skysight-inc/HackerNews huggingface dataset:
> The phrase "more secure" doesn't mean anything

Fair point. I'll elaborate:

The linux (UNIX) security model is designed to protect users from other (potentially malicious) users on the same computer. The system as a whole is designed such that a malicious (or incompetent) user can't make the system as a whole stop working. The system is more important than any particular users' data.

Software is assumed to be correct. Any program a user runs inherits the full permissions of that user.

There's some problems:

1. Computers aren't often shared between mutually-untrusted people.

2. My data is much more precious than my computer itself.

3. Malicious software is everywhere. Every time I install a package some stranger wrote on npm or Cargo, I implicitly give it full access to all my data and my entire network.

So, linux protects me from things I don't need protections from (other users) and doesn't protect me from things I do need protection from (malicious code).

> One needs to talk about the threat model(s) you care about and how a particular solution addresses them (or not).

The threat model for malicious code is, I install an apt package / cargo crate / npm package / intellij or vscode extension and the package contains code which either exfiltrates my data over the internet, or cryptolockers it.

iOS (and Android?) don't let code like this run, since software can only (by default) access the data that it itself has created. Ransomware attacks are trivial on linux and impossible on iOS.

Its much more likely that me or my family suffers from a keylogger or ransomware attack than we suffer as a result of government intrusion into our digital lives. I'm one bad npm install away from having all my data stolen, and it terrifies me.
>to end up being sued by our regulator for stock manipulation

It could be manipulation in principle, but the instances where regulators have been corrupted and use that as an excuse are really terrifying. See: Wirecard in Germany.
I also found a javascript emulator that I used to resurrect a constellation quiz program my dad helped his 8th grade science students write in 1984:

http://constellations.s3-website-us-west-1.amazonaws.com/
Please make a bug report about how we can improve the package if you have the time. I'll see that it's taken care of, then.
That's the choice of the manufacturer.

If a company is selling something and says "X years of support", that means X years of support, not "until date Y" where Y is date of release + X.

If android manufacturers are saying "X years of support" when they mean "supported until [some date]" then they are quite plainly false advertising.

I can find many sites that say that apple commits to 5 years of software support from the date of last sale, but I can't find anything on apple.com that matches that. I've found that they guarantee 5 years of hardware support (repairs, etc) from date of last sale, and then a further 2 years subject to hardware availability (presumably they stop purchasing/manufacturing parts). Note that I'm not talking about warrantee coverage (which varies but seems 1 year is standard?) just the actual ability to do repairs.

Based on this article and various others over the years, and the vast array of spammy infographic laden sites making up the first page of google search results, it seems like claims of ~5 years of major updates and a few more for security only is consistent, but again I can't find anything on apple's site to confirm that explicitly.
In the book "Where the Red Fern Grows" why does Billy hate dogs?

> In the book "Where the Red Fern Grows" by Wilson Rawls, Billy hates hate towards dogs because his family had two hunting hounds that were killed by raccoons while they were out hunting. Billy feels guilty that he wasn't able to save them, and this event causes him to hate all dogs. He later learns to overcome this hatred when he gets his own hunting hounds, which he trains and raises with love and care.

Lol.
Being into art, I think your example perfectly demonstrates why we can't get AI soon enough. There is no good reason for thousands of tourists to crowd around the Mona Lisa on a daily basis. They don't even understand what they're looking at.

Would people pay millions of dollars for an AI generated black square NFT? Maybe some would too, it really shows the retardation of the entire space. With the mainstream it's not even about art and craftsmanship but about big names and make-believe. And that's not just art but all fields including science to a degree. When we get AI, hopefully more people are going to start focusing on substance instead of marketing and illusion.
> It’s not designed to give “playful” responses and instead what you’re seeing is a system so eager to answer the question that it doesn’t care how wrong it is.

It absolutely is trained on loads of "playful" data
In WA (and I think CA) they are required to make state/local min wage ($15/hour) before tips are considered.
We really ought to thank Nvidia for that last one.
> I’ve seen people promoted to VP based on a set or vague promises they haven’t delivered, mass hiring and vanity metrics

So basically Google has become like any big company. If this were true, then it was the a failure of the leadership chain. At some level some leader should be able to call bullshit of this. After all, Pichai should not care about vanity metrics but how Google really grows, right? It's just sad that at certain point that a leader high above simply can't understand every aspect of a business and therefore won't be able to tell if his reports are doing real jobs or chasing vanity metrics.
Even for weight loss, some gut bacterial peptide helps. This is like semaglutide. See https://www.nature.com/articles/s41598-020-61112-0
Uhhh, I can still send SMS messages. I just sent a text a couple minutes ago on version 6.8.3
I seems to always think of new things. Writing them down helps me forget about them and stay focused. So I end up with a much longer todo list.

But once I'm done I have lots of options to choose from. This helps me pick something that I have the energy for instead of getting stuck in 1 tangenital task after another which can feel a bit repetitive.
Quite a few games do use kernel-mode anti-cheat, but it's far from "most" even in the narrow category of multiplayer first-person shooters, let alone multiplayer games in general.

Large studios are installing anti-cheat rootkits for the same reason they used to install anti-piracy rootkits: because they're excessively paranoid about any possibility whatsoever of revenue loss. Anti-piracy rootkits fell out of fashion when enough customers got fed up with them to stop buying games with them; I would be entirely unsurprised if anti-cheat rootkits met the same fate - especially given the recent popularity of devices like the Steam Deck that make shipping such rootkits (for either reason) exceedingly difficult.

----

EDIT: and in any case, I'll take "have the choice to install kernel-level anti-cheat on my machine if I so choose" over "not have that choice" any day.
Very nice, I spent a lot of time at Radio Shack playing 13 Ghosts on TRS-80 model 3s or 4s. There was one sales guy that would always kick me out because he thought I was too rough on the space bar. Eventually I went with a TRS-80 Color Computer and taught myself to code. Best money I ever spent.
I feel let down as a Dane that neither NemID or MitID deserve a mention.

https://www.nemid.nu/dk-da/om-nemid/historien_om_nemid

https://www.borger.dk/internet-og-sikkerhed/mitid

full disclosure - I worked on the JavaScript implementation of NemID. My problems with it are not the implementation, but the whole concept.
Curious to know if there's discord for HN LOL players ?
The craziest part is that no other cryptocurrency has this problem. It is entirely self inflicted that bitcoin has 1 KB/s throughput for the entire world and everyone else just didn't cripple themselves.
I don't want to be a negative nancy, but What chance by judicious comparison of textual outputs people can back-calculate the algorithm behind the watermark, and then either remove or defeat it?

E.G. if it uses inter-textual spacing, then re-flow pagination would erode it. If it uses optional textual marking, a semantic read could replace ; instances with other constructs. If it does dependent word order for sentence end, or start or other stylometric changes, that too is probably statistically detectable.

To function for text fragments it will have to have some bitrate in the word stream, and therefore be subject to loss of sufficient bits to prevent reconstruction of the hash code (or whatever) it is based on.

I want this to exist, but I worry its a signal more than just the originator can detect, and therefore potentially can be defeated.

I very much hope they aren't proposing security by obscurity. If its public-private key based, then it will want the security community to review it with a fine tooth comb.

Oh dear. I see: Methods for keeping the watermark algorithm secret but available via API are discussed in Section 5.

So they propose a large set of tokens, and propose a 50/50 style selection of which have meaning and which don't to increase the surface of cost to detect the tokens and "flip" them, therefore permitting them to argue the watermark may have been found, but could not be entirely eroded.

In an earlier HN thread I was (incorrectly) accused of using a GPT to write my responses. Shortly after, I read of others, and a few days after that Scott Aarenson talked about wanting to deploy a watermark/signature method. I do not see myself as a trigger in that I am just sui generis an instance of why he said they need to: It turns out the simplistic "you are a bot" people have a horrendous false positive rate, and a lot of people who write like me are at risk of being labelled bots, when we aren't.

(this whine was not produced with ChatGPT)
My favorite is when you pass another plane in the opposite direction along the same path but different altitude. The closing speed of two airliners at cruising speed is quite the thing to witness
> Wouldn't it be more sensible to learn how to design security systems that are hack-proof than to learn how to identify security systems that are dumb?

That’s like saying “Why don’t they just design locks that are unpickable?”

They’ve been working on that, for a while. But you need to know what you’re protecting against. Anyone who watches The Lock Picking Lawyer knows about the swaths of new locks vulnerable to comb attacks - a simple attack that had been solved for almost a hundred years but somehow major lock manufacturers forgot about.

You can’t build something safe without considering potential vulnerabilities, that’s just a frustratingly naive thing to say.
I think it goes without saying that everything I write is my opinion, and what you write is yours :)

> substantial amount of non-infringing uses

Your uses may or may not be infringing, but you can use something that infringes to create something that does not infringe. The infringement is at least done by OpenAI etc. when creating the tool you use, even if your use of the tool does not infringe.
> 160 ARM cores

> 320 GB of RAM

Depending how you feel about hyperthreading, there are commodity dual-CPU Xeon setups than can do this as well.
They went on big firing sprees around the public service, just absolute slash and burn style, huge spending cuts to the budget, reduction in services, and were getting ready to privitise a lot of public assets that bring in a lot of revenue (things that have been privitised in other states and have turned out to be disasters there, gouging people for essential services, like the power transmission networks). They under-invested in health, public transport, etc.

They'd been voted in I think because there was desire for change, and very quickly the public sentiment changed. Kind of like "oh crap, not like this"... It's very unusual for a Government to only have one term but they were booted out decisively. Since then the party seems even less competent... So they haven't been able to make much of an impact in the last few elections.
It depends on the structure of the contract. There are a few famous cases of short positions being locked out of value for some arcane reasons.

https://www.bloomberg.com/opinion/articles/2018-04-11/-go-to...
Thanks for trying it out!
For some queries, table selection is not required. We're working on completely removing that step.

What use-cases can you think of for yourself? Do you work with SQL?
Fond memories. My first computer was a TRS-80 Model I that my aunt gave me after their company upgraded to a Model 3. I did a lot of programming in BASIC and even did assembly language programming. To this day I still remember that calling 01C9H would clear the screen :)
I really appreciate T-mobile’s transparent pricing even if their coverage is more iffy. Not all carriers act the same.
I am domiciled in a jurisdiction with a general* wealth tax; I view it similar to being a member of a country club: if you want to enjoy the amenities, pay the dues. YMMV

* albeit levied per-mille, not per-cent
I knew it started here, now I just feel very old haha.
And they also get to use the same version without the bloat for the next ~10 years. While getting security updates.
Adani also owns a majority stake in NDTV Group now :
https://www.reuters.com/business/media-telecom/indias-ndtv-f...
Is the code/assembly for the RSA signature check (`XeKeysVerifyRSASignature`?) available anywhere online?
> nobody has ever written to thank me for keeping their data secure

Somewhat related, I wonder if responding to lawful access / key disclosure requests is at least a little bit funny for you.
Excellent clarification thank you.
Do you have a personality disorder or something?

That's not an appropriate question to ask someone, especially with what we can probably read as an insulting tone. Maybe consider therapy, honey.
Thanks for the detailed answer.

> Personally, after I moved Retweets to their own tab, I found I just never missed them or looked at them again, and if I put them back in it just seems like random noise now.

Depends on who you follow. I follow a limited set of intellectual minded people who themselves follow a lot of people and retweet the good stuff. So, I would quite like to continue reading them.
https://everymac.com/systems/apple/mac-studio/mac-studio-faq...
its funny how usa still has that archaic system.

India had that in the past but since 2008-09 at least we have this system where you buy your phone from the market and use whatever sim card you like.

everyone has the same plans for the same price so its a matter of preference/ network quality, etc etc.

i find this funny that w
It's not confusing at all to tell which messages are encrypted and which are sms. I don't like the default sms app and have been using Signal for all my texting for as long as I've had a smartphone, back when it was TextSecure.
Glad to see this posted. I totally agree - I think Kysely is a cool project but I do think query builders ARE generally an anti-pattern.

I'm a huge fan of slonik, https://github.com/gajus/slonik#readme, which uses template strings for SQL and has recently come a long way with its strong typing support.

This blog post by the author of slonik outlines why he thinks query builders are anti-pattern, https://gajus.medium.com/stop-using-knex-js-and-earn-30-bf41.... No, I'm not him, but I strongly agree with most of his opinions here.
Can we someday turn a character into a chatbot? A character with a lot of dialogue and soliloquies. Imagine talking to your favorite fictional character chatbot or an authors, like a Steven King chatbot.
Good luck killing SMS when the RCS APIs are for Google Messages (and rebranded Android OEM messages apps) only. The few paid RCS messaging APIs that exist are priced like caviar compared to SMS.
That's what Hanjin thought in Korea. Closely tied to a chaebol. Too big and too well connected to fail. Until they weren't.
What's an isomorphic framework?
It's funny how the fairy ended up with three legs in the final frame. I've noticed AI seems to do that - generates an otherwise fantastic image but with one super odd addition.
Makes me wonder whats holding back an upgrade?
Casual discovery is so much easier than having a conversation about what platform you would prefer to use followed by trading unique ids from said platform.
Can you demonstrate that genetic factors play a stronger part in how our society defines "intelligence" than the things I mentioned?

I doubt this can be demonstrated to have a much stronger effect than educational opportunities, which is a function of class, which in some societies, such as American society, is a function partially of race, for historical and contemporary reasons, as well as a function of economic condition (the two are inexorably linked for reason of generational wealth).

> leaving genetics out is just avoiding the obvious because it isn't politically satisfying

I'm very much of the opinion, and as far as I understand it research backs me up here, that while of course various aspects of intelligence can be affected by genetics, the overall outcomes are vastly more affected by things we have lots of control over, such as the egalitarianian-ness of our society, than things we don't really have control over, such as each individual's genetics (and do we want to go down the path of structuring our hierarchies around this? shall I go get the swath of sci fi warning against this?)

You seem to disagree, not sure why, though I'm curious!

> Are you in denial about (inherently) stupid people existing or something?

Nope, just seems mostly irrelevant in this conversation. What's the point of talking about genetics here? How about we do achieve educational access egalitarian, truly, and we find out some people aren't doing quite as good of art, or writing quite as good as poetry, or dreaming up quite as interesting apps, or doing engineering quite as fast, because they lost a genes lottery. Do you think it's a good idea to start structuring hierarchies around this? Seems cruel and pointless to me.
Indexing into an array or vec will always be checked in safe Rust, so if an overflow gives you a bad index you'll just get a panic (or an Option::None if you decided to access it that way); never a safety issue
Exactly. It's not 'too big to fail,' it's 'too big for the Government to let fail.'
With respect to this example, I think he is saying it would be better if we were using memory safe languages, rather than trying to come up with these sorts of mitigations (which is enumerating the bad). Of course it’s probably not possible in every scenario because we’ve been doing it badly for so long, but I think the principle still holds.
> Because if they take down the #2 worst offender, that leaves #1 as the default option for consumers, and strengthens #1's position at #2's expense.

And yet immediately:

> ake down Apple and create more competition, and then I'll have more options and I'll be able to maybe choose some things other than Google.

But Apple is #2. In everything except AppStore revenue.

Google's Android is #1

Google's Chrome is #1

Google's search is #1

Google's ad engine is #1

Google's Gmail is #1
I did something similar for my younger daughter using MagicStory[1] (not mine). I have told her the story quite a few times at her bed time. She has shown it to her teacher and her friends are "jealous." It has her pictures, kinda morphed like a princess and stuff.

Edit: Clarifications.

1. https://magicstory.ai
>in 01997 it was acceptable to them
>c++ projects today are very different from c++ projects in the 01990s
>a lot of c++ projects in the 01990s

You got the year wrong with that '0' prefix. The decade you're referring to is the 11990s.
If the drives live in the same host system, they should be mountable by the other OS. The untrusted gaming partition/drive could then manipulate the trusted one.

In practice, that would require the malware to be specifically targeted to dual-booters (representing a tiny fraction of users). Much better to go after the millions of Windows gaming PCs that also host the entirely of someone’s digital life. Which is to say the physical separation likely buys me little real security, but it does make me feel better.
The secret to happiness is human connection, not economic growth
Can tell it was written by ChatGPT. Has that kind of verboseness to it, can't quite put my finger on.
Back in the day StarCraft did the same thing. Except the key generation algorithm was reverse engineered. So even a legit key had the risk of being used online by pirates and being blocked.
The porcupine has two mouths as well. I tried several times to smooth that one out but I could never quite reproduce the same look in the porcupine's eyes so I kept it.
I was expecting a discussion about the influx of this shit on facebook/insta, not a fucking link to porn. What the fuck dude
Wealthy people are pretty mobile. If you are rich enough, you can negotiate your taxes directly with a Swiss canton, and Switzerland is a nice enough place to live. Only this doesn’t work for American or Eritrea residents.
Yeah, it's a common way of telling people how to read "A extends B", but it's not quite right. The two relationships are related (no pun intended) but they aren't the same relationship. `A extends B` means (in the OO world) that A adds fields, methods, or changes the behavior of methods to B. `A is a subset of B` means that all As are Bs, but some Bs may not be As.

It happens that `A extends B` introduces a subset relation between them, but it's not correct to describe it as the same as the subset relation.
Unless the corruption is so clear and irrefutable and the media actually presses hard enough that Modi decides it's time to throw Adani under the bus to save himself.

But that's a high bar I assume...

If the rest of the world weren't also so corrupt, it'd be fairly trivial to call out Adani and cancel all business with them and add some nice sanctions, but that's not the world we're in it seems.
I think this is a really cool project, but for most use cases (not all, but most) I strongly believe query builders are an anti-pattern. I could go over the reasons, but when I saw this blog post, https://gajus.medium.com/stop-using-knex-js-and-earn-30-bf41..., from the author of slonik years ago I had a eureka moment, and it explains the reasoning better than I could.

Template strings in TypeScript allow you to safely write SQL directly, still with type checking: https://github.com/gajus/slonik#readme
Ah, interesting. I didn't notice that. I have noticed that chatgpt is really impressive at doing rhyming poems/songs, and many of its generated poems sound similar to each other. I also don't remember raw gpt-3 being so good at poems.

So I wonder if there was substantial fine-tuning for chatgpt specifically to reward it to generate poems, in a particular style.

And here, it's "over indexing" on that and still generating poems in that familiar style
The Accidental Room (2018)
That's a leak of legends.
I can think of one motive. The pilot knew that the internet is crazy for airplane crash mysteries, and wanted to create a grand one.
> web bluetooth as major headline features needed

"web bluetooth" and many other hardware APIs are Chrome-only non-standards that OWA pretends are standards and core features for PWAs.
I was going for more of a kid's book tone but I think I hadn't quite learned enough about the depth and nuance you can introduce into the output via prompting. In retrospect now, I agree it has that generic-AI tone.
Sorry, I just saw this now! I don't know anything about HTTP/3 in Ruby, or at all actually.

I'm using the async-http gem for the HTTP/2 server and it works great for my use case.
Just any compiled language.
Great job! Did you use any special techniques for getting the same characters in different pictures/settings?