skysight-inc/HackerNews huggingface dataset:
(author) I suspect they tailgated in behind someone, waited for the garage to be empty, hijacked the car, then idled until someone left so they could tailgate out.
Looks interesting, thanks for sharing the links.

> The study team found three clear vulnerabilities or shortcomings in current risk convention.

> First, it is excessively focused on near-term military threats.

> Second, it lacks a meaningful connection back to concrete defense objectives.

> Finally, third, it has proven to be an insufficient catalyst for essential post-primacy defense innovation and adaptation.
>there's only one pricy modern record I can think of that I "have to have"

for now. then, you'll get that record. you'll enjoy that record. then the need for a new record strikes. a friend of mine and i started a small niche record shop in early '00s and made a go of doing online. it was so niche it never really did much more than supplying us and our friends with direct access to distributors for that niche music. eventually, we stopped and with that the weekly/twice-weekly vinyl delivery stopped. it felt like going cold turkey. it took a while to readjust.

like I said...for now ;-)
You're trying to say that because they did it and they're poorer it should be easier for us because we're richer. First of all, the cost will be in proportion to the activity of the economy and the population. Second, the proportion of people who were educated to use units of any kind was a smaller proportion of that smaller population. And in many former-non-metric countries many quantities are still often quoted in the old units.

All of that and it is still the case that the primary system in the US is the metric system de jure if not de facto. De facto, the metric system is virtually universal in science domains in the US.

Whether the metric system is "better" or not is not the question. There are keyboard layouts not actually designed to slow down typing, but it's just one of those things that most people don't see worth changing. Are they wrong? In that case, it's an individual valuation. I'm sure "the US economy is losing $500b because of QWERTY" would make great copy on a slow news day on reddit. But unless it costs <$500n to make the change, we aren't actually losing anything.

Not everyone is a relentless optimizer. Even some of us who are also like to optimize for the entire system, including transaction costs/overhead/maintenance and not just some ab initio declaration of right like god in genesis.

The US has a great solution that everyone hates because it's the US: we use metric where it's necessary and leave it alone everywhere else. We could use a lot more European know how in numerous other sectors. I would even go so far as to say it's probably correct to presume that things where the US is the outlier is a case where we are the ones doing it wrong.

It's a presumption, meaning evidence can rebut it. In this case, here we can manage both. We can teach both in schools, we can use computers and calculators to divide by numbers other than 10 (which you have to do with mixed units and constants in metric calculations anyway). In fact, I wonder if there's proof that all of this extra teaching and double system overhead is worth what it costs! I bet the answer is that it is though and as long as you can experiment and find out in your domain, it sounds great to me. Different systems for the win!
> Less bad exploitation is still exploitation.

Your statement is problematic, because (a) clearly at some point "less bad" stops being what anyone defines as exploitation, and (b) if you're not living in the tradeoff space, you're not qualified to judge where that crossover is.

There certainly is exploitation to be found*, but paying a multiple of all other opportunities, even if that multiple is below what is available in a different context, is not exploitation.

It's putting a thumb on the scale, accelerating the tilt towards equity.

* There are articles about labeling or screening done by workers in USA that are as PTSD-inducing as the linked stories, where people were paid US wage and had to quit. Don't confuse the job with the pay, these are two different issues.

// Disclosure: I grew up in central Africa. In my teens I worked in the local tech economy, not the expat economy.
Have you found that it has been down quite a bit lately as use has grown?
I did that. I had plenty of friends, but no girlfriends ;)

I realized that increasing the surface area mostly only matters if you’re increasing the surface area of meeting the kind of person you want to date. As a hetero man, I was not doing activities that included many women. But I still don’t know what I could’ve done differently, because doing activities involving women that I don’t enjoy, so that I can be on the lookout for potential dates… doesn’t seem very enjoyable, and also seems a bit creepy. On the other hand, going to activities I don’t enjoy and not looking for dates seems rather pointless.
Interesting, maybe, but ... next time drop an email address or indicate some other way to contact you that's within your personal comfort zone re: sharing in a comment on HN, while also indicating that you have some software ideas you'd like to explore. I imagine most users on HN would prefer that approach, but I could be wrong.
This sounds like a microservice vs monolith statement in disguise.

Respectfully I disagree, maybe with more context I’d be on a similar boat.

The communication overhead is a real challenge to be reckoned with. I don’t think the mere fact something has 10 functions in one service makes it better or worse than breaking those out into their own services (not even getting into at what level do you break them down? Since most all code is a composition of functions)

Personally I go monolith first, then if and only if there’s a function of the monolith that needs to scale separately from the rest of its parts, then I’ll consider making it its own service (and this has to be a pretty large extreme to take on this burden)

Too many times I’ve been burnt by attempts at micro services, which seem to stagnate faster than monoliths at some companies. I also think there’s a higher degree of documentation each new service made, vs keeping it an endpoint in a monolith. But I digress
(Oh I just realized, for those not super familiar with Rust, mem::swap is safe but since dereferencing FOO is unsafe, I just left in one block, not two.)
Is this basically upload, OCR, and storage?
https://old.reddit.com/r/UkraineWarVideoReport/comments/10dn...

https://twitter.com/serhiyprytula/status/1615039030017523717
I like the Sharks not Dinosaurs thing. i keep see people saying "the FAA system was so old"... being old wasn't the problem, lack of maintenance is the problem. We have roads that are old, bridges that are old, buildings that are old, planes that are old, ships that are old, that still do extremely well.

Rewriting COBOL in Javascript is not going to make a system more reliable. Making a system reliable is what makes it more reliable.
Hard disagree.

Someone who is starving and steals food (under pressure) is different than someone who isn't starving and steals food(not under pressure). The person under pressure is probably not a thief under normal circumstance - but he has to steal to survive.

It's amazing how anyone can go through life and think about it so black and white. This thread is rife with confirmation/survivor bias. We're talking about going to an office and creating some widget in 90% of circumstances. Most of the "pressure" is made up. This isn't war or the jungle.
> anything more recent by PVR?

Here's his scholar page[1]. There's a 2020 History of Oz[2] which might be interesting (ymmv - I enjoyed Oz).

Ha. His twitter feed[3] recently mentioned[4]: "Google Scholar gives a highly limited view of what researchers do. I am enduring it now: all my hard work on ΔQSD tutorials and advanced programming courses is completely invisible. Nobody knows it except if they follow me on Twitter [sad face emoji]."

Following that up, here are slides[5] and a video[6] for a "The ΔQSD Paradigm for System Development". Scholar has links to related papers - here's one[7].

slides> ΔQSD is an industrial-strength paradigm for
system design that can predict performance
and feasibility early on in the design process

[1] https://scholar.google.com/citations?hl=en&user=3PTvYzQAAAAJ...
[2] https://dl.acm.org/doi/pdf/10.1145/3386333
[3] https://twitter.com/peterlodewijk
[4] https://twitter.com/PeterLodewijk/status/1610219038558556164
[5] https://www.info.ucl.ac.be/~pvr/HiPEAC-deltaQSD.pdf
[6] https://www.youtube.com/watch?v=iBYZEJZwKm0
[7] https://www.mdpi.com/2073-431X/11/3/45/pdf
> That's great, since AFAIK all existing passkey implementations are tied to a specific browser or OS, and have no way to export the keys, which isn't great for a program designed to own the keys to your digital life.

Something that we're looking to solve at Stytch[1] from the developer's perspective. We're finding that the different platforms have their own twist on Passkeys implementation and all have different UX suggestions.

[1] https://stytch.com/
A VPN solution for your home network is a very different thing than what is needed for any 50+ employee org. Bare wireguard is pretty useless in a business environment; this is why Tailscale is growing so fast.
Amazon Closing AmazonSmile
It raises awareness of the fact that such techniques are possible.

The generative AI results of the past year straddle the invention/discovery divide -- I've seen snarky internet takes recently along the lines of "why are tech bros solving art and poetry instead of our tedious labor", but what people not clued into the field don't get is that:

(a) This generative stuff is easier specifically because it doesn't have to interact with the real world. It's just data manipulation, there's a ton of it to learn from, and it's basically ok if a lady in a picture has six fingers or if the poem you generated has an incorrect meter on line 8. IRL interactions are harder to get data on, and nobody wants their bulldozer AI to hallucinate that the building next door is part of what needs to be demolished.

(b) These generative tools can exist precisely because there is regular statistical structure in (art/language/music). It takes some work to capture it, but it's the information's structure itself that enables, e.g., cloning a voice from a few seconds of recordings. Making research that exposes that fact taboo just means that actors who exploit it anyway will have a bigger advantage in abusing it.

It can also help to understand where a line of research comes from -- in VALL-E's case, it's an outgrowth of research into neural audio compression, an area with very clear advantages for information technology. If one starts shipping that technology and parts of it can be used for few-shot cloning of others' voices, it seems better that we're all aware of the fact.
> Is there some sort of greybeard grapevine that old school webmasters can use to get the attention of class A IP network operators?

webmasters as in single operators of httpd somewhere, no, not likely

other network operators who are recognized ASNs and go to NANOG or RIPE or APNIC conferences and meet people face to face, yes.

if you wilfully disregard valid human-written abuse complaints coming from other equally-clueful network engineering persons at other ISPs, you and your ISP will acquire a tainted reputation.

there's various industry back-channels that exist between ISPs to communicate with each other about this sort of thing, I won't go into many details, primarily because there's a high degree of interest of the parties on all sides in keeping the email inboxes and phone numbers uncluttered with clueless single-residential-last-mile-user complaints about their wifi not working right.
Having to handle 1 customer support ticket for every 100 board sales seems like an extremely serious problem well worth supporting!

The failure rate of motherboards is only ~3%, imagine adding an extra 1% on top...

(I know you're trying to make a point with the 1%, but _any_ reduction in support tickets by adjusting the secure boot default (which is essentially free) is going to be worth it to the manufacturer. )
I used to work at a music shop buying and selling used CD's, vinyl music and DVD's. It was pretty common for us to deal with stuff that was obviously stolen.

We had a couple (man and woman) who would come in the day of releases with like a dozen DVD's of high selling releases. It was so obvious so if we thought or knew stuff was stolen, we'd completely low ball them in effort to dissuade them from coming back. After a while, my manager said he wouldn't take this couples stuff any more - which lead to a heated conversation before my manager told them he wasn't an idiot, he knew they were stealing shit for their drug habit and they should stop coming here to sell their stuff.

Anyways. . .

One day some teenagers come in with two huge CD carriers of CD's. All very eclectic stuff. My manager was spotted some really rare stuff like Pearl Jam bootlegs, and some other stuff. He was looking through it and it was clear we were both seeing the same thing. He told me to tell these kids we'll go through it and come back in like 20 minutes because it will take a bit to go through it all. My manager pulls me into the back and is like, "Clearly this shit is stolen. This isn't just a random box of CD's either man, this is someone's collection. Some of the stuff in there is ultra rare, some of the stuff I would love to have in my collection. We have to do the right thing here man."

Kids come back and he he gives them like $30 for the collection, it was like pennies on the dollar for everything. These kids, they don't care, they got $30 to blow on whatever. My boss tells me he's going to put an ad in the local alternative paper about the collection to see if he can get it back to the rightful owner and to set aside in the meantime, its not even going into our inventory. Two days later, gets a call. My manager tells him to come in. Says if he can identify the case and five of the CD's in the collection, he'll give it back. Dude not only told him the five, he listed the entirety of one of the cases. It was pretty obvious it was his.

We did this a few other times and were successful, so it kind of made up for some of the other stuff we were expected to do. So many stories working there, it was as close to working at a pawn shop as you can probably imagine.
If it's not a distribution-level amount of drugs I think police just don't give a fuck, especially in larger cities.
I think time/money is usually a proxy for what drives people.
You’re right. As a hetero man, I was not doing activities that included many women. But I still don’t know what I could’ve done differently, because doing activities involving women that I don’t enjoy, so that I can be on the lookout for potential dates… doesn’t seem very enjoyable, and also seems a bit creepy. On the other hand, going to activities I don’t enjoy and not looking for dates seems rather pointless.
To replace webpack? I don’t think that makes sense.

Bun is not a JavaScript bundler, it’s a JavaScript runtime, like NodeJS or Firefox.

You can (could, theoretically) run webpack with bun instead of node
Scientists Are Getting Eerily Good at Using WiFi to 'See' People Through Walls
dallas / ft worth you pay about $125 an hour for shop labor.

lot's of places have a placard with a $200 rate, but they never charge that much. (replaced headlights, they broke a wire, spent all morning on the car, cost was $250 in labor).

at least my experience, dealing with independents. i am sure a dealer has no shame on the rate and the hours.
In the 90s my wife also worked at a software company that makes scientific imaging software - with about that many people. Weird.
You are assuming that the institutions offering the protection will follow
through for when you need them to. I don't mind people who do believe these
promises made to them, but I certainly understand those who don't.
You broke the site guidelines badly with personal attack here and flamewar at https://news.ycombinator.com/item?id=34428222. We ban accounts that do that. We've had to warn you about this kind of thing before.

If you'd please review https://news.ycombinator.com/newsguidelines.html and stick to the rules when posting here, we'd appreciate it.
> 2020 and 2021 were crazy times, I interviewed with Amazon at least 4 times

I interviewed with Amazon last year and was specifically informed that it isn't possible to interview with them more than once a year. How did you interview four times in two years?
Meta-note: do you have any concerns about overloading the name "Codex"? There are quite a few software products and companies named this.

This is pretty cool. I wonder though if the tree sitter query syntax is the right thing to directly expose. This is definitely useful beneath the hood for people writing specific refactoring patterns, but it would seem overkill for general dev. Is there some syntax that looks closer to regexes for this (tree sitter inside regex rather than regex inside tree sitter)?

I wonder if attacking this problem at one level up say the LSP level could be a good idea.
Dividing your work up in to modules is sound advice.

What blows my mind as a non web developer, is that when people talk about micro services they connect these modules not using a function call, but as a HTTPS request over a network to a different machine!! The orders of magnitude of latency / performance / hardware / energy / bandwidth wasted establishing a connection to a remote machine using a text based protocol, vs a native C API call is mind boggling to me.
Or maybe there is a pattern I'm just not aware of it nor can my friends explain it. Maybe having some common fundamental values, idk.
Argentina is littered with them. Walk down Florida Street (ironically named) in Buenos Aires and hear "cambio, cambio, cambio" being yelled out constantly.
Netflix refreshes its iPhone app with a more fluid design
they do require correct code
It'll be better than rolling your own password manager and self-hosting it for your team.
A master painter can paint anything. Deciding what to paint is where they find the challenge and the fun.

First you focus on technique. Then you focus on the what.
Both of those things can be true... it's not just one or the other. There are plenty of jobs right now that are more menial tasks which will definitely be replaced by this, and I feel for those older folks in those positions because they'll most likely lose their jobs / be impacted by this.
Operationalizing Machine Learning: An Interview Study
Baby steps.

US law makes this type of organization harder than it should be and a union is a good step towards what you're describing.
I absolutely hate Calibri. I hate that Microsoft made it the default font and now we're all left with this quirky, unbalanced font as the default.
A New Formula for the Determinant
A new explicit formula for the determinant that contains superexponentially fewer terms than the usual Leibniz formula
You are thought controlled America
> Why? Because of layoffs? Thats not a reason to unionize.

This is one of many reasons to unionize because the reasons for layoffs may not be what we're being told.
A long time ago in a history far far away (early 2000s), friends of mine stopped into a used record store on the off chance that maybe there might be something they like. They go digging and come across a trove of a specific type of sound in what looks to be a fairly well curated collection. A few were well known and out of print. They divvied up between them and went to check out. That's when they learned that some girl had come in to sell the whole lot of vinyl for $1. Everyone agreed that it was a pissed off girlfriend/ex of some DJ. For a moment, there was almost a shared "is this bad karma" before that quickly dissipated.

Vinyl collections all have stories around them. Some of the stories of how they were lost, some are how they were collected, and some are intertwined!
If they even make an offer. When my dad died a few years ago, I combed through his considerable music CD collection for stuff I wanted (not very much), then tried selling the rest to a 2nd-hand store. They didn't even make an offer---the guy said "This is, hands down, the worst CD collection I've ever seen." He refused to let me throw them away in the nearby dumpster. Ouch.
May I ask what did you think was your number or how did you come to a number?
For sending official paperwork to a judge or a visa or something like that, there are a lot of rules. Sending A4 instead of Letter will make them reject your paperwork on the spot.

Someone told me a horror story about a PhD thesis rejected because it has wrong margins (probably something about the margins of the document and additional margins added by the driver). He has to reprint all the copies. Most universities are not so stupid, but if your university is stupid enough, remember to triple check the margins.
Heck just statically holding heavy objects that are being constructed would be huge for me - windows, beams, etc - almost like an exoskeleton suit, but without anyone in it. Just have it hold the object. Manually move the object into place and hold it while it is connected.
The only real difference between SQLite and something like Postgres or MySQL is that Postgres and MySQL bundle a networking layer on top of their embedded DB engines.

If you are worried about high availability, chances are you too are building a networking layer on top of a database, so what do you need two networking layers for?
NASA considers lunar pipeline concept for future Artemis missions
I remain unconvinced that it has anything to do with Apple thinking about the user’s mobile data bill. Watch what happens when Apple is no longer entangled with Qualcomm royalties.

Though I do like the idea that this is why tethering to my iPhone is so flaky. It isn’t due to bugs, it is because Apple cares about my mobile data bill!
That looks like someone scanning for vulnerabilities in things like outdated/misconfigured WordPress.
The main difference is that binwalk goes through a file linearly, searching for patterns like magic bytes, and tries to extract everything it finds.

The problems with this:

- very noisy, finding a lot of false positives (license code, format inside another format, etc).

- very slow, trying to extract irrelevant things

- imprecise, because it finds patterns in the middle of a file, where it's actually not relevant on the first level of extraction

unblob solves these problems by being smarter about the file formats, recognizing them by their specification, for example unpacks format header structs and carves out files based the information in the header (size, offset).
See a simple example for NTFS [1].

We also went to great lengths preventing unnecessary work by skipping formats inside another [2].
We are using hyperscan [3] instead of grepping byte sequences with Python, which is orders of magnitudes faster. It can also handle 4Gb+ files because of this which binwalk cannot.

It's used for a year now in production and it's way more precise and faster than binwalk. We are getting less false-positives too, and even if unblob fails to extract everything, we still get meaningful information out of firmwares, where binwalk just failed with no output previously.

[1]: https://github.com/onekey-sec/unblob/blob/main/unblob/handle...

[2]: https://github.com/onekey-sec/unblob/blob/main/unblob/proces...

[3]: https://github.com/intel/hyperscan
Relevant xkcd: https://xkcd.com/2080/

(Especially re: education expenses)
Hey! What happened with the AFBTL a11y feedback on focus-order issues, like closing or hiding the language menu throwing focus back to the top of the page, or the ToC menu problems? Those seemed like a11y dealbreakers, but they made it through to GA.
And the article was written before Jan 17 was even finished (at least, in Pacific time, where Twitter is headquartered), so the estimate from the manager was probably based on a smaller time period.
Hypernomicon: Personal Philosophy Database Software
Open source
#PKM