skysight-inc/HackerNews huggingface dataset:
The ability to revoke consent is an essential part of consent, in my view.

> some privacy advocates seem to think that's still not enough.

I am one of them. I think the GDPR is inadequate in many ways, but it's certainly a huge improvement over the nothing that existed prior, and it's much better than anything we have here in the US.

But the things I think are inadequate about the GDPR still revolve around consent. I will admit that "consent" is a very broad term, though, and includes a whole lot of intricacies and nuances. It's a bit like "freedom" in that sense.
The difference is 2008 was due to speculative asset bubble finally popping
Most arguments about this are based on missing or vague definitions.

And coming to an agreement about these definitions is not simple. People start talking about qualia or psychological zombies and the discussion goes to pot.
Is this an attempt to collect taxes on business transactions that currently some are not being reporting with Venmo, etc.?
Good thing it looks like a 1

Thank romans
I find it hard to believe marijuana is the only substance dealers in a park serving an urban center with a penchant for clubs/night life like Berlin are peddling...
What If Space and Time Are Created by Our Brains?
TLDR; purchase an device that pairs with your phone, follow a hunch that it's doing a lot more then what it advertises it does.

A week ago I purchased a bluetooth device that takes some measurements. You require an Android or iOS application. The first thing the iOS app did was request permission for your location. Immediate fired up MITMproxy [1] running in transparent `--mode wireguard` and installed it's certificate in the iOS trust store. It was sending a whole bunch of data to China and HK. Since I don't have a jailbroken iPhone, it's off to Android.

For BLE scanning, Android does require permissions for location, but this application is using a Chinese branded tracking SDK and sending encrypted blobs (within already encrypted TLS). So it's time to start reversing and instrumenting the runtime.

Well - not so easy, they used a commercial packer that encrypts their compiled bytecode and decrypts and I think executes it within C++ library that might be an actual interpreter. I managed to pull the Dalvik bytecode out of memory using Frida[2] after the packer had decrypted the base application and converted it to java bytecode with dex2jar[3] then into decompiled java with jadx [4].

Since the developer relied on the packer to hide/obfuscate their software, it's quite easy to follow the deobsfucated code. The libraries that do the location tracking on the otherhand are obfuscated so now I'm at the stage of identifying where to hook before the encrypted blobs are sent to servers in China.

Here it would be nice to have a call flow graph generated based on the static decompiled java code - can anyone recommend anything?

I've sunk about 8 hours into this so far. The message here is that to understand what some applications on your phone does you need to really invest time and effort. The developers increase the cost to the consumer to know what their application is doing by obfuscation, encryption and packing. It's asymmetric. Also note: the play store and apple store state the app does not send data, which is demonstrably false.

I can also see that the tracking SDK has what looks like functionality to dynamically invoke code - which would break the terms and conditions of the app stores.

At some point I will reimplement it's primary BLE functionality and release it as opensource to the public and perhaps write a blog post.

[1] https://mitmproxy.org/posts/wireguard-mode/

[2] https://frida.re/docs/android/

[3] https://github.com/pxb1988/dex2jar

[4] https://github.com/skylot/jadx
That's a valid point, but the assumption should be that Timmy and David can't afford today the tools and facilities to build nukes as much as they won't have enough power to do anything harmful with an AI. At least for a while, hopefully.
In that case it’s apparent we agree that cities are not interchangeable commodities and factors beyond COL cannot be ignored for actual practical decision making.
Good, that's how it should be!
You also don't need a new laptop
Good points. Maybe time to say goodbye.
The short scale isn't a thing in English or when talking dollars which is implied by the dollar sign in "$95 billion" and the fact that this is a US company

"$95 billion" simply means $95,000,000,000.00 and there's no ambiguity...
The “Great Awokening” is winding down
It’s instant payment infra that can replace ACH, some wire volume, and some credit card volume. You can move up to $100k in value for pennies (but probably free, depending on your financial services provider).

Think Zelle for every US demand deposit account, with the network run by the US Federal Reserve. No more need for Venmo, Cash App, PayPal, etc.
> Stripe does not need this capital to run its business.

Suffering? Raising $6.5b when you don’t need to, but because it helps your longest running employees, is suffering?
Green Thread
I prefer maximum warnings and use of #pragma to disable a warning at a specific point when I know the warning is useless/wrong. That way I can get to a totally clean build with zero warnings output. The last significant piece of C I wrote:

# Turn on absolutely all warnings and turn them into errors

CFLAGS += -g -Wall -Wextra -Wno-unused-parameter -Werror

https://github.com/cloudflare/keyless/blob/master/Makefile#L...

The reason I do this is if I leave some warnings in I can get complacent "oh, there's always a few warnings" or "that's expected" and then miss something. So, I like all the warnings and warnings treated as errors.
Sure, but realistically who doesn't deploy webfonts these days? Might as well include them on this site to reflect the current state of the world
I went down with a sinking ship, early stage startup once. It was extremely painful for the employees, and I'm sure the founder/CEO - however, he ended up making a series of extremely selfish decisions and engaged in some very questionable behavior trying to keep it afloat. I wish I could have more empathy for founders that let their dream go on too long, but, I think it's just as (if not more) painful for the people they employ that bought in on their vision.

No job or project is worth your mental or physical well being.
Firstly, a good or bad IPO can be remembered for years as part of the reputation of the company.

Secondly, yes their stock could grow after the IPO, however the stock would be publicly owned at that point so the profit would go to the public shareholders instead of the current holders of the stock (founders, investors, employees).
C and C++ developers who have been around long enough understand why clang specifically says not to regularly use -Weverything.

Historically even -Wextra has resulted in spurious warnings for perfectly valid and clean code, as most if not all -Wextra warnings are heuristics. -Weverything is also all heuristics, but even more volatile and debatable. Any worthwhile -Weverything heuristic will eventually move to -Wextra.

So, sure, use -Weverything on occasion to see if there's anything interesting to take note of. But if you include it by default you're inviting fatigue and unnecessary rewrites, which may be just as likely to result in the introduction of bugs as to fix any bugs.
"Free service which requires $$ to maintain" and "low risk" are not compatible.

We moved to cloud as well, and we use AWS ECR for caching. We have a script for "docker login to ECR" and a list of images to auto-mirror periodically. There is a bit of friction when adding new, never-seen-before image, but in general this does not slow developers much. And we never hit any rate-limits, too!

We pay for those ECR accesses, so I am pretty confident they are not going to go away. Unlike free docker images.
It's because he was using sarcasm, which you failed to detect.
Illustrated 7K and 11K Series Tektronix Oscilloscope PDF Books
True, but being tested correctly as "pre-diabetic" isn't so straightforward, as getting sugar/glucose levels at rest doesn't tell the whole story - ie: there's no such thing as having a mild case of diabetes.

Take this with a grain of... of salt,

https://www.youtube.com/watch?v=6zZBiTfIp4Q

I think he makes a good point that the proper tests for diabetes is much more involved than what most people get prescribed, or what they will tolerate, as it can take the entire day. (he says a lot more - I'm not standing by everything he's saying)

Easy access to almost over the counter and cheap continual glucose monitors may reveal better patterns to catch pre-diabetic symptoms faster (my hope).
I remember an argument with an engineer about static code analysis years ago. Without a trace of irony, he honestly said "I know it's high quality code. I wrote it. What could a program tell me about it that I don't already know?" You can guess how much of a nightmare his code was to work with.

This isn't a comment on the original article or the author at all. Just my experience with a certain type of engineer.
Prompt engineering is the new programming
And most definitely not from Bluetooth
I like adding -pedantic to -Wall and -Wextra, although getting other people's software to compile with that is a nightmare.
That's cherry-picked results from a particular subset, also ignoring that many similar people were also released without paying any bail.
Employees cannot wait, their shares expire without sale. These are being taxed.

Stripe can wait, that isn't the problem for them and is what they're doing. The board can also waive these fees, but that shifts liability from Stripe to each individual employee in question and that's the last thing they want, to piss off early employees.
>Doing this "only when you actually run python" doesn't help

Node.js does it this way, and it works just fine. Not sure what you think the problem is.

>Doing this "only when you actually run python" doesn't help. It would make it unsafe to run for example (looking at my /usr/bin) "ufw", "hg", "smbinfo", "samba-tool" or "routel" without first making sure that the current working directory (i.e. the one that you have currently set with "cd" in your shell) is not writable by any other user and doesn't contain anything unexpected

Why would the current working directory matter as to that?

First, if somebody has write access to your local directory you have worse issues.

They could for example overwrite the py/pyc dependencies or replace the python inside the virtual env, and their code will be executed if you run any of the items in the bin or even import those python deps.

Whether Python "looks for a .venv directory in the current working directory" or not doesn't mattter. It will just mean that you need to activate the .venv first to get those in your PATH. But that's why you had the .venv there in the first place, to activate and use it.

Whether you activate it manually or not doesn't matter...
Presumably the new money is in exchange for some newly-created class of preferred shares. Stripe holds the cash until it repurchases common shares from employees or any other holders, and those shares would go back into the unallocated common stock pool I'd assume. So yes, I'd think the only way this works is for Stripe to be the purchaser.
> The date at the bottom of the article is 2022-06-13. Has there been further progress?

The article links to their github repo:

https://github.com/immunant/c2rust

There's commits in the last hour, so at least some signal of life.
It's not a theory nor is it a conspiracy insofar as it is lacking evidence. The collapse during the great depression was used to sell the fallibility of the small banks. Senator Aldrich took the bill written by the wealthiest bankers in America straight to congress to form the fed.

It's relatively well known in fact [0]. Once you realize that was the intention to begin with the structure of modern banking starts to make a lot of sense.

[0] https://www.federalreservehistory.org/essays/jekyll-island-c...
Apple does "this kind of" retouching, slapping a professionally shot sticker of the thing you phone-camera'd on top of your photograph so it looks pro?
Dr. Henrik Franklin Fisker LLC
They deserve the presumption of innocence by the law. That does not in fact mean they are actually innocent.
See for example [0]. The core concern is that the ACLU is going through an identity crisis as its membership evolves, and it is shifting strategy from defending the right of free speech for all (including the defending the right of free speech for speakers and statements its members strongly disagree with) to defending the right of free speech for those aligned with its values. That is a shift many long time supporters of the ACLU view as a dangerous failing of the organization because the key free speech cases frequently involve abhorrent speech, but that is where the case law for the rest of speakers is determined.

After working, as it historically has, to defend speech its membership considers wrong or unpleasant in connection with a 2017 Charlottesville VA case, "Revulsion swelled within the A.C.L.U., and many assailed its executive director, Anthony Romero, and legal director, Mr. Cole, as privileged and clueless. The A.C.L.U. unfurled new guidelines that suggested lawyers should balance taking a free speech case representing right-wing groups whose “values are contrary to our values” against the potential such a case might give “offense to marginalized groups.”[0]

Defending speech you don't like or agree with takes a strong stomach, but if you want to be a defender of free speech, those are the battles you must fight. If you let speech you disagree with be silenced, you give the government the tools it needs to silence speech, including speech you like and agree with.

[0]https://www.nytimes.com/2021/06/06/us/aclu-free-speech.html?...
Record your drinking motion, and select your amount of water you usually take when you drink and the app will write to Healthkit every time you drink automatically.
It's kind of interesting in this context because it's mostly the tech solutions here that are famously extractive. The old ways of phone calls and letters work well. We don't need technologists, we need politicians.
My understanding was that the UB was defined such that:

int i = 0;
float f = 1.0f;
void* p;

if(rand() & 1)
p = &i;
else
p = &f;

int j = *(int*)p;
assert(i == j);

could legally be compiled to a no-op (or a single call to rand() with an ignored result, I suppose), despite there being no "weird" pointer stores, since the ill-typed-at-runtime load "can't happen," so the compiler can reason that (int*)p must equal &i, and hence j = i.

EDIT: And, in fact, gcc does this: https://godbolt.org/z/WM33vzzdo

Not sure if that applies to vector loads, and the gcc docs don't specify, though.
It's something I know I need to do, but the job market is...

If I do get laid off, I will have insurance to ride out for some time, but damn I'm sick of being in this cycle of instability.
That is PaLM-E model. Or "embodied" LLM. They literally did exactly what you said. An LLM getting input from a camera and output command to a robotic hand. Then you can tell the bot to pick up a knife and "deposit" it somewhere else...

Well, no theyjust made the bot picked up a pen and bring it to a person at a table 15ft away. It did that, despite "obstacles" by another human keep knocking the pen off its hand. But it shows that an image LLM can perform goals.
Their last raise was at a $95B valuation, so this is a massive down round. It isn't a case of raising extra unneeded money just because market conditions are favorable. Quite the opposite in fact. If they didn't critically need this money they wouldn't have taken the hit at all.
Given the current fame of GPT-4, this may turn into a multi-million dollar business.
You can rent a supercomputer from AWS: https://aws.amazon.com/ec2/instance-types/p4/
Ships with kernel 6.1. Nice! Also has the most recent releases of bpftrace and bcc.

Full package list: https://docs.aws.amazon.com/linux/al2023/release-notes/all-p...
Havana Syndrome was an “epic failure of science”
> wouldn't it have been just as bad (and perhaps worse??) if they had been public over the last couple years?

Bad for who? The original investors would've gotten their exit at a superlative valuation, and with any eventual downturn, Stripe would've gotten to buy their own shares back at a discount.

The bagholders would've been institutional investors, so I guess bad for all of us by proxy (401ks etc) but they would've made out like bandits.
Here's the link, for folks looking for it: https://www.youtube.com/watch?v=stqUbv-5u2s

Just watched it. Pretty decent introduction to kickstart!
Talking about the detail is wasting the effort when the problem is located at higher level, which is, the whole system is built in a socialism territory, started when Gold is by planning (major element of socialism), taken away from banking industry.
This is interesting. Would you mind sharing the prompt?
all banks are under capitalized. no bank could stand that kind of bank run
Not sure why KingLancelot got shadow banned, but basically he is asking "Is this the SandSifter talk". Answer is no, but the author did use Sandsifter to find the bit.
Plus, a pointer to __m512i might require different alignment than a pointer to unsigned long.

This code received a pointer to unsigned long from somewhere that might have cared about the data it pointed to, so his code should acknowledge that (with type casts or assertions) or make a __m512i or void* pointer part of this function's signature, making the type change part of the contract with the caller.
Sorry. I wasn’t characterizing your comment; I was going off on a bit of a tangent.
Ask HN: Best Resources to Learn Rust
If you have recommendations for books you've read that you've liked, or other practical resources that might be helpful to someone new to the language, I'll appreciate the pointers to them!

Thanks!
Why Internet Background Noise Makes Cybersecurity Hard?
You may happen to like how system-ui looks on your system (macOS? Windows?); but do you have any idea what it looks like for the person reading your resume, perhaps on Linux with a custom theme, or on an Android device where the vendor chose to ship some brand-specific UI font? Or on a 5-yr old version of the OS, or on the version that'll be current 5 years in the future?

IMO system-ui is hardly ever a wise choice for content.
If a company offers something for free, it's likely part of their business plan. However, if they start charging for that feature, users may feel uneasy. Digital Ocean offers a container repo for $5/month, so users may be upset about the perceived mismatch between price and features. Users not paying signals that the company has failed in its business strategy. Additionally, the repo hosting service has weak vendor lock-in, making it easy for users to switch providers. Businesses must be mindful of user feedback and work hard to retain customer loyalty in a competitive market.
Some things people are already doing with GPT-4
The executives have been fired, the board has been fired, the shareholders have been zeroed out.

The shareholders are currently suing the board and the executives for running the bank into the ground.

Ten years from now, once all the long-term investments settle, if there's any money left over, the shareholders might be entitled to two turnips and cup of coffee from Uncle Sam.

As far as 'The guilty getting their just deserts', this is a rare example of the world mostly working in a just way.
I think it resembles some part of how human minds work.

But it's missing explicit symbolic representation, and that's a serious limitation.

What's more interesting is that a lot of the behavior of "human minds working" is explicitly modeled into language. Because GPT implicitly models language, it can "exhibit" patterns that are very close to those behaviors.

Unfortunately, being an implicit model limits GPT to the patterns that are already constructed in the text. GPT can't invent new patterns or even make arbitrary subjective choices about how to apply the patterns it has.
Yes, and we should do a lot of that, though bearing in mind that we're also terrible at building long-distance transmission. Some projects have languished for decades.

For countries with worse wind/solar resources and better ability to build large infrastructure, nuclear is a decent option, which is why 53 reactors are under construction.
An IPO during that time would certainly help stock holders get liquid but it wouldn't help the business given that Banks/Firms were making a killing on the IPOs of that era by disastrously mispricing the businesses. There's a lot of business that still needs to happen after an IPO and an IPO in and of itself is not the goal. If you're running a solid business like Stripe during turbulent times keeping your options open is a good idea. We haven't seen how the IPO fest of 2020-2021 is going to work out for some of those companies if they get cash strapped.
A thread on HN yesterday regarding Credit Suisse where this ambiguity came up. That thread was in English and was about US Dollars.
> I have the latest Ubuntu LTS (...) all on the Pi 4, which has been out now since ~2019.

Well, "out since 2019", but since 2021 new Raspberry Pis are basically unobtainable. And most "Pi 4"s are new.

> Its still not all that much harder on a Pi 2, 3 or zero.

Said Ubuntu Desktop 22.04.2 LTS for Raspberry Pi only "supports" the "Raspberry Pi 400" and "Raspberry Pi 4/Raspberry Pi CM4" +2GB ram configurations. Even Canonical expects pain if you don't use those.

"Raspberry Pi 3" might be useable if you have tamed expectations.

"Raspberry Pi 2" has issues because of it's 32-bit distribution. Using anything "modern" on it probably means compiling stuff (very slowly if on-device) and fixing issues yourself.

"Raspberry Pi Zero" isn't even listed as supported anywhere because attempting to running anything non-purpose built for it is painful.
>But you can have multiple virtual environments in the same directory, which one would it activate?

So don't have many in the same directory. Since the name shall be fixed, you wouldn't be able to anyway (e.g. .venv, similar to .node_modules).

Simple as that.
No, most of the cloud and internal infra at those orgs isn't supercomputers. Each of the major cloud vendors has supercomputer-like products. Supercomputers today are defined by having networks that allow the processing elements to reach a significant level of utilization even though the problem is partitioned over millions of processing elements.

The cluster that MSFT build for OpenAI is definitely a supercomputer.
Just as bad for whom?

I think the big difference is that with a public market for their shares, Stripe itself probably wouldn't need to sell new shares in "down rounds."

Yes the stock price would fluctuate on the secondary market and certainly would have dropped since 2021, but equity holders wouldn't be dependent on Stripe raising funds or organizing tender offers to sell.
The Arch Linux PyTorch 2.0 packages are great if you are looking for "cutting edge," as they are compiled against CUDA 12.1 now, instead of 11.8 like the official nightly releases. You can also get AVX2 patched Python and optimized C Python packages through CachyOS or ALHP.

But even Arch is still stuck on Python 3.10
Yes, classic book where from 90's like "The Renderman Companion" or "Advanced RenderMan", and then there is toolings books, for each tool. I used to own many Maya books and 3DS Max books.
That worked with Poland in 1939 until Hitler decided to continue and attack the rest of Europe.
What do you imagine this would do that existing automation does not?
Curious does not require one to act recklessly. I'm a curious person but I'm not going to eat cat poop on the off chance that it is tasty.