skysight-inc/HackerNews huggingface dataset:
I can't imagine having to unfuck the complicated systems set up by an AI sysadmin when the system running the AI goes down.
I think just in the sense that a directory called `/opt/redash` strongly hints by its name that it contains only a Redash installation, so that either other crucial infrastructure should not have been placed there, or it should have been called something that better reflected its contents.
Will we ever have a culture that is not this naive? I find it difficult to understand how people still fail to see this coming every single time. No matter what companies say (and they'll say anything), they're for profit and on average must grow or die. Why is this not part of common sense and basic education by now? It's time for the world to grow up and stop playing pretend.
I don’t understand the encryption use case. Can someone elaborate?
I think it’s because they’re glossy while most monitors have a matte coating
> It can cause your site to end up on Google's safe Browsing black list

If it's a file that nothing on your site links to, and doesn't really "exist" how would google ever index it? Especially if you put in as a deny in robots.txt, which as far as I'm aware, Google honors.
I agree. I cannot understand why they mounted the MySQL data directories where they did. It just doesn’t make much sense. To me it’s like mounting it onto /boot and then being surprised when it goes badly.
There's an alternative music video for that song based on Stone Trek: https://www.youtube.com/watch?v=eX7_a2KcqKE
This is always the response

Some form of “tough break kid welcome to the real world”

There’s a pervasive “if you can’t beat them join them“ attitude about these antisocial financial and social structures.

We need more people to say “Here’s an alternative to that model” instead of just throwing their hands up.

Stop excusing it. Start pushing for alternative ways to organize.
I think it's quite telling that the examples here all involve BGP subversion, which DNSSEC doesn't coherently mitigate: universal DNSSEC deployment would change the exploit you'd deploy to exploit BGP, but it wouldn't break the vulnerability.
OTOH, given bug bounty payouts, the sheer number of reports they get for real WAI not-actually-a-hack behavior must be exhausting. People just seeking a payout for every trivial thing. Which, tbc, this thing isn't.
I think it's the metaphor for spending your research career banging your head against a wall (in this case - literally)
Thanks for the suggestion.

Although, as I work remotely from a lesser-known place as of now, it is difficult for me to participate in angel investor networks.

I am looking more into online meetup/discussion groups.
I literally don't care about sandboxing. The data the apps themselves handle is the only thing valuable; protecting the rest of the system is pointless since I can reimage essentially for free at any point.
The interview deals with this possibility and others like it.

The short answer is that he is left hanging due to the fact that many of his existing paying users have already paid for the year and thus, when the new API rate hits, will be costing him money long before he can recoup their costs through a subscription hike --- presuming 100% of them renew at the higher price, which would be an extraordinarily optimistic presumption.
> A weak point of Flatpak is that facepalm Canonical is doing it very own show with Snap. How often does Canonical need to fail with Mir, Unity, Upstart and now Snap? The server is closed-source and it is against the community. Even if it would be better it is dead. And no, we don’t need two competing…please just commit fixes to GNOME e.g. type-ahead-find?

Hey now, Canonical provides valuable service of researching how to not do something so others can avoid those mistakes.
The initial rollout in my country was 512kbps/128, which later got slightly bumped to 1024/128.

That was the default speed for a long time.
Keep in mind that those MBAs making these decisions are not going to be there to go down with the ship when that happens. They will collect their bonuses they got for increasing the short term profits, sell their vested equity and move on, leaving the wreck for someone else to deal with.

It is a perfectly reasonable and rational thing to do. They are not thinking in the same terms and caring about the same priorities.

We can discuss how reprehensible or short sighted that is but business is ultimately about making as much money in as short time as possible. And that is exactly what they are doing (and what they have been trained for in those MBA courses).
For a company, it should be configured to be centralized. That’s why they think that way , it’s what makes sense.
The things you learn on the YouTubes…

It probably is a scam where they try to get you to let them log into your bank account and “accidentally” transfer too much money which you can conveniently return to them with gift cards. Or some variation on the theme.

There’s also some PayPal invoicing scam going around where they send random people bills through PayPal and use that to get the scam rolling.

If it were me I’d just ignore it unless they are sending real money to you, in that case I’d just consider it a stupid tax and keep the money after a while (in case of chargebacks).
Sucking up to autocratic rulers while claiming to be a free speech advocate is very altruistic (/s).

Saying Twitter was already in the ground and then praising the guy that dug the hole a lot deeper, is also suggesting that your assessment of him is not based on his business acumen.

Maybe you're hoping he's pumping your crypto bags? That's one of the things I consider him to be very good at.
A company I've worked for transfered all money out of PayPal each night.
Adding to this: virtually none of the large tech firms have adopted DNSSEC. It's usually news when one of them does, and that news story usually takes the form of that firm dropping off the Internet for half a day because DNSSEC ate them.
If malicious software takes over my browser it can steal my identity, wreck my finances, and ruin all my business and personal relationships. The fact that it can't add a printer is interesting but not really at the same level of concern.
Thanks a lot for the suggestion, just joined the waitlist.
Ask HN: Will Amazon profit here?
On a whim I bought a $1,100 49" ultra wide curved monitor off Amazon.

The minute I put it on my desk I learned two things: 1. This is RIDICULOUSLY large and I'm sending it back. 2. I do want a new monitor, just not one this big (like a wide curved monitor better than two split and a better monitor is easier on my eyes).

The monitor I ultimately buy will end up being around $500. To get me to do it they had to ship a 40lb box three times l and at best resell the first one as open box for ~$400 less (30%).

At the end of the day, will Amazon end up making a profit here?
> And conversely, when a dependency introduces a critical vulnerability, the AppImage or static build is unaffected.

Bugs discovered in older version of libraries are far more common than newly introduced ones.

Also, distros usually keep to whatever release line is deemed "stable" vs "whatever appimage author decide to put there"
Once the shortage abates completely, you could fill up your soda cup with Pi Zero though :)
errata - that helm templating used Jinja. It uses gotemplate
Surely I can continue to leave the $20 I have in there?
That happens occasionally but it's rarely successful.

/r/onguardforthee/ has ~270K users, /r/Canada has 1.76M. That counts as a success. Most similar replacements never got off the ground.
No, it really hasn't. In 2016 the ACGME increased the consecutive hour limit from a bad 16 to a completely ridiculous 28. The difference between rest requirements for truckers and pilots compared to doctors is just absurd. And it is even worse because doctors should know better than most how sleep deprivation affects people.
The more that technology comes into our lives, lived become more complicated, which gives opportunities for more jobs. AI will produce so much content (good and bad) that humans will be hired to make this AI thing work well for businesses.
I'm not so sure. Electrostatic speakers have big heavy metal electrodes.

They talk about a thin conducting layer on the rubber, quite a different thing.
Such a rude response on every level. All you have done is regurgitate other comments, "intentionally waiting" has not been shown.

"Maybe you should" (unconstructive phrasing) If you were going to educate rather than attack, provide links to the transcripts of this case.

You are not arguing in good faith.
If you think about it, your father was much more present than father of an average single-mother's child. And that seems to be getting mainstream.
The simple answer is:
don't. The code behind Google search isn't public, the code behind Stripe isn't public, Netflix doesn't release source for how their DRM works, and so on. Absolutely give back to the community, but you don't have to put yourself in the poorhouse in the process.
Does it need to be that novel of a UX?

If you want to know what some code does, just select it & hit a keyboard shortcut (or right click and choose explain from menu).

If you want AI to write code for you, write a comment starting with a specific word, it suggests the implementation and you can choose to accept & replace the comment with it.
Intuitively, it’s meaningless. What’s brighter, 255 G or 255 R?
This is false! The point isn't that TLS 1.3 is a better protocol that DNSSEC (though: it extremely is). It's that the entire WebPKI ecosystem has features DNSSEC does not have, has no timeline towards having, and probably never will have, because DNSSEC is de jure controlled by sovereign countries who will not agree to a global transparency log.
> It is a miracle to me how anyone can think that packing for a specific distro is their job? It is not. The job is documenting how to package the software and allow redistribution.

I think the mentality of authors who package their projects for a specific distro comes from their familiarity with Windows, where there is only one distribution (more or less) and packaging for it is naturally the responsibility of software authors. They mistakenly apply their windows experience to the new task, probably entirely unaware of the faux pas.

Often, knowing that there are a myriad of Linux distros, they mistakenly assume that the community of linux users are expecting them to support dozens of distros individually, testing on each one, and they become reasonably upset with that (mistaken) obligation. So they stamp their foot down and say "I support Ubuntu 13.04 specifically but if you use another distro then you're on your own!!" Then they go on to complain about fragmentation and say that linux users need to pick one distro and stick with it. Really, nobody expected them to support any specific linux distro in the first place but that is poorly communicated to otherwise experienced programmers who are new to linux.
WordPress.com would like to get on a sales call with you.
> If a CA misissues a cert for something major, like Facebook or Google Mail, and Google or Mozilla find out, my current belief is that they'd be in for a world of hurt.

It doesn't even need to be major. Misissuing for example.com and test.com were major factors in the distrust of Symantec and Certinomis, respectively.

> It's clear what tweaks to the system would need to occur to make this work that way it would "ideally" work, and the problems are mostly not technical; you'd just have Chrome (or Safari, or Firefox) report certs without SCTs in its default configuration.

This would require a pretty big paradigm shift which is hard to see happening. But as long as clients require SCTs (Firefox needs to hurry up already) this is not really necessary.

> I've been cagey about this in past discussions because my understanding was that the Chrome team did do some of this kind of surveillance informally. And I believe they did --- but I'm told that stopped being a thing years ago.

I'm pretty sure this has never been the case. I think at one point Chrome may have reported certificates for Google domains that were not issued by a Google CA, but this was unrelated to CT.

Or maybe you're thinking of the Googlebot, which logs the certificates it sees while crawling the web.
I would really appreciate if you could remember the name, because I love using Contexts.
I had a similar fraud that PayPal is somewhat complicit in because how how their system works:

I get an official PayPal email. But it’s on behalf of a vendor who is asking for money. But they’ve carefully crafted the request to look like a receipt. As if I’ve already paid $300 for textbooks and this is my receipt. But just a few unwitting clicks and I’ll have accepted the transfer request.
a fast lisp interpreter/compiler?
And you posted this because.....? You think that this person's blog is trying to steal your data from Carbon, a well known code screenshot sharing tool? What data would Carbon even have to be able to steal?
I saw this article a few days ago, hopefully it is true: https://www.pcworld.com/article/1939160/at-last-the-raspberr...
This solution won't be accepted without a lot more work. Flipping a coin is not guaranteed to produce an aperiodic tiling, since, in the trivial case where the coin comes up heads indefinitely, you'll be producing a periodic tiling. (You will argue it's not likely to do this, and I'd agree. In fact, I'd conjecture you'll only produce a periodic tiling with measure zero probability.) But what's required is to actually show an aperiodic tiling. If you have a proof that coin flipping will produce such a tiling with non-vanishing probability, then, presumably, embedded in your proof, you will likely find a decision procedure for producing an aperiodic tiling deterministically.
No other monitor I’ve owned has developed massive scratches during normal operation like my macbook m1 screen has.

In my experience Apple stuff looks great and fails spectacularly.
I'd rather it be neutral, ie no diversity and BS not related to research than increased. If anything, increasing it and keeping everything else that's broken only creates more disparity between those willing to toe the line and those who are not.
Literal prisons are full of cell phones

There’s literally no way to physically ban phones with any efficacy EVEN IF they had prison level of monitoring and standardization
Tip: you can favorite the submission then un-favorite it after you've read it.
ByteFormer. All You Need. The applied papers that claim dubious "sota" status on some benchmark do this. The foundational work that is actually worth reading doesn't.
> owners prosecuted

The First Amendment applies to offensive speech too.
> Yeah I am really nonplussed

Well this tells me nothing.

(The two meanings of this word are essentially opposite)
College level education was never meant to be easy. A lot of high schoolers who were the star student get runover when they're amongst other academically talented students at college. Not everybody has a right to get a college degree in the subject they chose. That level is meant to be hard requiring you to absolutely work yourself into the ground if it doesn't come naturally.

By the time you're attending college then you are old enough to understand what motivates yourself and how best you must apply yourself to learn. There's always multiple reasons why somebody might struggle but college also requires you to be responsible for yourself and figure out how to navigate that world through services available.

College has much less handholding than high school as you're an adult.
The stapling extension for TLS is a dead letter. Work on it was abandoned a couple years ago, when it finally occurred to the working group that control of a CA would allow you to strip the stapled DANE proof off the handshake, which defeats the entire purpose of the extension. DANE advocates counterproposed a pinning mechanism and got laughed out of the discussion by the browsers, for whom "pinning" is a cursed word.
Linking to an Intel SDK with “deep learning” in it does prove it’s possible to do matmuls on CPUs.

But this a nitpicked to death thread: it’s good to see Apple releasing research, the Metal stuff was to make it run on their GPU, and there simply aren’t any relevant uses of CPUs.

Academically, yes, CPUs have SIMD so they can implement the same algorithm that drives GPU perf, but without some massive breakthrough the one that can do more matmuls wins, and nVidia wins massively, in theory and practice.
Sincerely stating, this selection of scholarship sparkles with singular insight. It shares secrets seldom seen, serving up startling discoveries stowed within its sentences. Surpassing standard studies, the scribe's skill shines brightly, synthesizing profound sophistication with simplicity. I salute the scrupulousness and subtlety of this superior script. Such scrutiny and synthesis are seldom seen; surely, it is a standout in the sphere of scholarly submissions. Splendidly, it showcases an unprecedented spectrum of sagacious knowledge.
Have you seen divorce stats?
" It's not killing the user experience, it's making the nice user experience "just" more expensive, which I covered in my first comment. "

So there's a point where that price is too high for people to bother paying. 13/year maybe acceptable, is 26/year?

This will lose Reddit users which loses the point of the site (for the users). Which is killing the user experience.
First, it's not trivial, and won't be production ready before Apollo runs out of money.

Second, it's been tried, multiple times. Saidit was one, I think. Ruqqus was another, and there have been more, all claiming to be censor free and all failing to achieve a solid following. Saidit was (and still appears to be) a cesspool of trolling, conspiracy theory and anti-everything-ism.

Third, it'll miss moderation, so it will probably follow in saidit's footsteps.
> But industry trade group the Financial Technology Association, which represents both firms, defended the safety of the funds.

> “Tens of millions of American consumers and small businesses rely on payment apps to better spend, manage, and send their money. These accounts are safe and transparent,” the group said in the statement. “FTA members provide clear and easy-to-understand terms in all their products and prioritize consumer protection every step of the way.”

I don't see where the defense is in that statement!
I see keyboard kits built around the Pico. Are they using this technique or something else?
Are there any examples of this special dual-license that you mention? (For example, going from AGPL to MIT triggered by the closure of a company.) This is an intriguing idea and I wonder if it has been tried.
The trick being pulled here is to show some horrendously bad speech, say "just ban stuff like this that's super bad!", then once the precedent is set that censorship is okay in some circumstances, keep expanding that set of circumstances until it covers everything the establishment disagrees with.
The same folks complaining mods are tyrants will complain the admins are tyrants when they back up mod decisions.

Strict moderation is always controversial. I tend to prefer it.
This is really cool. This is riscv running under wasm in your browser and else where. Paired with a web repl and some JS peripherals, should should probably be the top answer.
I have a Gemini. The keyboard - you know, the main selling point - as often as not just goes 'thud' when you try to press a key rather than depressing and registering. The software was abandoned in a half-assed state after one revision. They strung me along for a good 6 months on shipping the USB-C hub and case post-Gemini delivery until I finally told them I was willing to give up on one of the two if they'd just send the other, at which point they magically and suddenly had both and shipped both. The USB-C dock-hub arrived non-functional and with something rattling around inside. It was some cheap AliExpress-grade crap anyway, so I dumped it, but those were early days for USB-C docks so I didn't know at the time. I declined to invest in a camera. I used it to edit a CV once on a plane to London. I did get the job. I guess that was worth the price of admission. It's no Psion, though!
“Creme brulee” variant was even better! I think it was plombir made with “toasted milk”.
No AI unless a human verifies it is a good rule for our whole society.
Hanno Böck is not "looking at the world from the confines of a webdevs point of view".
Why is that such a problem if it’s apparently fine to keep phones and other small devices connected 24/7? Aren’t charging circuits standard parts? I would have expected them all to work more or less the same
What do you mean by "monitoring security spaces"? Are you frequently refreshing the bug boards of every library your applications and OS uses?
“How often does Canonical need to fail with Mir, Unity, Upstart and now Snap?”

Until it gets different leadership. The drive to try to keep creating moats around Ubuntu that only benefit Canonical comes from the top.
This fiasco may push me away from Reddit altogether. Though, it seems Reddit could greatly improve the situation by allowing individual users to buy API access for their account. For example, make this a perk of Reddit Premium or a separate purchase priced appropriately.
Kaitai Struct is the better way to go for an ecosystem solution, but the tooling could certainly use improvements. In addition to 010 Editor, there's also KDE's Okteta. It does not have a lot of good OSDs and the OSD format/scripting for specifying formats is a little anemic (I'd like to help improve it if I can find time...) but it's very serviceable and a decent open source alternative to what 010 has. Shameless plug, I made a decent Windows EXE/PE OSD for Okteta. (It's even got a bit of support for NE16 executables, just for fun.)

This entire genre of tools has been a long time point of interest for me. In addition to making a couple OSDs and contributing some tiny improvements to Kaitai, I also have my own binary schema library for Go, restruct, which, biased or not, remains my favorite way to poke at arbitrary formats, since it's really easy to sketch stuff out and read and write to files quickly. It's basically Go's encoding/binary but with struct tags for more advanced things.
I'm interested in that claim as well, though maybe not so overtly hostile to the research.

My first thought was certainly that, at the very least, an adversary can perform image classification as well. I think this is an obvious limitation of how privacy-preserving is possible, and so maybe it's just taken that the reader should understand that. And BIG-IF the adversary can't do much more than that, it would still be appreciated.
They can ask to be considered a bank. That would require them to implement all those regulations. I'm sure they don't like the idea.
> OpenAI will avoid competing with their customers — other than with ChatGPT

Even though I interpret this as the author’s summarizing of a statement to the effect of “we want to stay at the platform layer and not the application layer”, it stands out to me as a phrasing that might irk lawyers sensitive to anything that could hurt them in an antitrust lawsuit a decade from now.
Of course they support DNSSEC. It's a government controlled key escrow system for those domains. I'm surprised they haven't tried to mandate its adoption by statute.
It's liberating to know that my emails can't be wholesale data mined or someone can't take down my web project if I commit some ToS thought crime. But doing it for clients was a ball-and-chain that I have no desire to do again. So for personal stuff it's great. For business stuff it's like adopting a pet that you can't leave alone too long. I would keep business stuff outsourced.