skysight-inc/HackerNews huggingface dataset:
Most of my searches are related to researching and fact-checking potentially spurious statements, like the ones that Hello apparently produces.

This particular query about the French revolution seems to give GPT fits across its iterations, and I suspect it's because:

- the most correct answer is "I don't know"; when answering questions, GPT isn't really trying to answer a question by reasoning through it, it's trying to mimic what usually happens after someone asks a question, and especially online that usually isn't someone saying "I don't know"

- the most authoritative sources on subjects like this include books, and GPT doesn't seem to read a lot of those, or if it has then it doesn't seem to be able to cite them without inventing false details about the sources themselves (titles that don't exist, attributing works to the wrong authors)

Seeing "model that cites sources" made me excited that there was a solution to the second point. But specific to Hello:

- the most authoritative web sources are historians who cite sources, which aren't often written for SEO, on popular platforms, or not paywalled

- a search result being in a first page of Bing/Google doesn't make it authoritative

- this doesn't seem to stop GPT from coming up with false inventions/hallucinations that aren't in or relevant to the cited source at all
I mean, the purchase doesn't make any financial sense except to try make all of Activision Blizzard's games MS exclusives to help their platforms...
> The impact of these two bugs was signifcant. It was access to first name, last name, address, and email of the user as well as last 4 digits, expiration date, billing name, and address of the credit cards.

Assuming you're a black hat exploiting this bug, what can you do, if the target is using a VPN?

I don't know what "address of the credit cards" means, but let's assume it's the target's home address.

You don't get their credit card number or security code. You don't get access information on any of their web accounts. Correct?

If you spy on their internet activity during the flight, it's all encrypted. You won't learn anything.

However, you do have the ability to change their password, so they can't get into their own account anymore.

You could also bill all your own activity to their account. I don't know if you can bill other things to the account.

You could get access to whatever data was stored in that account. I don't know what that would be, other than when & how much you used it in the past.

Is this a complete summary of the potential damage?

Since there's no Reply button for the two answers to this:

Neither of them answer my last question ("is this a complete summary..."). Should I assume it is?

And I never said "oh but the data leak isn't really that bad of a vulnerability" -- you did.
This one is 100% due to incompetence. There was no attempt at anything resembling security.
Ya but the bigger the bridge the better the monitoring. I used to use one that fell daily, but its not a bridge your average Yinzer crosses even on a yearly basis.

It just doesn't really go anywhere except a couple thousand homes.

The big bridges on the three rivers, on the other hand! It seems to me that they're always always under repair.
Adventures in Teletext Recovery
Overwatch launched in 2016 to critical and commercial acclaim. I would say the opposite, it's in the last few years that Blizzard seemed to really go off the rails.
That does seem nuts. Quickbase, who've made quite a lot of inroads with big companies, was bought in 2019 for approximately $1B.
"it might be damaging the site money of income"

Which is one of the key factors of determining Fair Use and Fair Use falls under copyright.
- https://lhbg-book.link

- https://marcosampellegrini.com/simple-haskell-book

- https://leanpub.com/production-haskell
Yes, that is wrong as well.
All I want is Bobby Kotick and his friends on the board gone, so I can think about maybe buying Diablo 4 when it's released.
imo sitting down with a newspaper and reading the whole thing is/was a lot more satisfying than reading news on the internet.

Poking about a vast news stand at all the magazines was very satisfying too. This activity, a hollow shadow of its former self. Very sad.
That applies to most products I can think of. I suppose the simple answer is that if you want to go mainstream with _anything_ B2C, you need to invest a ridiculous amount of money into marketing. To get that kind of money to play with, I don't think there's much of an alternative to the stock market and VCs, is there? There's a few exceptions I can think of, but not many.

As much as I enjoy indie games, I do think they've contributed heavily to the incredibly oversaturated market we see right now. It's downright impossible to find actually good mobile games for example without investing hours of research.
How did all that work? How did you hear about it and decide to help? Are you Kurdish? Were you a soldier already? Did you focus on journalism or medicine or sniping or anything?

How does the USA treat that in general? Do the people accept it, or praise it? Do they try to trick you into admitting legal problems with it? You can get back into the USA so I assume you must be a citizen?

What's your opinion on the general legality of fighting in a foreign war by choice?

Did you accomplish enough that you'd do it again?
It's the first row on their homepage now.
Personally I always wonder if it's less "laid off to face consequences" and more "the adverse selection post-layoff quitting where people with the most opportunity leave for greener pastures".
Ah, but it's precisely their different flavors of horribleness—and the kinds of non-horrible things they're able to convey regardless—that are the message. These differ even for things as similar as broadcast TV and modern streaming services—the way the message is conveyed, the medium, shapes the kinds of messages that tend to get through, or which are amplified and which are suppressed. An early example of this would be the role of the rising popularity of the codex, versus trunks full of scrolls, in driving the creation of a fixed "canon" in Christianity. The message of a pile of scrolls is flexibility—the message of codices is fixedness. Something's in, or it's out, and everything that's in is physically connected and difficult to separate. There's a decision to make, where there wasn't before.
Yeah, this would be about the most inefficient way to do it. You barely ever have to show your ticket. There are no gates that track where you are. You just walk into the train and go with it.

Especially considering that tracking the general population by phone is much easier and efficient.
The grim truth is that, in many regions of Germany, public transport is heavily overloaded as it is. So some discouragement is priced in.
The fact you think they wouldn't have needed a driver on board if not for the law proves how deceptive this is. Do you know how many takes this took? Neither do I, but it's very doubtful that they'd let the Tesla do this alone even with today's FSD even if it were legal. Their FSD is nowhere near ready for that.
He took the red pill!
Speeding is as dangerous as drink-driving, and at least if you don't wear a seatbelt you (probably) only harm yourself, not others.
Hyper real AAA games maybe, but some of the biggest and most money making games like Minecraft were private creations of a person or small team. Minecraft by all accounts has gotten much worse and less popular after Microsoft bought it--people still prefer the old java version vs. newer Microsoft developed editions.
I can swap one load balancer or cache for another. However, if my programming language has unfavourable terms I will have to rewrite all my code. Oh, and the knowledge I gained will be non transferable to another job or project because it'll always be a niche language. Better to spend the time learning how to get the same performance out of Numba or whatever other alternatives people mentioned here.

By the way, Redis is still BSD licensed.
> Unlike the majority of HN I don't hate MS, they have quality stuff as far as gaming goes.

This has not been my experience when playing any game that uses the UWP / Windows store API. I must've sunk 20+ hours into trying to get Forza 7 to start. It would launch and play fine maybe 1/20 times, and then exit to desktop with no error after about 20 minutes of play.

The other 19/20 times it wouldn't start, and the support online was abysmal. Suggestions include rebooting your machine, reinstalling the game (which was an 80GB download), reinstalling the GPU drivers, and I even got desperate enough to attempt a technique that was parroted on many forums as a fix, which is to install and immediately remove a completely unrelated Windows app store game. This worked a few times and then stopped working, or maybe it was just a coincidence. I spent a few hours trying to get my money back from MS and gave up on that too.

I miss the days when you could just run a .exe to start a game - if this is the future of gaming on Windows, then gaming on Linux could actually be a viable competitor.
Just turn it into a single query using CTEs.
As TillE wrote, we don't even have gates in Germany. Passenger volume is measured by manual counting - for real. It's a typical job for students and for the retired. They count how many people are getting on and off the trains at every station. During the ride they ask volunteers about their point of departure, destination and type of ticket.
It is. I believe it's meant to encourage commuting by train, not long range travel. It's for example now significantly cheaper that the normal Berlin yearly ticket was while also increasing coverage.
I welcome this change. I am willing to sacrifice a few Python features for the sake of speed.
Tech is indeed something of a bubble from what I can tell. Rush hour traffic looks at least as bad as ever around where I live--though the driver who picked me up at the airport a few weeks ago told me Monday and Friday are appreciably lighter.
I have nothing against MS. I’ve had multiple models of Xbox, for example.

I support this because MS is already huge (Windows, Office, Xbox) and Activision/Blizzard is huge.

There is already way too much centralization. EA owns too much. Honestly there may be some Sony shouldn’t have been allowed to acquire (I don’t keep track on either side).

So MS + Activision is just too centralized for me. If the argument is “we need this to compete with EA” then we should break up EA.
I remember that story, I came across a post asking people to upvote the support ticket on the r/datahoarder subreddit by a fan on the 17th. I came across it and cross posted a link on hacker news on the 22nd in the evening and by the following morning the account was restored and taken care of. I can't say for sure how much posting it here helped, but based on the timeline I think it made a difference. I believe it was also one of the highest upvoted stories of that day.

What stood out to me what one of the first couple comments in the support thread was the contact information for the Museum Director of the Swedish Tank Museum.

My unconfirmed theory is that Google's OCR pdf service flagged specific text and pages in the pdf of tank plans and repair manuals as they are considered classified and shouldn't be in the public unredacted. It's historically significant and absolutely worth preserving, but I can see why it might get flagged.

This was also interesting in that it got the entire account taken down. Usually Google flags a file and disables sharing completely. Google disabled sharing backups of a recent Kanye interview that was filled with hate speech called "Kanye champs removed video.mp4". I have not watched it but it was my first time seeing something removed because it "may violate Google Drive's Hate Speech Policy. Some features related to this file were restricted."

I am not sure if it was the post to HN or various videos other made that helped, but it made me realize that the one of the best ways to get in touch with a human at Google is posting here on HN and that Google will continue to become more aggressive with scanning files.

Section 230 was modified by FOSTA-SESTA when related to hosting sexual solicitation, and EARN IT is back under review by congress which would effectively make E2EE illegal and make hosts liable for illegal content uploaded by its users.

Would scanning be okay if there is a government entity with a human you can appeal to that would override any flags made by automated systems? No corporation wants more government oversight, and the only way to avoid it is to do good faith self policing. EARN IT would receive a lot more support if the public sentiment changes to believe Google and Apple and other hosts intentionally choose to ignore problematic materials. Reddit is criticized often because it allowed problematic subreddits to grow. I am not sure where things will end up.
Well, try working on enterprise and you know how much long support they need. Move fast and break things simply doesn't work and doesn't scale properly.
You're only hearing about layoffs from the companies doing layoffs. Companies like Apple haven't done layoffs.

But the answer is mostly no. You don't become a worth $10Bn+ by being slow and steady. You grow fast when money is cheap and you hibernate when money is tight. (I don't agree with this way of building a company, but that's not the point.)
Compressorhead is such a massive achievement of human ingenuity.
At first, this paper seemed to me to be contradictory: having defined VILPA as excluding exercise for the purpose of exercising, it recommends doing it for that purpose... On reflection, I think the advice is directed towards people who could take the stairs, but habitually don't. Aside from that and running to the next bus/train stop, I'm not sure there are all that many options for this sort of behavior modification without setting aside some time for it.
It's useful. But the pro features didn't really stand out that much. I worked at one company that shelled out for pro and then went back because really the pro features weren't that much use.
Don't be so hard on him (and your fellow compatriotes). His english is perfectly fine.

Wouldn't it be weirder if he had no perceptible accent whatsoever?

I find it quite refreshing to be able to tell where someone is from, judging from their accent alone. When I was a kid, growing up in a rather rural area, I could tell with an accuracy of about 20km which area around my hometown someone I just met was from, just from by the fine differences in their accent. But in fact very few people like being identified like that.

I get it, breach of privacy and all that... but on the other hand, is it so bad to know where someone is from, when having a conversation with them

The real problem is of course the biases in people's head... "dutch people are such and such", and so on. I say we should fight the biases, not the fact that one's geographical origin can be guessed.
I think the difference between nominal cost, even 10 cents and free is huge in terms of behavior.

When electric cars were fairly new, free chargers were fairly common and people would horrendously abuse them. They would leave their cars plugged in past the time the charge was complete. So the people who wanted to charge their batteries every minute their car was idle spoiled it for the rest, even people who desperately needed to charge.

So I think of the same thing wrt public transportation. I believe NYC had enough subsidies that they could make their subways free, but the behavior of outliers like people who would live on the trains spoiled it for the rest.

(but yes, tracking)
Good, monopolies are only good for board rooms. Break them up.
> I did a small benchmark and found for high concurrency write-only loads, the results of each goroutine writing directly vs using a mutex were basically the same.

I'm interested to see your gist, but just to note this specific part seems to contradict https://news.ycombinator.com/item?id=33911491 , where at 64-wide parallelism for a write-only load, the Go mutex outperforms plain WAL by a factor of ~70x,
It doesn't surprise me that they are not street legal...but it's interesting to me that in all practicality, they are probably safer than riding a bike; and yet bikes are legal.
> I would make public transport free.

It is possible that is the long-term goal. Getting there may be incremental, and providing a 49EUR ticket could be one step in that direction. Convincing people to do "all free" may only be possible by first agreeing to a lower-cost ticket.
Would free trains not need conductors? At least here in Belgium, conductors also check whether it's safe for the train to depart. Metros don't have this, but they have cameras throughout the vehicle and on each platform of each station.

> governments like to keep track off movements.

This doesn't make sense, train subscriptions don't make this possible. I have a train subscription but am only checked 1 times out of 10. The other 9 times no one knows where and when I got on or off the train. (Except if they examine the cameras in the stations.) A single ticket also only has a date, no time. And until a few years ago, conductors still 'cut' those, with an 'analog' tool; it's only recently they started scanning them.
One thing I like about Bank of America is their app and website are both really good. I have another account with a small bank and I continually have problems with the website being janky.
Yeah I wondered if it was concert tickets for a moment, or speeding tickets
Before this week, I had not heard of no-code. Now I see it all the time, at least 3 different occassions. Weird
"16 years since Rust was created"?

how is it 16 years when Rust 1.0 was released in 2015?
More likely this lower msft quality.
I kept reading first few paragraph and it felt like autogenerated AI writing from a few years ago. Gave up and came to the comment section.
How does this relate to

https://cython.org/

?

Would it be possible to write performance-sensitive parts of a Python system in Codon and link that to a CPython or PyPy runtime that supports more dynamic features?
My old monthly ticket from Reading to London, just under 60km, was £574.50/month. Rule Britannia...
Company sets a mature hiring strategy and continues to employ previous hires doesn’t make the news.

Or maybe “mature” is an uncalled for judgement. Company correctly forecasts hiring needs and business environment is maybe more correct.
So you really think looking at a GPS and driving a car yourself and putting cruise control on makes a car self-driving?

(hint: no, you are driving the car with assisted technology)

I'll remember to cite this in the next Tesla thread when we discuss Autopilot and self-driving.
- Started learning Japanese in 2022, so I’d love to pass JLPT N5 of N4 in 2023. These are beginner levels, so not very useful for anything, but it would be so cool!

- I’d like to start a micro-startup. I do a lot of open source, but would like to do paid work for a change! I have a few ideas, but need to learn how to make them billable.

- I very slowly started moving from Gmail to an email address with a custom domain name. I need to double down on that and get away from Gmail asap. I can’t stand Google anymore and Gmail is my biggest remaining tie to them.
>There is a difference between trying to convince someone to spend money on your product vs trying to convince someone that your worldview and ideology is the right one (Trumpism) by using language that resonates with your values.

Both is propaganda, the difference stems from not only trying to frame things in a positive light as you commonly do with advertisement. The reason political propaganda is often more effective is the easy exploitation of negative caricatures combined with ingroup/outgroup effects and the errors of our brains. Be it cognitive biases or simply the inability to scale with complexity. So for example, if i get you to perceive yourself to be part of my ingroup, by having you react predictably with caricatures representing the outgroup (often with some "with us or against us" rhetorics) and manage to have you accept simplified stories, then i quite simply already won. Because i will be able to define who is and who isnt grouped in with the caricatures and how you think about anything they say.

This is very much about brainwashing. If i get you to think about stuff the way i framed it and stop you from communicating with people outside of the frame in a meaningful way, then i own you. And it works through you not wanting to challenge believes you started to identify with due to cognitive biases. Which is also how you recognize whether you are already in such a situation. By for example, believing every disagreement with sockpuppets is a "no" instead of a "yes, but...". Having an incomplete view of a situation is often just as easy to exploit as a wrong one.

Unfortunately this is just the start. This is very much an asymmetric battle with individuals on the loosing end in terms of complexity management and ease of adaptation. And even if you somehow managed to stay objective and got your hands on good information, you are still at threat of your attacker escalating to psychological warfare, for example overwhelming you with inputs to force you into either paralysis or predetermined reactions. And depending of how vicious your attacker is, white torture is also a possibility for further escalation.
Probably a lot. The New School appears to be about 80% adjuncts and so any across the board increase in pay would also dramatically increase operating costs.
I suppose if you count Windows, Microsoft has captured way more of the market than Sony? Comes down to how the market and what (constitutes a monopoly) is defined though.
Another aspect that I think is often not well understood when you get this "standard Monad error handling tutorial" is that the monadic approach is nicer precisely because you're not handling errors. The reason why the monadic code always looks cleaner isn't only that it's "monadic" but also because the "standard Monad error handling tutorial" deliberately doesn't handle any resulting errors. Monadic code like (sorry, I know Haskell syntax, not F#)

user <- getUser
message <- getMessage dbConn msgIdx
renderMsg user message

looks so much cleaner, but if you actually need to unpack the result of getUser to figure out what the error is in order to do something specific based on an authentication error versus a database connectivity error versus a timeout error, the syntactic advantage over Go dissolves. I forget the exact Haskell syntax now but think something like

user <- case getUser of
Error err ->
case err of DBerror e -> ...
AuthError e -> ...
Timeout -> ...
default -> ...
Result u -> return u
message <- case getMessage dbConn msgIdx of
Error err -> ...

and so on, etc. Yes, it's great that the happy path looks that nice but monadic error handling ends up affording the same problems that lead people to complain about exception based handling. Most of my Go code would only be marginally improved by "better syntax", the bulk of it is the actual logic of handling the many and manifold problems that arise in network servers, which is most of what I use Go for.

Syntax is almost never my blocker. Can't quite say in good conscience "never". But it's not my biggest problem. My biggest problems are generally that I didn't realize that API could return a response like that, or what do you mean TLS is rejecting my certificate, or most of all, "Oh, guess I didn't understand the problem as well as I thought".
But what about when you're also reproducing the content on your own page like what's being done here?