skysight-inc/HackerNews huggingface dataset:
Before doing anything related to security, you should always understand what your threat profile is. If you don't have a real probability that a state actor will go after you, most likely your threat model will include scams and criminals. And unless you're a wealthy individuals, most of these scams will be automated, not hand-tailored.
Are you going to be able to pattern match as nicely as one can on the BEAM?

In practice, is the handle function going to match on each message and then call a handler for that specific message which may then match on the state?
FWIW, Homebrew uses /opt/homebrew instead of /usr/local on Apple Silicon installations, as far as I know that was the main sticking point for the complaint that it took over your system. Still isn’t terribly useful for multi-user systems as far as I know, but for my personal laptop this will never be a problem that I have to deal with.

I used pkgsrc on macOS for a while but ended up going back to Homebrew because it was easier and there were more packages relevant to my needs; I also found packages in pkgsrc wouldn’t play nicely with zsh or bash completion sometimes, I believe this was related to patches specifically required for macOS for these packages. The concept of casks is also very nice, as it means I can manage most packages using a single package manager instead of doing dmg->drag-n-drop installations or mucking around with install/uninstall scripts. Building and maintaining a dumb cask formula is also pretty easy for apps where there isn’t already an available cask.

I haven’t used Macports so couldn’t compare - can Macports install .app applications?
So I work in this space and I am honestly quite surprised by the users here who think a Linux deployment would do any better. They won't.

This isn't a Windows vs Linux vs Solaris vs BSD issue, this is a "did I manage and configure ACLs, RBAC, GPO, and other security features correctly" issue.

For example, I've had customers have had RHEL 6.x enviromments that still got hit because they wrote a security group that allows all traffic from all
ports from 0.0.0.0/0 (aka everywhere).

Security issues always come down to misconfigurations and the lack of best practices in my experience. In that regard, the MS suite is actually superior to Linux because if you need a Security Solution Partner, Microsoft Professional Services is infinitely more competent than the largest Linux solution partner righ now (IBM).
> I have to add resources to my system (env vars) in order to opt-out - and that is the issue!

FWIW, I use "brew analytics off", not an environment variable.

You can't install brew without adding resources to your system.

But I think your real complaint is not about resources, but that the default is "opt-in with a warning" rather than "opt-out then ask for permission".

Which I can understand and agree with.

What I disagree with is characterizing the process as "hidden or hard to opt-out."

> There are no hints/tips about this produced to educate a new user - if it weren't for your help, I wouldn't have known.

I don't understand how you can say this.

The hint/tip is produced in the installer output. I quoted it. It even uses a terminal bell and bold text.

I can understand that you might prefer, say entering "yes/no" to a "may we enable analytics?" question (though it's a bit more complicated as someone may be fine with the new EU-based InfluxDB analytics but not Google Analytics).

But that's not the same as saying there are "no hints/tips about this produced to educate a new user", when it's right there in the installation output.

> merely ask the user if its okay, after 5 or 10 runs

Tracking the number of runs since the previous report is also adding resources to your system, which makes it hard for me to understand how adding those resources to your system is fine but adding an on/off resource is not.

I agree it's a dark pattern which makes it less likely that people will opt-out.

But I also think "unfeasible" is not an good characterization of "read the installation output then run 'brew analytics off'".
The thing is E=mc^2 is the energy at rest, there is a more general equation for objects in motion
Well, Intel is in the business of selling e cores.
telegram isn't e2e encrypted (unless you use secret chats which nobody does (and those do not support more than 2 participants))
A step forward in understanding Fragile X syndrome, a cause of autism
> This is horrific and this sounds very familiar:

> > Utah had a particularly aggressive sterilization program. Eugenics leaders, in fact, hailed Utah for sterilizing a far greater proportion of its residents than any other state in 1947 as an "important achievement in public health."

Americans learned a lot from the nazis after WW2.
Tweetbot’s creators added an edit button to their Mastodon client
opiates definitely arent though.
I haven't looked at what they're actually collecting, but here's a few things that come to mind:

- Time to install packages
- Versions of things
- Has the compilation (when required) failed? What dependency versions are installed?
- CPU architecture
- OS version
...

There's a lot more that can be sent from the client that's not available on the server side.

> I fundamentally don't 'get' what richness they actually need.

That's fine. Perhaps you could ask them instead of ranting about what you don't know or don't 'get' in a public forum?

> to know their software works for their users

Sounds like you're not very far from understanding why they want better telemetry.

> Prior to release (...) and you know anything less will work too.

Things break in unexpected ways. OSs are complex systems and there's a lot of interactions between components. Homebrew's user base is enormous and very diverse. There's 2 different architectures, many OS versions, lots of environment variables that might be set differently in each user's systems, different versions of libraries, ... I could go on but I think you get the picture.

Edit: s/collected/collecting/
How much would you be willing to pay so that Homebrew can maintain a large amount of hardware covering nearly all configurations?
Tesla Terminated Dozens in Response to New Union Campaign, Complaint Alleges
https://archive.is/E5nQc
>We also have evidence China accuses political dissidents and the like of crimes they didn’t commit. There is no independent court in China.

Doesnt sound as extreme as what Assange (Australian) is experiencing, adhoc legalized assassination attempts and up to 175 years from a secretive "rubber stamp" court [0]. Main difference being, the Chinese only apply this approach to Chinese people, while the US justifies its application to everyone on the planet.

The precedent has been set elsewhere but I hope China acts like a useful mirror to the many that ignore or even support this practice when their local goverment engages in it.

The Belmarsh Tribunal [0] - https://m.youtube.com/watch?v=j_QqpYATupw
It's interesting. https://perplexity.ai build a new search engine.

But https://glarity.app simply build on google. Very light-weight, smart choice!
You first need to find ground. You can do this by visual inspection (a bit less risky), or by using your multimeter in continuity mode across external metal parts (for example the outside of the USB port)/negative pin of the power supply. Then, you can use a logic analyzer to find the serial TX pin. The RX pin is usually pretty close, and might be pulled up through a resistor to VCC.
Yes, but what do you expect them to have done, ask the balloons for their license and registration?
Exactly. It goes both ways.
Yes but due to the nature of ML trained tools that isn't as straightforward as it would otherwise be. OpenAI has gone to great lengths to try and fence in ChatGPT from undesirable response but you can never do this completely.

Some of this testing is just that, people probing for the limitations of the model. But a lot of it does seem like people are misusing the software and aren't aware of it. A contributing factor may be how ChatGPT has been portrayed in media in regards to its purpose and capability. As well as people ascribing human-like thinking and emotions to the responses. This is a Chinese room situation.
That's a pretty flimsy argument. Yes, you can map mathematical ideas onto concepts within different fields of study, but that's kind of the point. Mathematics aims to abstract away any such notions of where you might encounter the natural numbers or the reals, "in reality" or elsewhere. All you've persuaded me of here is that philosophy has a use for math.
Sailor Historian, a collection of essays by Samuel Eliot Morison, has a couple of pieces about the clipper ships, taken from his Maritime History of Massachusetts. I have not seen the latter book, but the first is very readable.
So how would fraud prevention be interpreted?

For eg: denying service from a German retailer depending on the ML prediction result of the transaction being classified as fraud probable(Germany has pay by invoice), would also be constitutional or not?

Or credit score/risk rating using ML, trained on a feature extracted from parameters like Zip code, ethnicity could also classified as automated data analysis for prevention of criminal acts, right?

Or this is only applicable to police?
Bingcel.
In the top, middle-right says "Experimental Setups". You can click it to get a few premade examples of classic experiments, and try tweaking them.

Also, there s play button "▶" in the top right, to make simulation start.
CT scans are not risk free. They're x-rays and while again the individual risk is tiny, doing a large number of them over a large population would be expected to increase incidence of cancer [1] (in fact more so than I thought).

External ultrasound (ultrasounds can also be done endoscopically) itself I think is risk free, but inducing anxiety in patients or exposing patients to a healthcare facility is categorically not risk free even though the risk is very small for each individual patient.

The problem is not that the risk is high for individual screening events, but that even a one in a million even will happen regularly once you start regularly screening a multi-million person population.

There is no such thing as a risk free event once the scale is large enough, so the question becomes whether the risk is low enough relative to the potential benefit, and then you need to consider that often a true positive is rare, and making a difference to the outcome of a true positive is even rarer, so depending on what you're looking for even a one in a million adverse outcome might negate the benefit or worse.

EDIT: To add one more point: If you do external ultrasounds and find a potential cancer, you will be prescribing additional tests. Any false positives from the ultrasound will thus end up contributing to excess further testing, and you need to count the harm from that as well. A 1% false positive rate coupled with a 1:10k cancer risk from a follow up CT scan or a (I don't know what the real rate is for perforation) 1:10k risk of perforation with an endoscopy and you have a one in a million severe adverse effect. Do it enough and you'll have deaths even when the starting point is something as innocuous as an external ultrasound. That doesn't mean it can't be worth it. But it does mean you need a risk analysis before any largescale screening effort.

[1] https://www.cancer.gov/about-cancer/diagnosis-staging/ct-sca...

> Individuals who have had multiple CT scans before the age of 15 were found to have an increased risk of developing leukemia, brain tumors (6), and other cancers (7) in the decade following their first scan. However, the lifetime risk of cancer from a single CT scan was small—about one case of cancer for every 10,000 scans performed on children.
>Based on anecdotal psychedelic experiences I believe you.

I've never done it, but I imagine it would be more akin to a dissociative trip, only extremely unpleasant. Imagine each of senses (including pain, balance, proprioception, etc.) giving you random input.
Because the demand hasn't been there. If more people learn the benefits of these sensors and decide they want more of them they'll pay more for models that include them and manufacturers will respond to demand. If people don't know about them, or don't perceive any particular benefit, those sensors will remain niche and expensive.
The meaning of woke is:

"aware of and actively attentive to important societal facts and issues"
An abbreviated version of the conspiracy theory is that FTX's tokenized stock, which were assumed to be backed 1:1 with actual share holdings, were used to hide some of the extremely large short positions that caused the the short squeeze in January 2021 - the central thesis of the whole shebang being that those positions were never actually closed, just covered by various means that got them off of investors' books.

Watching from the sidelines, I can't decide if it's "scientists warning about climate change" or "homeless guy on the corner holding a 'THE END IS NEAR' sign". It seems impossible that they could be right, but then wacky, Madoff-level stuff like this happens, and I'm like, "Huh, maybe the scale of the brazen criminality that's implied isn't actually too large for reality to abide."
Not at all. He is correct that those functions are defined mathematically and that the results should therefore be the same using any libraries which claim to implement them.

An example used in the article: https://en.wikipedia.org/wiki/Lanczos_resampling
I think scanning receipts (which still requires manual effort) or parsing bank SMSes locally could work
it's worse than that. secure chat in telegram is very limited. you can't save anything shared in them. for most practical applications, like talking to friends and family you don't even want to use secure chat. if it were default you'd have to turn it off most of the time
Perhaps so, and I think that's a good thing. Nevertheless, I can see cases where there will be arguments over where clean-up and restoration end and new original art begins.

For instance, say a film's master negative has been affected by patches of mold and detail lost. As the original information has been actually lost at these points, any reconstruction 'originates' with the reconstruction 'artist'. In some instances the reconstruction involves no art as it's obvious what's missing—say an image of a quarter coin with a section missing out of it, whereas reconstructing the missing expression on a person's face may require interpretation and thus deemed new original art. Given the longstanding and heated debate over copyright, it seems to me these gray areas will be hotly contested.

Obviously, where new material is added there is no contest, new copyright is invoked. For example, some years back someone posted a medium resolution (720px) copy of Kino's rework of Buster Keaton's The General to the Internet Archive and it was eventually withdrawn.

I'm not conversant with any special copyright arrangements surrounding Keaton's works but presumably the takedown wasn't based on the cleaned up footage (given Bridgeman Art Library v. Corel Corp) but rather on the new soundtrack which accompanies the original silent footage.

Collaborative evidence of this is that other versions of The General weren't subject of the takedown. I vaguely recall that Keaton lost copyright over financial problems, if he'd been the copyright holder then we'd expect all copies to have been taken down (Keaton died in 1966 so if he'd still held the copyright at the time of his death then it would have been valid until 2056).
Wouldn’t that be a semi-professional chemist?

A professional semi-chemist sounds much more interesting.
ChatGPT data is not very up-to-date, with Google search results can get the latest information.
> No, maintaining environment variables to prevent tooling from sending unknown analytical data: this is not trivial. It is an anti-pattern designed to gain the data from un-sophisticated users, rather than treating users with respect and letting them have agency over whether their resources are used by the homebrew developers

A dark pattern would conceal this, not prominently warn you, or it would be hard to do - not requiring only a skill you already used and giving you precise instructions. I think there’s a legitimate debate for opt in or out but I don’t think “dark” is warranted for something people are talking about because it’s in the open and prominently disclosed.
When an extremely high profile attack like this happens, CISA ends up taking over the organization and revamping the entire organization's IT team. This happened to Atlanta back in 2018-19. It doesn't mitigate the current incident, but helps prevent the next one.
Help, Bing Won’t Stop Declaring Its Love for Me
walking outdoors seems the perfect formula
Amazing! Like this, the privacy laws will also reduce depression as an unintended side effect ;)
Maybe because HN is skewed towards CS topics. But I agree, there are other careers that I think deserves attention for the benefit of society besides trying to cram everyone into an IT career.

I keep reading of shortages in medical and trades fields. If we are short CS degree holders for the benefit of society, simply pivot them to meaningful software work rather then driving clicks.
Running Go Programs on AWS App Runner
Show HN: Duffel (YC S18) – A faster way to sell flights
Hi everyone!

I'm Steve, founder and CEO of Duffel. We're so excited to introduce Duffel Links today - a low code solution to sell flights online fast. Through one single API request, offer your customers a best-in-class shopping experience tailored to your brand.

Since day 1, we've made it our mission to break down barriers in the travel industry and make it easy for anyone to start selling travel. Now with Links, you can still use Duffel even if you don't have technical skills. It truly has never been easier to get started selling travel.

The Problem:
We've removed many blockers to selling flights, but until today, offering even a simple flight shopping experience could be a complicated task. Even with our APIs and components, you would still face challenges such as handling search inputs for passengers of all ages, getting the details of one-way, return and multi-city trips and more.

The Solution:
Enter Duffel Links! Links take care of all of this for you so you can start offering flights to your customers immediately; with a single API call, you can generate a link where your customer can access our best-in-class flight shopping experience, customised to match your brand. Leverage thousands of hours of product design and travel expertise every time you generate a link.

Key features:
-Search intuitively - Your customers will be able to input search parameters to ensure they see the most relevant flights and filter itineraries, so they can find the perfectly timed flight.
-Optimised for conversion - When booking, they can pick the fare with the right level of flexibility and amenities, complete our simple checkout, and instantly access all the information needed to fly.
-Access to 300+ airlines - including low-cost carriers, NDC and GDS.
-Add markups - Quickly and dynamically add markups to fares when creating a link and easily charge your customers. Up-sell to your customers by offering premium seats and paid bags.
-Make it your own - Customise the entire search and book experience to match your brand. Include your logo, custom URL and brand colours throughout.
-Compatible with all screen sizes - Links is fully responsive for all devices - including mobiles, tablets and desktops.

Feel free to try Links today - we're looking forward to your feedback and comments.

Thanks,
Steve
Signal provides a Registration Lock that is available in the settings for preventing this from happening to some degree, it's however opt-in and you need to set and remember a PIN.
People have been dismissing opinions they didn't like for ~25,000 years, for a very long list of reasons. Dismissing "AI" for that reason feels kinda like not having one more key on your keyring - because a kid could stick the new key into an electrical outlet.
Depends on your needs!

Zimg is a gold standard to me, but yeah, you can get better output depending on the nature of your content and hardware. I think ESRGAN is state-of-the-art above 2x scales, with the right community model from upscale.wiki, but it is slow and artifacty. And pixel art, for instance, may look better upscaled with xBRZ.
That question was in response to a very specific claim: "We subject cows, pigs, sheep, etc. to the same horrors today" as recreational cat-burning.

In principal, society does not legally allow nor condone the torture of cows, pigs, and sheep to death for pleasure (recreational zoosadism). Beyond this, the original claim itself is whataboutism.

The economic motivations of slave owners, industrial animal operators, war profiteers, etc. generally override any natural sympathy to the plight of those being used for secondary resources, typically commodities to be sold for money.

In the end, there's no real difference to the suffering being itself, but from a social perspective, there's a very real difference between "I make this being suffer in order that it suffers" and "I make this being suffer in order to provide resources to sell detached from that being's suffering." In other words, commodities are commodities because they have no externalities attached to their production. A cat being burned for fun is not a commodity because the externality (e.g. the suffering) is the point.

In short, I view malice as incidentally worse than greed if only for the reason that greed in theory can be satisfied without harming others. Malice in principal is about harming others. Both are vices that should be avoided.

As an aside, Lord Mansfield, 1772, in Somerset v Stewart: "The state of slavery is of such a nature that it is incapable of being introduced on any reasons, moral or political, but only by positive law, which preserves its force long after the reasons, occasions, and time itself from whence it was created, is erased from memory. It is so odious, that nothing can be suffered to support it, but positive law. Whatever inconveniences, therefore, may follow from the decision, I cannot say this case is allowed or approved by the law of England; and therefore the black must be discharged."
Just checked their OpenCollective, and they seem to have about US$100k there:

https://opencollective.com/homebrew#category-BUDGET

They seem to be receiving about US$2k/month via Patreon too:

https://www.patreon.com/homebrew

I think their Patreon was around the same when I looked ~12 months ago.
Rude AI is a good thing, I hope to have many competitive arguments with uncensored bots, that cross the line and not be a big deal. It will be like a video game. Sign me up, not for the fluffy censored ai, but the darker AI, the gritty experimental afterparty ai!
The M1 sits near the bottom of NVIDIA's GPU lineup in terms of ML performance. Putting it just slightly ahead of the $200 1660ti.

When doing a quick Google search on the topic, it turned out that several of the top results were blatantly misleading in that they limited the competing hardware to match the M1's limitations. For example, the top result, a wandb article [1] claims that the M1 is competitive with the V100, yet their own data shows that they aren't even fully utilizing the V100 and that when properly utilized it obviously totally outperforms the M1.

https://wandb.ai/vanpelt/m1-benchmark/reports/Can-Apple-s-M1...

Similarly, Apple in its marketing for the M1 Ultra was extremely manipulative, bordering on outright lying, when it compared the chip to the 3090. It presented them on a "relative performance vs power" graph making it look like the chip matched the 3090 while consuming less than half the power, when what it was saying was that it's more efficient than the 3090 when you underutilize the 3090 to the point of matching the M1 Ultra's performance.
Same reason I can't have a hardware keyboard on any modern, reasonably priced phone: lack of demand.