skysight-inc/HackerNews huggingface dataset:
I really don’t think MS had the consumer product vision at the time to pull anything like a music store off. Apple had the vision to get from point A to point B and have huge swaths of consumers hop on board for the ride.

Wild oversimplification, but I always felt that MS suffered from their monopoly during the 90s in that simply never had to make products people really cared about. Apple did. And when the consumer market exploded — especially after touchscreen phones hit — MS just didn’t have any good muscles to use in the fight. They’d been sort of cheating it for so long that the stuff they kept bringing to market was just a total mess.
or maybe you need to stop thinking everything is a conspiracy and realize bugs happen
I've been using GPT everyday for the last 3 years, it never happened to me
KJFK was the only one that loaded immediately and had ATC comms going. KEWR took forever to load and even when Live nothing was coming through.
But how often are people using decimal types to do that? Most of the uses I could see this type being used for - currency, percent scaling, datetimes, audio/video codec frame rates - all are basically fixed point operations. Anything involving powers of 80/81 would probably need bigint based rationals anyways.

Actually if you had an int64 type which was scaled by flicks, that'd give you quite a lot of latitude for most day to day stuff.

https://en.m.wikipedia.org/wiki/Flick_(time)
Because that's what the market will stand. Simple as that.
> My experience is that most govt regulators are complacent, mediocre, low energy desk jockies who default to doing as little as possible.

Yep. But the upside is that they're often the only thing standing between you and more or less infinite profit; and they're hardly an obstacle if you have the right set of keys.
I don't think of proteins as cryptographic keys. But monkeys-on-typewriters thinking is more closely aligned with cryptography than biochemistry. That's kind of my point.
The HN submission page could play something like this in the background to soothe people while they are preparing their angry submissions.

Heh, who am I kidding, HN runs on outrage just like all the other social networks.
way to ruin a joke.
The article agrees, ending with:

> I'm not saying heads should roll. I'm saying someone needs to take the wheel.

If no one is at the wheel, Rust is unsafe at any speed.
It looks like a straight plagiarism of this NYT story from the day before:

https://www.nytimes.com/2023/04/12/technology/meta-layoffs-e...
Outcry over a single non crypto-enforced ID seems almost cute with todays treacherous technology like MS Pluton and ARM TrustZone.
I could easily believe that <10% of drivers are so terrible, that they drag the mean so far below the median that 90% of drivers are above the mean.
Do you think that is an outcome anyone in the west should want?
I am surprised that this is NEW. I mean, like nobody ever created a stupid program asking the user for the system password and tried to collect sensitive data based on it?

OSX Ventura has several guards already against it:

- prevent execution of software not downloaded from app store and not from an identified developer (not digitally signed basically). You as a user have to explicitly go to your security settings and enable the app, and then reopen it.

- ask explicitly for permissions to give to an app (e.g., X is asking to access the Downloads folder, ...). Maybe in case of Keychain this is not done, which could be something to improve... but even then if the user wants, there will be a "click".
I’d argue that Microsoft still doesn’t have a consumer product vision outside their gaming division.

I think they’re quite content with that now though. They’re firmly developer, enterprise and gaming focused these days.
Slowing down would be hard since it's a live stream
Previous HN discussion on NY Times article about adulteration: https://news.ycombinator.com/item?id=7128495
I would never say this for real, but in my head I've always asked, how smart can you be if you're turning your nose up at or not joining in the most interesting open active conversations in the world?

I agree that the majority of the world or even sharp people weren't actually there. But in effect, every other place for conversations was a drop in the bucket compared to Twitter's ocean. Finding some good inspiring informative people to follow, & look up other potentially interesting conversationalists as you go, and you'd be hella winning.

Twitter enabled following & expanding your network intelligently nearly infinitely. Every other place, you will be bound to whomever you can attract.
The article makes it sound like they just discovered whales in 2014 -- I was at Zynga in the early days, and we were definitely aware of them even on early games, but there wasn't a formal VIP program.

The push to give them special treatment didn't take off until the Facebook tax appeared; at that point it became important to move big spenders to a separate payment channel without the 30% skim.
I was confused as well, because I just had chatted with someone about whether the aoe2 monk conversion ability on certain buildings was hardcoded or not (they can't convert i.e. Town Centers, Monasteries) ... turns out it at least used to be, no idea about now.
> I don't think that caused any serious problems.

It's certainly a different approach - that's the big problem, people aren't used to this kind of approach.

I just watched a video where someone, in response to the policy of not having 'rust' in a crate name, brought up how npm allows 'node', and golang allows 'go' in their package names. And those were mistakes, way more for npm, which they eventually kind of fixed with namespaces. And cargo is not getting namespaces, in fact the whole package system is pretty but that's a separate thing.

My bet is that this whole is going to be a disaster, but maybe this is a baby step for more professionalism for future projects to learn from - even if it's about what not to do.
The worst part of flutter's web stuff is that the quality is absolute janky garbage. They're trying to undermine an open ecosystem, and they don't even offer anything useful in return. It's like making a deal with the devil except instead of getting the thing you bargained for, you just get stuck with a pitchfork and also you lose your soul.
Not sure how it remotely looks “awful and alienating”. It looks like basically every recent language to me (swift/kotlin/rust/typescript). I feel like you just saw something that has the same numeric type names as Rust and jumped to conclusions.
The sense I get is, things should be more open, but not too open, because then it would be harder to sell the app. They're hoping that a very unnatural state becomes the default because it would be more profitable for _them_.

It's a selfish take.
The richest Americans are on a spending spree. It may help US avoid a recession
What happens in the Java ecosystem when someone loses ownership of their domain name?
I was completely blown away by it because they didn't even do informed consent on the public health sites. It's a totally rampant violation of your child's 4th amendment rights – on the day they are born.
> MacOS allows any command to read the entire contents of your keychain (yes, with all your passwords). No auth, no checks, just full access via the `security` command.

No, that's not true. macOS has multiple keychain APIs with different capabilities.

https://developer.apple.com/documentation/technotes/tn3137-o...

Items within the traditional keychain can have ACLs applied to them. When you run `security dump -d`, it will only be able to dump items from a traditional keychain that are either set to allow access to all apps, or that have an ACL that grants access to `security`. Very few items should be set to "Allow All". In my login keychain, almost none are.

For all other items you will get a security prompt with "Always Allow", "Allow", and "Deny" which requires you to enter your password. You can also set items to require confirmation but not require the keychain's password.

If you add `security` to an item's ACL--say because you need access to that item from a script--then any app can of course access that item by calling `security`. My advice would be not to add `security` to any item's ACL.

AFAIK, `security` has no access to the iCloud Keychain where Safari stores its passwords. If you don't have iCloud Keychain enabled, I believe Safari stores its passwords in a traditional file-based keychain but those items should have ACLs on them.

https://support.apple.com/guide/security/keychain-data-prote...

https://support.apple.com/guide/security/icloud-keychain-sec...
> I have a concealed carry permit. I have firearms and other weapons. I know how to use them, and I will use them in defense of my wife and myself. And you can bet I carry them into places I consider dangerous if it is legal to... So yeah, if this policy goes through, I’m not welcome at Rust events, even if the event organizers agree with me.

The policy is about fire arms, not you. Good on you for aspiring to defend your family, but how does bringing fire arms to a technical conference about Rust accomplish that goal? Just leave your gun at home, you'll be fine. You are welcome to attend. Your gun isn't. If you think that the Rust conference is a dangerous place where you will need your gun, I suggest you stay home. I can assure you the conferences are perfectly safe, no one has needed to defend their family at one before. Your wife will be safe as well if you don't bring your gun to the Rust conference.

--

As for the rest of your post, I would say I don't see the big deal. It seems like everything you listed would only be a problem if you're trying to start a business around Rust, using the Rust logo and name, or just generally piggybacking on Rust for profit. If that's what you wanted to do, I can see how the policy would be an affront.

But as far as someone who wants to just write programs and not build a business around Rust, what is the downside here? I appreciate that the "rust" namespace will not be polluted by unofficial crates. I appreciate they are defending their trademark.

Just the direction you don't like? If that's the case, personally I'm fine with it and encourage it. As an avid Rust user, I'll be happy to continue using the language and ecosystem; the software I write with it is very robust and efficient, so I'm happy to. If you don't want to, that's fine too. We'll have our gun-free conferences, you'll be invited, and you're free not to attend if you won't do so without your gun. But if you want to leave it behind we're happy to have you.
The revenue restriction might limit the damage. If the law only applies to high-revenue sites, they probably have the resources to implement a parental check. If the law applies to all sites, most will implement the much simpler ban.
"most of the world != majority of the United States" though.
I write Python (not well) and I don't understand any of this:

> mandala is a tool that implements this idea. It turns function calls into interlinked, queriable, content-versioned data that is automatically co-evolved with your codebase. By applying different semantics to this data, the same ordinary Python code, including control flow and collections, can be used to not only compute, but also save, load, query, batch-compute, and combinations of those.

I wanted to call it out because I think it's such an obvious example of where programmers need to find ways of more clearly expressing their programs in ways everyone can understand.
I object to doing that on principle
If that's the case it definitely works as creators look for every opportunity to mention their projects somewhere and what better place than this thread.
Their argument that they don't want to disclose the names of individual vendors is flawed but somewhat logical. I've seen redactions, for example, on the breakdown of a town's tax revenue by industry when there was only one small business working in a specific industry.

Disclosing the price charged for a sandwich seems far less sensitive however. My hunch is there is likely no record of the comparison sandwiches, and I hope the author of this article appeals their records request to find out if that's true or not.
Some others have mentioned SomaFM and the Apollo missions separately, but SomaFM has a station that combines ambient music and the Apollo mission audio: https://somafm.com/missioncontrol/
(I give absolutely no credence to the root of this comment tree...)

There was an idea posed a bit ago known as the "one electron universe" ( https://en.wikipedia.org/wiki/One-electron_universe )

> The one-electron universe postulate, proposed by theoretical physicist John Wheeler in a telephone call to Richard Feynman in the spring of 1940, is the hypothesis that all electrons and positrons are actually manifestations of a single entity moving backwards and forwards in time. According to Feynman:

> > I received a telephone call one day at the graduate college at Princeton from Professor Wheeler, in which he said, "Feynman, I know why all electrons have the same charge and the same mass" "Why?" "Because, they are all the same electron!"

> ...

> Feynman was struck by Wheeler's insight that antiparticles could be represented by reversed world lines, and credits this to Wheeler, saying in his Nobel speech:

> > I did not take the idea that all the electrons were the same one from [Wheeler] as seriously as I took the observation that positrons could simply be represented as electrons going from the future to the past in a back section of their world lines. That, I stole!

> Feynman later proposed this interpretation of the positron as an electron moving backward in time in his 1949 paper "The Theory of Positrons". ...

---

PBS Space Time : The One-Electron Universe https://youtu.be/9dqtW9MslFk (highly recommended)

The idea has mathematical utility, but not any practical.
If you build a house, or buy land, that one will go to your kids and their grandkids. So the fruit of your head should too. 70 years is a bit too much though
Grounding Large Language Models in a Cognitive Foundation
>Despite the "port authority" rules on 'street pricing', the real reason is lack of competition.

I guess that the lack of competition isn't the only answer, in many cases there are many restaurants/stores in an airport and all of them are very expensive.

The price of the rent in the airport also has to be taken in account. In many airports the restaurants pay outrageous rent values that won't allow them to sell cheap food.
Thank you, this is why I love HN!

Ah, that makes sense! I thought neutrons were hard to store because they were neutral and go right through things, but I guess cold neutrons can be stored (at least until they decay into protons).

Is it expected that pEDM ~= nEDM, since they are uud and udd?
I agree with your general thrust, but I don’t see how your point refutes mine.

First, it’s not required to actually run the package. Installing it is sufficient. All package managers that I worked with so far can run code at install time.

Second, the issue here seems to be a misconfiguration that makes pip look up a private package that should be retrieved from a private repository on the public repository. The attacker then just registers a malicious package on the public repo with the same name. Preventing this attack requires that python is correctly configured on each an every developer machine - something that I’d never rely on as cornerstone of my security.

Third: This is one example of smuggling a malicious package on a developers machine. Another vector is that a good package turns into a malicious package with an update. That’s even harder to defend against - pulling in the update with the programming languages standard tooling may run malicious code. You can certainly first download the package, unpack and inspect it and then pull the update - but would you rely on thousands of developers diligently doing that?

Last: this class of error affects almost all programming language package managers out there.

So it’s better to assume that this will happen, take a local compromise of a developers machine as a matter of when, and mitigate what the attacker can do with the capabilities they gain from this compromise.
I miss the magazines of the Golden Age era. At least in Europe there are some retro magazines doing their best to gain a foodhold in establishing themselves. Retro, Freeze64, just to name a few.

After 10 years with kindle, I more and more revert back to paperback. Not due to nostalgic feelings, mainly because I work with them.
Nuget.org let’s you reserve a prefix for your company:

https://learn.microsoft.com/en-us/nuget/nuget-org/id-prefix-...

NPM has scopes:

https://docs.npmjs.com/about-scopes

So there are ways to make package repositories prevent squatting on package names.
The differential geometry general relativity uses was developed for funsies by euler in the 1700's, so there is precedent.
I didn’t know I needed this in my life until now. Thanks!
A renowned documentary photographer (e.g. worked for Magnum) I've greatly respected recently announced a NFT project consisting of AI-generated photos on the topic of Cuban refugees [0]

> IMAGERY IS NOT REAL

> 90 Miles is a post-photography AI reporting illustration experiment exploring historical events and realities of Cuban life that have, since 1961, motivated Cubans to cross the 90 miles of ocean separating Havana from Florida.

> For over 25 years, I kept a list of subjects to document but was unable to, mainly due to access or that access was impossible. While working in Cuba from 2014-2016, more subjects were added to the list with the assumption they would likely never be created...

> ...The Cubans who attempt the crossing are incredibly resourceful, as necessary to the journey and as reflected in rafts often assembled from inner tubes, pieces of wood and plastic, household supplies, etc.

Of all the AI-art controversies so far, this one really rankled me. This guy has had an immensely successful career in documentary photography, he's gained fame and prestige based on the veneer of truth and reality that journalism confers to his line of work. And now he's going to torch the integrity of the profession for some NFT profit?

Ironically, he's done a bunch of work documenting Cuban life. So the photos he generates will probably bear some resemblance to reality he's observed. But why not amplify the work of young/undiscovered photographers who do have the chance to document the plight of refugees? Just shocked at how little he cares about trivializing refugees and future aspiring documentarians.

[0] https://www.instagram.com/p/CqniSVjrj0h/?hl=en
Are you familiar with swift playground?
https://www.apple.com/swift/playgrounds/
I would say that they seem to recognize that they need to appeal to the users of their products and not just those users’ managers. And that means playing ball with the ecosystem and not just trying to crush it. Baby steps, I guess.

But a lot of their product line remains a mess. (Although the Xbox shouldn’t be discounted — that was a consumer success.)
> The kicker is that some poor bastard was indicted for paying the "consulting" fee!

I mean the system works best if people on both sides of the equation are punished, right?
> I addressed this - systems without IME exist, but are not available for purchase, for any price, except for governments. That's not economics.

As I understand governments just set a bit to disable IME on already existing processors. But if you want a feature and are willing to give them billions of dollars, Intel or anyone else absolutely will add a feature for you. You can call up any fab and have them make whatever you want. Custom silicon is absolutely a thing, but it requires big bucks. Nobody makes bleeding-edge node processors for applications with tiny markets precisely because of economics. They are made for the only market with enough revenue to support the R&D cost: the mass market.

> I specifically said "non-rootable", i.e. non-privileged by default, but that can be unlocked. So mainstream phones would remain non-privileged except for those motivated enough to follow an unlock procedure.

Mainstream phones don't do this. They still sell. Therefore it is proven that the market DGAF. The largest customers for a company like Samsung are businesses who don't want the phones to be unlockable. They want that shit locked down and surveilled like Fort Knox. Pun intended. https://samsungknox.com/en

> If MS prevented users from running any compiler except Visual Studio on Windows, would you excuse it because those that need it are a niche market, for whom the more expensive Windows Pro licenses are made?

I don't think they have a reason to expend resources to affirmatively make this change -- but the few products they've released for which it was inconvenient to add support for things like this, they absolutely have. eg: S mode.

> There are no non-smart TVs on store shelves next to smart ones, just for a higher price, despite demand [1]. In fact it's a challenge to find one at all.

You can find sometimes find Spectre dumb TVs at walmart. Know why the they're hard to find? Because TVs have large fixed costs to produce, and if you don't move enough units to cover both the marginal and fixed costs, you cannot afford to offer the product at all.

> "This question of smart-TV data privacy and security is by far the most-asked among Ask Wirecutter readers."

I don't doubt that Wirecutter has received maybe hundreds of questions about this topic. But almost 225 million TVs sell annually. People buy smart TVs.

It's just the reality that privacy is not a primary purchasing consideration for mass market customers. The mass market doesn't care. If you even read a privacy policy, people will think you're weird. I wish it weren't the case, but it plainly is. It really won't change until people stop buying these products.
The vulnerability is the use of pip with internal tools
KLAX South Tower has a pretty decent of traffic from what I've noticed.
There's a swastika on page 33.
Sure, and if you pay for general aviation, you can have an actual good experience flying.

Paying the fees for TSA pre-check or Clear to opt out of unnecessary screening feels like paying the mafia to opt out of unnecessary physical injury and property damage.
Explain like I’m five follow up question: is this electron able to exist in infinite places in space or only in predetermined slots?

I.e. does space consists of pixels?
There's an important point to consider. Our ability to detect "real" dialogue, images and whatnot will develop as we go. What fools us now will not fool us as easily in the near future.

That doesn't mean technology won't outrun our ability to detect it, just that this images will probably seem like an obvious AI image in a few years.

For now, we need to manually count knuckles.
> The kicker is that some poor bastard was indicted for paying the "consulting" fee!

Can you point me to where I can read more about that?

I'm assuming the indicted person knew exactly what he was doing, but it's still terrible to be stuck in a business situation where the only way to get your job done is to go along with something like that.
DJI O3: 4k video for DIY drones
I hate to break it to you (or others on HN) but a lot of Europeans do avoid the entire US these days for exactly this reason.
Where does GP suggest any new restrictions at all?
The law intentionally bans people under 18 (unless they get parental permission). So people under 16 not having IDs doesn't matter I don't think, since even if they did have IDs they would still be banned (unless they get parental permission).
Yeah, was wondering the same thing.
Getting way off topic, but if you hit ordinary peanut butter with strong light, it glows afterwards. Go into a very dark room, adjust your eyes to the dark, look away with your eyes closed/covered as you hit a jar of peanut butter with a camera flash (not the household item it once was, sadly), and then look at the peanut butter. It's glowing!

I heard this on the Internet and didn't believe it, but tried it for myself, and yup. It glows.