skysight-inc/HackerNews huggingface dataset:
Bitlocker saves the recovery key to the cloud, not the unlock PIN. Both can be used to recover access to the data, but the recovery key is not directly related to the password chosen.

Furthermore, the article talks about LUKS, which is decidedly not related to Bitlocker.

I doubt they would've spent the ridiculous amount of money you need to crack LUKS though. Most likely, the password was a phrase that could be brute forced through a dictionary attack, or it was reused somewhere else.

That's not to say we shouldn't move to Argon2i as GPU performance increases over time. Argon is proven to be stronger and there's very little reason not to upgrade if you can get your bootloader to unlock the modern LUKS standard (i.e. not GRUB).
Looks like something I'd like to crunch with Clojure.
What you're saying is: rolling blackouts are totally fine because no one will die if they sit in the dark for a few hours.

BTW, turning a lot stuff off and then turning it back on strains the grid immensely.
Specialization is productive and efficient, diversity is creative and resilient.

I tend to see people wanting to optimize for one or the other, and that they they even manage to tie it to politics and morality.
I am in Japan. I am using some app called Ubigi.

When I landed I made a one off 400 yen payment, like tree fiffdy or something, and immediately had data working right at the airport for the rest of the month. Apple Pay, one off, no contracts, no queues, no diligent service people. It saved probably 1 hour of my life! And it is somehow significantly cheaper (depends on the country, ymmv).

Frankly I pity people who get off a long flight and wait in line to get an overpriced piece of plastic to stick in their phones like it is 1823.
The article is a subtle strawman. The problem is not entirely the race swap itself. Netflix and Hollywood have been race swapping characters in ONE direction only with the excuse of representation and "modern audiences". There is no way this casting would happen in the opposite direction by casting a lighter skin actress to play a dark skin woman. The bias is intentional and they have admitted as much in previous works, so to say this is somehow a creative decision is disingenuous. Obviously this is an ideological decision

> If the projection of Cleopatra as black is rooted in myth and wish fulfilment, that of her as “white” equally taps into racial fables

Isn't the series is called "Black Queens"? Completely invalidating the whole article.

As a side note, I don't understand how mainstream entertainment cannot create new stories or find historical events that are about unrepresented minorities. Their creativity is seriously lacking.
If I wanted to get at an encrypted hard drive, I'd just tamper with the keyboard and record the password as it was being typed. Hardware keyloggers can be made very tiny with resources and determination.
man, nailed that
Some of the lecturers at my local community college have regular jobs and do a course or two a year on the side. It's not their full-time job.
Yes, definitely. And while we're at it also force them to support eSIM smartwatch profiles. In Slovakia 0 carriers support them, not even Telekom, which supports them in 4/5 neighboring countries..
What an advertorial.
Echos of Steve Ballmer who alienated many whiffed on cloud and mobile (!).

Google has killed their search with advertising and promotion to the point where results are useless.

Product management has been terrible for the things I use over a 10+ year period.

Based on recent employee accounts of the culture and mindset there it's a mess.

I don't know who this guy is, maybe he's just been a caretaker of a place that was already on this path but he doesn't seem to have done anything to improve it. And he's getting paid over $200M? No wonder working people get angry.
An interface to scroll full-length articles or quickly skip to the next one, coupled with the TikTok algorithm to select pages that maximize the amount of time spent reading would be a fun time waster.
What was called Shadow RAM on the BBC Micro was a bit different to what's described here - it was a technique to have display memory to be paged outside the normal memory map to allow more space for programs.

I think what you're describing might actually be what the Acorn 8-bit world called "sideways ROM/RAM" - the 16K between 0x8000 and 0xbfff was paged and different ROMs (or RAM, if you had the right add-on hardware) could be selected to select different pieces of utility/system software (eg filing systems and BASIC).

However, at least one peripheral I'm aware of for the BBC Micro did do the "copy ROM code to RAM then page out the ROM" trick this is talking about. The 6502 second processor had a small ROM containing startup and basic OS code. The hardware passes writes through to the RAM either way but there's a latch which initially puts reads through to ROM. The first thing that ROM does on reset is copy itself into RAM - you can see the original source code which was recently discovered in GitHub[0]. I'm not quite sure why it did this though.

0. https://github.com/stardot/Acorn6502TubeROM/blob/master/src/...
I like how you say that as though I hadn't already considered that point. Would it be too much to ask to perhaps give me the benefit of the doubt that I'm already aware of all of the major arguments for why Apple should allow sideloading?

Yes it's your device, but it's not your software. You don't own the software. And it's the software which is stopping you from doing what you want.

Really though I'm just saying that I resent arguments that fail to provide anything resembling a modicum of consistency around this. As far as I'm concerned, as long as Sony is allowed to keep the PlayStation locked down, Apple should have equal right to keep the iPhone locked down. And if you, the consumer, doesn't like it, don't buy a PlayStation. I realise this comes across as a trite, throwaway thing to say, but I absolutely mean it. It is, in my opinion, a slam dunk argument.
I see this take a lot and I think it's quite wrong, not fully, but at least missing a couple big points.

I think they already don't blindly feed it just all the garbage raw data they can find, but prefer high quality, well-prepared sources.

And aside from spam, we're not just blindly posting AI content either. We're putting in meaningful prompts, rejecting answers we don't like, and editing answers we do.
>> That is not the worst that can happen. Nor is non-termination the worst. The worst is if an unexpected failure or success happens that looks like a legitimate answer. However, for many, non-termination is seen as being worse than such real errors. The reason is that there are only very few Prolog systems that reliably catch resource errors or have reliable timeouts. Well, to be true, there is one system. And the others most often abort.

Yes, those "right for the wrong reasons" results are a bad problem, too.

Which system are you referring to? I mainly use SWI-Prolog and in my experience it does exit with error when the stack size limit is exceeded, and it will even give you a message about possible unbounded recursion. Although on my Windows machine it then often crashes immediately after because it's left with no memory to recover from the error. I normally don't try-catch such errors because they're most of the time a sign of programming error (a well-written program should go into an infinite recursion without blowing the stack).

I've had more mixed experience with SWI-Prolog's resource-limited call/1 variants, like call_with_time_limit/2 and call_with_depth_limit/3 and call_with_inference_limit/3. The first one seems to work OK. The other two are a bit hit-and-miss, although there's warnings about that in the documentation if I remember correctly.

>> Or take your run_length_encoding/2/3, where the second argument is steadfast. You (presumably on purpose) accumulated in the second argument all the elements only to reverse them finally in a highly lispeling manner. At least no destructive nreverse.

Oh, is that lisp-y style? I had no idea. I use it because it makes tracing the program easier. There's a bit of overhead, but I feel it's made up for in spades by the ability to debug errors. If you put an accumulator variable in the head of the goal, it is only bound when the recursion terminates and the stack "unrolls", so you don't get to see the bindings of the accumulator and it's harder to verify the logic of the program. I normally trace with the "unify" port non-leashed but I don't think that changes anything.

>> A good example of a steadfast argument is the second argument of append/3. You can replace any goal append(Xs, Ys, Zs) by append(Xs, CYs, Zs), CYs = Ys without observable effect (except efficiency, resource consumption and the like). But even non-termination is preserved! Another one is the 3rd argument of phrase/3.

Thanks, this is a clear explanation. To be honest, I don't stay up-to-date with discussions about Prolog programming, as I did in the past. Even in the discussions that I've followed there's a lot that turns around principles that don't mean anything to me (as I said in another comment, I really can't be bothered about declarative, vs non-declarative programming, for example) and so I'm a bit suspicious of jargon that seems to be pointing to such principles. Maybe steadfastness is a more practical consideration. I'll have to think about it.
The claim is nonsense. If it was true Android devices would be full of malware, that is clearly not the case.
Every jailbreak ever has been on the magical secure "app store", too. It is really weird that people on here of all places believe in this garbage performative "app phrenology" they are doing over there.
I feel AGI is inevitable, but not without leaps in quantum computing.
TabNine is great and it trains on YOUR codebase.
> The rise of AI at work is also a contributing factor

Huh?

Hope someone will finally put vox out of their misery.
You remembered it well. Nasqueron Dwellers in The Algebraist
No, you don’t have ownership of the license. You can’t sell it, so you don’t own it.
Tech “workers” can do pretty much anything while journalists can barely write clickbait titles and high school level essays, at best.
> Just because you don't have the issue doesn't mean it's non-existent.

Indeed! Knowing this is why I asked! Having only worked on small projects I've never had an issue with flake8 as a precommit hook, but what you describe makes it sound compelling.
I don't think that the hallucinations have anything to do with the architecture, rather they come from optimizing a cost function where saying "I don't know" is as bad as being wrong. I do not think that RLHF as currently understood can fix this, since the reward model would struggle to distinguish fact from fiction.
Most users don't know WTF a PWA is, let alone have an opinion of them.
XML ship has sailed, hopefully CUELANG will be widely adopted for a better future.
Spoken to recruiters here in europe and they all said that that’s essentially what’s happening in the us.
At least with AWS/RDS you have to pick the "Postgres" flavor.
Cheers, I'll blame the typo on lack of coffee. Although I'd like to get rid of both colons and semi-colons.
> The Atredis' CVE-2020-27486 advisory explains that the news opcode allocates the string buffer based on the length specified in the string definition, and then proceeds to call strcpy to copy the string bytes. This can lead to memory corruption, since strcpy does not use the specified length and will only stop at the first null byte.

How can seemingly talented developers KEEP MAKING THIS MISTAKE? It is like almost every police officer shooting themselves in the foot with their service gun.
Let's list Vim(ium)-like apps. Not limited to text editor / web browser
> For the purpose of this poll, "AGI" means "AI as good as or better than a smart human at any intellectual task"

I don't understand why this should be the definition of AGI. We know what "artificial" and (maybe) "intelligence" mean; the "general" part should refer to the ability to solve (or at least making reasonable attempts at solving) a wide range of problems, including previously unseen ones, by means of un-specialised capabilities and cross-domain reasoning. By this definition, we have already reached AGI.

Given this, I'd rather talk of human-level AGI and super-human AGI. Anyway, for your definition (HL-AGI) I've picked 2027.
strict subset of JVM, like the old days of mobile phones and SIM cards
Some things that occurred to me while reading OA.

I thought the page covered most things carefully and I suspect the students had a good experience.

In the UK sessionally paid teaching can be just one class a week as an extra thing. There will be the dbs check and if you want to do this as a long term thing you will need to take a basic teaching qualification.

Planning a course:

Write down a series of sentences saying what the student should be able to do after the course. In the UK we call these 'learning outcomes'[1]. For something like the OA's example Introduction to HTML, CSS and Javascript you will end up with quite a few!

Those learning outcomes will help you to devise a series of activities, see below. The outcomes can also help you to devise an assessment if the college requires that. Finally you can write a few sentences explaining what skills students should have to benefit from the course.

Estimating time in class:

Devise some practical activities for your students to complete tied closely to the learning outcomes (does not have to be 1 to 1 mapping). Time yourself working through the activities - line by line. Multiply that by 6 or something like that. OA has worked out that instructions need to be fairly full.

Then add time for the 'whole group' explanations (the bit where you stand up and explain stuff).

IT classes:

Your learning outcomes and activities will help you to list all the facilities you need. As OA found out Colleges can have quite locked down systems. Might be an idea to talk to technical support in the College through your contact there while planning.

[1] http://www.bristol.ac.uk/academic-quality/approve/approvalgu...

Above is just one I found doing a quick search. Seems pretty standard if wordy.
But it's an user choice! Same happens on Android. There is a settings that you have to enable to install applications from other sources.

This is pure nonsense... giving user more choices is never a bad thing.
Just like a PS5.

No, the iPhone and iPad are appliances, not general computing, forcing division between hardware, firmware, and software is a technical design decision that prevents users from choosing a fully vertically integrated appliance device.

People who choose consoles over building PCs, and pick iPhones over tinkerable Android, have a right to that choice, and corporations have a right to market to them.
If the App Store had zero impact on the proliferation of malware, finding malware in the App Store wouldn’t be a news story in 2022. It would be well-known and expected to be teeming with just as much malware as the open Internet for the past fifteen years.
Would you bring a spare phone then? Sounds implausible. If you did, and it’s an emergency you can use a phone without a sim at all with the emergency network.
OK, so let people choose. They'll consistently choose native apps and PWAs will become second class.

It doesn't need Apple to white Knight on behalf of their poor, dim, uninformed users.

Because they're not.
Autoformed, as in self-formed, by cyanobacteria
Because the Play Store lets Facebook have the data they want, this isn't that hard.

https://www.cnbc.com/2022/02/02/facebook-says-apple-ios-priv...
It's 2023 and we're talking about typing words on a tiny mobile keyboard...

What a dystopian place we live in now. The ideas are all so backwards and underwhelming... Typing text in your phone only serves to help data collectors in transcribing the information you share, self snitching in pure form. It's not going anywhere useful or good for the average person.
Tech Billionaires Bet on Fusion as Holy Grail for Business
XML would have been so much more popular if it hadn't had A: namespaces and B: just about the worst imaginable syntax for same.
Genealogy of Vim (2017)
GPU rendering matters a lot. For the experienced developer who does all their programming in a terminal, being able to get crisp instant feed back with each key press is critical for a pleasant experience. Other terminals without this just feel too sluggish.
https://archive.ph/NfskD
That is certainly a hypothesis

Auditory signals don't cross. We should raise a human with eye flipping lenses
I’ve had more than a few queries I’ve been able to reduce from multiple minutes down to multiple seconds. 4 minutes to 15 seconds, for example. In some cases, I’d written the original, and knew it wasn’t great, but didn’t understand the impact enough to realize how bad it would get.

Never seen a 10 hour to 10 seconds, but do not doubt that it might have happened at some point. I did reduce a 25 hour ETL process down to 25 minutes, but it wasn’t solely down to queries.
Flashrom Splits into Two for This Firmware/ROM Flashing Utility
Its hacking not engineering. But what helps is understanding a bit how the attention mech works and how your prompt effects the output. This "prompt engineering" is a vastly different programming paradigm. The notion of time is different, as output is being formed (one token at a time), the attention mechanism can focus more or less on different parts of the original prompt (along with the previous output tokens). This means that your "code", (your original prompt), is essentially getting "revisited" at different spots and different times while the output is getting generated and you are essentially "steering" the output in different directions based on the instructions in the prompt. This is different than how traditional code works which is always sequential and top-down while prompt writing, its better to think and speak like a human with human thoughts than to try to narrow things down to logic and code-like syntax. The LLM isnt going to process your prompt in a top-down one-time manner - its going to keep revisiting it (reweighing different parts of it, emphasising different parts of it) based on the output tokens chosen, and those weights will help determine the next token chosen, etc. Its like a whole new world of hacking, and it can be super frustrating but also amazingly effective.
Ask HN: Why is WebAuthn so slow to take off?
I wonder why I barely see this option on websites altough it seems so perfect to me. Is the WebAuthn protocol complicated to implement or are there any other downsides I might overlook?
I'm not in tech but I'm qualified to adjunct/teach some other subjects and this is it. I'm even a good teacher. But why would I do it when I'm making more and I'm treated better working retail?

My local CC just posted a part-time librarian job I would jump on if it paid more than 21/hr. Fuck that - I could do better as a waitress or bartender. If they want to use my experience and education they can pay for it; God knows they're charging the kids enough.
I was reluctant to write that paragraph, as I didn't want to derail the discussion into a third tangen about comment etiquette and negativity. But yes, I fully agree.
I'm pretty sure "the average person doesn't know what they want" is a belief that powered everything from eugenics to genocide to our toxic culture around health, happiness and consumerism.

So it appears the non-average person doesn't have a clue what's right for the clueless masses either.

Liberty, choice, community and respect. That's all that is needed.
From the wikipedia on the Foreign Service Institute:

FSI provides more than 800 courses—including up to 70 foreign languages—to more than 225,000 enrollees a year from the U.S. Department of State and more than 50 other government agencies and the military service branches.[3]

I think I'm going to take their estimate over yours.

https://en.wikipedia.org/wiki/Foreign_Service_Institute
So I see it in a similar way, like why the fuck does Microsoft and Open AI get to be the soul benefactor of basically the sum total of all human intellectual output ?

It’s absolutely ridiculous on so many levels. These models may claim so many jobs and have a serious negative impact on so many peoples lives, yet basically one company owns the model?

I actually find it funny albeit totally insane.
Readable non-paywalled https://archive.is/PYlvG
See deeper comment below, but yes, a corporation should have a right to market a curated console experience to mobile device consumers who prefer the fully vertically integrated experience.

Especially thanks to other options and the small share Apple has by volume, it's no more appropriate to crack apart this appliance than it is to force PS5 or Xbox Series X to run PC games or support Steam.
Do they need to know what AAC or MP4 is to use Spotify?

The point is the experience, not the name of it.
The biggest advantage of json is its ease-of-use. It is super easy to get started, and once you are start using it to build a quick prototype, you are stuck with it.

And the customers of your api understand it as well, so you likely need to support json even if you may use something else internally.
Yeah, now I need an iphone to talk to my friends
I wonder if this can be used to aid segmenting cursive handwriting.
Pathfinder comes loaded with:
- Visual Operation Builder
- Field Quick Docs
- Operation History & Timings
- Supports GraphQL @live Queries
- Schema Documentation View
- Schema Definition View

As you move between operations in the document pane you will get the most up-to-date state for that operation. So there's no need for the tabs since Pathfinder is aware of the currently selected operation, history and response.
I have been registered for a few years and I used to enjoy the discussions, at least when it came to technical topics.

I think HN has probably always been quite dismissive and contrarian (like that infamous comment about Dropbox), but to me it feels like that type of comments are becoming more frequent and lower effort.

Maybe I am just becoming older and tired of arguing online ^^
31mb/s = 14GB/hr (bits to bytes). 81TB per year, assuming 16 hours awake per day. Fits snuggly on a large SSD ;)
I don’t need to argue about this. Those are my personal preferences and that was not my point.

My whole point was that you are limited to only two platforms. So choosing one doesn’t mean that you accept all of its disadvantages.
For machine to machine interchange formats, removing redundant elements is reasonable, but for formats that are meant to be read (and more critically, edited) by humans it is better to have syntactical redundancy. It makes it easier to scan documents and much, much easier to provide human-friendly parser errors when we inevitably make mistakes. The redundancy works as flagposts that both machines and humans can use to get their bearings even in the face of malformed input.
> Cold water: A wetsuit isn't all that much help

There's something wrong with your wetsuit.
Not Adsense but analytics

I load up all the tracking guff bizdev and marketing want with Google Tag Manager. Tag Manager's code isn't output to the page at all until the user has opted in to 3rd party tracking cookies.

I'd do the same with ads (on an advertising toggle rather than tracking) if I were using them.
I would mostly use the familiar version if someone or an organization explicitly created the situation, like I must go to the post office but it's only open during my work hour, and closed the only day I can take an hour off.
And System D is really débrouille to me
Last BIOS and core chipset for my Type 34xx class X1 Carbon was September 2019, but they are still providing critical updates with eg both power and battery drivers + device diagnostics as recent as 5 days ago. This is through Lenovo Vantage.

Hardware works great still, thanks to my picking the top model then. Only the battery is pretty average, but you'd expect that. I'm going to say this is good support.
Would you be willing to share your Hammerspoon config, or at least that part? Would love to do this with Alacritty!