skysight-inc/HackerNews huggingface dataset:
Qualcomm’s server and laptop ambitions may be in trouble
Would you recommend update to the NachoNacho.com website? I was more hoping to generating a discussion around the layoffs and how companies aren't having tight financial management right now. Spend management, death by 1000 cuts, is at the core of why a lot of these companies are failing. Frankly, SaaS spend, which is about 30% of the spend for these companies is also being wasted by about the same percentage. Yet, the first thing they resort to is layoffs? There are so many ways companies can actually tighten their budgets without layoffs. That's the real story.
I introduced a code generator at work and it was quickly adapted and modified/upgraded by colleagues. It started out as a simple protocol generator (think Google buffers but 5 years before Google buffers became a thing) and was then expanded over the years by a number of people to handle a lot more (databases, model specifications etc.) generating C++, CMake, Typescript, Java, and C# code. There is no open source generator out there that can handle all the things this tool does. It has now become the first thing people install when starting new projects. I think the key to its success is that the code generator itself is really simple. So you can figure out how to improve it in no time. Also, the generated code is super pretty. It even includes comments explaining what the generated code does. This was a design choice by me to ensure that people trusted the generated code. Without it I don’t think the generator would have been successful. If people can’t understand the generated code then they don’t trust it and is less likely to use the generator.
To avoid laying off more Snap employees they're firing those weird Europeans working on an app most Americans haven't heard of. It's damage control.
Nbdy wrts lke ths 4 hmns so wy do we wrt lke ths for prgrming? I alwys c sht lke "CompPtr". What? Is tht a Computer or Complex Pointer? Wtf?

Basically everyone agrees with you but when it comes time to name stuff all humans suddenly forget everything and think brevity is some sort of required part of naming in code.
Kaidan's End-to-End Encryption Trust Management
The effect of technological innovations is always that things get cheaper and thus available to more people and often that leads to bigger changes. In this case I think you're right about this having a big impact on design; most designers won't lose their jobs but they will have new creative tools and I think they may start to use AI generated art in place of stock photograph. The average joe will be able to create stock photos for their blog posts and websites and maybe that will take away some amount of jobs, but those were probably not very good jobs anyway. Stylization using image to image techniques and inpainting are all tools that could save artists and designers time while also offering new capabilities. The AI tools definitely make it possible for a non artist to make a comic, illustrate a poem or an album cover, or make art for an indie video game. So in those ways more people will get access to things that they might not have before.

I think the next wave will probably be video related AI tools and those will also be really impactful.

At present it still takes a lot of trial and error to create what you want, something that a knowledgeable designer can probably do better than the average person, so I still see a need for design people in the loop in most cases.

I can definitely see people starting to use AI tools for memes - it will be interesting to see if that is as sticky as memes are today. I think a lot of their value comes from recognizable formats, but AI art could definitely provide some interesting variety and new forms of expression.

Fakes and misinformation is still a threat. We have yet to have a big event triggered by a fake AI generated image, but I think that day is coming.

One thing about AI generated art - while you can make some crazy and interesting combinations (something that is fertile ground for artistic experimentation), the AI models can only ever interpolate _existing_ artwork. They can never come up with a new style or something that nobody has ever done before. One could argue that all art evolves from past art, but I think if we only ever used AI tools then creativity would eventually stagnate as the tools could only ever regurgitate a variation on something that has already been done.
My lowercase x and n look quite similar, especially in subscript-size. When I was an undergraduate, I got marked down once because the marker thought I had written a limit as x (rather than n) tends to infinity, which made no sense in the context. Nearly 20 years later, I’m still bitter that I wasn’t given the benefit of the doubt.
BuildItSolar: Renewable energy projects for Do It Yourselfers
I come from an ag background, and when crossfit started getting big we joked about charging people to work around the ranch. Not surprised to hear it's a real thing. No doubt, though, that ag work can be physically demanding.
Meta is shutting down its game streaming app after failing to challenge Twitch
The outcome may have been the same from the thrown match but the winner would have been tired.

It’s a decent enough trick and I’m a bit surprised that a county would compete against itself in the semifinals.
Required parking is a terrible idea. By requiring parking to accompany new development, the government reduces demand for public transportation. Then, since no one uses public transportation, nobody wants to fund it. Then you're caught in a car dependent loop which wastes incredible amounts of resources.
This site is so full of ads it’s totally shit to read. Wow.
Perhaps services could have different priorities, and if the wonderful systemd starts a rando user service before the system service, the system service starts anyway and the existing user service gets booted off the port.
(And I’m not sure his claimed alternate representation of 12 adds up (so to speak)).
> You could for example, on every chip put in essentially a public private key pair, which authenticates it and allows it to work

intel SGX already involves a per-chip keypair with intel as the root of trust. it just isn't required to use the rest of the chip
Besides the the comment I replied to?

Whataboutism is prima facie, irrefutable, unquestionable evidence of butthurtism.

The phenomenon is so prevalent that the phrase 伤害中国人民的感情 causes newspaper editors and online commenters to roll their eyes because if you publish an article about how heavy rain has caused flooding in a province somewhere a dozen state-controlled media outlets and ten thousand weibo posters will drone on about 中国人民的感情.

https://translate.google.com/?sl=auto&tl=en&text=伤害中国人民的感情&o...

https://www.theguardian.com/commentisfree/2017/sep/08/you-sh...
Ah I see what you mean now, that does make sense.
Twitter doesn't exist solely to harass and cyberstalk people. KiwiFarms does. That's the difference.
They’re referring to people who are incompetent and take roles in which they are not qualified to take.

In the case I was referring to, the developer who showed up for the job couldn’t even write a single line of code. We caught this quickly, but not immediately. There were certainly monetary damages from onboarding costs and time wasted, and non monetary damages from reputation with our customers.
If you want to disable priviliged ports on linux you can simply run this command, or add it to /etc/sysctl.conf:

# echo 0 > /proc/sys/net/ipv4/ip_unprivileged_port_start

As others have said, CAP_NET_BIND_SERVICE already solves this issue without root, as do the myriad of other configurable options in the linux networking stack. You can configure different port handling rules on a per-container basis, such as granting CAP_NET_BIND_SERVICE for the entire container -- and the network namespace will prevent tomfoolery on interfaces which aren't part of the container.

The argument against privileged ports is mostly a collection of straw men. It's true they can't create remote trust (because you can't trust the integrity of the remote system), but this doesn't mean privileged ports are useless: They still guarantee no reservation issues among system processes. For example, privileged ports prevent a user from crashing sshd and then screwing around and binding their own process to port 22.

This is a rant written by someone with just enough understanding to be dangerous, but not quite enough wisdom to know why things are still the way they are. Most of the complaints raised are subtly inaccurate.

I would absolutely not trust running the kitten webserver after reading this article.
I don't get it, just don't bleach your skin, was it hard to understand?

Also what do you mean by people of color? The skin tone of human being is a continuous spectrum from milky pale to midnight dark and every shade in between. I supposed as skin care professionals you must have a scientific way to quantify that, in stead of just "people of color".
> It makes me wonder if they are just getting into a completely different program with the "American university" name.

Not op, but I can answer this.

Short answer: Yes.

Longer answer:

Most non-terminal Masters degree programs are degree mills, even at well known universities. These are almost always pay-to-play with few opportunities for scholarships, TAships, or whatever.

Most “real” students will enter a doctoral program and take a masters if they decide a doctorate is not for them.

Note that there are exceptions, especially for folks who are changing their career/degree path from undergrad, but these are relatively rare in my experience (at least at good schools).

A few simple examples from Harvard:

- the LLM law degree is a cash cow for the law school. It is only open to foreigners, and it is almost always funded by a company or the government. Ostensibly this program exists because other countries have undergrad law degrees, but the reality imho is that it’s a juicy cash cow that also generates a strong network.

- Harvard EdM degrees are a 9-month program with no thesis — coursework only. There is nothing wrong with this, but it’s a very weak academic program imho. It might be a good practitioner degree, but that doesn’t seem very Harvard-esque.

- The MA degrees in the yard (esp arts and humanities) and the div school are pay-to-play ways for Ivy/Harvard wannabes to get the Harvard stamp of approval. You have to be a decent student to get in, but nothing exceptional (e.g., compared to doctoral students). The key point is that the student is willing to pay. These degrees don’t really say much about the program or the student other than they were an above-average college student who was willing to pay to get the Harvard badge.

I’ve seen similar programs at very good state schools, with the standards lowered a bit. You see a lot of foreign nationals (looking for h1b jobs after graduation) and vets on the gi bill (often coasting on the government dime with no academic skills or ambition) in these state school programs.

If a professor is from a foreign country and/or has a relationship with schools/businesses in foreign countries, it is very easy to use masters degrees as a gateway to employment and residence in the US, and the school largely doesn’t care as long as the student pays and (in some fields) is able to get a job.
> GPUs can be imported through other countries!

The chances of nothing getting through is zero, but it’s harder to do at scale and much more expensive. Plus the US does go after foreigners that help targeted nations dodge sanctions so can make it very miserable for China’s smugglers further exacerbating the shortage in China.
I don't get it though, if Ye Zhaoying won over the other person with a higher win rate, that means she's better and can make it into the final on her own merits, no? If Gong Zhichao couldn't win a match against Ye Zhaoying, then they might not even win against Camilla Martin.
I'm not sure what HTTP headers have to do with anything. Using "bpp" to mean bits per pixel is extremely common in image encoding. See e.g. https://en.wikipedia.org/wiki/Color_depth where an uncompressed image is often 24 bpp (8 bits per channel). It's also common to use bitrate (rather than byterate) in audio encoding, see e.g. https://wiki.hydrogenaud.io/index.php?title=Bitrate
I was referring to Joe Rogan laughing at the story. I'm not going to judge someone based solely on their reaction to a story being told to them 12 years ago.
I would equate it to being Closer understanding it logically. Which was my point.
Okay, so let me make sure I understand it. You have your own personal key, and CA key. Your personal (private) key lives on your workstation, and CA key lives on RPi. There are some other machines that you want to SSH into. They trust CA public key. To log into them, you download client certificates for your personal key, signed by CA key, from the RPi, and present them to remote SSH servers, while proving to them ownership of private key corresponding to the certificate. The remote servers trust the certificate issuer, verify that you own the certificate’s private key, and let you in. Do I get it correct?

If so, how do you issue the certificates that live on RPi? Those certificates have some limited validity period, so that you can worry less about leaking them, which was your concern in the first place. Therefore, you must reissue them on a regular basis. How do you do that? What’s your process for that?
I wonder what other remote settings might host this phenomenon. Paired programming?
> at a minimum ram contents will be plaintext

The only thing that's going to remain resident after a push/pull is os level file system cache. There's no daemon when operating git over ssh.

Are container escapes on major hosting services common enough to even worry about? I don't hear much about them.

Or are you concerned about AWS/Vultr/Digital Ocean stealing your code? That seems like paranoia. They have world class developers, best in the industry. They don't want your code. This isn't the movie Antitrust.
Civil society is a good, but it is not the highest good. We do not need to throw free speech away because it might infringe on civility. Especially when it's out and away from public and attention minding it's own business.
Just like HN, the comment section for that article was more interesting than the article itself.
The S3 in question may be not on AWS, but on any of the S3-compatible providers, or a non-public S3 store (in your company, university, your friend's NAS which you use as an extra backup, etc).
Okay, now the next issue is whether or not they're withholding Comirnaty from the US Market.

Again, no proof of this. Just speculation and fearmongering.

Further they have to show that have potential legal exposure from a fully approved vaccine over an EUA.

From my understanding of the PREP [1] act, Alex Azar declared a public health emergency in 2020. The PREP act gives immunity for all medical companies working on Covid 19 treatments until 2024.

[1] https://crsreports.congress.gov/product/pdf/LSB/LSB10443
Learning what not to do is not an effective use of time.
This is a real concern for job seekers. I would send my info to any Hong Kong, Israeli or African based random job ad because of identity fraud
Did your airgapped systems get wiped remotely again, after the last time you posted about it 22 days ago?

https://news.ycombinator.com/item?id=32394353

> Eric Schmidt, the former Google chairman, told Reuters in a recent interview that high-end processors should have kill-switches.

“Knowing where the chips go is probably a very good thing. [...]
Yeah but that doesn't look fun. My roommate is doing this now. I think it's insane, they sit at their desk with three computers working all day long. They're stressed out and burning out rapidly.

No thanks.
Not too hard though! I guarantee you that my compatriots are already preparing to get even richer!
Doesn't seem like as big of a problem as people make it out to be. You hire a skip and move the vast majority of stuff in to it over a weekend. Maybe garage sale off the stuff that has some value.
Unix is strange in that the vast majority of computers running it are single user, but still have everything for multiuser support laying around.
That's fine, but it should be fine and possible to criticize someone for their actions yet acknowledge their past sports achievements. It sounds like the Chinese media has chosen to forget their achievements.
I guess this marks the end of the long saga that was Mixer.
Taipei city, I can confirm many restaurants now do this. I suspect many restaurants in China have gone this route for a while now as their service landscape is more phone-heavy.
They are also getting heavier on highly politicized terms. [1]

[1]: https://www.cspicenter.com/p/increasing-politicization-and-h...
“Minutes after” would be too late. Everything will be sold out and DDoSed hours/days before.
Is this the thing with the images of melted people?

I find corruption of the human form, in general, in lousy taste and wish people would cut that out.

Just my $0.02
What was your air-gapped system, and what do you mean by wiped? How do you know it was due to this research of yours?
Why does this article describe the west coast of Michigan as “runs north of Chicago”? The west coast of Lake Michigan runs north of Chicago, but you’re going to have a hard time getting to Traverse City if you leave Chicago going north. The scouting report from these folks seems pretty darn sloppy. Maybe visit before you declare Michigan the world’s climate change bastion.
Which now supports inpainting (as of 36 minutes ago): https://www.reddit.com/r/StableDiffusion/comments/x2tk1g/sta...
PRC set new military norm across the strait completely uncontested, and now post Pelosi policy wank in US is how to reset that new balance... and the answer was... 2 DDGs transiting through the strait, aka nothing. Not even a carrier. PRC chipped more away at defacto TW soverienty than US gained trying to boost TW dejure status.

>China's final warning

It's hilarious when people daftly throw this Soviet meme from the 60 which ended in Sino-Soviet border war in 69. PRC has gone to war with US+UN, USSR, India... threatend UK over HK handover, and supplied Vietnam against France over security concerns much smaller than TW. That makes PRC the only country who has no qualms with going hot with EVERY NPT nuclear state. China's final warning has consistently preluded to war.
File Centipede
UN humans rights chief: Treatment of Uyghurs may be crime against humanity
File centipede is an All-In-One internet file upload/download manager, BitTorrent Client, WebDAV client, FTP client, and SSH client.
It is designed to be fast, customizable, and user-friendly.
It supports multi-protocols and contains many useful auxiliary tools such as HTTP requester, file merge, and encoders.
With the browser integration, you can download audio and videos from websites, even encrypted videos.
(It's free with no ads)
Think of the marketing for Nvidia: "The GPU so powerful we're not allowed to export it. "
It's utterly hilarious how you think the person who cites research and asks specific concrete questions (which, as a reminder, you hadn't answered yet) is the one who talks in circles and strokes his ego.

Yeah, 15 years in industry and academia, and you don't know how statistics and probability theory are different.

May you have a nice happy day\night my guy.
> to characterize a platform as broadly evil based on its worst users.

It's literally the purpose of KiwiFarms. It's all their users. Any forum board not dedicated to "lolcows" (what they call the people the harass, because they can be "milked for laughs") is in the off-topic section.

I don't think you're aware of what KF is. It's not just a free-form social platform like Twitter. It's specifically for documenting, and scheming to harass lolcows.
> thanks! git-remote-gcrypt has rclone support, which provides all possible backends.

Oh that's awesome, I didn't catch the rclone support while skimming the README. rclone is such an excellent piece of software.

> the addition here is a second object store with compare-and-swap semantics making it possible for multiple writers to collaborate safely.

I think I must have misunderstood this point too -- the compare and swap semantics that you want are against dynamodb, right with raw/"dumb" storage on S3?

If I could request one thing it would be some extra interface files with "drivers" for the two concerns which are currently being handled by main.go... The locking mechanism and the raw storage mechanism.

Distilling the interface to these components would make it so easy for someone to come along and implement replacements! For example, one might like to see SQLite, FoundationDB, etc as metadata/synchronization drivers.

If there's a clear interface then it's easy to say "sure, send a commit with the implementation and we'll consider including it!", and leave implementation up to people who want the feature.

> many infra providers have object storage with those semantics, my preference is aws.

Yeah I bet this would work out of the box against other infra providers as well? S3 has basically become the defacto API everyone chases anyway.
https://www.youtube.com/watch?v=CZWAntOnrx4&t=133s

This should get you to an appropriate timestamp for a good overview.

https://www.youtube.com/watch?v=CZWAntOnrx4&t=556s

And that's a more technical 'how to build this' timestamp.
Sad. I wonder how many of these stories have went on behind the scenes without anyone coming out about it
What if the port is only opened on demand? Like if system service is in state X, it is listening to port Y, otherwise it is not listening to port Y.
from what i saw, most if not all dji drones in ukraine are re-flashed with something custom, on both sides
Yeah, it's all out in the open.

https://en.wikipedia.org/wiki/Mercatus_Center
Ask HN: Diamond Anvil Cell Heater?
Take a frozen wafer of deuterium ice and compress it with diamond anvil cell to 771 GPA, then fire very focused laser beams to culminate in the middle between the walls of the cell with increasing power to initiate fusion.

Source of idea: red dwarf stars like Proxima Centauri have pressures of around 3500 GPA yet are big enough to sustain fusion. The fusion power is very small and already on a mass basis, fusion power in the sun is very very small. Fusion energy of course is very big. The fuel lasts a long time.

At any rate this might be able to give us an idea of the smallest possible star if it were made of pure deuterium.
I make a decent salary and so does my wife. We have two kids and we still don’t own a home. People I know who don’t work in tech are really struggling. There are multiple US cities without clean drinking water. It seems like the US is mostly in constant decline with a few elite city/states able to avoid the consequences.

As a result, people eat junk food, go to the doctor less, have more stress, drive everywhere, no mandatory sick leave or vacation in most states. We’re killing ourselves. It’s plainly obvious when you travel abroad and see how well other people live in their countries for a fraction of the costs and stress.

Diamonds are formed under pressure but bread dough rises when it rests… our society needs more time to make healthy food, exercise, and take a vacation…
You've mixed up kWh and kW, which are very different things.

multiply the GW by the number of hours of daylight in a year.