skysight-inc/HackerNews huggingface dataset:
Fun EVOO facts:

- the label of every bottle of EVOO uses short country codes to indicate where the oil came from, which is often multiple countries. this doesn't mean it's worse, but there are more ways some part of it could have not been great.

- extra virgin olive oil is a juice that will go rancid from excessive light, oxygen, or temperature fluctuation. it's basically like red wine. once you open the bottle, use it quickly, and keep it in a dark dry place. make sure the bottle is glass and is darkened.

- high phenolic olive oil is more expensive to produce (and thus buy) but contains more polyphenols.

- more olive oils now carry seals of authenticity. find one, Google it, see if it looks legit. there are many different certifications. Italy was the country with the most EVOO fraud, so be more circumspect with oil from there.

- a list of oils sold in America certified as pure: https://www.aboutoliveoil.org/79-certified-pure-and-authenti...

- all EVOO is cold pressed and unrefined, by definition. ignore any marketing jargon you see on different bottles.

- don't pay a bunch of money for infused oil. buy whatever oil you want, put some aromatics in a jar, pour in oil. use it up in a month.
Is there any evidence to suggest kompromat has ever been used to blackmail American tech executives to backdoor their products for NSA or other agency?
Their hostility toward the GPL is, in my mind, the proof that the souring was justified. I'm not sure if this hostility is general to the LF as a whole, or just in the CNCF, but: the CNCF has a policy about what acceptable licenses are for dependencies of CNCF projects, there's a list of approved licenses, and if you want to add a dependency on a library with a different license, you have to apply to the CNCF board for an exception to use that library. The GPL is not on that list, and there's a note that the board has never approved an exception to allow a library with a GPL-family license.

The fact that a large sub-org in the Linux Foundation is allowed to ban the GPL is a disgrace.
“people like free stuff” is something many/most would agree with and yet i wonder if an equally powerful explanation is that people weight the concrete thing in hand more than the abstract vague fear that they can’t tell if it even actually threatens them? i.e. when the privacy heist finally turns on the everyman rather than outliers, we may get another shot at privacy. If it even does!
every US state has some mechanism to obtain a concealed carry permit or is permitless carry, so really if you feel strongly about this, exclude the entire US
Are you kidding? What pointless drivel.
Similar to this, I like listening to the Apollo missions in real time[1], picking one active specific station at a time and listening just to that. FIDO is a good one!

[1]: https://apolloinrealtime.org/11/
I'm kind of confused. 10 years ago a guy stole from an illegal underground operation and today, years later after it was shutdown, someone form the government finally found them and brought them to justice?

Who reported the crime and who's justice is the government doing this for?
"Ring Ring"
...
"Ross, you got a call from the government"
...
"Hello Mr. Ulbricht, we'd like to let you know that we finally caught the thief that stole from you, justice has been served, I hope this brings you some peace as you carry on your life sentence."

Like...WHAT?!
Or did the government just want to seize the money? Maybe I'm missing context on who this guy was, but the article just makes it sound like some guy who managed to scam an illegal marketplace. Like it seems like such a waste of time to track such a random thing down, unless they were working on punishing every person who ever interacted with that site?
The contest sponsor sells cameras. So... maybe the whole business needs to change, if reality is obsolete.
> This is interesting but what problem does it solve better than CTRL+F-ing a transcript?

Producing the transcript?

Being able to classify and search data seems like a pretty big deal these days too.
> lesser evil compared to having dozens of stores

Realistically, the alternative without Steam would not be dozens of stores, but (eventually) 2-3 stores, that would all behave much worse than Steam.
is it not a valid axe to grind?
1. It is a vulnerability in a package registry, which google doesn't control.

2. It relies on tricking a developer into downloading a substituted package, which is indeed social engineering.

3. If google were suceptible to malicious code execution machinations of singular employees in China, Huawei would be google, not google.
Makes me want to visit.
I'm having a hard time accepting a definition of social engineering that includes exploits where you do not in any way influence the behavior of others.
This has not been my experience at all, can you elaborate?
Sometimes you're interested in delta of change, not absolute value itself. So absolute accuracy might be "wrong" but as long as it is consistently wrong (within duration of measurements you need to make) it doesn't matter all that much.
My local 65B llama prompt gave me this answer:

tyfon:What is heavier, one pound of feathers or two pounds of lead?

Omnius: Two pounds of lead are heavier than one pound of feather.

Not bad :)
Yeah. I think the strength of these kinds of tools is they allow you to separate your team into one that is fluent with code and one that isn't, without the "coding team" spending time on building a GUI for the "no-coding team". Houdini is probably the best example for this cause it has a built-in "interface builder" (the parameters panel for HDA).
My life is not for sale just to make yours easier.
How to Install Auto-GPT on Windows
>>>> Telling example to me was no firearms policy on conferences

>> What's supposed to be wrong with this?

It is over-reach.

What if the policy stated that all conference participants could only eat vegan foods?

Or that the conference had to have all energy use with 100% green energy sources?

Or that all conference materials had to use the English language?

Or that the conference proceedings must pause for the call to prayer?

>> I don't think it's unreasonable to try and ensure events marketing themselves using a Rust trademark are organised according to some basic requirements.

Good luck getting everyone around the world to agree what the 'basic requirements' should be.

Why not leave those details to the conference organizers?
The Image of the M87 Black Hole Reconstructed with Primo
Exactly, the lack of the deep learning frameworks to train decent models on the client side forces us to use pytorch on the server, leading to centralized data collection, privacy concerns, copyright and data ownership issues.

Imagine the world where you could trivially train a model entirely on the client side, without uploading all that data to the cloud. Then we can settle on federated learning or simply use ensembles of models trained on different clients, all without sharing data with the server.

BTW, I did have some experience with ONNX, also ran into problems with some ops (like nn.SELU not working correctly in the browser - https://pytorch.org/docs/stable/generated/torch.nn.SELU.html...).
This is so depressing to learn.
"most people travelling across the Channel who do not have EU residency will need to provide fingerprints and facial recognition data...
British travellers will pay €7 to give European authorities personal information not on their passports – such as criminal convictions, education and parents’ first names"

Fun times we are living in!
Something about radio comms is soothing to me and I love lofi! Thank you
Most apps aren’t UWP, therefore not ubiquitous.

macOS takes a much more hardline approach to this, which is what’s needed for things like this.
The jury https://www.worldphoto.org/2023-judges each member more than qualifies as a professional with a trained eye which means your assumption that it is obvious to a professional trained eye is provably false. I deal with AI generated images a lot and have seen a lot of these kinds of finger distortions in AI generated images as well, but with this creative category and the distorted william hope-esque style it's easy to attribute the distortions to other effects if you don't already know or assume it's AI generated.
what is the conspiracy theory?
13 Minutes to the moon is a Apollo 11 deep dive done by the BBC, with a Hans Zimmer soundtrack. The podcast series focuses on the last 13 minutes of descent in Apollo 11, but does a deep background story to explain the whole Apollo missions, the astronauts involved as well as the behind the scenes stories of mission control.

Nothing groundbreaking or new, just a solid retelling of the Apollo story from interviews or recordings.
The article doesn't make it clear what the crime actually was.

I got curious, so I dug up some more details: https://archive.ph/gvYFE

And the indictment is here: https://www.justice.gov/usao-sdny/press-release/file/1579271...

Long story short, the indicted executives had fly-by-night LLCs that they used to accept payments from Polar Freight clients for preferential service. (Or for access to Polar Freight's shipping services in the first place.) They called this "consulting." Like:

> "Here's your invoice from Polar Freight at $2/kg for that recent air freight shipment. Oh, and you also owe Nightrunner LLC $0.5/kg for Consulting services.
Here's a separate invoice for that."

Pretty simple scam, described in those terms.

The kicker is that some poor bastard was indicted for paying the "consulting" fee!
Almost sounds like the collective decision making process of the awards organization were in denial that the industry at large is changing.

Feels dystopian that they would just, scrub the winning work from the website and physical location without comment, pretending as if it didn't happen.
Eh I use a Hetzner server from their Virginia datacenter as a VPN but the DJI site still shows up in German for me. I don't see that problem anywhere else tbh.
It seems unnecessarily heavy-handed to me.

Back in the day the Ada people had a reputation for being very "controlling", but they didn't stop the Gnat people naming their company "Ada Core Technologies", and they didn't stop the adahome.com people using that domain name or writing "Ada Home: The Web Site for Ada" in big letters on top of their webpage.

I don't think that caused any serious problems.
"This is a summary of older iterations of this universe, please let's try to improve team!"
Some examples:

- Changing the style of the whole photo to (for instance) make it look old and analog.

- "Enhancing" it with HDR, depth of field, focus everywhere or something like that.

- Altering exposure beyond what you could get out of a underexposed/overexposed RAW file.

- Stylizing the human subjects to make them look more attractive, more grimey or whatever

All these things could arguably be done in photoshop, but its just very labor intensive and more hit-or-miss. Hence the contest rules would have to exclude most photoshop work if they want to exclude diffusion.
> First, most early 80s computers did not boot straight to a programming REPL either. As soon as you had some kind of disk operating system you ended up in a shell and would have to invoke a BASIC interpreter or other programming environment if you wanted it.

If your system booted to the DOS, which many which had one available did not; to boot the Apple II DOS when it was released, you had to use the BASIC REPL, and even once it booted it didn’t have its own REPL, it hooked into the BASIC interpreter and provided BASIC commands for interacting with the disk, making the BASIC REPL its REPL and the BASIC interpreter its batch programming environment. While the exact details may be different, having the DOS be an under-layer which didn’t have its own shell was common on other systems, too.
It's just as easy to analogize it as picking up a brick is to lifeguard training as it is to say it's swimming in melted chocolate is relevant to lifeguard training.

Your question has no scientific justification. It just is a problem you can do, and you like yourself and think you're awesome. So you think it finds people like you. But even that isn't scientifically supported.
what is an intuition for complex frequency?
> and the game's sales page removed until the claims were investigated by Valve, but this is not a perfect world. However, things didn't end there.

Valve's response has not been ideal, but punishment before investigation isn't any better.
This doesn't work for webxr.
That is mentioned in the video. "It is being fixed."
I’d think that ship has sailed in this case. The author already publicly stated that they would be able to make the package do “something malicious” within Google if they wanted. So however they change it after the fact, they’d run the risk of being accused of malicious intent.
Sorry, abuse of notation. 30.30 would be 30 bits numerator, 30 bits denominator.

I would imagine it would not need to fully reduce after every operation, there's probably tricks where if you know the factors going in, there will be obvious ones after multiplication/division.

It's not my best idea :p
> but I don't think it varies much in this scenario. You aren't any hungrier inside the airport than you are outside.

I think the poster was claiming that in fact the value is not the same. You aren't hungrier, but you are typically more tired, more rushed, and focused on bigger problems than what to eat for lunch, etc. It's a reasonable argument. That doesn't mean it's thing going on.
Weather radio repeat cycle is too short. It becomes noticeable and then irritating and distracting. I keep wanting to try shortwave news in a language I don't know but sounds nice. If it has too many english or Spanish cognates I'll probably get distracted trying to figure out what is said. Something tonal perhaps, Welsh or Chinese.
"High tech lynching" sounds a lot like Trump's "witch hunt." It's not hard to find ProPublica investigations of Democrats, they aren't as one-sided as you're claiming.

https://www.propublica.org/article/george-norcross-democrati...

https://www.propublica.org/article/george-norcross-democrati...
I'm not a serious mechanic, but I suspect one of the reasons the bearings and shaft on the hub are tapered is so you can tighten it down and accommodate for minor variations in the tolerances. That would have been more important before it was all being done with CNC. The material for the bearings was probably not super either.
Had you been a victim of a concentration camp or served I the war you might feel differently. I think it’s a bit arrogant of us to decide a crime isn’t appropriate to punish when many of our parents weren’t even alive when the atrocities were committed.
music works but airport radio is down for me
Can't you jusy use a servetless function such as Aws Lambda for this?
That's a false dichotomy, someone can want a cross-platform app that has shared code but the outcome is "native-like" on each of the platforms. If a cross-platform toolkit can't do that and people consider that its result is a bad fit to some of the platforms, it doesn't mean that these people don't want a cross-platform app, all it means is that this toolkit is not good enough.
I love these stations. SomaFM carries this and others (or maybe they are just similar mash-ups). I have tinnitus 100% of the time, and silence is the enemy. This kind of sound - indistinct, with variety and high frequencies, is the most helpful.
None of the airport feeds I've tried have worked, unfortunately.
> Obviously not true, in fact none of the companies I worked in that was the case

I once offered a bet to the large security team at a well-known decacorn tech company I worked at: I offered to make a personal, reasonable-sized cash bet with any member of the security team that I would win if I could deploy malicious, unreviewed code to any service or machine of their choice without it being prevented or proactively noticed by them.

The members of the security team all declined my bet. We're talking about a team of probably at least a dozen people, many of who had been working at the company far longer than I and who had been shaping and reviewing the company's security design for years.

They knew perfectly well that I would be able to win the bet. Not because their security was unusually bad, but because it was bad in the common, usual ways. Securing the supply chain is hard, and real security is almost impossibly expensive to add to a system late in the game if you didn't design it in from the beginning.
> This blog seems like a pretty desperate attempt to get google to pay them.

It's actually deliberately criminal as I read it. "Hey, I trojaned some code and got it downloaded onto your company's systems! Please pay me a bug bounty!" is 100% isomorphic to extortion.
Ask HN: Troubleshooting a sideline while on holiday
Is anyone using a Kindle Fire to ssh to their Cloud Servers? I have a side project and it is getting tiresome having to bring a laptop on holiday with me in case of a tech emergency. Any recommendations from personal experience?
While the Java ecosystem tends to get a lot of criticism, this is one thing they got right: fetching a package name from a public repository involves prefixing the name with the reverse-DNS name of the uploader (the "group ID" in Java/maven parlance). Uploaders can only submit packages after they've proven they have control over the domain.

It's really unfortunate that even newer package management ecosystems like Rust's haven't learned that lesson. Yes, it increases initial setup friction, but dependency confusion and name squatting issues more or less just go away when you do that. Sure, you might run into issues where people register domains for common misspellings of popular domain names, but that's already a problem with website resolution, and there are ways to mitigate that.
Why wouldn't it? Knowledge produces technology, technology magnifies capabilities, magnified capabilites create first- and second- order consequences that feed back on each other. Increased complexity demands increased energy to maintain, and increased catastrophe in the event of failure.

The natural world alone has disease, disaster, predators, and threats from space but would exist independent of knowledge. Technology allows us to mitigate those, and as a trade-off we get biological and chemical weapons, mass shootings, the Tsar Bomba, etc.
A sensible approach, which is disappearing from LLM-related HN threads. (Going away to a designated area, I hope.)

But don't you see that you are preaching to the same set of outdated "human institutions"? HN is also a part of it (if you have perused it in the early 2020).
I never buy those sandwiches but if I were tempted I’d consider that for the price of two of those I could buy a 6.1” screen Android smartphone at Kroger’s, download some videos, and watch them instead of eating.
> Obviously not true, in fact none of the companies I worked in that was the case.

Selection bias. In some companies access to an engineers single workstation allows access to potentially billions of dollars worth of intellectual property. Imagine China stealing the design for the latest aircraft engine from GE, or accessing the PC of the most senior accounts payable person in a company and getting access to actual money. Just because YOU weren't the most valuable target in a company doesn't mean no one in your role is. My account at my company is constantly under attack because I'm the VP of IT in healthcare. The reality is "my" account doesn't even have any powers, it's just email. My accounts with sensitive access are separate.
I think that is just endemic to getting older. Things can't thrill you the same way they did when you were young.

You've got more experience. Also the world was more optimistic back then.

I was born in 81 so growing up in the 90s was great. It was a optimistic time and in general things were no where near as decisive as now.

The internet was ushering in a new age and we didn't know how it would change the world.

Fast forward to now when the internet and smart phone revolution has happened and we are in a much more dark and bitter place.

We've seen some real negatives on society because of these in innovations and with ai there is more of an existential dread about what it means for society than any optimism.

It's just not possible to recapture those times IMO.
My understanding is that a highly spherical electron implies the electron has no sub component parts. Knowing the exact radius of the electron doesn't change that, it's knowing there is no variance in the radius that is important.

And again, I was only commenting on what was being commented on here. I don't know if the experiment was also highly accurate. But people here were commenting on the precision and calling it accuracy.
Be very careful when infusing your own oil. Botulism is a real concern, it is often necessary to soak your aromatics in a citric acid solution before infusing.
Even if you don't encrypt your Linux' filesystem partitions, you definately should encrypt the swap / the partition the swapfile is on. A new encryption key for the swap can be created at every boot, removing the need of an encryption password. This behaviour does make hibernation impossible, so swap encryption isn't the default on Linux distros that have opt-in encryption.

https://wiki.archlinux.org/title/Dm-crypt/Swap_encryption

Does someone know how it's handled on Windows and macOS?
I had a really fascinating conversation with the lead architect at Frost Giant the other day. They're making the next StarCraft, basically.

They don't use floating points.

He didn't mention (IIRC) the possibility of rounding bugs; the reason he cited was something a bit more interesting: Floating points are not deterministic, which makes multiplayer challenging, as they simulate game state on each client's computers and only send commands across the wire.

One wonders if the "out of sync" errors that plagued Age of Empires in my youth were partially explained by FP determinism issues!
As soon as I started listening I heard about AS1412 making an emergency landing
This is a pretty sad state of affairs.

* There is no namespaces, so all internal packages must be individually protected
* It's easy to misconfigure the various python package tools to open you up to dependency confusion attacks
* The only effective protection mechanism that you can implement across a large enterprise fills the index with spam and is forbidden

It would really improve things if they could introduce namespaces and let legal entities own those.
I'm interested if this is true. It seems like the js sandbox is pretty well implemented now in most cases. Webgl had some problems at first leaking host data, but the willingness to sacrifice performance for security seems pretty ingrained in these consortiums?
There is also a danger in relying on a third party tool for essential business processes.

If the third party tool makes changes and breaks your solution, or gets sold to an unfriendly owner that jacks prices, or decides to sunset their tool — you're screwed.
I felt miserable reading this. It feels like the concept of separating a fool from their money has been distilled down to a science. I remember the original 'whale' articles from many years ago where the concept was just in its infancy, and it's sad to see that it's only become more focused and gained precision. Who knows, maybe with rapid advancements in generative AI, even that becomes fully automated...
> It relies on tricking a developer into downloading a substituted package, which is indeed social engineering.

I wouldn't call this social engineering. The attacker isn't actively trying to trick anyone of anything. They're just exploiting the fact that the Python package management tools make it really easy for a user to accidentally -- without any prompting or interference from the attacker -- pull packages from pypi.org rather than their internal private repository.