurate description of HK buildings as copy-paste jobs, that you "don't really accept any discussion of reducing subjective eyesores when it comes to housing" in tandem with an invocation of "ability to have shelter" signaled a deep lack of understanding about HK's housing situation.

I'm telling you that HKers aren't seeing any of the "ability to have shelter" benefit you seem to be imputing to ugly, identical tower blocks. The wait list for copy-paste public housing is years long and it's a byzantine process to get into an apartment even then. Private copy-paste housing costs an arm and a leg for cubby-hole sized micro-apartments, so much so that 100-200 thousand people at any given moment are living in desperate conditions under spalling concrete, with rats and bedbugs, and shared toilets and "kitchens" that I suspect would give you the dry heaves if you were to take a tour of such places.
Vaccines have never been expected to have 100% efficacy except by the under-informed. Just off the top of my head I can list typhoid, dengue and malaria as diseases that have vaccines with fairly low efficacy rates.
Caveat that the text of the laws is often disconnected from what they are there for.

For instance I've seen many local laws explained as "preserving local heritage and historic places" when their actual intended effect is to block affordable housing.

I assume you also see specific building rules that increase the building cost for seemingly no reason, when in practice it helps ruling out low income people moving in. That's from the top of my head, but I'd expect most laws going further that "don't kill people" to be at least half motivated by something else that the stated intent.
A cat can train you to attach different buttons to play music that mean different messages.
It is not necessary to know specific product names to find AWS assets on a cloud attack surface.
You can do many kinds of research with minimal overhead, as long as everyone is self-employed and your funding comes with minimal restrictions and reporting requirements.

I did that for a couple of years as a CS postdoc on a private grant. I believe my overhead rate was 15-20%, which was mostly health and other insurances. To reach that, I did accounting and taxes on my own. I also had a loose affiliation with a university, so I didn't have to pay for office space or computing.

If you start using paid services, hire employees, and accept more restrictive grants, your overhead rate can easily climb above 50%.
right, it's the fault of regulators that every major industry has come do be dominated by a small handful of conglomerates that survive by mimicking each other and consuming every smaller challenger that might one day, through the power of innovation, grow and compete with the existing monoliths.

oh wait, that's the opposite of regulation that caused that. my bad.
AI Art 101
How can we have all just gone through the same pandemic and have anyone come out the other side thinking

"You know what that needed? More authoritarian control of information."
Recently saw compelling evidence all the Challenger astronauts are still alive. Who was on the shuttle?
Oh please.. Art is not a sport to winning competitions.
Free CAs are prone to fraud and abuse because they have no innate funding model and there's no barrier to anyone issuing a cert to any particular domain while attempting to circumvent domain authentication.
The latest season of Westworld had a great vision om what prompt based character modeling could look like.
In both Vietnam and Afghanistan, the US was participating (on the losing side) in an asymmetric civil war between local factions. In Taiwan they would be allied with a modern state, with a modern military and very high support among the population, attempting to repel an invasion from a (de facto) foreign state.

Completely different scenarios.
I recommend that you not host DNS with your registrar. And if possible, that you not host DNS with your hosting provider (although, that can be more difficult).

If you have a high value domain, you might want to look for a corporate registrar, like MarkMonitor or CSC, or anyone else who can do Registry locks (which are very different than registrar locks and are rather inconvenient, but potentially very useful); but know it's going to be expensive. I also had a good corporate experience with register.eu, they've got a lot of ability to satisfy foreign presence needs for restricted TLDs, if that's something you need/want. If it's a low value domain (like my personal domains), I don't have strong feelings, except for the love of whatever you hold dear, don't use Network Solutions; they were a fine choice when they were the only choice, but ever since we had options, they should have been used. A lot of registrars are really pushy with upsells and what not, so I've tried to go with no fuss registrars over the years.

In terms of DNS services, I don't have any particular recommendations; I personally run my primary DNS on my hosted machine and secondary with Hurricane Electric, which is free for my usage. There are (or were) several free secondary DNS services out there, but the one I used to use stopped maintaining their website (TLS 1.0 only, certificate issued 2014, expired 2015) and I already had an account with HE's tunnel broker, so it seemed like a reasonable choice. I still have a domain I host for a friend that uses that old service, because I can't get my friend to update the glue records at her registrar; the service still works enough, I guess.
> Phones should be too.

Why? In the not too distant future it's likely the majority of people will have cameras implanted in their eyes. Maybe you don't think that will happen but to me it seems inevitable.

So jump forward to then, everywhere that cameras are banned now will have to change (immigration at airports, bathrooms, secret rooms at companies, etc...) Sure maybe at first people will say "you can't come in this room unless you turn your eyes off" but it won't be long before that won't be an option or it will be such a large burden that no one will be able to be truly themselves without their enhancements.

Or, let's play another thought experiment. Some people are claimed to have photographic memories. What if we invent ML to generate images of those memories and what if they turn how to be close enough representations as to be photos. I'm not saying that would ever come true or even be possible. But as a thought experiment, if it was possible to pull photos out of your head for a few hours, days after you experienced something, what would have to change about any place that current says "no photos". It seems unlikely people would put up with having to quarantine until their memories decay enough to not remember. And, while we're dreaming up the future, there are already implantable memory chips so augmenting yourself in a way your memories don't degrade is certainly some not too distant possibility

I know the people who would hate these futures will downvote this comment but to, those are the same people who in the 80s thought at world where everyone has a cellphone and can be reached 24/7 and call anyone in the world was some kind of hell. And yet here we are.
I thought the crude MS paint images were a joke - I was not expecting them to be useful as actual input for the final image!
"Eschew flamebait. Avoid unrelated controversies and generic tangents."

"Please don't pick the most provocative thing in an article or post to complain about in the thread. Find something interesting to respond to instead."

https://news.ycombinator.com/newsguidelines.html
We're straying too far from the point I was trying to make. National identity is plausibly a dangerous thing to hold up as a virtue, irrespective of the comparison to local identity. Russia's invasion of Ukraine, China's designs over Taiwan, WW1, WW2, trade protectionism, closed borders, and so on. These things are not all about national identity, but national identity does play a non-trivial role.
It’s not just easier than constructing novel thoughts - it’s safer, too. You get to leave the impression of being an eloquent, persuasive intellectual without any of the risk that comes with actually expressing something that people might then dislike.
attackers also want persistence and lateral movement, and privileged/kernel access makes that way easier
> This was during the 90s in a software development company in Mexico.

Version 1.0 of svn was released around 2004. According to wikipedia the project was started around 2000.

(Sidenote: there seems to be cognitive dissonance that svn was released much earlier than git ... but svn was released in 2004, and git in late 2005. There's a less than two years gap in between, yet so many projects had been "stuck" with svn...)
"their brand reputation has turned to mud"

Meh. You're paying attention only one small side of the story. Most by far are pretty happy with the product for the price.
> What is is Xunlei and BaiduPan?

downloader software and storage service.
One death from overdose is more impactful than one death from Covid, but if the increase in number of deaths from Covid (0 -> 400,000/year [1]) is much greater than the increase in deaths from overdoses (78,000 -> 100,000/year [2]), then Covid is the primary cause of the decline. Deaths from accidents also only increased 39,000 -> 43,000/year [3].

Let's say the average age of someone who dies from Covid is 75. Their life expectancy is another 11 years. [4] And someone who dies from an overdose or accident at 30 would have had another 48 years on average. There would have to be (400,000*11)/48 = 92,000 (rough math) additional overdose and accident deaths to come close to the impact Covid has had on life expectancy decline.

[1] https://ourworldindata.org/covid-deaths

[2] https://www.cdc.gov/nchs/pressroom/nchs_press_releases/2021/...

[3] https://www.nhtsa.gov/press-releases/early-estimate-2021-tra...

[4] https://www.ssa.gov/oact/STATS/table4c6.html
Speculating - maybe they thought the other player had better chances of winning?
This article is nonsense. Privileged ports are a security feature. They have literally nothing to do with mainframes. On multi-user systems, they're incredibly important because they give external clients confidence that the services provided on them are authorized by the system and not just by any user -- some of whom may not be as trustworthy as others. Most systems in this era of cheap hardware are single user, BUT NOT ALL SYSTEMS. It's fine for Windows and Mac OS to do without them and it's fine to configure your own Linux system to disable them if that's what you want, but it's completely insane to argue that they're a security flaw because some people work around them using insecure practices. There are plenty of secure ways to work around them, most obviously by USING A NON-PRIVILEGED PORT. Start your service on port 8080, for example, and give out a URL like http://example.com:8080/path. It's really that simple. Take the time to understand the actual purpose of a feature before urging others to abolish it.
This article seems completely hung up on how a NYT editor defined a dark pattern,

> These are examples of “dark patterns,” the techniques that companies use online to get consumers to sign up for things, keep subscriptions they might otherwise cancel or turn over more personal data.

But I wouldn't agree with that description. I've always thought of a dark pattern as something inherently trying to trick you or otherwise do some deceptive. From wikipedia [1],

> A dark pattern (also known as a “deceptive design pattern”) is "a user interface that has been carefully crafted to trick users into doing things, such as buying overpriced insurance with their purchase or signing up for recurring bills"

Using that definition, I wouldn't say that describes how NYT's paywall works. Also, NYT literally explained how the fucking system works—How is that a dark pattern then?

This is a trash article that's attempting to make something out of nothing.

[1] https://en.wikipedia.org/wiki/Dark_pattern
Facebook used to do that for you though maybe that has been curtailed? The tech is there in any case.
Is this going to cause another refugee influx and crisis?

On one hand there people are going to starve to death if they don't get help. Their belongings are gone and land is simply unusable.

But also, Pakistan seems really far away from all of the European countries or any other first-world place. Unless they are going to migrate to India.

Either way I hope for the best, ideally countries would chip in and give enough aid that the flood victims can rebuild and don't need to migrate.
Ouch, you've been breaking the site guidelines so often and so egregiously that I think we have to ban the account. I've therefore done so.

If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future. They're here: https://news.ycombinator.com/newsguidelines.html.
tolower() works mostly well in ASCII and languages which don't have weird rules (=works mostly well in english).
> Also avoid traits and mixins (run from the dark magic)

I've seen the word "trait" used to mean different things in different language communities. Do you mean it like in Rust, in Ruby, in Scala, or in C++? (Since you mention mixins, I'm guessing like in Ruby?)
I believe systems like clearview.ai are forerunners for ... well, everything.
> If the SSH process dies or is restarted for any reason, the user level process can harvest usernames and passwords.

That wouldn't work because the user level process wouldn't have read access to the machine's host keys in /etc/ssh/*_key, so when things connect, they would get known_hosts warnings and nobody clicks through those
Thanks, that makes some sense.
So why not simply forfeit then? It would have achieved the same goal without the shameful fakery.
Great description.

I’m constantly impressed by how much people nod when I spout some nonsense. It’s dangerous, especially if you’re prone to believe every praise you receive.
If laws are so openly subject to interpretation as to qualify for your scenario, this legislation would change nothing since doctors can presumably already be suppressed under "unprofessional conduct" by negligent treatment etc. as determined by CA's Medical Board.

On the other hand, if laws were not that subject to interpretation, then I don't see how it affects your scenario.
Arguably, the writer confused "abstract" for "generic".

> The purpose of abstraction is not to be vague, but to create a new semantic level in which one can be absolutely precise. (Djikstra)
Even Python 2.0 is over 20+ years old!
I think this is the case for most of the well-known team sports. The professional teams pull players from around the world, and have lots of experience playing together.

Plus the professional teams are have intentionally developed rosters. In the Olympics, if it turns out that Canada has produced the two best goalies this year, then the world's second best goalie will be benched unless there's an injury.
Heroku’s free tier legacy: The shoulders we stand on 15 years later
previous discussion https://news.ycombinator.com/item?id=32639681
Thanks for answering. If its Publicly sourced data. There is huge opportunity for some create a DATA DAO where data better labelled and people can use their data to use the AI for their usecases.

What do you think of challenges for such use cases?
Posts in three years: my crypto wallet got hacked and my Proof of Age coins have been stolen, now the government is forcing me to attend kindergarten and my wife was arrested for child abuse.
No they don’t. They have a totally obsolete, totally ignored (by the government and everybody else) article in their constitution claiming China, which they can’t remove because the actual China has threatened to immediately invade them if they do.
Downgrade macOS App Store Apps
Cloud-native distributed search engine written in Go
> In the not too distant future it's likely the majority of people will have cameras implanted in their eyes.

No complaints if my infrared LED suit blinds your vision.
I prefer to use for loop instead of list compressions. List comprehensions are more compact but I find for loops more readable.
If he's that into cuckoo clocks he's probably in touch with other people who share the interest. Talk to him now to find out who those friends are. Those are the people you offer the clocks to.

It also means you get to spend time with your father talking about something he likes. That time together is what you will be thinking about when passing those clocks on.
If you sell anonymized location data, it would be trivial for whoever has the data to figure out who the individuals are.

If you work for a high profile company, hedge funds will use this data to determine where you are traveling and who you are meeting with. Governments buy this data to track their enemies. This is not something you want to be a provider of.

Additionally this is not something you want to brush off as an "agree to disagree" sort of thing, you should try to understand that this sort of thing puts your customers at risk.

The claim that "We did not have a single incident of abuse" holds no water because you would have no way of knowing something like that.

Honestly, how would you know that some foreign government or hedge fund isn't buying your customers data from the 3rd party you are selling that data to?

Please check out this article published in the NYT some years back. It's a long multi-part series, but worth your time.

https://www.nytimes.com/interactive/2019/12/19/opinion/locat...
Judging by the number of times I've had this fight with developers, and seen other people argue it online, I'd suggest the biggest falsehood programmers believe is: Your random VPS can just send email from any address you like and expect it to be delivered.
I never heard about A100 and H100 before. Is it a part of marketing? Sounds like it.
I had this happen in a remote interview recently. I think the candidates helper had a language barrier problem. They almost made it through.
Etsy strike organizers are forming the Indie Sellers Guild to help merchants
The first thing I thought when I saw the headline.

Great discussion on an almost unbelievable story.
I believe that video codecs will probably work along these lines at some point. Maybe have a base AI layer and then a more traditional codec layer on top to refine it.

I think there are already AI-based codecs for reducing bandwidth of video calls with faces.
The ssd on your laptop
That’s all well and good until that means no one with interesting work or good pay wants you to work for them.

Which for many people is a real concern.
Life expectancy in many places in the US South was lower than Bangladesh before any of this began. I can't imagine how things are now.

https://www.livemint.com/Opinion/rymQuY4oUyBsIi4HPbxRAP/Is-M... (Bloomberg article outside paywall).
As you helpfully state in your reply, that is not a nbd worth of effort. (Baseline effort being hunt-and-peck on dedicated keys)
> As Marc Andreessen remarks, in every case, the culprit is regulation.

Mark 'not in my backyard' Andreessen*
How about, you know, handling error conditions?
Automated facial recognition and image correlation has been widespread and used on photos on the internet for a decade at least now.