skysight-inc/HackerNews huggingface dataset:
> Wouldn't such an exchange be a good use case for a smart contract?

There were several such "decentralized" projects (Augur, etc.), but I don't know of anyone who uses them. I kind of stopped following the "permissionless" space after several projects turned out to be too scammy for my liking.

> It probably also would do away with the KYC, so everybody could participate. Nobody would have to give away their private data.

That's exactly why they're not allowed. If you can't easily get fiat in and out of such contracts, they can hardly matter.

Kalshi: not a novel idea, but it's good to see another implementation.

Several solid blockchain projects (also permissioned/KYC, but based on blockchain, with distributed oracles) are launching similar markets in 2023. I think they will have an advantage because all participating financial institutions will be able to create own markets without reinventing the wheel or building their own in terms of underlying infrastructure (APIs, smart contracts, etc.). Some already have simple apps (decentralized price feeds, etc.) in beta now - they just need to add the ability to bet on outcomes. I don't want to "advertise" their names here but you can look them up on the Internet.
NuScale updates project partners on US SMR plant costs
> If you run non-HTTPS web services on your Tailnet, and those services are unauthenticated or rely on Tailscale for authentication, implement an allowlist of expected HTTP Host headers to prevent malicious Javascript from accessing these services.

In my opinion, this should be done not only for non-HTTPS services, but for all services: the "default" virtual host (used where there is no Host header, or when it has an unexpected value) should have nothing except a static 4xx error page. This not only avoids DNS rebinding attacks, but also avoids automated attacks in which the attacker doesn't know the correct hostname for the service (mostly automated scans for vulnerable PHP scripts and similar).
Yeah, I should say where developers don't think they need to use reflection.

Like, the log4j thing came from (among other design errors) choosing to use reflection to look up filters for processing data during logging. Why would log4j's developers possibly think reflection is an appropriate tool for making filters available? Because it's the easy option in Java. Because it's the easy option, people are already comfortable with it in other libraries. Because it's easy and comfortable, it's what gets done.

Some languages make reflection much more difficult (or nearly impossible) and other APIs much easier. It's far more difficult to make that class of error in languages like that.
Does this mean it is time to retire the .su TLD as well?
It actually is ideal, given trusted API/Oracles, a timeout period to ensure mis-published data is corrected promptly, and a few other non-obvious gotchas.

You could even have trusted middle-men that collect a Fee iff ambiguity is discovered and an appeal is wagered against the escrow.

I'm sure it exists and got rugpulled already.
Coppola: If I'm going to make a fake moon landing video it's going to be the best damn one ever created. We're shooting on site, and that's final!
Sure thing. Examples can be found here: https://neuml.github.io/txtai/examples/

This one re-ranks the output from an Elasticsearch index - https://colab.research.google.com/github/neuml/txtai/blob/ma...

The next major release have more examples using the local BM25 scoring module.
That's fair if that were the profession but this article states: "How can Engineering leaders create a culture of Psychological Safety". If someone is not competent then feedback needs to be delivered but that doesn't make it a psychologically unsafe environment if delivered in a constructive way.

Lastly, I think I'll update it to account for scenarios when someone is not competent in their job to show case how I would handle it!
A while ago most people thought QuakeWorld was the first game to do client-side prediction. Carmack has a .plan from 1996 talking about it so there's a clear reference.

But one day I went to the wiki page for client-side prediction and it said Duke Nukem 3D was first which I thought was curious, so I checked the reference on it and it was a recent interview with Ken Silverman - creator of the Build engine that DN3D ran on - which clearly stated DN3D was first:

> "People may point out that Quake’s networking code was better due to its drop-in networking support, [but] it did not support client side prediction in the beginning,” he explains. “That’s something I had come up with first and implemented in the January 1996 release of Duke 3D shareware."

Pretty unfair for Ken, I thought, that everyone’s got the wrong idea that it’s QuakeWorld. Since the source is available, with the help of Hacker News we even found the code for it in game.c[0].

To be a good citizen I went back over to the Wikipedia page and added a link to the source code to help solidify the claim. But while I was there I went back and read the interview again, and noticed a part I’d skimmed the first time:

> "It kind of pisses me off that the Wikipedia page article on ‘client side prediction’ gives credit to Quakeworld due to a lack of credible citations about Duke 3D."

I wondered if and when it had been changed from saying Duke 3D to QuakeWorld in the past (before eventually being changed back again sometime after the interview), so I went and had a look through the page history. It had been changed a few years ago due to lack of any citations. And the person who had removed it... was me.

---

[0] https://github.com/videogamepreservation/dukenukem3d/blob/ef...
See domovethings(), fakedomovethings(), and fakedomovethingscorrect().
A dense environment also has a lot of daily destinations within walking distance. That's also very nice when one works from home— either working from home in my Brooklyn apartment, or working from home at my parents' house in a Midwestern streetcar suburb where restaurants/coffeeshops/grocery stores/parks/bars are also a pleasant walk away.
Both SF and Leela use NN eval tho, not trained on human games
Demoscene on 8-bit machines. People are still creating crazy demos on 40 year old computers like Commodore 64, Amstrad CPC, or Sinclair Spectrum. Demoscene on modern PCs are active too, but not as interesting or mind-blowing as people rotating filled cubes at 50fps on a C64.

Since those machines have fixed configurations, it's easier to assess the level of technical achievements.

Yesterday, I watched a C64 demo on Youtube that featured Donald Trump's face[1]. It's such a fantastic cross-over of 40 year old tech with memes of 2020's. I find it fascinating.

https://www.youtube.com/watch?v=HsXB7F0lQwY
It is printed out of copper, so no.
[2022-11-15] Louis Rossman - "Apple SUED for privacy violations; iOS collects invasive analytics even if you opt out." - https://www.youtube.com/watch?v=016QGxOsjQY [11 min]
There is no better alternative unfortunately.
> computers were expensive and slow, and network connectivity was very limited

Blockchains have been expensive and slow, and functionality was very limited.
When Bitcoin launched, you couldn't run turing-complete scripts, it only supported balance transfers. It had a hard-coded 1 Megabyte per 10 minutes throughput limit (slower than dial-up). There were no transaction privacy tools.

That has been changing. The first turing-complete chain, Ethereum, was launched in 2015. It launched a sustainable consensus model in 2020, and switched over to it ("merged") in 2022. Private smart contract support came in 2020-2021, with projects like SCRT and Aztec. Layer-2 scaling technology is just beginning to hit its stride this year, with several competing companies. Still on the base layer roadmap is single-slot finality, data availability sampling to expand the chain's storage capacity, zero-knowledge-proof based VMs to expand its execution throughput, and state and history expiry to automatically prune it.

Once all of those technologies are complete and have had a chance to mature (much like dial-up matured into broadband), I expect blockchains to look more attractive for certain applications.
> They have huge incentives. Apple is positioning themselves as the privacy king

I am willing to bet that it is a deal breaker only for very small minority of users. I would argue that search engine data is of much bigger privacy concern than OS, as compared to search history no OS action comes close in disclosing personal action, and google/bing almost has universal market presence even for Apple users.

> Meta has suffered huge losses because of their privacy abuses.

They had their revenue reduced, true. But it is not loss. They wouldn't be in any better position if they didn't used extra data when it was available.
The temptation to correctly identify them as the founding members of what later was backronymed to the American Automobile Association (AAA) is rising ....
sounds like tailscale should
No mouse or keyboard? No thanks.
I like to try to run things on Android.

Briefly on HN frontpage: Repurposing an old Android phone as a web server
https://news.ycombinator.com/item?id=31841051
> You can flip that around too - If remote work was so great for productivity, all companies would switch to it?

When you’re flipping this pancake please remember that real estate prices and tax write offs weigh into the reasoning some companies employ when deciding their wfh policies
Wish Al Gore would give up his private jet and start traveling around on just a bicycle.

He could even write a book about it called "Inconvenient Transportation."
Yeah, I agree; if it's a misfit, there is a feedback loop, but if it doesn't change and is problematic, then a difficult conversation must surely be had!
So lets say I think inflation is going to continue to go down and return to 2% by 2023. At the same time my shares of SPY and QQQ are continuing to go down due to increasing rates.

Is the point of this platform to serve as a hedge against other asset classes or is this supposed to be thought of as a completely separate asset class and not as a hedge against other investments?

I see the gambling aspect of it of just betting on outcomes, and that is interesting to me; however, I am curious how your team thinks about it.
Birth of video games as viral demos:

https://www.masswerk.at/spacewar/SpacewarOrigin.html

https://www.wheels.org/spacewar/stone/rolling_stone.html
Volkswagen Joins Mastodon as Concerns over Twitter Mount
Elon Musk Welcomes Ye's Return to Twitter
In my opinion the ground is the best place to make them. It's much harder to do independent inspections of the work when you have to fly the expert who wants to look at the assembly into space and train them how to do EVAs.
Who decides the outcome of each event? The Kalshi team?

For example en the Moon landing example, I guess NASA will make press release, but it looks impossible to automate reading it and deciding. (What if the starship colides with the Moon? What if they can't return? What if it explodes 5 seconds after landing? What if it's a joint NASA+ESA project?)
SpaceX actually has used them on a bunch of Falcon 9 launches. But I'd worry about how well a GoPro would survive in the long run in the harsh radiation environment outside the Van Allen belts.
Have you never had to use an id-card to start your print?

Takes care of the confidentiality issue.
If it is set up so that the users can put in bets and appoint judges, then it can't ever be rugpulled. Individual judges could turn hostile. But if the judges get paid for their work, a great track record might be worth more than any rugpull.
On the contrary, I don't use a VM to do dev work on my mac, and it's TERRIBLE. Despite what people like to parrot, the mac shell is NOT linux compatible, is filled with tooling that literally cannot be used to make a modern application, and gets really really pissy if you try to do anything different.

Brew and macports have to basically start the world from scratch again on a mac to get something resembling a good work environment, and it's STILL terrible. Every single time my work laptop updates anything, I basically have to rebuild those environments again because Xcode overwrites anything I may have configured back to defaults, defaults which were deprecated and non-viable for a secure product like a decade ago. I run into issues with the included version of SSL like twice a month, all because apple refuses to do the leg work to manage the licensing for more modern versions.

Meanwhile in windows world, I can download a nearly full version of ubuntu with one click, run it as if it lives on it's own box, and yet still use tools that jump the layer between windows and linux to make it seem like it's not even there. It's pretty powerful. In some ways, the single best linux installation is the one you get on windows. It's so seamless I use powershell, CMD, and the linux shell interchangeably on my computer.
Install the extension and point it to the neovim binary, lastly set the affinity for the extension (to make it fast).
The extension description documents some of the downsides, obviously vscode wasn't purpose build as a neovim frontend and some extensions or settings can not work (potentially they don't even make any sense), the documentation points out that your current init file may cause problems.

The alternative is the "regular" vim extension, which is more limited in functionality (but it even emulates common extension, like commentary) but potentially easier to set up.

But in the end you can get a "real" vim together with all the tooling (debugger, autocomplete, syntax, etc.) vscode extensions provide, which I think is very neat.
None of those are things people care about, though, outside of a tiny niche.

Most people find it pretty easy to avoid getting kicked off social media, and even if they do, it doesn't affect them.

Likewise, "personal control of data" is meaningless. It's not like you can prevent people from taking the data and doing things with it.

I struggle to think of any actual use cases for your last three points that don't boil down to FUD.

Blockchain is neat, but it has no real use outside of extracting money from other people involuntarily.
The linked article is an announcement post, but this page has more details about the eye itself and how it works: https://science.xyz/products/vision/
The first several (10s or even 100s) will be run, most likely from test stands, then ripped apart and combed over for hot spots and cracks. Id even expect them to build some with shittier materials specifically to see how it causes them to fail. Rocket engines are a shocking amount of trial and error.
Nfos, great Culture.
If a movie isn't enjoyable at 720p (upscaled for a 4k tv), it isn't going to be enjoyable at 4k either.

Blu-ray/4k isn't the crutch the studios were hoping for. Make better movies.
And very dangerous.
That's a choice they make, not some sort of immutable "reality".
They’re not “responsible” in the sense that I don’t think it’s not some kind of moral failing. I’m just pointing out that it’s not true that having TLS on this site wouldn’t be useful to anyone. It would, and the webmaster enabling, despite not required, would be appreciated.
Indeed, part of becoming a senior-level-anything is recognizing what problems exist and having the skills (experience, knowledge, etc.) to work on solving them.

I can't put my hands on the source at the moment, but there's a cliché that I've read somewhere that goes like this:

"Juniors focus on the how. Seniors focus on the what. Principals focus on the why."
It's a crowded space for sure! I personally think productivity is a really important problem facing society and so I don't mind that so many people are trying to do something about it.
What Elon Musk Is Doing to Twitter Is What He Did at Tesla and SpaceX
Mel!

(At least if you aren't completely set on the PDP-8.)
Except for max_align_t (which is broken even for scalar types on some targets, and doesn't help with vector types by design), all these things were available long before standardization. So I'm not sure if this is a compelling argument for standardization.
4K by itself is marginal. But 4K HDR is incredible.
Such a thing exists (Polymarket) and the whole setup has probably precluded many, many, many people from using it including myself. I got halfway through setup before giving up.

By contrast, I signed up for Kalshi and bought 3 contracts in the last 30 minutes.

Additionally, smart contracts don't actually solve the primary source of (unaccepted) risk: the oracle.
I'm not familiar with C enough to know the answer, but I'm trying to think how anything goes from untrusted input -> trusted input safely.
To sanitize the data, you're putting the input into memory to perform logic on it, isn't that itself then an attack vector? I would think that any language would need to do this.

Is anyone able to explain this to me?
This means the language will never coerce things for you implicitly. Booleans are true and false not 1 and 0 or “true” and “false” etc.
tangentially related (not affiliated with the company, just a fan), but https://usewindy.com/ does similar stuff - and more.
There’s being ostracized, and then there’s being ostracized.

Or said less opaquely, most people have never truly experienced being ostracized in the way that a cult can. Most people have social ties outside of a group, and maintain those, even if their primary social ties are cut (as you’ve alluded to).

(I know we are arguing the same side of this point, I just wanted to emphasize it)
I assumed SV giants meant tech giants meant Apple, Microsoft, Alphabet, Amazon, and Meta.
Everyone uses data they collect to “improve” their own offerings.

But the others then make money by sharing/selling the data _to third parties_(incentive).

Does Apple use this data only for internal use, or do they also share (sell) it to third parties? With or without privacy?
So does staying in this Universe.
Calling it DVD would almost make it a non-starter. HD DVD lost, DVD is old. Who wants something old? You'd probably have to call it something like red disc (Stylized as reDisc of course).
Published transparency records work without blockchains. Certificate Transparency is an example of a project that does this without all the mess of blockchains. And that also works well because it operates on purely digital things - once you start having to unify a physical object with a digital record all the usual supply-chain-management problems re-emerge.
Looking at the timeline, it looks like Tailscale opted to allow for public release on the day of the patch:

> Sat 19 November: Coordinated Disclosure time proposed by Tailscale, accepted by us, Tailscale shares planned Security Bulletins and blog post
> Tue 22 November, 5:06AM: Blog draft shared with Tailscale (a bit last minute, sorry!!!)
> Tue 22 November, 7:00AM: Coordinated disclosure time

Because the code is open source anyway, I'm guessing they assume attackers would see the announcement of a vulnerability, browse the recent pull requests and figure it all out themselves anyway. Delaying publishing of the details saves maybe a few days of exposure to risk for motivated attackers, especially as the author seems to have done her work together with one other person in just over a week.

They've also sent out emails it seems, so people know they should update ASAP and why. With the extremely limited amount of people running Tailscale (and the even smaller subgroup running it on Windows specifically) I don't think it's an attack hackers will rush to roll out. Mitigations also exist (i.e. block access from the browser to 100.100.100.100) so even in situations where you cannot update you can protect yourself.
They should immediately blacklist the affected client versions.
> Coordinated Disclosure time proposed by Tailscale, accepted by us, Tailscale shares planned Security Bulletins and blog post
The existing prediction markets have been regulated out of existence thanks to Kalshi.

See PredictIt, Polymarket, YC is doing a great job of fulfilling Thiel's vision of building monopolies.
https://astralcodexten.substack.com/p/the-passage-of-polymar...

https://www.usbets.com/did-kalshi-kill-predictit/

https://threadreaderapp.com/thread/1478370047735341056.html
My state banned billboards. You should find a way to get such a thing on your local ballot. There's zero reason to have distracting advertisements on the side of a road where you are supposed to go 70+ mph.
Because "there are no regulations" is not permission to defraud others.
There's so many different meds though... with different effects. And for some people it takes time to figure out which one works best.
I do agree that a Web standard is not the place for personal tributes. (Imagine how unusable the colour list would become if all the colours had random personal names in them!) Am I a terrible person for being aligned with the folks who opposed the addition?
Personally, I don't think so. It's another attempt to replace 'trust', in this case trust on an independent party that audits the financial statements, with an even less reliable alternative that doesn't even work. This obsession with trustlessness is a mistake.
and keygen music
Wait, since when are third party paid applications "Microsoft"?
As a recovering former SPA enthusiast, coming back to the simplicity of HTML/CSS/JS over the past few years has been a breath of fresh air.
>If remote work was so great for productivity, all companies would switch to it?

My belief is that a lot of the people who get to make these decision like the office, because they don't suffer from the same externalities. In other words, many of the things that make commuting to the office suck ass don't necessarily pertain to the boss.
Yea, wasn’t this experiment ran on jailbroken devices?
Rewriting the parser portion of anything is not 'massive'. Boring as anything, but mot difficult and not much time consuming.
The other day someone shared a paper linking some gut bacteria to oxytocin levels, which regulate sociality.
What's HN's stance on tracking links? This post is filled with them. I thought I remember Dang saying something about it.
This is just spending "potential money" for engineering talent advertisements.
I'm of two minds on this. Having taken them before and quitting, I know that you definitely can. But also once you see the kind of person you can be with medication, the really low unmedicated days feel extra hard compared to the effortlessness of the best medicated days.
Very cool. Also this reveals the secret, that brown is dark orange!
It depends on what is "better" for you. I'm happy with my Pinephone and waiting for my preordered Librem 5.
I'm just imagining being one of those astronauts in 2024
Sir, I have started reading The Art of Getting Things Done and boy that book is pure gold!

I've been missing it all my life! I'm on my way on getting wealthy and rich!
They are getting shutdown specifically because of Kalshi, see the links in my other comment for some context