skysight-inc/HackerNews huggingface dataset:
I totally agree that the "general public" has "limited focus," especially since public health campaigns are hard!

However, my claim is that a lot of progress on these issues doesn't need to be very public. Telling the public to do a thing sounds like the last step of the process, after researchers have already found a definitive solution.

I also agree that researchers have a limited amount of resources! But I don't think that funding a research area is necessarily zero-sum. If a company or government decides to throw extra money to start researching a thing, research on other things doesn't stop. As an example, when the NSF provides more funding for research, the number of PhD students goes up, since there are more research grants to go around.
Do you have any evidence for such claims or is it just another conspiracy theory?

As for what mask do, if it was that easy, there wouldn't be the need of so many studies. But that is not even the claim here. The article says mask mandates make no difference.

Even if we assume that masks work, people wear them wrongly, they reuse them instead of using clean ones, fidget with them and then touch other parts of their face. There are plenty of reasons why a mandate could not work.
In other words, we can tell the neutral nets when they're getting "warmer" or "colder" to desirable speech, but we don't know how they do it.
Damnnnn... Looks like I'm going to have to add hashes for my dependencies.

https://pip.pypa.io/en/stable/cli/pip_hash/

Apparently the format looks like this for a requirements.txt file:

# sha256: L9XU_-gfdi3So-WEctaQoNu6N2Z3ZQYAOu4-16qor-8

drf-compound-fields==0.2.0
Influenza is a virus that is constantly mutating. I think the comparison means to the variants colloquially known as "the flu", which are the ones that make you sick for a week or maybe two. They're not comparing to all influenza variants ever.
Those are secrets because only you know them. And that's fine. What's not fine is that you could have organisational shared secret in this day and age that won't ever leak. That's dumb fantasy and attempts at making it real are laughable and should have holes poked into them.

> You're absolutely right that young people are more likely to question traditional narratives, but they are less likely to have the context (or apply it, anyway) necessary to form a coherent narrative in its place, which will often lead you to at least some variation on a traditional narrative.

How strongly narratives affected people historically is downright frightning. Millions have died because of philosophers. I hope that in the future humanity will gain much more relislience toward narratives just by tearing them apart and restiching in chaotic competeing manners. I hope LLMs will help with that by examplifying how easy it is to produce any bs narrative that even hunk of silicon can do it. I hope people who grow up in this environment will no longer be able to be cheated by single bs narrative for decades of their life.

> For most other things... You don't have to be young to smell the bullshit.

The fact you can smell it doesn't matter you'll have audacity to complain about the smell or imagine a world without this smell or even find that smell bad enough to get off the couch.
>If there is any danger here, it is that the forthcoming debate in Washington over the debt ceiling somehow results in a US default

This, I do not understand why the GOP goes nuts over the debt limit. If they blow it this year, inflation worries we have now will seem quaint.

If China was not gaming their currency and had a real open economy, that would be a possible alternative. But with Xi in power, it will never happen. EUR should have been in a position to ascend, but Greece, Spain, Italy, Ireland and later on UK stopped that in its tracks. No trust there with the Euro right now.
> PSEUDOMNESIA is the Latin term for pseudo memory

That sentence infuriates me way more than it should. Are you sure it's Latin? Are you sure it's not Swahili? Also, don't define a term with itself.
As I understand the article, the problem is that an employee machine is misconfigured and uses the public package repo for a private package. The package in question seems to be explicitly pinned in the requirements.txt - that’s essentially a whitelist. Whitelisting also suffers from the issue that a good public packages could at any time turn into a malicious package - so you’d need to pin the version. A task that seems infeasible for developer machines at googles scale.

Sandboxing the development environment could be done, but would only help against this attack if the sandbox cannot connect to the public internet- which again would be painful.

Googles strategy of accepting that this kind of breach will happen and rather focus on mitigation of the resulting damage seems like the better way.
No one seems to know the percentage that Clarence owns with two other co-owners of the said property.

"Here's $1, Mom"

Chathum County property deed
https://www.documentcloud.org/documents/23774272-warranty-de...
--- start quote ---

On January 24, 2017, Khronos hosted an IP-free meeting dedicated to discussion of "WebGL Next" ideas, collided with WebGL working group meeting in Vancouver.[8] Google team presented the NXT prototype implementing a new API that could run in Chromium with OpenGL, or standalone with OpenGL and Metal. NXT borrowed concepts from all of Vulkan, Direct3D 12, and Metal native APIs. Apple and Mozilla representatives also showed their prototypes built on Safari and Servo correspondingly, both of which closely replicated the Metal API

--- end quote ---

(Note: Unlike Chrome, Apple and Mozilla followed the actual standards route: two independent implementations)

--- start quote ---

On February 7, 2017, Apple's WebKit team proposed the creation of the W3C community group to design the API. At the same time they announced a technical proof of concept and proposal under the name "WebGPU", based on concepts in Apple's Metal.

--- end quote ---

And so on https://en.wikipedia.org/wiki/WebGPU

Apple is literally at the forefront of this entire initiative with Mozilla close second. Chrome grudgingly agreed to join the others a full year later.
Look at the dark eye, an artifact on nose, the lighting on the cheek behind shoulder. Fingers of her hand have abnormal thickness, index finger has very long nail, meaning they are not equal in length.
You’re allowed to define different meanings for words if it makes your argument go forward and if you make it clear what it is.

However I still find the argument very unpersuasive, and the usual meaning of “magical thinking” makes me feel uncomfortable too.
Cool, was just wondering if you were regenerating it at regular intervals or something
This isn’t correct. All 3 parties had prototypes. Mozilla’s first prototype was based on Metal and implemented in Servo. Then we (Mozilla) proposed a Vulkan-like API and had another WIP in Servo, but it was also thrown out.
This is odd, because I work at Google, on open source projects, and inadvertently created this exact same vulnerability on npm (due to using a fake package name for an unpublished monorepo utility package).

We fixed* this right away, because even though it's true that this "vulnerability" exists with basically every npm package, the difference is that anyone can immediately pull this off once they find an unpublished package in use - they don't have to take over an existing package or get a package they own to be used.

It's the ease of the executing exploit that makes this one more dangerous. Some bored kid could have just wiped my hard-drive or worse, maybe within a few minutes if I'm working.

* An easy fix on npm is to create an org that you use for all internal packages. No one else can publish to that org.
Lazy logic. What if it's 4 million users? You're just assuming the answer you want.
Unrealated to the AH game:

https://boardgamegeek.com/boardgame/1512/hexagony
Laptops are a different category. I use one, but only for travelling. Most of the time, I work on a massively multicore self-built AMD-based system which is cheap, incredibly powerful and almost silent. My power comes from the sun, and I don't have to care about battery life.

My AMD system has better audio performance than any Apple system I could buy (and I can even run Mojave on it, with better $-per-cpu-cycle than anything Apple would sell me), despite Apple systems indeed having great audio subsystems.

I rarely use headphones, but when I do they are studio quality ones that do not use bluetooth, and are fed via my studio gear, not random consumer devices.

Look, I get that different users have different needs. I'm not trying to persuade you not to use Apple products. I just happen to think that the focus on "how good is this for my day to day needs" can obscure a more important long term truth. Farmers have been discovering this with John Deere for the last few years, another company that makes incredibly great hardware that is totally what their users need. It just turns out the Deere's model of buyer lock-in via repair control is now causing conflicts for those same users.
There's a huge difference between TPM and IME: with TPM, you can put your own keys, and use the TPM to refuse payloads not signed with your keys (ex: a Windows install thumbdrive)

With AMT/IME or BootGuard, you don't get that control: you can't replace the bootguard keys (as it's a way to kill the secondary market of CPUs being resold and used in a different motherboard) and with AMT you can't fully disable it unless you're a government agency as you said.

The technology isn't bad, it's the actual implementation that's wrong by avoiding certain features which could give the user more freedom.
From core maintainers of Jupyter - https://github.com/jupyterlab/jupyter-ai
The real problem is that the public option got replaced with marketplaces and employer-provided insurance got enshrined in the law. If we Americans were serious about having a free market we’d do the following:

- ban employer-provided insurance entirely.
- provide tax breaks for employers who provide insurance stipends to their employees
- provide tax breaks for people to buy insurance on the marketplaces
- make open enrollment a once a quarter or once a month thing, or even allow you to switch insurance anytime.

The entire problem is that there’s no free market. The people using it aren’t able to negotiate. And when there’s a problem you have to pay your insurance until open enrollment. This means you have no way to vote with your wallet.
Insect flings pee from a 'butt catapult.' Engineers look for practical uses
Mr. Haass answers:

"Ukraine might still refuse the call for a cease-fire. If so, it would hardly be the first time in history that a partner dependent on U.S. support balked at being pressured to scale back its objectives."

"Another plausible outcome is that Russia would agree to a cease-fire in order to pocket its remaining territorial gains but in fact has no intention of negotiating in good faith to secure a lasting peace settlement."

My own maybe wishful thinking:

There are reasons for both sides to end the war.

Ukraine is failing more and more and Ukrainian people are suffering the most.

The cost of war is high for Russia as well and Putin's aims are limited.
It exists in a sense that there weren't those leakers decades ago. Everybody was playing spy/patriot mental game. And now there are people who no longer give a damn.

All of that is security circus. And the fact that most comedians can keep straight face throughout their whole performance doesn't make it less so.
setMode(CONSPIRACY_THEORY);

maybe because the NSA had enough compromising stuff (aka kompromat) on some high-enough Intel bigwig(s) to convince them to implement it. As in: "a nice career and family life you got there. Would be a pity if that all went down the drain just because of some stupid scandal, wouldn't it? Besides, by pushing this simple little feature for us, you'll be proving to be a real patriot. You wouldn't want to be a non-patriot now, would you?"
> But I do not feel this way about this case. Why? Because the leak did not expose government malfeasance, and therefore wasn't in the interest of the American people. Ordinary anti-espionage rules can and should apply.

It does confirm that Ukraine is losing the war badly, I think it was like 7 Ukrainians dying for 1 Russian. With that knowledge, it seems that continuing to fund this war with a blank check to Ukraine is not in the interests of the American people.

So I feel that this leak was a good thing, from the perspective of the American people, especially if it ends the US funding of this war.
Crypto is incentivizing a lot of new malware. We're getting to see how MacOS fares when faced with real targeted attacks. I feel that in the end, everyone will have to copy the Windows security model, which has had to deal with these attacks for decades.
This is cool! There is also Orca: https://100r.co/site/orca.html
It's easy to hide backdoors in open source applications.

It's easy to detect backdoors in closed source applications.

People should definitely be using open source for as much as possible, because I want to live in a world that makes it as easy as possible for beginners to understand how their underlying software systems are working. The whole "backdoor" FUD just seems lazy though.
>MacOS (¿still?) has system preferences that allow users to disable such checks, though, granting full file access to certain apps, for example, and also will ask users to grant apps the right to read entire file systems when they try to do so.

Yes you can still disable a lot of this stuff. But I wonder if this is a case where a hardware aspect could let Apple make that less necessary without degrading UI. In principle, with cryptographic signing for input peripherals keyboard/trackpad/mouse/etc, secure processing element routing through it, and the right low level protected kernel support and signed stack, it would be possible to have the OS be able to distinguish between "operator initiated" and "automated" access at a fairly granular level. It'd even be possible to pass that on from one Apple system (or others if it was a standard) to remote ones via SSH or the like. That in turn could enable the system to have different UX between the two classes. For example like a some other HNers I assume I currently grant Terminal full disk access right out of the box as one of my first setup steps just because it's a real irritation to not be able to navigate around and use it from the CLI as I expect without GUI stuff popping up. But instead a system could transparently make it so that when I typed in commands into the shell they'd actually be treated with different permissions than if an automated shell script did the exact same commands, and this could be the case everywhere with a high degree of security. Much more intelligent granting of capabilities would make the UX a lot less irksome and could help push a request for human attention and decision making from the default to the unusual, and that in turn would encourage leaving it on.

I think Apple does already do this to some extent actually? Like, in a native widget GUI app, if the user initiates the GUI open/save file finder they're able to navigate to places outside the sandbox? I might be misremembering. But at any rate extending that as a low level hardware backed feature could be an important step in capabilities usability. Security has to have its costs in line with perceived benefits, or users will just end up degrading it (classic "just write the password on a sticky note leave it on the monitor" issue). The human element isn't a bug it's a core requirement, so would really like to see more effort on that side of things as well.
Software Supply Chain Attacks
this is a failure of abstraction. over time, the platform detail handling gets separated into the runtime (for example memory management, now cloud provisioning, my startup is a language that abstracts distributed state). the reason we get ahead of the abstractions is that software is so valuable that we will spend $100M to bring a product to market by force of capital and its worth it because historically the winner takes most, this is just economic imperialism/conquering and barely a level removed from physical violence. it is sad actually how self interested we all are, imagine the world if we could figure out how to cooperate!
Read through the code golf website and hexagony comes up pretty frequently. I'm with you, it looks cool to see what others do, but I cant imagine jumping in and trying to make one myself.

First one I found: https://codegolf.stackexchange.com/questions/57617/is-this-n...
Ignoring the upsides of open source, I think openness doesn't make AI safety worse, look at ChaosGPT.
This sounds like a great direction for an advanced seminar in university.
The source article says:

> "Because of dependency on architecture and system changes to any current version of macOS (for example, macOS 13)," the document reads, "not all known security issues are addressed in previous versions (for example, macOS 12)."

> In other words, while Apple will provide security-related updates for older versions of its operating systems, only the most recent upgrades will receive updates for every security problem Apple knows about.

Which doesn't contradict what you're saying.

Admittedly, the parent phrased it poorly, saying "but it means you don't get security updates" when they really meant "but it means you don't get security updates for all problems".
Task Assisted by AI
These are just normal aluminium electrolytics. Usually these had outer plastic sheath (which makes the package look uninteresting), but they did not have to (AFAIK there were three separate ordering codes for sheath, no sheath and random, with there price slightly decreasing in this order).
So I need to double click an unsigned DMG downloaded most likely from an unreputable source, bypass any security warnings, and then I'm vulnerable.

I wonder how many people got infected in the wild. Also, it's any moment that Telegram removes the channel that is used for C&C, making the malware virtually ineffective.
OpenAssistant Chat LLM Released
So retroviruses literally integrated into our biological processes and became physiological? That's seriously awesome.

https://en.wikipedia.org/wiki/Retrotransposon

> An endogenous retrovirus is a retrovirus without virus pathogenic effects that has been integrated into the host genome by inserting their inheritable genetic information into cells that can be passed onto the next generation like a retrotransposon.

> When the retroviral DNA is integrated into the host genome they evolve into endogenous retroviruses that influence eukaryotic genomes.
1. They have zero understanding of business, they have zero understanding of how hard it is to run a successful business.

2. They have minimal people management experience, which means they never understood how hard it is to recruit top talent, retain them, all while molding them into something much better.

3. They also have zero sales experience and talent. As if trying to convince people to buy could be automated by their software ( Google ).

4. They have little understanding of Marketing. How to market their product to the outside world.

5. They have no understanding of how PR works.

6. They have little understanding of "real world". Zero interest rate, easy access of money, and bull market for the past 15 years meant most never been through a recession.

HN used to be full of entrepreneur, after all it is a forum for startup. And its pro-business stand is why on Wiki it is still listed as alt-right. And yet somehow all of that were gone.
I mean it's likely that a process running as a user who is logged in interactively and fully authenticated and recently 2FA's could do something but that thing isn't going to be very spectacular. What would it do? Try to sneak a malicious change into another changelist? I am not saying this is completely useless but it would only be step 1 of many that are unlikely to all succeed and would need to be laser-targeted to the right engineer with the necessary code ownership.
I for one will be disappointed if this does not result in humans flinging shit.
Hard to do with one time use cards that don't link back to a real name or address.
I'm curious, isn't something like a HUD a perfect thing to render in a DOM overlay?

It shouldn't matter that much if it takes a few frames to layout and/or update your ammo count or whatever.
No, unfortunately. When they swap out, they end up on disk. Sector remapping can then keep them there, even if swap space is reused.

I think there is an API in windows to mark a small part of memory as unswappable, but it can't be very big.
This may not be photography and it’s certainly controversial given the context, but it’s still interesting, meaningful and “good” art produced by an artist… using AI.
If you have evidence that implicates Biden, I’m sure we would all love to hear it.
I mean, the Internet is decentralised and we still have Google and friends. It might be harder to implement than Twitter, but it's surely not "not feasible".
Olive oil absolutely degrades in light. Even in dark bottles. Really high quality olive oil is sold in opaque ceramic containers.
Setting a $500 entry fee would quickly shrink the global pool to about the size of a dedicated server. Not that local server wouldn't still be an option as well if someone (or a group) wanted to run it.

For people that just walk into the game though, I wouldn't mind paying to instantly have a well-curated global community without having to vet each server trying to find the good ones. Again though, for kids with more time I think there is room for both.
Really impressive to see such a large effort come together, with volunteers contributing code and data to make it work. Well done to all involved!
In their evaluation people preferred their model over GPT3.5 turbo about half the time. But since the data is open, as better base models become available others can train them with this data to improve even further.
The fact that I know exactly what that's supposed to do, yet I find it completely unintelligible, is the best worst thing!
Importing 25M Books into Bookends
The speed you can input data into a smartphone just isn't conducive to creating anything. It isn't a grand conspiracy. On my computer I've never created something with the same screen size as the intended viewer.
The sheer number of autonomous jurisdictions in the US is a Bad Thing. It's ended up as meth labs of democracy.
Time Zone and Currency Database in JDK
Unironically my first thought was sildenafil. The little blue pill works by increasing nitric oxide production and was originally designed for vascular heart issues iirc
Somehow the entire Web was indexed without people going through their Web pages and "hashtagging" them. Hashtags are right up there with XML namespaces in the pantheon of ignorance.
Many people, most of whom I assume have never been to Asia, made up this narrative that people in Japan, for example, routinely wore masks day-to-day pre-pandemic. That simply isn't true and I could show you any number of photographs. Yes, it wasn't unheard of when people were sick but the idea that the average Japanese commuter was wearing a mask in 2019 is simply untrue.
Why is this so strangely relaxing? What an amazing idea.
I've entered photography contests before, and the ones I entered requested the raw file from the camera as well as your final .jpg/.png as a way of proving it was you at that took the image.