skysight-inc/HackerNews huggingface dataset:
Stopping phishing-based MITM attacks is one of the main things addressed with FIDO/U2F/Webauthn versus TOTP. Imagine an imposter website that is impersonating the real relying party as part of a phishing attack.

With TOTP, the user is relaying a short-term secret code from their authenticator into the relying party's UI. But there isn't any authentication step to ensure that the user is really interacting with the expected relying party, and there is a time window where this code can be replayed. Once the attacker has this code, they could initiate multiple authentications with the real relying party during that window (approximate 1-2 minutes).

With Webauthn, the relying party origin is used as part of a cryptographic signing step by the authenticator. There is also a per-request salt to prevent replay attacks. The imposter website would not be able to initiate a useful authentication step with the authenticator, since it would not be able to impersonate the real origin to the authenticator protocol. The various push-based authenticator apps have the opportunity to offer similar security, since they can authenticate the relying party challenges, show the user a trustworthy challenge prompt, and ensure that the response is not usable for replay attacks.

A different category of attack might be to compromise the user agent itself. Then real sessions could be hijacked to perform operations not intended by the user. The non-replayable responses can partially mitigate these attacks too. The user can be prompted in real-time to reauthenticate for high-value operations, and may notice spurious prompts when they were not intentionally doing such actions. However, fatigue can set in if the user has too many relying parties registered with an authenticator and/or too many challenges and/or have non-determinism between UI actions and challenges. Then, the user could be confused into approving a challenge for the hidden attack operation happening in the background between their own intended actions.

AFAIK, the only way to fully protect against this would be to include details of high-value operations in the challenge/response signature and have a way to display this detailed context in a trustworthy prompt. I.e. a mobile phone authenticator might be trustworthy even with a compromised desktop browser. But if your mobile browser is compromised, I would suggest you also should not trust the authenticator app on the phone. A dedicated hardware authenticator with a screen could show you challenge context, even if the user-agent is trying to fool you. This would be an improvement over the typical security key that at most blinks an LED and leaves it to the user to guess what is being authenticated.
The Torrent Trove game generated from "Shutting down my legal torrent site after 17 years" is fun!

[ ...at least until it timed out and a refresh restarted from the beginning :-(. ]
Now I wonder if someone else is running Stephen King's twitter account.

What if it's a poltergeist or vengeful native american spirit!?

What if this is just marketing for Stephen King's next thriller where a wealthy businessman buys a social media site and it STARTS TALKING TO HIM!

Businessman: POOP! HAR HAR HAR!

Titter: Now now, businessman, this is the spirit of your mother. Don't be a potty-mouth!

Businessman: MAMMA! WHY DID YOU LEAVE US!

Titter: Oh Businessman, I'm still alive, we ate dinner last week.

Businessman: WHAT, then who am I talking to!?

Titter: I AM THE GHOST OF ALL YOU HAVE WRONGED, RETURNED TO SEEK IRONIC JUSTICE!

Businessman: *GASP*

Titter: Also. I'm trans.
Cars much bigger, heavier, and with worse visibility than necessary, make the roads more dangerous for everyone else—motorists, bicyclists, pedestrians, everyone.

The whole thing's turning into an expensive, dangerous game of prisoner's dilemma. It's best if everyone buys exactly as much car as they need, but anyone who "defects" and buys a bigger, heavier car is safer than everyone else, while making everyone else a little less-safe. Iterate for a few decades and you get the current situation.

However, begging individuals to behave differently isn't going to fix the problem. Certainly not in the US.
How many engines can be of depends heavily on when the go off. Even 10s of flight can make a huge difference.

Generally Merlin engines on the Falcon 9 are incredibly reliable. In over 200 flights there were only a couple of engine failures. Some worked nominally on accent but had some failure during landing.

> How many do they anticipate regularly?

The vast majority flights should never have an engine out. This is something that should generally never happen. I think SpaceX would hope that far less then 1% of flights have an engine out issue. Anything else I don't think they would consider acceptable.

SpaceX will redesign the Raptor engine as often as they have to to get the reliability to Merlin levels.
They have an obsession with anal which is ... a lot. I get that they're pivoting, but the "anal and abortion" magazine probably shouldn't be targeting the underage.
This tech will be used by crooks to automate attacks. Generate the language using GPT-4 and the audio using Bark, and then start making phone calls. Because it’s open source, all you need is GPUs. This is not a criticism. I’m impressed and grateful for the openness. Everyone needs to wake up and recognize that these attacks are coming at us essentially right now.
Someone making $100 per hour would be able to analyze those 200 logs for about 7 minutes for that cost. That's a person you pay over 200k of salary.

I analyze logs at work all the time and I analyze way more than 200 lines and it takes way less than 7 minutes to analyze those 200 lines.

Somehow I don't think it would be more cost effective to have an intern paste those into ChatGPT over and over and blow through a ton of money doing it.
Hopefully the data will work that out. Raptor 1 seemed to have quality control issues in that some percentage of engines would fail, hopefully this isn't also the case for Raptor 2 or at least can be worked out.
Or run ubuntu as lx-zone on illumos.
If someone murders someone but it seems really unlikely, due to the circumstances of that particular murder, that they would murder someone else again, should they simply go free?

I personally don't think so, but that's what a Justice system without any retribution component would prescribe. I think punitive measures are a reasonable. I also think that the prison system in the US is needlessly punitive and often cruel.
The flame from the engine did not spread outside the base. Outside of that, the rocket was over the ocean and in the atmosphere when it exploded, as rockets sometimes do. This was a test launch for research purposes, nothing completely unexpected happened here re: the rocket. The launch pad will need to be refactored. I'm sure they'll have it done within weeks.
The envelop is designed with safety in mind. If it leaves the envelop it has a certified self destruct system on board that will trigger and destroy the rocket.
There is certainly evidence that different foods have different effects on Satiety and hunger separate from their caloric content.
That's true but devirtualization optimizations tend to be pretty brittle and it's very easy to fall of the optimizer's blessed path and end up back to doing to a virtual call without realizing it.

Worse, once the devirtualization optimization has failed, any further optimizations you would get from inlining the call will also fail.

If you're programming in C++, you probably do care about this level of performance, and in that case, it's nice to program in a style that guarantees it instead of hoping for a sufficiently smart compiler.
This is deceptive. Biopolymers or not per definition biodegradable. Just because you make plastics from plants don't make it biodegradable and it's worrying that people have started to think this – maybe from deceptive marketing. Biostatistics are also nothing new,the first plastics was not even made from petroleum.
It’s not really possible to measure this over the long run. Short and medium term studies show that mass incarceration dramatically reduced crime in the US, mostly by literally removing violent young men from society, but that’s not the main reason why I support strong punishment. The moral decay of a society can take a hundred years to set in, but once the consequences become apparent, it can be too late to do anything about it. There is a lot of wisdom encoded in the ways of the past. Retribution for crimes is a universal institution for a reason.
They were but it was done through trying to push their own crypto on everyone.

Realistically for adoption there just needed to be a micropayment using existing currencies.
> Can you detail how much SpaceX received in grants and subsidies? I think you'll find it's negligible. The onus is on you to provide that data if you are making the claim.

You're making a claim as well so the onus is on you just as much as me. And you can likely use Google as well as I can. Just search. It isn't hard to find. I'm not going to sit here and copy and paste links and articles all day that you can just as easily find. This is a forum, not a dissertation defense or an investigative journalism piece. Plenty has been written about this in news articles, SEC filings, and lawsuits.

> And let's not bring Tesla into this to confuse the issue.

It's not confusing the issue. It is part of the issue and was in my original comment. To be clear, the issue is that a CEO, who claims to be a supporter of free speech, of two companies, specifically SpaceX and Tesla, that have received billions in government support has intentionally, adversarially, and antagonistically mislabaled NPR as "U.S. state-affiliated media" because he is abusing Twitter to run his own fringe political agendas. The reason stated for the ban, which is not the actual reason, is barely even true, and is misleading, is that NPR is government funded.
What about getting/receiving payment in crypto?
Another one I see is pushbacks. This one is less clear to me. You can treat it as uncountable like feedback, but you can also say there was a pushback, which maybe makes pushbacks okay? Although no one says it, pushes back seems to me a reasonable option as well.
> that allowance

Right to property: https://en.wikipedia.org/wiki/Right_to_property
> Why is it so hard to empathize with the victims yet so easy for them to empathize with the murderers?

Because it's not a zero-sum game. You can feel bad for both.
Recent and related:

Defining interfaces in C++ with ‘concepts’ (C++20) - https://news.ycombinator.com/item?id=35624899 - April 2023 (73 comments)
Hmm I'm going to have another look. Maybe it's not supported in the onboarding flow but you can add one later? Thanks for the links!

I know our admin well enough to know that he wouldn't have switched it off deliberately - he would be in the same boat as me.
One important point that the article doesn't touch on is determinism. rsqrtps is implemented differently on different CPUs, and so if having reproducible floating point results is a requirement (there's a lot of use-cases for this), you simply cannot use it. Your only remaining option is to use a totally IEEE-754 compliant algorithm that is guaranteed to work the same on every CPU that implements IEEE-754 floats, and for that there's still no better approach than using the Q_rsqrt idea, of course with some modifications for the "modern age".
Agree to disagree. I think the cons outweigh the pros. Adele benefits from being an established presence in music. New singers need to be better than the musical clone army in addition to other singers to build a fan base. This just exacerbates existing problems with market saturation. For in person concerts we’ve seen what can be done with the Gorillaz and Tupac. It won’t happen overnight but I can foresee an industry of manufactured idols in the future.
Also Australian, can confirm although TV/monitor screen sizes are also usually expressed in inches.

We also haven't made the switch to metric time yet ;)
We’re still a long, long, long way from AGI.

Releases like this are more about stock price and investment than anything else.

I’m glad we’ve put more investment into this area as ultimately AGI will be able to uplift a large sector of the population that historically went underserved, or at least level the playing field.

But statements like this are meaningless wank.
Not one of those people... honestly, having trouble remembering his name now, but I would recognize it if I saw it. And, I know Dave Patterson wasn't my roommate. :) His office was just down the hall, though, when I was at UCB.

EDIT: I think it was Karl (Carl?) something.
hey this is total side tangent but what software do you use to develop your 3D art?
People won't invest in a broken system. If you're worried about AI alignment, what you're actually concerned with is accountability. You want to discourage people from building bad systems - so do it. Make people liable for implementing AI in situations where it can cost human lives. Vague premonitions of "alignment" don't really bolster an otherwise baseless argument. You'd be better off appealing to my fear of humans than my fear of machines.

When someone gets run over by a steamroller, we don't call it a 'steamroller alignment issue'. It is a matter of human liability, either conscious or subconscious. Wielding superhuman power is not new, nor is dealing with it's liabilities.
Actual title: "So what was that? Was Starship’s launch a failure or a success?"
Because biasing in favor of false negatives over false positives is a fundamental tenet of our system of justice?
Google tried this already, where you could pay $0.02 or something to not see ads on websites. Instead, they would show cat pictures.

https://en.wikipedia.org/wiki/Google_Contributor

IIRC the problem was is that their network wasn't universal. While it works on some ads on some websites, there were still non-Google ads that it didn't work on.
Surely considering what the Saturn V launchpad used - a rather huge hole in the ground lined with concrete and an insane amount of water being released to dampen sound and damage ???.
Another kind of lawful slaying belongs to the civil authorities, to whom is entrusted power of life and death, by the legal and judicious exercise of which they punish the guilty and protect the innocent. The just use of this power, far from involving the crime of murder, is an act of paramount obedience to this Commandment which prohibits murder. The end of the Commandment is the preservation and security of human life. Now the punishments inflicted by the civil authority, which is the legitimate avenger of crime, naturally tend to this end, since they give security to life by repressing outrage and violence. Hence these words of David: "In the morning I put to death all the wicked of the land, that I might cut off all the workers of iniquity from the city of the Lord." (Ps 101:8)

– Catechism of the Council of Trent, Part III, 5, n. 4 (1566)

– http://j.mp/CatechismTrentDeathPenalty

Even when it is a question of the execution of a condemned man, the State does not dispose of the individual's right to life. In this case it is reserved to the public power to deprive the condemned person of the enjoyment of life in expiation of his crime when, by his crime, he has already disposed himself of his right to live.

– Pius XII, Address to the First International Congress of Histopathology of the Nervous System (14 Sep 1952)
There is something very perverse about producing plastics from food, I would even venture to say immoral. How about just removing plastics where possible, not replace them with different plastics.
Markdown is becoming a very nice platform. With Livebook, Mermaid, MathJax and all the other great tools.
On the last bit... I don't believe they deliberately created and released it, I do believe it was likely a lab leak, and likely negligence. There were a few similar protocol breaches with sensitive materials the prior two years. I also do think that any knowledge to be had was covered up for political reasons. Deny and cover-up, it's what major governments do.

I do think that through malice or neglegence, that tiktok's algorithm is harmful to children.
You are usual then.
Yes, they have a water deluge system, but that might not be enough, and they also need a flame diverter.
Here's a web app I found recently that should work way better for you.
Idk what model it uses (its also free, it feels like chatgpt3.5, so I guess they are funding it out of pocket?)

https://goblin.tools/
Funny, I was chatting with some Rural Americans while on vacation in the Bahamas, and they all were super impressed with the Kei pickups they saw while there. I didn't know you could legally register 25+ year old ones...
The liftoff video at https://twitter.com/SpaceX/status/1649097087248891904 shows some clear debris hitting the ocean.
I've seen what Mahindras can do in Nepal. These things are amazing.
Thanks for replying! I work on Rails applications so "forum software" sounded like something in my wheelhouse, hence the question. Admittedly, my mind went to a similar setup as Discourse so this helps me understand what a host might dislike about their software. I've used many phpBB forums in the past and I often find myself wondering why that UI seems to have fallen out of fashion so it interests me to consider building something myself.

It's not likely you'll see anything from me anytime soon (maybe eventually but that's a fuckton of work and I have a day job) but I have ideas of leveraging server-side rendering per the "don't make js required" comment and progressive enhancement in general. If I do build something like this my target browser would likely be Lynx[0]. Just consider it a pipe dream until you see my "Show HN" post.

[0] https://en.wikipedia.org/wiki/Lynx_(web_browser)
The trick: Don't use Debian Stable, use Testing. Despite it's name compared to "stable", Testing is pretty stable in my experience.

- Chrome Stable - 112.0.5615.137

- Debian Bullseye (stable) - 108.0.5359.94

- Debian Bookworm (testing) - 112.0.5615.49

Most people I know who run Debian for personal desktops uses Testing, not Stable. Vice-versa for servers.
> If we kill them, that is even better.

I take issue with killing them because it requires an infallible system that never kills anyone that doesn't deserve it and my conscious rests easier not killing someone that doesn't deserve to die than it does to kill someone that obviously does.
Babylon is amazing, the documentation and backwards compatibility is quite something. Just finished a project with it, while the learning curve is steep, it doesn't blindside you.
JEP 449: Deprecate the Windows 32-bit x86 Port for Removal
Yeah. But no. I naturally seem to eat once a day and am thoroughly overweight.
Ask HN: OSS licence like Apache2, but No for AI training data?
Is there an OSS licence, similar to Apache2, but that restricts the ability for the code to be used in AI training data

I maintain a few small Apache 2 libraries, I'm not sure how I feel about my code being used for AI training data.

Would such a licence even makes sense? If not, what's the most permissive licence you could have that still restricts use of the code in AI training data?

And what might be some unintended consequences of restricting the ability for your code to be used in that way (assuming that's legally possible - and I do appreciate that it's probably practically impossible)
A lot of the popular models have full-size back seats. They've got more room back there, and are easier to get at (to, say, strap a kid into a car seat, or to add/remove a car seat) than many sedans.
Google Brain is known for their LLMs
- Furthermore, Peretti told the remaining staff that he would be focusing more of the company’s energy going forward on AI -

Here we go. AI generated content.
At this moment it's not there yet. Going forward on AI is as dumb as removing (nude)images on imgur.
I think SpaceX rockets don't have a traditional range safety officer anymore. That function was replaced by software. I suspect the software has certain conditions that will cause destruction.

But it might also have been manual intervention.
The same people who cried about this are usually the ones who tell you to “learn to code,” “just move,” and to “pull yourself up by your bootstraps.” I have a hard time having sympathy for people who are misinformed and make sad choices as a result.
related to this - to those releasing models, it would be great if you could share how much VRAM is required (seems very common for this key piece of info to be missing).
Doesn't seem to work on my phone - it won't scroll at all.

iPhone SE 2016 - iOS 15.7.3
And no 4wd option on the hybrid.
Reminds me of the flash memory cells SSD's are made of - overprovision them because some are going to become/or is bum anyways.
By posting that article, you did post old news. The solution was not to rewrite the title, but to post an article that contained the significant new information.

I realize that local TV news affiliate websites aren't always appetizing sources, but it's more important to have up-to-date information.
Same. I had sucess with https://github.com/SeleniumHQ/docker-selenium
Amazon launches program to identify and track counterfeiters
Stanford did too (the van kind) to squeeze between bollards. They were able to avoid CAFE and CARB standards because they're their own municipality, and technically they're not licensed for public street use.
AI is not a winner takes all scenario. The pond is so large that there will be many winners.

One day, with AGI and autonomous agents, the goal will be to merge neural network meshes together in order to gather highly specialized datasets.
There was a time where people questioned if 33 of them packed in like this would work at all. Pretty impressive that it does and survives multiple engine failures.
I see these all over the place in asiapac, especially at resorts for staff and maintenance to get around on smaller pathways in lieu of golf carts or runabouts. It makes a lot of sense when you consider that they are easy to move around on a small boat/ferry and can be used on the roads. These places also have a much high percentage of motorbikes, scooters and ATVs and the same garages/shops that service those can service these smaller engines with readily accessible parts.

The fact they can't really be driven on interstates/highways is the only thing that would make it difficult to sell them here as new vehicles.

Given how well the ford maverick is selling, and the successful introduction of the hyundai santacruz (and soon-to-be-introduced chevy montana) I think it's safe to bet there would have been a decent market for new vehicles in this segment if the manufacturers could get them highway-compatible.
I know I'm being nitpicky, but Falcon 9 completed 223 missions since 2010 with 221 being total success, and 60 missions completed in 2022 alone. So way more than "dozens".
This is not true.

Source: my workplace has it enabled for business accounts.
As someone else living in the PNW, I’ve read that people in Oregon permits kei trucks, but won’t allow them to be registered and to work around this, people will register them in Washington and then bring them down.
Once they realized they needed a flame diverter, I think they traded off the cost and delay of putting one in vs the cost of just filling the hole each time.

It's totally feasible for them to keep testing and keep refilling that hole while in parallel they build a perfect launch pad with a flame diverter somewhere else. That way they don't have a gap in testing cadence.
Brain and DM have proven that they are good enough to keep alive for the next 20 years - like Bell labs, PARC, Kodak or similar

But make no mistake, just like Bell labs Google will shut down or divest this over the long term.
What is it about these very short articles that HN loves?

(Short, subjective but presented objectively).

Or is it just loved by those who agree with the premise in this case Perl die hard?