skysight-inc/HackerNews huggingface dataset:
Thank you for adding some context to this that seems missing from all discussion I've seen so far.

Extensions have always had a dodgy security model, and given the nearly unprecedented access they have to our data and habits, it's important that this is being improved. Most users aren't going to be able to tell the difference between a good extension and a malicious one, and even developers who would like to think they can probably can't in many cases.

It sounds like security and performance are significantly improved, and these are both things that the tech community are usually big supporters of. But in this case it comes at the cost of some flexibility with ad-blocking, and if there's one thing we love more than security and performance, it's a chance to point the finger at big tech. There's a lot of nuance that has been lost from the ad-blocking discussion.
We use GPG to sign git code commits so that we have some sort of protected audit trail for checkins and to make it much more difficult for a transient endpoint compromise to lead to a malicious code push. Putting the GPG keys into a yubikey make this much easier and it also adds a two-factor auth path that is much more convenient for developers.
That depends on the algorithm, some depend on randomness like IVs.
Great. I hope that we could cure cancers ASAP. My dad passed away because of lung cancer and i still feel pain about it.
So now would be a good time to buy a PS5, keep it in boxed until this is released and use it to pirate all the games?
> You always need to balance Precision and Recall. For something like this, you want to be exhaustive.

Respectfully disagree. You're right in principle if you build a tool like that for yourself. But since this is Open Source, you have to take into account that people who don't understand that will use the tool as well and then use that as "evidence" in whatever arguments they're having with someone.
The problem with this approach is when you're not using the same device/environment to read email and log in, for example when you're on someone else's computer (say, in a public library).
But 20 is countable with fingers and toes.
I've been a Spacemacs devotee for years.
> It's just market dynamics. It'll double just fine thanks. It'll more than double.

Sure. If you let the market operate. But at least in Sweden we don’t. So we’re stuck in this loop of conflicting requirements: “no greenhouse emissions, no nuclear, no wind farms close to my home, and double the capacity - thanks!” It’s not going to happen.
People keep saying Venmo as if its something I should have heard of. Never seen it.
Markets are, in a sense, defined by rules.

Perhaps the argument goes better if you say competition without rules leads to mafia, ie., people stop competing and form gangs -- since this is more efficient for them. These gangs then monopolise trade, and use violence to stop people competing with them.

If they disagree, you can always point to the state itself as an example. But likewise, without a winning mafia to set the rules, others arise quickly. No group wants to compete, the want to have already won.
Yeah, during business hours, its normally the team in charge takes ownership of the issue, the support person would just notify them and then follow up...
Good luck trying a Cobra with a Blavkbird, a plane that needs a third of the US to make a 180 turn at full speed.
Almost all of everyone's success is built on the back of a lot of hard working individuals.

Questions are how do you get the best people, what do you tell them to work on, and how do you get good results?
But that is inefficient resource allocation.

We could reduce the waste food production and reduce 'carbon' output from USA.

Presumably next someone will point at another country and say 'they're worse'. That may be true, but it doesn't make the free market efficient, not make externalised environment damage go away.
I don't underestimate the importance of having the population (or most of it) has a saying in how their everyday life go (to some extent, e.g I don't think the moral laws can be determined by votes even if all humans voted on them). However, most of the benefits that usually attributed to democracy should be attributed to wealth, colonialism, and transparency/ no internal corruption (and no, democracy might help in reducing corruption and providing more transparency but it's not strictly required). When you look into (once) successful countries such as France, UK.. You can see wealthy and strong nation that win wars and keep overcoming obstacles, and you attribute that to the "democracy" and "liberal values" or simply you can ignore those liberal values and remember that "correlation doesn't imply causation" and then you can better explain things with colonialism and mass destruction of people, and nature to extract value, then it doesn't matter much how efficient you are.
The British empire didn't conquer the 1840 famine by being a "democracy", it simply stole Irish people food making the crisis worse for them.
Also when you look closely most of the democracies aren't that distributed, in every nation there are power structures that determine what the collective nation do, do you think really that all US people actually took the decision to destroy Vietnam? or fight Communism at any expense? or conquer and destroy Iraq? I don't think the American people are all that evil, the decision is cooked and it's enforced later via "democratic" channels.
Lol who's driving 700+ miles (10+ hours?), taking a few minutes break, then driving another 700+ miles? I mean, I'm sure there are people out there that do that but even semi truck drivers don't drive that much thanks to federal regulations. Even you actually do drive that much, I'm guessing you know people who don't. An EV that gets 300+ miles to the charge and can be charged (at home!) overnight will do just fine for them. Waking up with a "full" "tank" of "gas" every morning really makes you rethink range and range anxiety.
Next-Generation GPU HTML Renderer
What kind of rational system would ever incentivize spending rather than results (aka sales?). Sounds like the marketing equivalent of being paid by the line of code.
Ueberauth for Elixir/Phoenix https://github.com/ueberauth/ueberauth
This is already kinda-released: https://twitter.com/SpecterDev/status/1576714840650883074
What impresses me is that the Linux kernel has maintained ABI compatibility with userspace forever. Meanwhile, people in userspace keep talking about binary compatibility as some kind of impossible unicorn of a goal and bring us terrible things to allow them to "evolve" ABIs instead of just, well, not breaking callers.

I love it when Very Serious People say "X is impossible". You then show them an example of "X", and these Very Serious People hem, and haw, or rage-quit meetings, or do whatever it takes to avoid admitting that they were wrong.
https://wololo.net/2022/10/03/released-ps5-kernel-exploit-we...
Why is it important for more people to be software engineers compared to nurses? We need more nurses in the world, not more software engineers.
Solar power is 1.68% of the USA's primary energy mix in 2021. Wind is 3.89%, about 2.5% more than a decade ago, and the trend is not accelerating that fast.

It is not even 3 decades to 2050, which is the USA's target date for net zero carbon, so with conservative estimates primary energy from wind should increase by at least 10% per decade, so 4 times faster than last decade.

Where is the vast abundance of renewable energy that you are talking about? Now is not the time for deploying another massively wasteful technology just because some people want to go on road trips without taking a 30 min break (a recent EV fast charge does not take hours) every few hours.
Nice technical biography! Can’t wait to read the other stories.
There is only 1 mention of "Try guys" on HN last year. So we collectively also don't know about it and/or don't find it interesting to mention in a comment here to make a point... (We are all old)
I, for one, like a "table-most" arrangement of text in the source code.

This layout falls apart when there is an error and the readout is a disaster, but it just goes to show: there is no perfect answer.

So I sigh and run the formatter on the code.
If you can find stock somewhere…
It's a scale obviously, and usually the more free markets are, and the less the tax take is, the more successful countries tend to be.

Even with authoritarian leaders. Singapore being a good example.

It's just that authoritarian leaders rarely tolerate free markets.
Similarly when immigrant minorities gravitate to particular localities for their shared culture and background, this is a wonderful example of diversity.
When white people do this, its called white flight and is akin to nazism.
I love stories like these. What are other stories of random events that changed the trajectory of a business?
The Monkees are just the predecessors of vocaloids.
Which is of course why humility shouldn’t be such a virtue and more a standard way to get through a day. Of course there’s a lot any individual person can’t possibly know and still more they don’t need to know or have an opinion regarding.

Maybe this could be filed under “it’s ok to lurk”? Or something.
As others said, there aren't that many alternatives that work as well as Qt in a crossplatform way or in the embedded space.

On the desktop you can go Electron, but you then pay penalties in performance that not everyone is willing to endure.

In the embedded space there is little or no alternative.
Leipzig... he's a colleague of McElreath (of Statistical Rethinking).
Dumb and blind comment: could the discarded doses not be shipped to countries who don't have enough? Or is there even the demand for it any more?
A thing to consider is the average means there are tons of older cars in the mix, but some new ones slowly creeping in. There are lots of cars from the 90s or even 80s driving around where I'm from. Weather can be quite unforgiving for cars here, temperature ranging from -25C(-13F) to +30C(86F) year round. Lots of salt and some types of pavement seem to be exceptionally bad for timing gears[0]. Owning a car is likely the most expensive thing a normal person can do in Finland.

[0] https://yle.fi/uutiset/74-20000198
In informed circles, NT gets a lot of respect.
Google is extracting more and more information from the sites in the search results, and displaying that information above the actual results. This negatively impacts the sites that the information is harvested from, since users just accept whatever google throws at them, and don't actually visit their site (which is a hit in revenue and engagement).

I completely understand Google's motivation, yet fully support the sites's complaints.
>now would be a good time to buy a PS5

This might be the bigger task than the actual jailbreak
> The reforms (perestroika) he initiated after a period of glasnost’ ended up destroying the Soviet Union rather than strengthening it.

This is an interesting take. Makes me think of a family that goes through a divorce due to some unacknowledged truths coming to light. Has the family been destroyed or strengthened?

Probably depends quite a lot on how people were behaving within the marriage and how they behave afterwards. Even if one (or all of them) are broken people with issues, it's not clear that being dysfunctionally together living a lie is better/stronger than being dysfunctionally apart.

(edit: I realize they're just hoping for Putin to fail, which I agree with, but still it caught my eye, especially as Putin "failing" is probably good for Russia.)
Released PS5 Kernel exploit and WebKit vulnerability for Firmware 4.03
Sure, but it’s a bit like saying “there is no democracy because A, B and C”. To the extent these semi-free markets allocate resources efficiently it’s because they are partly free.
I tried Stadia, but the input latency was frustrating. I tried to play games that ran okay, but didn't want to upgrade my computer. Most noticeably to me, Destiny 2 and Cyberpunk 2077 ran poorer and worse input lag. I have gigabit fiber and sub 10ms latency to all the major datacenters in Europe.

I didn't stop using Stadia because I didn't trust Google, I stopped using Stadia because the experience sucked every time I tried it.
Ha! Had a good laugh at this. Thanks for pointing that out.
Thai won’t be helpful going forward. The next gen of tools will analyze your writing style and make the connection through that.
It worked, and it's mentioned in the article: "the 'really impressive' Webb and Hubble images were remarkably similar to those taken by the toaster-sized satellite LICIACube, which was just 50 kilometres from the asteroid after separating from the DART spacecraft a few weeks ago."
The performance gaps are too high for this kind of nonsense.
You think you have two good points (refill time + H2 generation from water) but really you have nothing.

Hydrogen might fill a gap to replace large vehicles like buses or trucks but not passenger vehicles.
UN: 5.7M Pakistani flood victims to face food crisis
Despite being a huge fan of Drews work, I wasn't initially wowed by Hare but the more I see of it, the more interested I am. Really think I need to have a play around with it soon.
It's also not clear what it's supposed to be compatible with. There are many compatibility concerns, but semver admits only one. Linux removes and deprecates features and changes driver API too, so you can expect every release to break some things and not break other things.
> There's also the inescapable incentive conflict of 2 wolves and a sheep voting on what to have for dinner.

I don't think that situation is THAT common, given that usually the majority of people has the same problems, usually economic.
Biggest exception would be immigration, since immigrants are generally in lower numbers, especially the ones that can actually vote.
@dang: now that the livestream is over, maybe we could point the submission to the summary page or press release directly? Thanks!
Feels like any time a console gets jailbroken, it's always a JavaScript use-after-free exploit in the browser webview that they use to open the user manual. IIRC this was true for the PS Vita, 3DS, Wii U, among others? I wonder if at some point console vendors will stop using webviews entirely?
I am in agreement with what you are saying.

> and if the spirit of HN is to judge without facts - then I apologize.

Although snarky, I am sure you would appreciate if HN doesn't devolve into sensationalist titles such as: "PHP sucks" ad nauseam since there are plenty of social media networks that get flooded with titles like that already.

Just as we (the audience) in good faith read and judge based off of the merits of the article's content - one could also argue that an author should treat the audience with similar courtesy of not needing to:

> misleading (purposely, because it attracts interest)

Not saying this applies to this article since in my subjective view I didn't find the title misleading or egregious.

You might also be interested in seeing the recent edit history of titles on HN

https://hackernewstitles.netlify.app/
I suspect it depends on where you live - in the UK at least they're readily available in GAME for example.
Not surprising given the significant speed difference between those two.
Minor note: find takes a -delete argument so you don't have to do -exec rm {}\;. Just make sure to do it at the end because find will happily delete all your files if you put the options in the wrong order. Which is unergonomic but the devil you know.
I don't think he is making the argument that anyone can/will do it, but that there is and will be plenty of mechanics willing and able to do the work and able to procure the parts, which he saying will not be the case with replacement battery packs on old cars.

There is some reason to believe this; stories like this [1] are going around, where EV owners have been told they need to replace the battery pack but, by the way, the part cannot be procured.

[1] https://www.wtsp.com/article/news/local/electric-car-battery...
Probably not - this exploit only works on firmware version 4.03. The latest being 6.0 which any new PS5 is likely to already have installed.
One of the most common high-impact issues is failing to expire sessions. In one case, the expiration date was set to be a whole year - once a user had a valid JWT, the system would accept it for a whole year, even if the user's account was deactivated on day 2.
This munition is very rare, has to be aimed a very long time before it can hit anything and the whole process is very noticeable. I wouldn't lose any sleep about that.
Nice one, from the video it looks like he chained a browser vuln with a kernel vuln to make his jailbreak. Assuming it's a JIT optimization bug (as browser vulns often are, but I'm just guessing here), I wonder if Sony might attempt to mitigate this in future by disabling JIT, as Apple has done with its Lockdown Mode.

Looks like the other thing they could do for this particular vector is prevent https requests from being intercepted and replaced - why should the user be permitted to override certificate errors in this case? Doesn't make sense.
Google adwords does:

https://support.google.com/google-ads/answer/6268632?hl=en-G...
But then you can just put your session data in Redis. You're eating the latency to Redis either way.
I do suspect that this is a big part of why the PS5 doesn't include a browser, despite one being available on the PS4. It's a shame really, would love to be able to browse the web from my PS5.
Check the link, he shows some internals.

The printer seems to be a thermal type judging by the (lack of) noise.
Not always (some PS Vita jailbreaks relied on breaking out of PSP emulation, for example), but it's indeed a pretty common vector of liberation.
How do you know for sure if it's jailbroken?

For instance it might still phone home and install a new firmware/software image.
Do we just assume nobody in that 43% group is using iOS?
I can't, because MV3 is not in my version of Chromium yet. But I don't need to: I know exactly how MV3 works, I have experienced that approach on iOS and it barely works for the most simple kind of ad-tech. Calling it "flawless" sounds like outright FUD to me.
Simple, they switched to the webextension API a few years ago as it makes development of extension across browsers much easier.

More directly put, developers would develop extensions for Chrome and more often than not would not bother with Firefox as the framework it used was different. By switching to the same framework for developing extensions it now means that it takes little to no effort for developers to also publish it for firefox.

Having said that, Firefox is providing compatibility with manifest v3 while at the same time not implementing some of the restrictions that are in place in the Chrome implementation.
Author here, I just wanted to add that most of the "features" should be fixed by Google this month [1]. That leaves me approximately 2 months to finish the work and hope to make the transition in January \o/. This delay is a bit short though.

[1] https://developer.chrome.com/docs/extensions/mv3/known-issue...
People and industries do not generally operate at nighttime, especially in more conservative societies. How exactly could this be an indicator of economic efficiency?
I'd say 2-4 days is the median. There have been 2 instances of me needing to wait 2 weeks for a one-liner.
Time to port my game engine to PS5 I guess.
Gaming is already one of the cheaper hobbies.

Going through the hassle of wasting time and nerves to pirate games that are very cheap to get after a few months after release or in sales is beyond my comprehension.
I assume there were not many interested to get the shots. Maybe they were ineffective for the latest strains too.
User Controlled Authorization Networks (UCAN) Distributed Auth
One might suggest that democracies are better at managing expenditures on public goods via the political process.
> We’re getting really good at getting energy from the sun, and excess energy not consumed is wasted, so why not make hydrogen? Heck, why not have fuel stations in the middle of nowhere have a well (for water extraction) and an array of solar panels so the station can produce its own product to sell?

We are nowhere near being able to satisfy 100% of our energy demand with solar or even a renewables mix, except for a unicorn scenario in which we have high winds and a sunny sky at the same time. On top of that, it is extremely wasteful to use that energy to produce hydrogen and then pipe it around, compared to storing it in batteries - either portable ones like in cars or bigger house or grid-sized ones.

If we have excess solar energy, it would be great to make recharging your car free at that time, although I know that's a pipe dream due to the profit motive.
When optimising one constraint, dictators work great. Democracy + Capitalism is a two tiered system - the we set up lots of dictators in competition, work out which ones are good at what constraint, then allocate resources among the dictators based on the complex machinery of markets and voting.

We want corporations to be dictatorial. We're simulating dictatorships when we need single-minded focus. It just doesn't work for government because you get people who forget to grow food.
Its mind blowing to me that we have not seen a market capitulation event yet.

Who looks at all of this and says, "yeah, everything looks fine, lets keep my money in stocks that have never made a penny". Apparently these people still exist
Emacs Spook and Stable Diffusion (Code Included)
The crowd is just smarter

https://www.npr.org/sections/parallels/2014/04/02/297839429/...

But people don’t trust them to have free time with UBI or free consumer choice with vouchers
This has major privacy and GDPR implications though.
Oh god. I love that you said this. Absolutely. I have 3000 tabs open (exageratting but can't be too far off) and Tree Style Tabs saves my life. Along with Tridactyl, using the browser feels far more "powerful" than Chrome ever did to me.
There's a difference between being able to buy a gun at the gun store where your gun is registered to your name and you can only pick it up after a multi-day waiting period, and being able to pick up a gun at the free gun dispensary at the push of a button in a back alley with no supervision.

I realize this may be a failure to communicate because of a difference in shared values but I come from the perspective that harm reduction is worthwhile even if you can't fully eliminate the problem. That you can't prevent all crimes doesn't mean you shouldn't try to prevent crime.

Not to mention that the risk profile of having three-letter agencies come after you or having a random obsessive weirdo "collect a dossier" and share it with other obsessive weirdos who get a kick out of making your life miserable because they project their life failures on you is very different. Namely, if you're prominent enough to have an entire state agency try to destroy you, it's probably over an active decision you made (e.g. focusing your life on political activism) whereas for random weirdos to harass you and attempt to drive you into suicide you just need to show up on their radar long enough for them to start making up reasons to hate you.