skysight-inc/HackerNews huggingface dataset:
Note also: As the number of APIs increases, so does the fingerprinting. E.g. MIDI device enumeration (no prompt in Chrome, prompt in FF, not implemented in Safari): https://twitter.com/denschub/status/1582730985778556931?s=20
And their other side is discretionary spending. Probably of the lowest order as many are likely to pick other discretionary things over donations to streamers. How many will pick donating to streamer instead buying maybe a cheeseburger or some other treat...
Scientists grow antlers on mice, hope to regrow human limbs
Just because you can doesn't mean you should. Worst ethics ever. I hope you go broke.
For a crappy product as well, double shameless..!
Those Numberphile videos? It’s way fun when Brady stops by my house. I try to have two or three ideas somewhat organized. Some are simple flops or stumbles; others just seem to click. Like any improv performance.

Thanks, of course for your smile about that recent video - yep, I did it offhand a couple years ago; I’d pretty much forgotten about it when -zooks- suddenly I’m staring at 3 dozen Klein bottle orders to send out.

Brady Haran, incidentally, is a terrific interviewer and producer. It’s a joy to work with him.
The Arm ecosystem is a shitshow for this reason, with massive efforts required to port to each new SBC. We hope to standardize RISC-V enough to avoid at least the worst of this (Linux drivers will still be a problem, but you should be able to boot a standard single image on most boards even if some of the hardware won't always work at the start).
>You're connecting to some relatively small, low-power device, not powering a beefy laptop.

Micro USB doesn't deliver enough power, especially if you plug USB devices into an SBC.
‘The stuff was illegally dug up’: New York’s Met Museum sees reputation erode
I found it interesting how it deals with rhyming in different languages.

It writes pretty good rhyming poetry in English, but in Polish it does poetry without rhymes. When confronted it gives excuses like "poetry doesn't have to rhyme", when asked to rhyme it will eventually try (and fail) to rhyme in Polish. It felt like it was writing in English and translating.

What's the most interesting is that rhyming in Polish is much easier than in English, you just have to match the last n letters. It's phonetic. After I explained that to GPT 3.5 it wrote rhyming poetry in Polish (the quality suffered but it did rhyme).
Public Email and DNS Testbed – Test how well your mailserver delivers emails
I agree with this. There is always such a blame game between devs and management/the-rest-of-the-company.

We've kind of conditioned every product manager that software is really hard and you can't just ask to change things without weeks/months of warnings or all the requirements up front.

At some point it is on us for over-complicating shit, and jumping from one new language/framework to the next. If you did more than what was necessary, and requirements change, then its on you.
There's "Privacy Extension" for that, from https://labs.ripe.net/author/johanna_ullrich/ipv6-addresses-...

> The IPv6 Privacy Extension is defined in RFC 4941. It is a format defining temporary addresses that change in regular time intervals; successive addresses appear unrelated to each other for outsiders and are a means of protection against address correlation. Their regular change is independent from the network prefix; this way, they protect against tracking of movement as well as against temporal correlation.
In r/askeconomics this was exactly the answer by the leading answers.

https://www.reddit.com/r/AskEconomics/comments/11vtl1c/what_...
Brass does, but the oxide layer that forms quickly does not.
thanks cliff!
> With photo-shopping, makeup, plastic surgery... AI generated photos are ethical.

Correction: are just as ethical.
"That's how web works."

Nah. I make an HTTP request and I get a response. That's how the web works. Perhaps people can have different opinions on "how the web works".

Web fingerprinting relies on a heap of assumptions. For example, that someone uses a web browser to make HTTP requests, that the web browser sends certain HTTP headers in a certain order, that the web browser runs Javascript, that it processes cookies, recognises HSTS response headers, and so on and so on.

If all the assumptions are true, maybe web fingerprinting is effective. But if the assumptions fail, maybe web fingerprinting does not work so well.

I have only ever read blog posts about web fingerprinting that take all the assumptions as true.

The majority of traffic on the internet is said to be "bots". Not web browsers running Javascript, processing cookies, and so on.

It seems to me that someone should discuss what happens when the assumptions fail.

Do advertisers care about computer users who do not use graphical browsers much. As such a user, IME, the answer is no.

(Interesting to see how defensive replies get. It's obvious the "tech" crowd intent to spy on web users is heavily reliant on certain assumptions to remain true forever. It shows that there is necessary pressure to keep web users using a "preferred" web browser and web ""features" that will subject them to "web fingerprinting". Perhaps the assumptions will always be true, conditions will never change, in the same way that interest rates could never change.)
If Javascript is enabled there’s ultimately very little that can be done to prevent fingerprinting. If you don’t want to be fingerprinted then only allowing JS to run on allowlisted websites is the only way to truly be safe
> This doesn't work

It has a chance of working.

I can't see that chance for attempts to dissuade people by manipulating images. Because the latter can lead to an arms race: Training workflows get smarter and reverse or otherwise deal with changed data points. In response, technologies changing the data to prevent training will have to get better as well.
It's not too late. The EU is breaking Apple's and Google's mobile app store monopolies next year with the Digital Markets Act.

Those same two companies effectively control the browser market. If there's political will in Europe, they can be forced to implement working privacy controls.
A robot that makes and launches paper planes to test designs
Perhaps the statement 'banks cannot create loans out of thin air'?

A bank can, with some capital buffer, borrow money from the fed, loan it out to someone else, and earn an interest spread.

Deposits help here because you pay a depositor less money than you pay the Fed, but they aren't crucial. And the Fed does have the advantage of not demanding it's money back at random.

Though perhaps I am wrong about how easy it is to carry a negative balance with a central bank? I imagine it is fine as long as the balance sheet looks good.
Your comment made me think a future world where AI is powerful but capped to the limits of human knowledge. In that world AI makes almost all people (economically) worthless. The exception are the people who take the challenge and study, work and research to expand the human knowledge. Whether this is an utopia or dystopia, I guess depends on how the relationship of these two groups work out.
Here is evidence that the hash can be unique, or narrow down a small group of people

https://coveryourtracks.eff.org/
The likelihood that you have the same hash as other people is exceedingly small.

So if I fingerprint you on a site which is using my commercial fingerprint service, then I can sell your hash to other places and tell them all about your browsing habits. The more places run my fingerprinting service, the more data I can collect on you.
New Zealand should be on this list. We Australians on here should be big enough to admit that if Australia was a fruit of the forest mixed berry yoplait, then New Zealand is the best bit that you lick off the under side of the foil lid
Weren't they 2800, not 2400? I always liked the sounds they made when they were dialling up.

Nobody will ever miss pagers, IMHO. I used to have to carry one to support a trading server at a bank (Credit Suisse, somewhat topically) and I used to dread it going off in the middle of the night because something had gone horribly wrong in Hong Kong. We eventually re-wrote the server so it was trivial to restart & managed to shuffle off responsibility for it to the locals. Bye-bye pager and good riddance!

Liked your books, BTW!
It's enough to narrow you down to a specific bucket. E.g. "affluent white young male in his 30s in a specific neighbourhood" and serve you ads and news. Collate with a few other sites (even airline checkouts and boarding pages have tracking), and you have a close enough match.

The worst part of this? Trying to hide from fingerprinting makes your fingerprint more unique
The time/frequency response graph ("waterfall") is incredibly good on the NS10; in layman's terms, it stops sounding as soon as the input stops, right across the frequency spectrum. Some much more expensive monitors are terrible at this by comparison and it makes a big difference to the perceived "accuracy" of the speaker. Partly this is inherent to the sealed box design but there's also something about the paper woofer in the NS10 that's inherently good. It also has really low harmonic distortion. Rather bright, though...
Paper.li Is Shutting Down
Dear user,

We are writing to inform you that we will discontinue Paper.li on April 20, 2023.

This decision was not easy, but after 13 years of providing our service, it is time to say goodbye.

As a valued community member, we want to express our deepest gratitude for your support and loyalty over the years. It has been an incredible journey together, and we are honored to have had the opportunity to serve you.

After April 20, 2023, papers will no longer be accessible, and all data will be permanently deleted.

Thank you for being a part of the Paper.li community. We wish you all the best in your future endeavors!

Sincerely,

The Paper.li Team
To be fair, a lot of apps, many that are much more complex than Overcast, were created and are being maintained by single individuals.
I doubt anyone who codes professionally is threatened by kids posting chatbot output. There's a widening gap between actual knowledge and people who think they know something because they can regurgitate it. It's exactly like people who think they know about something because they can look it up on the internet. They're super annoying but completely nonthreatening
DHCP and NAT are perfectly compatible with IPv6.
There's nothing wrong with violating a ToS. Worst case your account gets banned.
My wild guess is that if it could get things done by tokenising like that all the time, they wouldn't need to also have word-like tokens.

If that is a inference time performance or training time performance or a model size issue or just total nonsense, I wouldn't know.
Even that is not needed. There is enough people that want open source ChatGPT clone to create the dataset from scratch by themselves. The Open Assistant community actually already created enough training data for the initial model training and the data will be released under open source license. And from what I played with the initial model, it looked promising (though not anywhere close to GPT 3.5 yet).
You can try https://www.amiunique.org/fp to get a view of all params can used to track you
Probably to prevent readers asking questions like ‘why not gRPC’.
Envio – The CLI tool to manage your Enviornment Variables
Check it out here:
https://github.com/humblepenguinn/envio
> GDPR should have been approached at browser level.

GDPR. isn't. about. browsers.
"Illustrative image, because you seriously do not want to see the real thing"

Uh, thanks, I guess
> Why didn't the regulators just say "hey you guys just need to issue more regular equity"

Issuing equity in a crisis is very expensive, your share price is at a low point, your diluting the existing shareholders who have already lost a bunch of cash.

Easier to issue paper that is pretending to be equity, claiming to be senior while actually being junior to not just actual losses of capital, but to regulatory whims.
Surely if your website collects data using browser fingerprinting this is covered by GDPR and you have to tell your visitors/ask for permission?

https://www.eff.org/deeplinks/2018/06/gdpr-and-browser-finge...
I am not a lawyer, so the following is only my opinion.

> It certainly prevents reusing the work in that specific manner without authorisation.

Well, technically speaking, it doesn't prevent it. It just messes up the results of the work being used in that manner. And what if someone builds a training workflow that can just ingest such changed images and use them without being negatively affected by the changes?

> so it's a bit up to interpretation.

Interpretation that would likely have to be decided in court, and likely in a very drawn out and very very very expensive manner, with uncertain outcome.

A machine-readable tagging that simply says "noone is allowed to use this for training AI" sounds way easier to argue in court to me.
> I don't get it. The sites that you like will go bankrupt, and you won't be able to read them anymore.

Well, if I turn off the adblocker, the resulting deluge of ads makes that site a site I that I don't like, so it doesn't really matter to me whether I can read them anymore because it won't be in the set of "Sites I Like To Read".

There are many more people who want their content be read, even for free, than there are people available to read that content.

Because we have have oversupply of content, a significant quantity being good, is there any reason to expect that the price for that content will not be driven downwards?

It's why the majority of competent artists don't make much money from their art and have a job in addition to their art: there's an oversupply of guitarists, painters, sculptors, poets, authors, singers, dancers, songwriters.

Currently there's also an oversupply of blog sites, news sites, news aggregators, learning resources (How to code sites, recipe sites, etc), with the most popular ones being the ones which had the most capital (for SEO, blog-spamming, etc) to get the most visitors, and that capital is grown by degrading the quality of the site with ads.

I imagine a net where the amount of capital you have means nothing because ads don't make a difference to the bottom line, and every site is a net expense. This would result in only very cheap sites, which means mostly static hosting (because it's cheap).

If the people who care to make money of the site but don't care about the content can't make any money, the only ones who are left are those who care enough about the content to take a small hit to publish that content.
> So can you provide any evidence? Name this instance?

I've already shared the specifics I'm comfortable sharing. I have zero desire to start a witch hunt.

> What has the left controlled? The right wing has used governmet power to ban books, educational topics, political freedom for teachers, criminalized gender choices, protests, etc. etc. Even in colleges, the right has shut down dissent, including among faculty (e.g., at UNC, in Florida, Harvard, Yale, etc.). The right is trying to eliminate tenure and academic freedom.

You're perfectly demonstrating exactly the behavior I intended to point out. "Other-ing" the opposition into the Sith is not productive and the Left is as guilty of this as the Right.

> The left is trying to break the control of a few. Whether you like their tactics or not, they are trying to give power to minorities and other vulnerable people.

Through race essentialism? Or by what means are you specifically referring to? The common platform of the new left is that all white people are guilty of the original sin of their skin color. A platform based on enforced shame is not a platform for collaboration.
I'm now catching myself checking the date on internet comments which seem 'off', to see if it's possible a language model wrote them.

That will never go away now. The people who compared pre-2023 internet content to low-background steel were on the money.
> Weirdly enough, I see this as a real "web 3" opportunity. Corporations running large LLMs could run their models on a decentralized network and pay participants for their contributed computing capacity.

The same problem we saw with "web3" is here. If I were a "miner" in this case, why would I not go commercial-scale to gain efficiencies here. I could just build a real datacenter, and offer real contracts to real companies instead. It'd be cheaper for everyone.

Unless the expectation is that we literally can't get enough GPUs for all the datacenters, and we rely on the aggregate of consumers' integrated GPUs in their laptops? I think we'd just see companies not using LLMs before they got desperate enough to pay rando's for LLM processing.
For reference, around the year 2000 the interest rates were around 5% (the fed rate).

So, no, in general terms there were no easy money then compared to today (or the years up to today).

But sure, a lot of the money that was around at that time went into IT/dotcom companies instead of into other sectors.
Not to mention that it was way easier to use clipleads to connect teletypes and printers to incoming lines. And since the intruders had root access, how do you hide an OS based logger?
GPT4 + Python... the product basically writes itself!

Until the oceans boil...
What makes you think that this is a worthwhile addition to the world?
I totally agree with you! .. and second: the website navigation would be smoother without those banners!
I’ve been meaning to buy an Acme Klein bottle for years now, especially because I live near Cliff in Oakland so it’s not like he’s far away!

Maybe this weekend…
Well I happen to think that's a good general strategy to live life. Replace non-fun labour and time with fun labour and time. No matter then, if the fun version is all about automating the non-fun version (or vice versa)!
Public schools: https://twitter.com/garrytan/status/1634079933432745986?s=20
Sure, the advertisement graph only showed recall and not precision.
Maybe everyone gets the same hash! That'd explain their excellent results.

However, I doubt that's a problem in practice. I'd assume these finger printers know what they're doing. It certainly seems so.

How could one make an experiment collecting lots of these finger prints and determine the false positive rate?
I still type `ps ax` because that's the syntax I picked up from Cuckoo's Egg. Learnt that command several years before I installed Linux for the first time. <3

IMO, the second lesson of Google is to never trust the first Google hit, or the second or the third... the Internet doesn't really teach you how to investigate questions on your own - then again, what does but experience - but it does teach you the art of detecting bullshit. Even on sites like Stack Overflow, I find myself looking at the top answer, going "no, that's obviously wrong, next, next, next... ah, this answer added two years late at zero votes looks promising." If you just follow the first thing Google tells you, you'll fall on your face pretty reliably.
I would also recommend https://weasyprint.org if you are generating PDFs. Generating invoices, resumes, reports, flyers, etc. from plain Markdown is a two-line affair:

https://taoofmac.com/space/notes/2023/03/19/1849#tuesday-202...
They may also just lock your account for ‘suspicious activity’ if you move office and want to update your address details. Good luck trying to get it back in reasonable time even when you send all the paperwork to prove what you were doing was not only legit but legally required. Took us three weeks to get our account back.
If I used this in interactive mode, and generate a code snippet, then try to copy it, it will have | the bounding box and the beginning and end of lines |
I guess this should be the revert he mentioned, for those interested:

https://github.com/curl/curl/commit/c2df780a97d9913eb20a55d4...
That is unfortunately not correct. I grew up in a commonwealth country, have travelled to many others, and now live in the UK. Not a single person I know in either country has even the faintest idea what Fahrenheit numbers mean for temperature. It is never used in any way in these countries.
OONI Probe Web
Utah's Governor Should Veto “Social Media Regulations” Bill S.B. 152
I question how big the market really is for voice activated personal assistants. Very few people seem to actually want to use them beyond novelty/gimmick. Personally, I would always just prefer to pull out my phone and do whatever I need to do there, it's already insanely convenient and in most cases seems to be superior UX.
It is interesting that the site can fingerprint individual profiles/dir easily:

For example

chromium-browser --user-data-dir=/tmp/profile_A

chromium-browser --user-data-dir=/tmp/profile_A --incognito

chromium-browser --user-data-dir=/tmp/profile_B

chromium-browser --user-data-dir=/tmp/profile_B --incognito

For each command + its incognito it can detect them as separate profiles.

For ultimate privacy one needs to everytime launch browser with a new profile.
Then why does it not work in the us?
The main use case that we're tackling is financial fraud, scams, account takeover and more. - Over $32billion is stolen yearly online due to financial fraud, and browser fingerprinting has proven to be one of the most reliable way to combat sophisticated fraudsters
> Trying to hide from fingerprinting makes your fingerprint more unique

Didn't seem so in the experiment in the article.

Sure they'll be able to place you in the bucket "tor user", but is that really more narrow than what you'd get without Tor?
Oh that's terrible. As if people didn't already look artificial enough ?
Then you modify the system prompt to act as a Socratic tutor and you've created a Lead Engineer.
Asahi Linux is geared specifically for Arm based macs. There won’t be “old” hardware for another several years.
I definitely remember a sort of rubbery glue. I never had a Spectrum, so maybe different mags did different things? But of course this all a very long time ago!
WASM delivers, the only problem is that it is unreasonably hyped by people who either don't quite know what it actually is, or who want to push their WASM startup.
London Is for Cyclists
This sounds similar to what happened to Physics Girl from YouTube, and she has ME/CFS. Consult with your doctor and physiotherapist.

Get well soon!
Gordon McMillan's opinionated guide to TCP sockets
You’re quite welcome, Fudgee. Now the torch is in your hand, to make the internet a better place.
Cliff Stoll is a super interesting character. His Numberphile videos are amongst my favorites.

I actually ran into him on Reddit of all places a couple weeks ago. I was looking into air filters for my Mac Studio and I found a post where he had built a special stand with a cut up furnace filter to help protect his Mac Studio from dust. I recognized his garage from Numberphile and asked if it was him, sure enough.

I mean to actually build something like his contraption. My old house collects so much dust.
You won’t be throttled if you partition your data “correctly” and have a reasonable amount of data in your bucket. That’s difficult to do, but more than possible.
I disagree. I hope the guy becomes wildly successful, so a leak of his methods get in the news here so we know how to protect against that as well.

What you suggest is to put our heads in the sand instead. No, no and no. I prefer to be exposed to the worst so we learn how to protect ourselves. That's why this is Hacker News and not PutOurHeadInTheSand News.
How do browser standards work w.r.t ensuring things like wasm are still here and functional in 10 years time? What if our friends at Google, controllers of the most popular browser, decide they can't be bothered with WebAssemnly anymore? I'm extremely wary to invest resources in things they control. I know they don't technically have control here, but is there any cause for concern?
Show HN: Talk to ChatGPT (Apple Shortcut)
You were tired, you had blemished, light was terrible.. sorry, but that's probably how you look.. And.. THAT'S OKAY! We're humans, that's how humans look.