skysight-inc/HackerNews huggingface dataset:
Agree on all points.

Avengers Endgame had its visible flaws that I was straight up willing to forgive because the seams had just started to rip. Phase 4 just feels like Disney-owned Marvel going

“And for my next trick, uh, uhhhhh, uhhhhhhhh, here’s a twerking She-Hulk? Hello fellow kids.”

Maverick made me finally go watch Top Gun.
> And what good is that encryption, if Apple obviously can do almost anything with your device?

Because apple isn’t in control of apple for data at rest, and that’s the specific risk.

You have to trust control of the device sure, but you cannot trust cloud data - almost at all - between subpoenas from over eager LEOs and break ins from criminal and state hackers
I was also (I got online at the age of 4 in 1993) and I think a lot of avoiding the pitfalls was being around adults in real life who understood how the internet worked. Not just my parents, but other adults as well. For example, I understood very young that there was a lot of overlap between people I talked to online and the awkward adult men I met at computer shows. I also got to listen to my mom's complaints about existing as a female geek in IRL geek spaces. It prevented me from putting internet people on a pedestal. I always knew we were all weirdos.
I remember a few years back you could buy the cheapest FLIR camera and upgrade it to the expensive model with a firmware hack.
Exactly, if you're dealing with truly sensitive information where any leak is unacceptable, make your own encrypted blob. Don't trust any communication software to do it for you.

The concern typically isn't backdoors, it's bugs. I've had plenty of terrible experiences with Enigmail.
iirc IC still mostly uses burner shell companies for IPs, at least for running ops. Tor is fine for innocuous browsing but Tor exit nodes will stick out like a sore thumb in the victim's logs or IDS.
What an amazing article. Thanks for posting!
I wonder what the transit modes look like on a macro scale for those who move downtown. Anecdotally, it seems common for those who move to downtown Chicago to get rid of their car as a spot in a safe area can easily run $300 a month, and with a payment, maintenance, and insurance it really adds up. Being so close to all the major train lines, I myself have switched entirely to public/shared transit.
Bold colors don’t clash. Clashing colors clash. You can dislike bright colors all you want but you can’t change color theory.
That comment is in the context of a discussion about data for which a license was granted or not necessary.
> A big reason humans developed our modern brains ~35kya is because of them cooking food (which makes digestion on proteins easier on the stomach)

Probably a bizarre question/thought experiment , and no way we'll know in our lifetime - if we start feeding cooked food to some animal, will it develop a larger brain?
I don’t think this is directly related to the E2EE announcement, rather it is an option to replace the current MFA method of receiving codes on your Apple devices.
Why are exit nodes more legally perilous than non-exit nodes?
I've become so cynical that my first thought was "I guess they found a way to create the illusion of full encryption while really having secret access to the unencrypted data".
Are you referring to the Pensacola encryption bypass demand or PRISM?
The Rising Threat to Consumer Data in the Cloud [pdf]
Regression of Lung Cancer in Mice by Intranasal Administration of CoV2 Spike S1
I'm curious how many households this would support, taking into account usage distributions over time. Would this be sufficient for a medium city? A large town?
I think new playgrounds are much better now than when I grew up in the 80s. The new ones in 80s did have some good things going for them but there is much more variety now and they look great.
> the morale hit of a mass layoff.

this is really hard to quantify, especially when it's increasingly becoming standard operating procedure across the industry.
Evergreen Air’s empire was/is based in McMinnville.
MarsEdit 5: Microposting, Markdown Highlighting, and More
>The person falling into the black hole falls straight towards

I guess you're assuming zero velocity by that person. But if there is velocity, wouldn't the fall not be straight towards but in an ever shrinking/decaying orbit trajectory?
This is pretty similar to a common argument that we see on HN: "Apple cares more about user privacy because the bulk of their revenue comes from selling devices, not ads".

The issue here is whether Apple's pivot to services and advertising revenue will corrupt their privacy protections. Similarly, we can wonder if EU privacy protections will vanish if a future adtech unicorn gets born in France or Germany.
We are incredibly far away from objects like this, so the apparent movement is negligible.
You can't go by upvotes—plenty of comments that break the site guidelines get upvoted (https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...).

Re why I described your comment as an attack: "I don't really care what you think if you're a $foo" and "find a community of your own to post in" are hostile if not outright aggressive. Of course jrm4 is welcome here. We don't want HN to be a place where people hound other people out of the community. Please don't post like that again.

https://news.ycombinator.com/newsguidelines.html
Yeah, no that's not how accusations work.

Well that's how some would want them to work, but around here to be heard you must back with evidence.
The more options the better.
If you want maximum security then just obviously don't use Apple services, or any other provider that has a capability to fetch your data under any circumstances.
You got data with that fear-mongering? I've heard the "problem grows with every inbound greyhound" a lot from the NIMBYs on Nextdoor. But I've never seen anything to demonstrate the problem. Also, it seems pretty easy to build a lot of low-income housing, but no one is willing to do that in an environment like Seattle with high property values. Maybe that will change with higher interest rates.

I think you're also demonstrating a fundamental misunderstanding of what stops crime... It's not prosecuting crime.
There is no language called "C/C++".

If, to use it, you need C++, it's a C++ system, period. If parts are in C, that is an implementation detail, and is furthermore pointless; modernizing those to C++ would make them more robust and probably faster. Using C anywhere just makes it as bug-prone in those parts as C code everywhere is.
Large v2 has already been added to `whisper.cpp` (check the pinned issues). I was thinking about adding a roadmap soon
What a straw man. No one who "is not an expert on taste" says all the restaurants taste the same and it's all just subjective". Well, ok, maybe people who literally can't taste (I know one such person), but the people who can taste don't ever say anything like that.

Most of us don't actually use restaurant guides, and we don't say "wow that was awesome" unironically when we didn't like it but the "experts" told us otherwise.

Aesthetics is fairly subjective, yes.
Reminds me of an incident twenty+ years ago when a magazine looking to recruit models temporarily rented office space above the local comic book shop.
Do you have a source for the iMessage story? Surprised I haven’t heard about it before.
A lot of these things we don't have accurate timelines for because they're all pre-history. We find evidence of things, but no records.
You make this sound easy but look at how that worked for NSLs. They got a ton of pushback for that and there’s no way to keep that a secret for very long – especially since things either end up in court or involve foreign governments who won’t share the desire to keep things secret.
Nonsense, plenty of places in the US completely lack spring and fall as reality, including where I grew up.

What you should have said is that many in the USA often assume the people they are talking to experienced a life identical to theirs
How to use ChatGPT to learn about Redshift
I think many people are oblivious to STUN/TURN, and the amount it happens in alleged "peer-to-peer" stuff like <insert "Show HN: I built X on top of WebRTC" article here>.

Or setting up port-forwarding. Or having to deal with "hairpin NAT". Or having to deal with trying to route two networks together over VPN without having their address spaces collide because literally everyone uses the low end of 10/8. Or the amount of money being siphoned off for the privilege of having an IPv4 address.
Now maybe you realize why hiring is broken.
God's Chinese Son by Jonathan D. Spence is a good account.
He's on the host machine. We're all just living in a VM running on ChatGPT.
That is not really how opposites work.

The opposite of "none" is "some" not "thorough".
they shouldn't be, but there's a practical difference in how often your house gets raided by FBI agents.

if a Tor user uses your exit node to email a bomb threat or access child porn, it's your source IP that shows up. the FBI should check your IP against the registry of exit node IPs, but if they don't it's still your door getting kicked in.
Also Elixir made Erlang better.
No, actually sick people would not have to be punished.

The rule would pretty easily be able to tell the difference between someone who withdrawals from the tournament because they are sick, and someone who resigned turn 1 and then goes to Twitter about it.

Those are pretty easily distinguishable.

And it is funny that you made it seem like it is impossible to tell the difference between these two scenarios.

It was you who made it seem like this was difficult. You who brought up this sick person hypothetical, as if it was an unsolvable problem.

And now, once I've pointed out the absurdity of this supposedly unsolvable problem, according to you, you don't want to admit that this was silly to bring up in the first place.
They pushed back on that after falsely telling their customers that they were technically incapable of helping the FBI with such requests. After this incident, they no longer make that claim. https://appleinsider.com/articles/14/09/18/apple-says-incapa...
What are some good things to try? I can't get any sense out of it at all so far.
Mixed-use high-rises are really cool. You can go to the mall, the gym, the pool, see a movie, go to the dentist, or go grocery shopping just by taking the elevator. They almost feel like resorts you can live in.
Why even have any sites in other places? Why not just put everything on Github, then it's all in one place within reach at us-east-2
There is also the inescapable fact that Tor was created by US Intelligence, specifically the US Naval Research Lab[0]. And according to FOIA documents it continues to receive a huge chunk of funding & resources from US Intelligence, particularly from the United States Agency for Global Media (formerly the Broadcasting Board of Governors), which supervises our propaganda channels Voice of America and Radio Free Europe/Radio Liberty[1].

As far as I can tell, the US Intelligence community has never explained it's aims/goals for Tor. The fact that Tor not only attracts the type of traffic that US Intelligence would have a lot of interest in monitoring, but also by design then funnels that traffic through a small number of exit nodes, makes it seem self-explanatory. But I wouldn't want to presume anything.

[0] https://en.wikipedia.org/wiki/Tor_(network)

[1] https://www.documentcloud.org/app?q=%2Bproject%3Athe-tor-fil...
It amazes me that we can do this from space, but I can't do this from my house. /s
The amount of time it would take to edit these to remove the subtle AI nonsense/artifacts/dysmorphia is a fraction of that time it would take to make the images from scratch. There will still be art departments but they will be 10x smaller.
Reth – Ethereum execution layer client written in Rust
Force perspective to make a Lego Eiffel Tower look like the real thing
Show HN: Edit images in the browser using GPT-3 and WebAssembly
Hi HN!
A little while ago I had to do an image edit that was fairly simple but too complex for Preview. As someone who isn't great at Photoshop, I turned to ImageMagick. But then I had to figure out the correct ImageMagick command and get ImageMagick installed on my laptop. In total, a simple image edit took about 30 minutes.

I made ImageCalc to make that easier. It uses GPT-3 to turn a plain text description into an ImageMagick command, and then WASM[1] to run ImageMagick in the browser (so your image never leaves your device). Here's a quick demo of what it can do: https://www.youtube.com/watch?v=0u3sXqgh3A8

It doesn't work 100% of the time, but it's so quick to try that I've already found myself reaching for ImageCalc before anything else. It's especially helpful if you want to figure out the right command for a web service or batch command.

Hope you find it useful!
https://imagecalc.com

[1] https://github.com/KnicKnic/WASM-ImageMagick
If you're still unemployed when COBRA runs out, you'll need private health insurance. IIRC, this was about 50% higher than COBRA. In order to get it, you'll need a form from your former employer (or agent) certifying continuity of coverage. Expect the form to go missing, with persistent phone followup required. This based on my own FAMANG departure a few years back.
Really? As someone who lives 100 miles south of British Columbia, my smoke season experience suggests that Canadian forests have been managed similarly to US forests, which is to say "very poorly".
This also show some double standards and bias in social networks. Twitter, Facebook, and several others always mark Chinese media as "news financed (or controlled) by the Chinese government", and the same is true for any media financed entirely or in part by governments not aligned with the west. But what about Radio Free Asia? It is a source of propaganda financed by US government. It is not a credible source, it always publish accusations with no proofs against countries seen as enemies. However, no social media ever put the label "this media is financed/controlled entirely or in part by the US government" in Radio Free Asia accounts.
Thanks for the kind words! (I'm a dev on Codux), and that's a pretty cool suggestion, I'll make sure we write it down and see if / when it's feasible.
> Because apple isn’t in control of apple for data at rest

That's not really true if Apple also holds copies of your iCloud decryption keys. If they want to access your data, they already have all the necessary components.
> Everyone can read your comment. Wdym by "vouching"?

There's "showdead" profile setting that allows you to see flagged comments, and enough "karma" allows you to vouch for hidden-by-default content.

It's one of those hidden (somewhat) features: https://github.com/minimaxir/hacker-news-undocumented#flaggi...
That makes sense, thank you. It's also mentioned under the corresponding heading on the press release.
Apple Announces End-to-End Encryption Option for iCloud
* blackholes are not confirmed science. It is theory and little evidence supports the theory.
* Math is not reality, it is a description of reality that should require evidence
* this could be many other things including plasma
So I guess Mozilla isn't working on unforking tor browser?
1K would have been sheer luxury for us...
I mean, sure - beauty is in the eye of the beholder. I think it's a beautiful structure. It has so much intellectually beauty as well as physical IMO. It's a perfect contrast to the rest of Paris.
> I seem to mostly value lying on the couch and browsing the internet

A classic trick of the mind, I found this happened to me when the brain didn't want to go from 0-10, because it's too big an effort. Over time I learnt that if I do that first step without a crutch, all else will flow.

Why without a crutch? To wear that resistance. Money is a crutch, so are sweets and Youtube videos (these last ones are super strong). You can do it too, (wo)man.
Thanks. I've saved your project and if we are ever in the mood to switch, we will definitely give you a try first. Keep up the good work, you're solving a real problem.
Does importing an ITAR restricted device cause legal issues?
Depressed people often do a lot of things they later regret. Doesn't mean they could have done it any other way, just that would prefer to not have done it.

> Sometimes the universe gives us tough choices.

Yeah, like accepting when an asshole reaches out or letting him kill himself. I don't think it is wrong to try to reach out when you are too mentally unstable to be nice to people, in fact that is probably the time when you should reach out the most because you are very likely to kill yourself then because that anger can easily turn inwards. But there really are no perfect ways to handle that, the best solution is to never get that bad to begin with but when you are there you can't really get out of it without burning something.
> How does this not see more abuse by bad actors?

Because this tech goes unused in almost all cases. Also doesn't work if your DNS client is secure against tampering (i.e. uses DNSSEC) without more configuration.

To make this work, you need to intercept and modify the victim's DNS traffic or reconfigure the victim's DNS server somehow. With that amount of control, IPv6 or IPv4 no longer matter; you apparently have full network or configuration access already.

There are protocols to automatically configure such workarounds intended for ISPs, but I don't think they see much use.

> which is why there are so few of these public gateways?

I think a bigger problem is that you're piping a lot of people's internet traffic through your own network for... fun, I guess? To make this sustainable you need a business model and I don't see why anyone would pay for such a service until IPv6-only hosts start becoming more common.
Very well designed app! I've been using the app to stake my Solana.
The flaw in your argument is the implied presumption that Latin preserve all information for languages that have always used the Latin alphabet.

For some language it is closer to truth, like Spanish and German, which mostly are pronounced like they are written

English and French, identical spelling represent varying sounds. English example: lose, rose, tone,... all different "o" sounds, yet they all use the same written "o".

The point about Cyrillic having more letters is also misguided: you can make sounds with letter combinations. French has dozens and dozens of letter combos for various sounds, let just list a small subset: au, eau, eu, ou, ui, oi, euil, ouil, un, an, in, en, oui, ui, sh, ch, cl, cr, tr, ....
> then just obviously don't use Apple services

How is this possible on iPhone/iPads, where using Apple services like the App Store is required to install software?
Your experience, and your home network, is absolutely exceptional then.

> what chance do regular consumers have?

Clearly, quite a good deal, since dual-stack is the default. Nearly half the Internet[1] is using IPv6 using dual-stack just fine, and the other half is using dual stack with a LL v6 because their ISP sucks.

Like many others, my laptop routinely travels, and visits a variety of dual-stack and IPv4 only networks, just as VRBO rentals, café WiFi, airports, etc. I've never had an issue connecting to those networks that case caused by dual-stack. Far more often do some form of captive portals (from misconfigured DHCP servers to MitMs wreaking havoc) cause more failures.

> others load after a huge delay (presumably because we're waiting for an ip6 timeout of some sort)

This isn't how v6 works. It isn't impossible that there's some site out there somewhere with a broken AAAA record, but again, it is the exception given the amount of Internet-connected dual stacks. Most v4-only sites aren't going to have a AAAA.

[1]: https://www.google.com/intl/en/ipv6/statistics.html
Yea super annoying - this is the one thing stopping me from getting a Yubikey. Whats the point if I cannot use it on the stuff I really want to use it for?
:-|

Normally I'm on the side of 'do you actually get that much traffic?' but yeah, a dashboard view can generate dozens of requests alone, each with multiple queries.
The number of people in the comments complaining or finding new places to move the goalposts to is astounding.

> what good is that encryption, if Apple obviously can do almost anything with your device?

> They can still simply push a software update that sends the victim's keys to the mothership and/or simply decrypts everything

> This all just seems like pandering while they continue to accept billions from Google in exchange for their user's privacy.

> Couldn’t they simply use an encryption algorithm that has two private keys and they control one?

Apple could say they are going to cease operations tomorrow, close down the company, and people would comment "Yeah but they could always create a new company". I guess for those people nothing is ever enough.

This is a huge step forward (specifically iCloud E2EE) that I'm super excited about and people are busy coming up with threat models that 99% of us have zero use for and pretending as if this doesn't matter. It's disappointing.
How the Mozilla Community helps shape our products
Army Fields Its New RQ-28A Quadcopter Recon Drone
Apple isn't a monolithic entity. For example, a rogue engineer might be able to access your iCloud data, but it's orders of magnitude more complicated to push a specifically manufactured app to your device.

There's a similar variance of complexities for hacking and law enforcement overreach scenarios.

E2EE isn't a solution for all attack vectors, but it's a significant mitigation in itself.
While it's harder to calculate, that 4Ghz CPU comes with vastly faster RAM, busses, and disk. Not many 100 MHz systems around with NVMe or even SATA...
Amnesty International Canada target of sophisticated cyberattack linked to China
In my experience it's a class thing. If you have the type of pedigree where you parents, friends or family can put in $100k plus to allow a founder or two to pay their living expenses while they get it running and secure seed or round A funding. It's always a catch 22, serious investors want one or more of the founders to be full time dedicated to invest, and that founder needs to pay their living expenses while doing so. In my experience the founders that get funded are either people with the pedigree that comes with money, or people that are experts on their field, have worked whole careers in industry and have some money socked away to float themselves for a year or two while they get it going. There is a third category of consultants/freelancers that create products as a thing to work on when consulting is slow, but these are often bootstrapping type things that don't really go looking for money.
No it doesn't. Please never say that.

Literally it means literally. Figuratively it means very.

It never means figuratively.
Agreed, even as a SRE myself it is just easier to link to a GitHib repo. GH, with all of its warts, is still likely better at handling a traffic spike than you.
The increased heatwaves, extended drought periods, lack of snowfall are climate-change caused and definitely contributing to fire issues.
Very nice! Especially that it can run with good speed on the CPU without any external dependencies.

I wish something like this would also exist for Stable Diffusion - a simple, no dependency way to run it with C++ on the CPU with AVX. Do you know if that would be possible with your tensor library, or is it very hardcoded for Whisper?
When they migrated Chinese iCloud data to domestic servers.
You literally don't know what literally means. Literally!
I'm sure it will be interesting but for HN discussion purposes let's wait until it actually exists.

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...
Notion expands free plan - offers double number of guests and adds teamspaces
In the US, this is not easy.