skysight-inc/HackerNews huggingface dataset:
Some people forget that Google is not a public service and will do what profits them and their supporters. Youtube has recently been taking down videos of interviews with RFK Jr with the excuse of covid misinformation. Kim Iverson got a strike to her account just for airing an interview with the biggest contender to Biden.
I'd disagree in the case of well engineered iDrive / MMI style controllers. I can operate a lot of the iDrive without looking, and certain controls (radio presets etc) show on the high mounted screen which button you're hovering over so you dont need to look at the button itself.
I don't think 1 and 2 are the only possible options. The thing is that thus far there hasn't been much incentive to develop technology that can verify people's age or other aspects of their identity in a privacy-friendly way, because the internet hasn't really needed it before.

We should start by thinking about what we want to do: do we want to age-gate pornography? If so, why? If not, why not? And if we don't age-gate online pornography at all does that also mean a 10-year old can just walk in to a sex shop, live sex show, or BDSM club? Once we figured out some answers to that (and more) we can start thinking about the how of it all, keeping in mind that things like "access to online adult content is forever publicly associated with your personal information" would be undesirable.

I don't think "well, it's kinda hard so [throw up and hands and give up]" is really a good way forward. I don't have complete answers for all of this either, but I feel a number of people here are far too dismissive about this. At this point we – the broader "hacker/IT community" – can either be part of the conversation or sideline ourselves by dismissing it all.
do you have a website? you make your own products?
Useful for what? Peace of mind? Or as a comparison, where you calculate the micromorts for taking a vaccine, or social distancing, etc?
Fuck this guy, we finally have a super popular web service that runs off of a pay for value model instead of ads and this guy goes and shits in the punch bowl.
Grades often determine placement for classes in HS. If you want to be in advanced math or honors English, you need good grades in middle school.
Use rclone.
> Bitlocker's TPM- only protector - can be defeated by an attacker with 2-3 hours of physical access to the target device

That sounds pretty practical.
I like a theory I don't hear much talked about. They just don't want to interfere. We don't interfere with un-contacted people for the most part.

Could be that ethics and philosophy ends up dictating that you stay out of it. There's speculation that they've sent probes.

Could be they have little to gain from contact, and prefer to leave us to our own devices. After all, it is the right thing to do.
OpenAI upset that someone is leveraging APIs and content freely available on the web? Let me play for you the worlds smallest violin.
This sounds to me pretty close to a treasury money market fund, doesn't it? Money market funds are not insured for some nominal amount, but among the most common in practice have significant repurchase agreements with The Fed and hold short-dated treasury debt, but this plus your brokerage it's pretty close to the narrow bank idea.

I suppose the Fed could try to make the circle slightly rounder here, but they may look at the hundreds of billions of dollars in such funds, which are by nature extremely "narrow" quasi-banking devices (because they only support a tiny form of maturity transformation, in asset type and term length), and decide "good enough, economic needs of this kind met"
IBM AS/400: Databases all the way down (2019) [video]
Training people sucks because people have no loyalty. I've trained up a bunch of people, six months later they quit to move somewhere else, unless they suck then they likely stick around.
This whole new dx based industry is because sub par JavaScript developers who write bloated electron apps have flooded the market. Nobody wants to come out and say this but that's the truth. Measuring costs are not part of their mindset when it comes to either memory usage or billing. So they can be charged overpriced rates as long as there is a big button which says deploy.
Last time I checked there was a ticket CircleCI on their support asking to be able to built the result of a PR and not just the HEAD of the branch.

That ticket was still open after 7 years.

Even TeamCity had that functionality.

That's when they lost my $.
I suspect any academic study proposing to show pornography to minors is going to get shut down pretty quickly.

In my own anecdotal experience I’d say it definitely can be dangerous and depends on a variety of factors, a key one IMO being what kind of pornography we’re even talking about.

In my youth we discovered a friends dad nudie mag stash. Lots of glamour photography of topless women, some full nudity too but always pretty tame all things considered. I don’t think it had a negative effect on me. But the kind of porn available (and popular) on the internet is not that. From talking to a friends much younger brother I know they all have access to it and it’s led to some weird perceptions about what sex is, should be, etc. It’s rough, it’s often degrading, it’s almost exclusively focused on male satisfaction. It’s much more about one person’s power over another then snore any kind of intimacy.

The solution to all of this is, as always, parental and school sex education to ensure kids are learning the right things. But as a society we’re kind of terrified of that.
To answer my own question: apparently not, as it is DC only.
In the top 15 for 2022 I see Amazon, Google, Microsoft, Facebook/Meta, AWS, Apple, Intel, Walmart, JP Morgan Chase.
We have developed a marketplace platform to speed up clinical trial startup timelines - by streamlining site selection.

We are looking for a few first academic groups / biotech companies / pharma / CROs to try out our platform and test its benefit to running trials.

Let me know if interested.
Indeed it does, and this is just done by a team of researchers. Imagine what the NSA and their goons could get up to with 1000x more resources.
I got a lot of pushback on a comment that I left regarding surveillance in another thread yesterday, but I feel especially vindicated by this so I'll repost it here:

---

The main problem I see is that people are completely distracted by privacy from corporations - when what we really need to be worried about is privacy from our own governments.
So much ink is spilled talking about cookies, ads tracking, etc. But really what's the worst a corporation is going to do? Try to sell you something?

Meanwhile, we continue to allow our governments to regulate and legislate ever more intrusive invasions of our privacy. And they can put us in jail, or worse.

This also gets blurry as governments take increasing control of companies, to the point that some are just about arms of the government, surveilling us in ways that the government can't (yet) do on their own - and being forced to pass that data to the government under penalty of law themselves.

---

A lot of the pushback I got is that corporations can do bad things with your data, which of course is true. We should strive for privacy in the general sense, from corporations and our government. I just think, especially outside HN, that the the conversation is far too heavily weighted toward corporations when the far greater harm comes from our governments - and almost no time in general public media is given to this.

I got some pushback as well that if corporations surveil you, they give your data to the government anyway, so it's important to have privacy from corporations. Which is ironic, since that's much like what I said in my last paragraph.

We need privacy generally, but I see law after law and article after article talking about privacy from corporations, while our governments are gaining more and more ground into surveilling us - often with the help of corporations. But let's keep the focus on exactly how our governments are spying on us and try to address that.

Ad-targeting is a small problem compared to the bigger issue of government surveillance - often via corporations (even if I agree that corporate spying is also a problem).

Let's focus on some laws that take away the governments ability to demand our data from Google, FB, etc. Let's stop allowing our governments to put cameras all over the place. Let's demand that our intelligence agencies stop spying on us with wide nets. Let's stop allowing our police forces to buy sophisticated tracking software and phone break-in software.
I write everyday with a Waterman Expert. They're a little expensive (usually less than EUR100) but nothing compared to Montblanc, and very pleasant and resilient.

At some point I designed a blotter holder made of a plaque of stainless steel and a sheet of plexiglass, and hand-made blotter paper. I thought it was quite elegant [0] but I couldn't sell more than a couple of them, and now the inventory lingers in my garage ;-(

[0] The page still exists on https://drop.com/buy/medusis-rocker-blotter, although you can't order them from there anymore.
I'm currently looking at alternatives for self-hosting. Do you prefer gogs to gitea? why, if so?
I used to work for a non-profit whose founder's goal was to receive enough in donations/grants to become self-sustaining (for overhead - rent, utilities, office supplies, advertising, etc)

At the time (~20y ago), his aim was 2pi million $$

At an annual draw rate of 5%, it'd provide >$300k year in overhead funding - so that only staff / additional special project funding would need to come from new grants
Yes, relevant in case of a lost device:

"Motivated by Windows 11’s push to use the TPM
for even more applications, we apply the vulnerability
to Microsoft BitLocker and show the first fTPM-based
attack against the popular Full Disk Encryption solution.
BitLocker’s default TPM-only strategy manages – without
any changes to the user experience – to swiftly step up
a user’s security in the face of a lost or stolen device.
However, as our work complements the established at-
tacks against dTPMs with an even more potent attack
against AMD fTPMs, a TPM-only configuration lulls a
non-technical user with high protection needs into a false
sense of security."

"Users who fear a physical attacker with reasonable
resources should opt for a TPM and PIN configuration.
When BitLocker identifies that the underlying TPM is
an fTPM, users should be urged to turn their PIN into
a passphrase."
For personal projects I love writing servers with aiohttp in Python. I'm not so sure how these would handle heavy load though.
That is exactly where I tested it, and the latency was still abysmally poor (~1 second per file operation).

I don’t even want to know how bad the latency would be outside of a cloud VM.
With frontend a lot of what engineers are tasked to make (highly interactive websites that still have decent SEO and time to FMP), you need to add some complexity to achieve that. SSR + hydration for web apps has been common for years because it's great for SEO and getting a fast paint and because of that we now have these super established hybrid (as in client side and server side rendered) frameworks. Sure you can implement these sites with an html file and some JS to populate it with data, but it's hardly a nice and *easily maintainable* experience when dealing with non-trivial applications.

And now that your app is using one of these frameworks, you probably need some sort of API for whatever. There's a lot to be said about designing a REST api just being exporting an JS function in a file in a /api folder or whatever. If you are already using a hosted option for these frameworks it's an incredibly simple solution that doesn't require to you mess around creating a new project, making a docker image, going to a different cloud provider and giving them your credit card, etc. And depending on your scale that might genuinely be cheaper than running a container 24/7 on a public cloud.
"Xtekky said that he has advised all the sites that wrote to him that they should secure their APIs, but none of them has done so"

Lock your door so I don't come into your home and get your stuff.
I've been using rclone [0] to do the same under linux for years, how is this different?

[0] https://rclone.org
My Descent into TikTok News Hell
FWIW there's a bar in Prague that delivers beers on trains.
i don't suppose QUIC is acceptable
Password-less TPMs will always be fundamentally vulnerable. The only question is what is the price to break them. It can be very high (as seen in the Xbox).
Wouldn't the broadband company have been safe anyways because of the safe harbor exception?
>Our attacks have shown that an fTPM cannot sufficiently protect its internal state against firmware or physical attacks. In such a scenario, a passphrase-only key protector of reasonable length provides better security than a TPM-only protector with a numeric PIN (5.3.1). This is in stark contrast to Microsoft’s claim that “BitLocker provides the most protection when used with a Trusted Platform Module” [29] (see also in 2.3). In fact, of all available protectors (seen in Figure 1), TPM-only is arguably the weakest protection strategy.

This might not be surprising to some, despite Windows hiding the GUI passphrase functionality behind some group policy settings, both "Require additional authentication at startup" and "Enhanced PIN", which isn't perhaps the most intuitive and a normal user might not even realize unless they notice the "normal" PIN is numerical-only. In any case, for the average person that might have their devices stolen, this is likely not to be a threat, but I think a passphrase should always be preferable, BitLocker doesn't support any better option.
Maybe you are, but I'm not :).
That is very similar to a few things I'm already planning to build, but I'll need to process some of the incredible ideas you've got here.

I might send you an email later this month with some questions :)
Usually what happens in this environment is immature/ underage people are exploited. You don’t have to look far. The local track in your nearest city or megalopolises in India where adults sell off children, among other places in the world. In Mexico the local business guys go into the town plaza in the evenings and chat up young girls, in Japan you get “compensated dating”. These are all places where they let those of modest means take advantage of the underprivileged and underdeveloped and treat them as objects.
Why not simply abandon TPM and focus on making simple, trustable, massively parallel general-purpose hardware without backdoors for spy agencies and corporations?

Whose computer is this, anyway?
I am not really sure what your issue is. You don’t know what it means but think it sounds bad? So I’m a bad person for using it?
As a Canadian I guess it is time I routed my entire households traffic through a VPN at the router level
No but people are probably going to find that an entire school has a picture of their ID because their kid made a quick copy and shared it with their friends to access those sites.
My concern would be something more like getting 2FA codes stolen.
My current company uses GitLab; anyone mistakenly referring to it as "Github" would get swiftly corrected, even as a simple proxy word for "Git".
Does it actually change anything? Maybe AI will led random people make their own pictures, but what's the real impact of that compared with what those people are likely already doing, which is repeating propaganda created by others using only marginally more involved methods like photoshop?

Also the particular image in this tweet doesn't seem like a great example of the power of AI propaganda. Unless I'm missing something, it's a fairly generic image of a nameless person...the propaganda is all in the story attached to it. The same story attached to a stock photo seems like it would have virtually the same impact.
> Every time I think about the millions of computers that will be declared worthless this year, it makes me a little bit more angrier.

What is this a reference to? Every computer I've found will let you boot into the bios and disable secure boot or add new keys to the trust store.
Maybe they're drunk.
Porn, social media, online dating, toxic streamers, children having untethered access to perverse information ... yes, prohibition isn't the answer, we need more of these amazing things - that'll certainly lead to better outcomes of wellbeing
Through the web frontend. I'm not aware of any special fuse clients, nor is it particularly appealing. All files I store in it are for web based applications (primarily gsuite). We have alternative collosus based file share mounts which we can use for "native" files. I personally use git and/or rsync to share files between my various corp devices (laptop, cloud vm, desktop) in addition to those other options.
Vice Media Prepares to File for Bankruptcy
Host here.
Here is my summary:

Yann Collet was bored and working as a project manager. So he started working on a game for his old HP 48 graphing calculator.

Eventually, this hobby led him to revolutionize the field of data compression, releasing LZ4, ZStandard, and Finite State Entropy coders.

His code ended up everywhere: in games, databases, file systems, and the Linux Kernel because Yann built the world's fastest compression algorithms.

And he got started just making a fun game for a graphing calculator he'd had since high school.
On the other hand, showing kids pornography is against all kinds of laws everywhere.
Today's video is sponsored by NordVPN. Prevent hackers, governments, and ISPs from accessing your private data with a VPN -- or Virtual Private Network -- from NordVPN. Plus, you can access the internet from any of over 120 countries. I can't get Naruto on Netflix in the United States, but with NordVPN I just switch my country to Belarus and look, there it is!
I'd like to hear more +1 @gregdrm
I'm surprised GitHub isn't trying to avoid their trademarked becoming generic [1].

If that keeps up you can just call your alternative repo storage system GitHub 2.0 or GitHub Enterprise or something.

[1]: https://en.wikipedia.org/wiki/Generic_trademark
This is clearly correct and it exposes a sort of wink/nudge game that judges and lawyers commonly play. Courts will say "we are constrained by the law," and every practitioner knows that they mean, "among the many laws that could apply to this situation, we have selected one that constrains us to make the decision that we think is appropriate." If you go read the briefs, I'll bet you find that each party made the same kind of argument in e.g. the original habeas petition: defense says law A forces conclusion X, prosecutor says law B forces conclusion Y.

Normally this is a pretty comfortable role for each party and leads to something that looks like justice. The lawyers think they are making really strong arguments and the court gets to shed accountability, which is a judicial aphrodisiac.

The game fell apart here because the attorney general switched sides, ostensibly after contracting an independent review of the conviction, and left the court without any cover for upholding the conviction. So now we have a situation where all parties agree the court should act (and in my recollection of 8th amendment case law, it is actually obligated to act to prevent cruel and unusual punishment), but it will not.
> Even TeamCity had that functionality.

If something as fragile and arcane as TeamCity has this then that reflects very poorly on CircleCI
Off topic. Scrolled a little bit past the thread and almost got caught up in Twitter’s hate bait algorithm. Sexual imagery and I didn’t ask for. This is why I need to remember never to follow links to Twitter, no matter what, ever.

One of the hazards of browsing HN: old darlings like Twitter will be tolerated even after they become NSFW by default.
The open-source course landing page
Is this a good time to mention CodeBerg?
Surface level probability doesn't work either.
Every time this topic comes up, I see a bunch of comments here in HN claiming that H-1B should pretty much be abolished, and/or visa holders should be returning to their countries of origin and replaced by American workers.

I became a permanent resident not that long ago. It's an arduous and complicated path. Navigating US bureaucracy is an extremely complex endeavor, and one requires the help of several, very specialized professionals, to get to their goal.

Knowing all this, I want to ask, why should someone who has worked that hard to settle in the US, has contributed greatly to the economy, behaved properly and never had issues with law and authority, be expelled from the country?

Isn't the US government targeting the companies committing fraud, a better and more just path forward?
Air Force Plans Special Operations for Arizona Base Set to Lose Aging Planes
The dividing line between hipster programmers and “engineers” is nonexistent. They are just other programmers. Those millions of developers didn’t hop on the bandwagon just because Java was sitting there, it required a lot of forward-thinking, high-skill people to get off the ground. And they were hipsters at the time.
Language is power. Using the word hallucinate to describe what is happening when language models invent facts is inappropriate.

They lie.
https://en.wikipedia.org/wiki/Jimmy_Hoffa

Face prison and death? No thank you, no job has ever been worth that.

Thinking that you're going to fix deep corruption via democratic process... You realize that this doesn't work in mainstream politics either, right? Only in the movies.
I am wondering the same, considering the proliferation of AMD in the last few years I would be devastated to have to go back to Intel. Just when the Framework came out with their AMD versions too.
Throwing the Core i brand away seems like a very bad move even with Ryzen R being a 1:1 copy. Intel has had a consistent, reliable naming and tier scheme in the desktop market for about 15 years. Things like "i5 x600K" are virtual fixpoints.
It's a real paper - go look at the other things tom7 has done!
Why even post that comment? What could you possibly mean?

That sentence is halfway down the page.
The problem is that such systems have a habit of growing in scope until they reach a point where you really do need the more optimal access patterns of using the real HTTP APIs, and the inefficiencies of emulating the full filesystem API will gradually start to bite you. Maybe you’re lucky enough that that won’t happen, but it’s important to understand it for the quick hack job it is, IMO.
A good example of social dystopia would be a situation in a country where economic stress is driving depression and anxiety and suicidal ideation and the solution proferred is to install an app on your phone that sends you 'positive messages' and directs you to spend what little money you have on drugs that make you feel better. A good analysis of this situation is here:

https://www.nytimes.com/2022/09/20/opinion/us-mental-health-...

> "That the status quo is once again benefiting the usual suspects is all too obvious in the booming market of venture-capital-backed mental health tech start-ups that promise to solve the crisis through a gig economy model for psychiatric care — a model that has been criticized for selling psychiatric medication irresponsibly, with little accountability..."

> "And yet when the plan addresses suicide, it focuses on crisis intervention — as if suicide were a kind of unfortunate natural occurrence, like lightning strikes, rather than an expression of the fact that growing numbers of people are becoming convinced that the current state of affairs gives them no reason to hope for a life they’d want to live..."

P.S. Another good read:

https://en.wikipedia.org/wiki/Political_abuse_of_psychiatry_...

Historical societal failures in the Soviet Union have many interesting similarities to current societal failures in the United States.
Many of the currently ongoing reproductions of LLaMa for starters. (see: Red Pajama[0]). Or any of the OpenAssistant affiliated projects.

[0] - https://www.together.xyz/blog/redpajama