skysight-inc/HackerNews huggingface dataset:
The misconception here is that most of the valuable stuff actually lives inside the browser. That's where users access their email, banking information, use password managers, etc. Breaking out of the sandbox is a relatively low priority goal for hackers looking to compromise browsers. Which is why this is much less of an issue than the author assumes. Browsers have to be safe regardless of whether they are sand boxed. Which is why browsers use sand boxing technology inside the browser. Sand boxing your browser is relatively low value in terms of security benefits.

This is less true on mobile because people use lots of apps there. And if you have some game implemented by a twelve year old and somebody hacks it and then installs whatever on the phone, that is a big issue. So Google and Apple spent a lot of time fixing that on mobile and then applied the same level of standards to their desktop operating systems. MS has of course over the years had their fair share of issues like that so they've gotten a lot better at this as well.

Server side linux is pretty secure out of the box. Pretty much the whole internet runs on Linux at this point. Mostly servers only run one process that matters; which is whatever they are serving. Or a bunch of dockerized processes in some cases. Which are indeed sand boxed.

Desktop Linux is server side linux with some extra stuff. Not a very homogeneous target to hack because there are lots of different software packages that people use in different combinations and versions. And the baseline security of Linux is of course not horrible like it used to be with Microsoft.

And of course things like snap and flatpak actually do use some sandboxing. So, use that if it makes you feel good. Of course that sandboxing isn't perfect as I'm sure people will be itching to point out. But the problem that addresses is pretty minor to begin with. And there is of course a certain amount of resistance against using either of those with some people.

So, not much of a problem and it's been kind of solved anyway.
I don’t know why Koala Moon is a thing but it’s glorious
I think a lot of times this philosophy is just rich people justifying paying a lot for high status items.

a pair of Crocs is 50 bucks and that's one of the highest quality pairs of shoes you'll buy for the price. you could buy 10 pairs of Crocs for a $500 pair of Alden's so even if the crocs only lasted a year, it would take a decade to recoup the investment on the Alden's.

but the crocs don't have the same status that Alan Edmonds or Alden or Fiorentini does.

Same thing with the G-Shock watch versus a Rolex.

If you really want quality look at what middle class people are doing. Crocs, Kirkland, G-Shock, Corolla etc.

All this stuff is top quality but rich people wouldn't be caught dead in them.

Another thing rich people like to do is repurposing something completely trivial. This dude probably paid as much or close to shipping the shoes than a new wallet would have cost.

This guy gets a feeling of satisfaction that they're making the world a better place by repurposing their shoes. Then they go to their job where they earn a lot of money defending companies who gave a small town cancer or a massive oil spill or wholesale invasion of privacy.
Fair is something that works for both parties - maybe it doesn't exist in this case.
Integrity without confidentiality is trivial.
I tried a bunch of different ways but ultimately settled on Duplicacy [0].

It runs inside a Docker container and backs up both my data as well as configurations like my docker compose file and smb.conf.

Off site storage was Backblaze B2, but I moved to Hetzner. Likely will move back just because B2 is cheaper and a bit faster for my region.

Another layer of backup I do is use Duplicacy to backup to a portable hard drive occasionally that I keep off site.

[0] https://duplicacy.com/
LLMs are useless!
I was curious, so I ended up initializing one with 500 Billion parameters. I trained for a whole 4 hours on a whopping 100 books.
It still doesn't know anything! Awful. Sad.
Clearly, they can't reason.

\s
This is such a bizarre take. AlphaFold is faster and better - but it still takes years to develop anything in the life sciences.

It's like pointing to special relativity in 1905 and saying it'll never be useful for anything.
I don't need to read the rules to know that the moderation policy is even more restrictive than reddit's and it's therefore not worth the trouble.
[Help Needed] There is where I am stuck at in my entrepreneurial journey
I am an international PhD student at Harvard working on cool stuff in the space of AI, but because of two reasons I am not able to start my company : (1) If let's say "I quit PhD" and start my company how do I live off it when there is no funding source, (2) I really can't leave PhD to work on a company coz of all the visa headaches that restricts me from leaving school. The easy solution I see is leave school and US to go back my home country and build a startup. The problem is my home country is a big pile of garbage where people like me are laughed at in family gatherings and mocked for doing/thinking anything beyond trivialities.
So is this article a factual article or propaganda?

Actually, if you read most articles like this, there tends to be an implicit assumption that their audience is part of the small group of rational humans for whom facts and logic change mind but that normal people are just irrational fools who would always pick the wrong thing, therefore the rational people should use ethically questionable techniques such as propaganda and hiding certain information from these regular people so that they make the right choices.

That is a very dangerous and anti-democratic idea and is just the repetition of the arguments for aristocracy from thousands of years ago that regular people are too stupid to rule themselves.
I’m not arguing that dolphins are objectively or even relatively good or bad. I’m saying that ascribing them with assumed superior moral judgement is silly, especially given what we actually know about them.
This problem is multiplied by the fact that most consumer goods have subtle differences in design between brands and even model lines within the brand. If there were only 2 or 3 different, standardized dishwasher racks for all models, stocking those few would be cost effective.

As someone that owns a number of small-engine powered devices, I'm always amazed at how easy/cheap it is to find parts. Most small engines are either one of a couple Briggs and Stratton models, or a knockoff of same. Even across models, B&S usually did a pretty good job of reusing common parts. When you need a part, you can cross reference various part numbers to find either the OEM part or dozens of cheap Chinese copies.
Zig aims to solve this “problem” by having functions that can be either async or not.
Robert Hanssen, called the most destructive spy in U.S. history, dies at 79
I might have, please help me clear it up if you don't mind.

You and I both do not like laws being applied unevenly.

If you or I were to share classified secrets, we'd go to jail.

Donald Trump shared classified secrets, and he will (hopefully) go to jail.

In my eyes, this makes the law more evenly applied, as he is getting the same sentence other people would get. Where am I wrong?
Well we all do float in space, don’t we?
You almost certainly left way too much oil on it. If your apartment is "swirling with smoke" you're doing it wrong. Most youtube videos and online tutorials fail to make this point clearly (or are outright wrong, debating what kind of oil to incinerate half a bottle of in their pans).

You oil it (with any cooking oil) and then wipe it all off. It needs to look and feel like it hasn't been oiled. Any visible oil or stickiness will burn to black shit that isn't seasoning. There is still oil there. The invisible, microscopic residue is what you want. When you heat it (in the oven around 180C) it will generate a faint smell around the cooker, not fill your home with burning oil smoke. Do the whole thing 3-5 times.

But for a skillet this is just a kick start. It is neither necessary nor sufficient. The real seasoning comes from use and is way better than anything you can do by explicit seasoning. Use it frequently. Fry in it. FREQUENTLY. And when you do use use oil, ffs. While it's
newish, clean it promptly, dry it thoroughly and give it a thin wipe of oil before you put it away to prevent rust and help it season.

(If you're the sort that thinks never letting a single fat molecule enter your digestive system is a virtue, don't buy cast iron. It won't work for you. It'll rust and stick. Use teflon. It's the only thing you'll ever be able make a "fried" egg on. It might give you cancer but at least you won't accidentally ingest some butter. Also, if you cook once every 6 months, don't use cast iron. It needs use. Weekly at least, if not daily.)

One of our four cast skillets spent last night in the sink, full of water (see my other comment). We treat them how we please, scrubbing and washing them with detergent if needed, leaving them dirty if we want. They cook wonderfully, don't stick and will probably survive the death of the sun.
Yes. Luck. There are a few other posters in this thread that objected to Diamond because he seemed too Euro Centric apologist, the argument being "well why didn't the East win". But sometimes it does turn on a flip of a coin. The Mongols (eastern power) could have won, and dominated, and colonized the world. And we would all be studying how horrible Mongol Colonialism was. Sometimes history does swing on singular events.
Bitcoin was created specifically to prevent the government from controlling money supply, by creating an alternate form of money. The idea that it isn't succeeding because unnamed bureaucrats is misleading. The SEC and other regulatory frameworks exist today because of laws created over decades. Those laws were created to protect people, after many people were scammed.

https://en.wikipedia.org/wiki/Blue_sky_law
https://en.wikipedia.org/wiki/U.S._Securities_and_Exchange_C...

People generally don't want to get scammed, which is why crypto is failing. Obviously we are not talking about the software here. I'm sure plenty of Web3 "software" works just fine, what doesn't work is selling unregulated securities to investors who lose all the money.
It sounds like the entire distinction is just renting vs owning to be honest, which makes it all a bit more boring.

My house is a fairly normal sized house, there are millions of it in the UK.
> I would guess that most people from outside the states are familiar with the geographical size of the country

If they do they don't act like it: my experience has been like the OP's, in that non-Americans tend to assume our society and culture is a lot more homogeneous than it is.
Canada's is legal up until the fetus leaves the womb. It's also possible to kill a fetus inside the womb and suffer no consequence for said killing.

https://www.cbc.ca/news/opinion/arianna-goberdhan-fetus-homi...
how do you know that without reading the rules?
On the topic of the nude statues, I have no evidence for this idea, except: modern toy dolls are often "nude," with the idea children will put clothes on them. Is it possible that the Greeks put different clothes and decorations on their nude base statues, clothes which are now gone, evanescent as the paint that once adorned the marble statues as well?
I happily stand corrected, thanks!
https://en.wikipedia.org/wiki/Boots_theory
Anecdotally, Palantir’s was fantastic the multiple times I did it (internships + FTE).

Facebook’s was one of the most insulting corporate experiences I’ve had. Multiple speakers for the (very long, exhausting days of lectures) straight up didn’t show up. No comms/reschedule, just the entire onboarding class sitting and waiting for an hour.
The author whose book you're criticising from memory is called "Jared" Diamond, not "Jarrad".

Sorry to be pedantic, but this really grates. At the very least it makes me wonder about the precision of your recollection of the content of the book.
have not tried it, but this has been in my bookmarks a while: https://github.com/camelot-dev/excalibur
How Could A.I. Destroy Humanity?
The real reason is #4: it's simpler for the school, as they don't have to run several different bus services.
Depending on how you installed windows, logging into Windows is enough to have you logged into Edge (and other MS services) when you open it.
They should be able to increase the margin of their meager sales at the least, with a history like that.
The obvious solution would be to build something with git. Put markdown-files with usenet-headers in a repo, define some proper behavior for automated merge-requests and host it on the git-forge of your choice. This solution would out of the box remove most friction for growing and makes a huge amount of tooling and knowledge availabe, while people could focus on the important parts of building good clients and other userspace-tooling. And in case it becomes actually successful, you could still improve performance.
Ask HN: Can you create a Reddit competitor by acquiring Apollo app?
According to an article in Techcrunch [1], the developer stated his app has over 900K daily active users. Isn't getting this critical mass of active _mainstream_ users the main hurdle none of the "Reddit-likes" are able to overcome?

Building a backend that can handle comparable amounts of traffic to Reddit is of course non-trivial - but definitely solvable with investment and the right team. Whereas getting a critical mass of mainstream users seems like a much harder nut to crack.

The dev has stated that he has no interest in pursuing this route himself, but it seems like a lot of value being dropped on the floor by letting all those users disperse to other places.

What are your thoughts on this HN?

[1] https://techcrunch.com/2023/05/31/popular-reddit-app-apollo-may-go-out-of-business-over-reddits-new-unaffordable-api-pricing/
Django-Ninja or Fastapi
Hi django devs , i was using django for most of my project but i happen to know that its not fast long story short i know discovered django-ninja but i dont see good resources on it , i need to know if someone have mastered these topics on django-ninja : 1-Crud 2- File uploading 3- Static files 4- authetication 5- authorization/permissions

i was thinking to go to fastapi but i want test django-ninja first
The federal reserve is hiding in 'plain sight' ... You could argue that a monopoly of large commercial banks regulated by a federal centralized government fixes the market to a degree.
1. Raid1 (ZFS), if a drive fails
2. Borgbackup [0] with Borgmatic [1], daily backups to another server which also has Raid1

[0] https://www.borgbackup.org/
[1] https://torsion.org/borgmatic/
As someone who rents the main thing I’ve gained from this philosophy is that it’s way better to buy high quality used and resell for close to the same price than to pay cheaper and struggle to get rid of for free.

Not sure how well the durability arguments with new products will hold up over decades like a 60s Braun product may have
One thing I love about the HFT world is the race to be fast. You cant get better by scaling out, you have to make your trading server as fast as possible. This leads to some whacky but clever hacks. I've always felt like I was working on a F1 race team when working in HFT.

I never came across isolating CPUs, TCP offload, FPGAs, layer 1 switching until I joined a HFT shop. Its like a whole different way of looking at computing system architecture.
Is there any reliable mechanism to force cloud-hosted VMs to a constant CPU frequency? Doesn’t seem to be in the API docs I’ve read.
Agreed! But there's compromises possible. A well-designed alu frame with a carbon fork is a lot cheaper, but still reasonably comfortable.
Hey,can you please send me invite
Idk, I was talking with my gf about this at the time (who's not on HN), and she was saying the same thing - this isn't going to work.
Look at the story of https://en.wikipedia.org/wiki/Narcissus_(mythology) but put somebody like https://en.wikipedia.org/wiki/Hatsune_Miku in the mirror.
Perhaps they contribute to r/psychics.
a 23 month old human will beg for their life. Doesn't that contradict his position on killing sentient animals?
Beehaw: Reddit Alternative
A number of authors have run with the idea but Asimov was probably the first. [1]

One interesting aspect to this sort of thing historically is that it's (almost?) always portrayed as an authoritative work created by experts because that's pretty much what encyclopedias were. I'm not sure there are any examples that look like Wikipedia in fiction.

[1] https://en.wikipedia.org/wiki/Encyclopedia_Galactica
I don't think you understand how the 99% live
Not really - the official clients constantly push content in which I (for one) have no interest, in the name of “engagement”.

I won’t stand for it, and have just stopped using Reddit - mostly passively, but occasionally posting. Without a user-respective native client that follows system conventions and does not push garbage, the service is just not worth using.
Wow, Utah really lagged on getting an ISP, huh?

From a UK perspective: my family got dual up in ‘94, there were lots of ISP options & it was basically impossible to buy anything slower than 28.8k new (at retail anyhow, I’m sure you could special order) as no-where stocked them. 28.8 took over fast.

I think the UK had lots pf ISPs at the time because without a local number to call it was VERY expensive rather than just kinda expensive. But that’s just a guess.
Bizarrely, the empty husk of Freenode was advertised as a “partner” on the Gigablast home page for several months. (Then Gigablast went dark.) I’m still wondering what was up with that.
Necessity is an amazing thing: at a company I worked for, the dev team (which I was a part of) "couldn't make things cheaper" than $14k/m for a small app.

We spun them into their own org, and now its "their money" they are spending. Their bill is $2k/m! Amazing!
Yup! The chandelier scene, the hang glider, etc, etc, just amazingly creative and funny series.
Nudity amongst men was kinda common in swimming pools up til the 1970s.

http://treyspeegle.com/010113/2021/1/24/for-50-years-the-ymc...
I'm not so quick to assume that Reddit hasn't listened to users.

I read something that only 10% (or less) of people are still using old.reddit.com. There very well could be data indicating that 90% of users are just as happy and engaged on the new site.
This isn't accurate. There are any number of XSS attacks that can be performed, which then allow you to look at secrets or tokens in localStorage, for example.
Four children found alive in Amazon 40 days after plane crash
That’s definitely a win for kbin.
Video and WebGL (Google Maps Street View/GeoGuesser) are a slideshow under Firefox on Linux, because they do compositing in software on Linux (copying the video buffer back and forth between GPU and RAM). That's the whole reason why I use a chromium based browser. Really missing containers. They are really letting Linux support slide. :(
AI Research Highlights in 3 Sentences or Less (May-June 2023)
I've made a few sales with a ChatGPT powered Chrome extension
I don't know what is true either, but you can't run that analysis for the claim people are making.
The reason being that people aren't claiming the API model outputs changed, they're claiming the website based outputs changed.

Most claim it's probably due to some alteration in the 'pre-prompt', the hyperparameters (temp, top k instead of typical sampling, etc) or something to that effect. But you can't really test that so easily with a non deterministic temp.
I use tarsnap and a cronjob

I loaded up $10 credit like 6 years ago and it's still going somehow
Humanity becomes so dependent and mentally deficient that they forget how to shut off the power.
> The collective guilt and remorse of all of mankind is a heavy burden, but one he is willing and able in his nobility to bear.

that's the most ridiculous thing i've ever read and i hang out on fark.com sometimes.
No. It is developed and run by tankies. This is a poison pill. See https://mstdn.social/@feditips/106835057054633379
Interestingly, there are no eggplant and water drips emojis. They are used in online communication mostly as sexual innuendos.
Banned by Cloudflare. I'll pass.
Spider Moon!
> glibc doesn't allow LD_PRELOAD on suid binaries.

I'll just leave this here then. [1]

[1] https://gtfobins.github.io/
Well yes, obviously there are laws based (maybe) on majority opinion or average opinion. What I mean is that opinions will vary and you can’t satisfy everyone. There is no objective right or wrong cutoff hence why there is philosophical debate about it.
Synonymous, according to one person, taking a liberal view of a only vaguely related result.
It's not about him being right or not, but about it being irrelevant.
The "standard answer" is to swallow a poison pill. The legacy is problematic and cannot be separated from.

But, then, HN trends Utilitarian in the extreme, with its Libertarian roots.
> Checking if the site connection is secure.

Ugh. I’ll take a look for the moment but the “secure” on that page (Cloudflare-provided I think?) has filled my weekly allotment of bullshit. Never going to be a regular as long as that’s on, sorry.

(There’s a special angry place in my heart for people who continue to devalue the word “secure” in the eyes of end users.)
I stopped reading it because of its formulaic storytelling.
I loved the actual stories. Weird, unfortunate programming hijinx that some unfortunate new hire had to deal with. I’ve been there, or near enough, tens of times throughout the time I worked at a boutique consultancy.

The problem I have, though, is their “set it up and knock it down” style of storytelling. It gets old, fairly fast, and once you’re over it you’re just constantly hunting for the actual meat of the story. The actual development WTF.

I don’t care that Grunthilda was a seasoned developer who had recently taken a job at a mediocre teapot manufacturer, whose boss was idiosyncratic and kept shouting “the shorter the better”. I don’t care if Francisco had just started his second job within an up and coming banana republic and all of the other developers has warned him against naming variables starting with a vowel.

Just tell me what off the wall programming mistake they were making.
They both have some form of intelligence but in different tasks
The issue here is GPT-3/4 were trained on bullshit. Surely bullshit is the desired and expected outcome when you train your model on bullshit Reddit comments.
And first beta of proxmox 8.0 based on debian 12:

https://pve.proxmox.com/wiki/Roadmap#Proxmox_VE_8.0_beta1
Unlike lemmy, this has the advantage of links being links, so e.g. middle/ctrl. clicking works for everything, while in lemmy some (e.g. "X comments") are JS only.
If any of the Debian team is here, congratulations and thank you for putting together such a solid, consistently high quality Linux distro.
That wouldn’t make us not intelligent any more, it would mean that the brain is able to work really well within those limitations