skysight-inc/HackerNews huggingface dataset:
I'm not sure to understand your point on what the product can actually do: this whole blog entry is about sticking the marketing claims to reality, what exactly the product does, and not make vague promises because it uses AI.

Basically, outside of their tone, you seem to me 100% in agreement with the FTC's message here.
I didn't say, that CMake solve this problem well :-)
>> Have you?

> Yes.

You didn't answer my crucial follow-up question: "How many, exactly?"

> Because it speaks to both their reading comprehension and grasp of economics.

Not really. There's actually been quite a bit of work on that subject since the 18th century, if you hadn't heard.
Vegetable shortages in UK could be ‘tip of iceberg’, says farming union
I used to be a loving VimFX [0] user. It had intelligent link hints (essentially, links it thinks you are likely to want, e.g. because they're big, get single-key shortcuts). The scrolling was actually native, as in equivalent to hitting the arrow keys. I don't think any of the other Vim emulator plugins ever replicated that. Vimium doesn't, Tridactyl doesn't, and Vim Vixen was horribly broken.

Apparently VimFX still runs via some hacks on modern Firefox versions? The last release was even in 2022. Maybe I should give it a try again.

[0] https://github.com/akhodakivskiy/VimFx
From the article:

“Starlink's second-generation satellites include the V2 Minis and the larger V2. The larger V2s are designed for the SpaceX Starship, which isn't quite ready to launch yet, but the V2 Minis are slimmed-down versions that can be deployed from the Falcon 9 rocket.”
extrahuman attributes, such as non proportional bodies and non-existing skin colors

In particular, huge bodies and tiny heads; it's the exact opposite of tiny bodies and huge heads, which also exists as a style, one that is rarer outside of Japan but definitely has an opposite connotation for me: https://en.wikipedia.org/wiki/Chibi_(style)
Thanks for the pointer, I hadn't heard of that one. I'd put it in the same department as "gostatic" as being too minimal, unless you want to build the templates yourself. gostatic allowed me to have tags where from a quick look cobalt does not.

edit: Forgot to mention: The install option seems to be broken, you have to go into "Reference" to the install guide to find an alternative.
Fraud is very common.

That's the legal part.

Then there's the questionable.

I quit a company when I learned the higher up staff was billing government contracts at full time (40 hours) while working about ten. Happy customers, so all is fine, right? I also discovered they would each take on 2-4 contracts billing a full 40 hours on each. $75/hr X 4 is an easy half million.

By the time they were discovered, six to 18 months later, they left the company.
Is it? Can you replace C++23 code with Carbon? Will it work with C++ modules? Will the existing find_package calls in downstream C++ CMake projects work?

I'm waiting for some other shoes to drop here. There's some fine print in this promise that isn't widely grokked yet.
I'm not sure the description is what actually happened. It doesn't have the ring of truth to it.

That said, LastPass is not deserving of any trust as a password product of any kind. That a password was captured by a keylogger on a Dev Ops home computer shows that they don't understand how to secure remote computers, the meaning of defense in depth, the importance of proper login authentication, or how to secure data at rest. Each of these points are close to the core of their business.

I don't wish them ill. I hope they recover from this, but they need to understand security to produce a security product.
If they only took the vaults after a user accessed them, that would be less than double the traffic in the system. It depends how patient they were, or how broken the system was.
There was a very interesting presentation about how Apple was trying to give Swift a stable ABI that provided forward looking stability.

Apple has a LOT of C/C++/Obj-C/Obj-C++ code. And they certainly have the resources/need for such a thing.

I wonder if what they’re doing could be extended to make integrating new Swift code easier with all the existing non-Swift stuff as it slowly got rewritten.

I’m not suggesting everyone switch to Swift, merely that someone may already be doing something like you’re talking about.
Maybe it was one of those odd and security-violating cases that give CISOs nightmares where they test by copying PROD to the SANDBOX.
bet they cant identify something like this: https://www.arnesantics.com/projects/current-cannonball-run-...
Were the plots crazy, sure but there were people plotting it. Also Gunn confirmed parts of all this under oath shortly after the fact.
"GPT-3 is the first AI system that has obvious, immediate, transformative economic value."

Uh, what? This is not obvious to me at all. It looks like a ginormous potential legal liability for anything you mission-critical you put it into. Having it go haywire in your beta-test of search is just embarrassing. Using it in something that is supposed to have "immediate, transformative economic value" also sounds like using it in something where you get in big trouble if it goes really badly. And, unlike more conventional software, this kind of thing is very hard to test in a reliable way.

Not saying it will never happen, but that it is "obvious", is not obvious to me at all.
“There’s going to be some bugs no matter what we do. So why try substantially reducing 70% of the bugs we see?”

https://www.chromium.org/Home/chromium-security/memory-safet...

https://msrc.microsoft.com/blog/2019/07/a-proactive-approach...
why? serious question
If there is nothing to add, then adding nothing is better than to let the AI talk. I think that the AI adds negative value.

It is dangerous to engender the idea that ChatGPT or any other LLM presents you with a reliable summary of any body of knowledge. These models are compelling because their output reads like the writing of a real human being. Humans have an inclination to not lie, and this makes us trust it. But this is terribly dangerous. When a LLM's output is wrong or even deceptive, there's no indication of it whatsoever. In that way, normalizing LLM-generated content is a perfect road to automated misinformation.
How would it be different from creating a community on SecondLife? or even Meta??

I read an article about SecondLife's infrastructure and it seemed to be rather substantial. Giving users tools to generate parts of a virtual world, avatars, etc requires a huge up-front investment. What are your plans in relation to implementing the idea?
> Following the incident, LastPass has taken a number of steps to prevent future attacks and investigate what happened. The engineer was assisted in strengthening the security of their personal network [...]

I hope this involved something along the lines of: "This zoom meeting won't end until you update your router firmware".
Fractal Approach for Video Summarization
Video summarization app employs a unique fractal approach, enabling to condense lengthy videos into concise summaries. You can even zoom in on specific chunks for a more detailed description
Bring your own computer for DevOps ?
There are lots of languages that are more insular than English. Do you consider them to be impoverished, why so? All a language needs is to provide the ability to communicate to its speakers.
> In the past, when authors died, a space was created for new authors.

Has that ever been the case?

Little Orphan Annie kept going for 50 years after the author's death; Dick Tracy is still going. Tarzan, the original multimedia syndicated empire, is still going strong 75 years later, although the comic wrapped up 50 years after the death of the author.
I would recommend combining AI with the power of blockchain.
First published https://www.marketwatch.com/story/are-we-witnessing-the-demi...
Second Life, Minecraft, VR Chat, Zuckerberg’s Metaverse, etc etc etc

If you have a personal edge and good financial contacts and a very developed idea, you might be able to raise money to get it started, with the hope that you’d be swallowed up by one of these big players later. But this is an increasingly hard time to raise money and starting up a project like this is mostly an abstract endeavor involving lots of phone calls and emails and spreadsheets.

If you’re passionate about the idea, you should just try to get a job at one of the many places already doing this. You’ll spend more time making something there and feel a lot closer to your idea becoming reality, even if it has somebody else’s signature on it as well.
>I wish there was an ethical way to use it, but there isn't.

Another absurd statement but at this point I'm not surprised anymore ahah
Honestly, I don't know how you all stay so low, I'm down to 1172, and getting it even that low feels like a bit of an accomplishment.
And yet we keep seeing memory safety issues in C++ code even when that code was written greenfield long after 1995. (E.g. IIRC cloudflare's cloudbleed was in a codebase that had been started in about 2012).
It feels like the world is splitting in two...

On one side is a world where anyone can download any book for free.

On the other side is a world where all books, textbooks, and journals are available exclusively from Amazon/Pearson/Elsevier and can only be read with a crappy official app (or device) and an active Internet connection.

Either way, I suppose the big losers are authors.
JS too.
Native plants and species are already suited to the area, so it is a great place to start.

What I am finding though, is that the main difference between an invasive species, and a native species that is vigorous, is that the native species has a lot of interactions with other species within the local biome. And invasive species does not, so runs unchecked without a predator, or does not provide any benefits for other species. If they did, they would be “native”. Over time, the biome will adapt, and interactions will start arising.

There very much are circumstances in which an invasive, resilient species is the right thing. For example, Jerome, Arizona, is an old copper mining town with a devastated ecosystem. Tailings from the copper mine poisoned the land. It’s at a steep incline, with severe erosion. Houses had been sliding off the slope.

When the mine shut down, and the population dropped to about 100 residents, fhe mayor at the time brought in an invasive tree called the Tree of Heaven to save the town. That mayor hired an aircraft to seed it all around Jerome. This tree is invasive, difficult to kill once established, drives out other species, and produces copious amount of seeds. Crucially, it can survive soil that has been poisoned by the mining tailing. It grows everywhere in Jerome — and holds what soil is there. This terrible, aggressive plant is helping to remediate a land trashed by human activity.

https://youtu.be/Oayt7eru2nc
C++ compiled to wasm is just java with extra steps.
> The "UAT" implosion is slightly less powerful than the "production" one.

funny
So, with most password managers, when you authenticate on a new device, you are prompted for MFA.

The user had a keylogger installed on their machine, so the attacker could collect the master password, but how did they login to the vault on a new machine without MFA?

Did they get the MFA seed and login on a different machine, and nobody received a "You're using LastPass on a new machine, if this wasn't you..." message?

Did they exfil all that data to the compromised machine first, then out?

Unless I'm missing something, this doesn't seem right.
Zuckerberg, is that you?
If you can tell them which university you're with and the formal name of your research project that would be a start. They'll reach out to the admin to confirm.
> You’re putting the US (…)

I don't see where you would get that from my comment, which didn't name any country. The point was that the wiki article I pointed to does list quite a number of countries, of which several do fall into the group of “liberal Western countries”. Nobody said that _all_ countries listed there do.
What are you doing with these tabs? Are they a reading list? Things like gmail that you could reopen whenever?
Sensory Fragmentation
Yeah, but doesn't that approach presume you have a monorepo or something already?

Seems like converting a native python extension to the new language will just break all the downstream users of that package who do not already have the new toolchain set up. That's exactly what happened with the cryptography package when it converted to Rust. And that's just an example. What about all the projects shipping to embedded systems, tiny Linux distros, specialty proprietary OSs, and so on?
My understanding (and take this with a grain of salt, I don't have sources) is that after the Norman conquest in 1066, the original English language was the lower class language and the Latin/French language of the conquerors became the upper class language. So the words which came to English through French/Latin tended to be considered high class, and the words from older English were considered lower class, rougher, and maybe in some cases more profane. A prime example might be beef vs cow: both referring to the same animal, but the higher class word deriving from French has become the culinary term whereas cow remains the term when speaking of the animal. (That I do have a source for: https://en.m.wikipedia.org/wiki/Beef#Etymology)

I think that's why some of the Anglish stuff (or Anglo Saxon class?) might come off as rougher, more basic, simpler, or more profane. It's really interesting (but also really sad) how nearly 1000 years can go by, yet a language can still carry the scars of oppression.

Anyway, that's just my thought, I'm no linguist or historian, so don't take my word for it.
I have once went upto 1674 in Firefox.
Yeah and it's much cheaper to operate locally and defensively than it is to have a very expeditionary and overseas force the US has so they /could/ close the capability gap for less money. There is a bit of difficulty having so many different militaries needing to work together but it's something that works with practice.
She's a genius.

Read all of her posts.

Follow her on Twitter.

She should be at Sony working with Mark Cerny.

I hope she finds her way to one of the first party hardware companies.
They had code execution on the persons computer, the encrypted vault is downloaded and stored/cached on the computer - you only need the master password at that point to decrypt it. Or to read the decrypted version out of the process (e.g. your web browsers memory)

The 2FA part in the password managers (and least in the major players currently) is to get a copy of the encrypted vault from the server. The user did that part, and the encrypted vault was not easily accessible locally.
Still waiting for the PS9. It gets delivered to your brain via nasal insufflation.
They've said it's a bug. You'd never close anything was it not for this bug
Roughly 15% of people are dyslexic. Kindle could actually sell substantially more books if they implemented dyslexia-friendly accessibility features.

In many cases, it’s not about the users you’ll lose, but the ones you’ll fail to gain.
Tl;dr the guy used a reseller website to buy four tickets, and was confused because the website never actually shows the total price including fees, only the per-ticket price before fees (I checked the website myself). I’m surprised this isn’t illegal.
Wow-so generous of you. Please contact me at richard@70millionjobd.com
Richard
Search is not new, nor is directory advertising. Google didn’t bring anything to the table in the digital ad world until post-YouTube and Doubleclick acquisition. Overture, aka Yahoo search ads created the ecosystem that Google ultimately cloned for their business model. The only thing that Google really brought value was simple UX and better-than-average search results thanks to PageRank and such. Every B2C service they provide outside of search and gmail came from acquisitions. Google was and always will be fundamentally predisposed to anticompetitive behavior. Their acquisition and slaughter of world-changing technology and holding captive the attention of a generation or more of top talent has cost the world Trillions in opportunity costs IMHO.

https://www.theguardian.com/technology/2016/jun/04/google-in...

Ya that’s good for competition right? Regulatory capture?

Google has done nothing particularly special to create opportunities for very small businesses online and their deliberate, persistent efforts to maintain a faceless veneer, through which meaning for customer support, for those businesses is impossible.

I had a rather business that was an AdWords certified partner and I know very deeply how many customers they have had OP’s experience. At this point, it is more important for them to maintain an operation that can ostensibly thrive without humans in the loop than to make money selling ads. That is their strategy, a choice that could have been reversed any time in the past 20 years. See how even their own employees are completely unable to help customers. I think it’s dogshit stance and they should be punished throughly in the marketplace for it. That’s just impossible now due to their size.
I like Sphinx [0] with the MyST Markdown syntax [1]. There is a related project, Myst NB [2], which enables including Jupyter notebooks in your site. There is also a plugin for blogging [3].

[0]: https://www.sphinx-doc.org
[1]: https://myst-parser.readthedocs.io
[2]: https://myst-nb.readthedocs.io
[3]: https://ablog.readthedocs.io
See related thread: https://news.ycombinator.com/item?id=34965260
https://en.m.wiktionary.org/wiki/cheers “goodbye”

https://en.m.wiktionary.org/wiki/cheerio 1. “Goodbye”, 2. “Hello”

https://en.m.wiktionary.org/wiki/cheero “A friendly greeting”
What makes that follow-up question crucial?
Yeah if you get a sufficiently thriving ecosystem going mosquito control deals with itself. But, especially if you live anywhere near the tropics or subtropics, I'd make sure to keep updated on West Nile Virus and other less common ones like dengue, zika, etc
Have linked this on this site before, but if you find this theme of techniques interesting, you might like some of Mordechai Guri’s work as well: https://cyber.bgu.ac.il/advanced-cyber/airgap
Thank you. This and GP's comment are refreshing to hear. All I see on the news about lack of sleep is doom and gloom. According to them, I'm totally fucked in a myriad of ways and it's too late for me since I've held a sleep deficit for so long now.

Yeah, I understand lack of adequate sleep is bad for me, no shit. I'm doing the best I can and you're not helping. (addressing those sleep gloom and doom people)
lol. No, not anymore a millionaire YC founder and no real estate in my immediate future. But sure, love to chat. Please contact me at Richard@70millionjobs.com
Richard
That's not arguing in good faith.

Here's a simple example: you want hyprland, patheon and interception-caps2esc on ubuntu? Good luck!

On arch, it's just a pacman away.

You don't like how arch is perceived as elitist? Use manjaro.

Ubuntu had its place in the last century, but with most development happening on git you need a rolling release.
Heh this is normally why I tell my new teammates to be careful about using auto in non-test code outside of well established patterns like iteration. Auto will bite everybody in the butt at some point!
They can put restrictions on the install:

https://artisanelectricinc.com/solar_and_homeowners_associat...

https://apps.leg.wa.gov/rcw/default.aspx?cite=64.38.055
Indeed. When all I knew was text mode I envied graphics, but the reality was that true artists were making amazing art just with text and colors (and even just text and no colors!).

The C64 PETSCII scene is also amazing. It still exists!
This a a great idea. I can’t wait to try it out this weekend.
He has a case with the card issuer. I'd suggest he get on the phone with the card company and ask for a 2nd level support or manager, then tell them to reverse the charge. He never responded YES to allow the charge. The reason for that type of check over SMS is due to an aggreement between the card issuer and the card user to prevent fraud.
> Where sidewalks are provided and are accessible, it is unlawful for any pedestrian to walk or otherwise move along and upon an adjacent roadway

A charitable interpretation of my original assertion would be: "all other roads are shared infrastructure that can be legally used by those who are walking" would not include roads where sidewalks are provided and are accessible.

> As for rural cycling, since there are few cyclists in the USA, there's not a lot of crash data

In urban areas, most fatal cyclist related crashes involve wrong way cyclists, cyclists who are not using lights at night, and cyclists who are cycling under the influence of alcohol or other drugs. As for rural crashes, while there are higher speeds involved, riding in a conspicuous manner that ensures that motorists have to slow down and change lanes to pass as opposed to squeezing between you and oncoming traffic can go a long way towards mitigating the risk of being involved in a crash.
What predatory practice, particularly in the use of 'customer service' as a distraction flare, whilst the reseller used the time to expedite the payments processor. Should be illegal
Reminder than you should always donate CASH to food banks.

Not only can they buy food in bulk cheaper than you can, it also helps them to build out the logistics and cold storage infrastructure required to accept donations from grocery stores and restaurants.
It would not be a HN dream for long, given the implications it has for the internet
Are you 12?
The same firm that had written ‘ea’ in near-invisible lettering had gleefully resubmitted the charge four further times and Visa, seeing no challenge from me, had given up the fight, assumed everything had been correct all along and authorized it.

Nightmarish. Great to know banking institution security barriers can be bypassed by simply spamming the blocked transaction.
I could see this kind of sophisticated attack easily working on some random company with fairly lax BYOD policies. Makes sense, it was a rather sophisticated attack when you look at your typical medium sized company. But if your entire company and organization is built around keeping things secure, THIS is what brought you down? This isn’t getting owned by some unforeseen 0day, it’s just sloppy opsec.
Many states have laws which make misleading advertising illegal in some way. If this were me, I'd get a lawyer to send them a letter on their letterhead. Or if I couldn't stand sinking any more money into the problem, my state's AG.
This is amazing and has implications beyond guitar pedals and amps.
This is very cool. I suspect the author encountered that 12 pixel offset due to a default value on the canvas’s text baseline property. Setting this to `top` may resolve the issue, or invoking the `measureText` method and calculating the offset from the output. A fixed value for a monospace font is pretty good too!

Shameless plug, I’ve actually built the opposite of what the author has described. Asciify[1] is my very own highly efficient and over-engineered tool to generate animated text art. It started as an excuse to learn more about browser performance and just expanded out from there. I would love it if a greater mind could squeeze another 5 or 10 FPS on the spiral demo[2]. Maybe it’s time to brush up on those WebGL docs again…

- [1] https://asciify.sister.software/

- [2] https://asciify.sister.software/demo/spiral/
Art is about going further than the limitations imposed by the media you are trying to use.
Forwarding and true delegation: toward practical interface composition with Java
I'm fascinated that this was part of their remediation. I'd consider "don't trust the employee's local network" to be a pretty basic principle of modern corporate information security. What happens when an employee logs in from hotel wifi? You basically have to treat the network between the user and your environment as hostile, and design for that problem.