skysight-inc/HackerNews huggingface dataset:
I responded 'way to not getsby the point'.

How is that in ANY WAY an epilogue to The Great Gatsby? This is exactly the problem. That original story builds with a series of revelations into the conclusion 'so we beat on, boats against the current, borne back ceaselessly into our past': establishing a PURPOSE, perhaps a bleak and unwelcome one. Fitzgerald's revealing an insight into the delusions of humanity. He's picturing even the greatest of us as surfers on the river of nihilism and reality. Our aspirations sparkle prettily… and are gone, like froth in the rapids.

And this is just a little bit beautiful. We can imagine beyond our reach. That's a human thing. The fact that our minds can cling so longingly to something that is simply not real, is kind of wonderful. Everyone's their own little world of unreality, and we aspire so earnestly (much like these AI folks do).

And then the AI, having drunk up all of Fitzgerald and everybody else, 'continues' past the point. With what? Hardly matters. It has no point to make. I'd be impressed if it refused, said 'nope, that was where it ended. Can't add anything worth adding, try reading it again'. But no, because the LLM has no intention and doesn't successfully get one from what it's 'read'.

It's constructed an epilogue out of nebulous religious feelgoodism in the rough style of Fitzgerald's sentence construction, and undermined the whole conclusion of the story… and not maliciously, for that would require intent. Nope… it sort of ambled on, going 'what would feel nice here? ok, now what seems like it would go with this sort of thing? ok, something else, let's have more, what kind of concepts go here? what do people normally say when they talk in this way?'

In so doing, it's less than Gatsby and way less than Fitzgerald. There is nothing here in this 'epilogue'.

GPT4 criticised the 'epilogue', in a rather fascinating way! https://pastebin.com/B0zxbvNv

It successfully works out some of the problems with the first AI's writing, and yet it too fails to get the idea expressed by Fitzgerald, and rather than pivot to religious feelgoodism, it pressures the first AI to instead emphasize how its narrator and Gatsby shared a special bond, the very special specialness of being "the only one who understood what it meant to be young and restless in this restless world."

A lot of people can write that idea, and in fact a lot of people did and that's why GPT4 found it a probable argument to make.

Fitzgerald gave us a moment of viscerally grokking that it doesn't mean s*t… and yet, we will still paddle against the current of time and decay and collapse, because what else can we do? Tomorrow we'll get it. Tomorrow we'll really understand and it'll all make sense.

And so…
Godot – Automated Screenshots
I only use it for my personal mail with my own domain
Godot Engine vs. LibGDX
To be fair, most people don't need more than 4 cores on desktops.

Zen4c and Ampere chips are for data centers.
In practice the markdown to pdf conversion is performed by pandoc. Pandoc has functionality to recognise academic formatting styles (like APA, Harvard etc)

Pandoc also has functionality to turn a table of contents on based off of the semantic headers.

My guide is pulling together issues that arise across Zotero <> Obsidian <> Pandoc <> Word

I’ve found most forums are concerned with one or two of these steps depending which forums you’re visiting.
The origin worked for me: it's a grey goo scenario, technology that escaped control of its creators.

The human-form replicators were an evolution of the technology during the show, not part of their origin. Happened while they were trapped in a time dilation field.
3 was unexpectedly high or unexpectedly low?
The idea is that enough people do that if something bad happens, it makes the news, by which I mean Twitter/Mastodon/HN/LWN and so on.
1. The author is correct that the real purpose of E2EE, and the reason companies expend considerable R&D resources on it, is to have a plausible excuse not to produce records; and to protect against malicious insiders. That's it. You don't have real "end-to-end" encryption unless you or someone you really trust has thoroughly audited the hardware and software stack. Obviously, almost no-one has the resources to do that.

2. The author's argument also applies to the App Store distribution model. Apple or Google may choose or be compelled to publish an app or OS update that is only visible to certain users. By default, iOS and Android install app updates without user approval. (You can and should, of course, disable that if you're concerned about such things.) The key difference is that app developers can't mount targeted attacks in this manner; only Apple and Google can.

3. Here's a simpler iteration on the author's idea for applying subresource integrity to service workers: an "immutable" variant of the https scheme that requires the lowest level of the domain to match a hash of all resources loaded on the page. JS is only enabled if the hash matches.

https+immutable://mhzwdnyyv5turofr8kkivabqyvamg7yteeitzwrg64o00taouw.signal.org

As far as I can tell, this mitigates the issues outlined by the author, and has the following nice properties:

- You can bookmark the URL and be certain that the code can't change in future.

- You can share the URL with someone else and be certain that they will be served the same code.

- Not affected by client-side state (e.g. cache) and thus can't be abused for fingerprinting.

- No risk of bricking the app in perpetuity.

- Thanks to Certificate Transparency, the existence of any published update is public knowledge.
Seconding dry-run, while looking intently aws-cli for haveing the worst possible dry-run option imaginable.
It's the PM's responsibility to ensure the request is captured. It's the engineers job to deliver on the captured request.

It's both people's job to talk to one another to ensure the captured request is correct.
LLRL – Lisp in Rust
Yesterday I was wondering why the self signed root certificate and the certificates I added to my debian install didn't work with httpie (ssl warning) but did work with curl (and the browsers I added the RootCA to).

I found the explanation: https://github.com/httpie/httpie/issues/480 httpie doesn't look into /usr/local/share/ca-certificates but apparently it's not httpie's fault, it's the python requests library that doesn't check that folder.

I don't know what to think of it and who is supposed to fix it. But I am back to curl with my tail between the legs (because I oversold httpie to my coworkers) for now. There's only one place where the bucket stops with curl.
Same. Also being exhausted at the destination and wanting a vacation from your vacation. Then finally getting home totally wiped out and having to go back to work the next day wishing that you'd taken an actual vacation instead of wasting your free time traveling.

I have had a few fun times while traveling.

Hanging out behind the hotel with one of the hotel workers, feeding the stray animals that came by and talking about our pets (we both took in rescues and 'un-adoptable' pets).

Chatting with some random salesman in a bar, whose business was in no way related to the convention I was in town for, but he could speak so eloquently and interestingly in a way that just made you feel like you were actually there in his stories. It was like having a conversation with Mark Twain.

Stepping into a local townie bar just to get out of the heat for a few minutes only to find that it wasn't technically open, but nobody really cared because some of the locals would hang out there with the owner even when it was closed and they didn't mind us being there either.

Stopping in with some acquaintances at a run-down grungy dive bar, that just happened to be having trivia/karaoke night with two local teams that had an intense rivalry and we came in as spoilers.

None of that is in any way touristy or any kind of highbrow culture or achievement or profound magical experience. Just those mundane slices of life of being stuck somewhere with strangers for a brief time before you go your separate ways, those were the real fun parts. And you can do that anywhere, right in your own town even, without all the hassle and unpleasantness of travel.
Not sure I get the reasoning here. That requires you to actually go and proofread the configuration of each and every running process, at which point it's easier to just verify the effective configuration on disk and restart the service.

SSH is a special case because it leaves active sessions alive when it restarts, but that doesn't generalize to other daemons. Just restart if in doubt.
It's fun for hacking but it won't scale gracefully. It's like saying all you need is create-react-app, usually a few months into the project you understand that it won't scale well and then the shit show begins
Johann Hari: This could be why you're depressed or anxious [video]
I mentioned my workflow in a separate comment here but I’d say for personal notes yes you can use Obsidian for everything.

Where Zotero has come in useful for me is to gather and sort academic journal articles and to be able to feed them into Obsidian.
But I can recognize an ad hominem argument when I see it. Merely attempting to illuminate the intelligible with truth.[^1] OP said "If you ultimately end up having to use c/c++/fortran native libraries and work around pretty much everything python. What is the point of using python instead of c/c++?" The answers boiled down to making it easy for people with no formal computer training to leverage C, C++, and Fortran libraries written by professionals. Hopefully that is something we can agree on.

[^1]: BTW, I am not the sun either.
Ah, awesome thanks.

I think that will probably be more relevant for a lot of organisations that have some RHEL on their prod boxes but don't want to spend so much getting it on their dev/test environments.
This article is interleaved with references to a particular group they're calling "upper middle class" that include the descriptors "rich" and "well off" while also providing anecdotes from members of this group struggling with rent and grocery prices.

I know it's all relative, but I don't think of "rich" people as those struggling with rent, even in high cost of living cities.

Writings like this that seem to pit upper, middler, and lower incomes against each other feel written to benefit the unmentioned folks wholly unaffected by (or benefitting from) rent prices, whose wealth does not rely on "income".
I wasn't expecting to see Daniel(s) on here. A truly masterful troll.

(I also recommend Stimpee who is clearly influence by dnsl)
No one is having issues understanding the scale of the acquisition—a $70 billion dollar price tag kinda makes that obvious to everyone.

The question that myself and others in the thread have been asking without getting a clear answer is how could this acquisition make Microsoft a monopoly in the gaming space?

Even with the scale there doesn’t seem to be any legitimate path to Microsoft becoming a monopoly: video games is a $200b a year industry. Activision Blizzard’s 2022 revenue was $7.5b and combining that with Xbox’s $15b revenue still doesn’t even surpass PlayStation’s $24b. Is that a monopoly? I don’t see it.
Okay, you can’t just leave us hanging and not tell us what exactly you have done
but it reads all of them in a particular order and in case of conflicting settings you have to figure out which one takes precedence.
I completely agree. It's completely valid to say that E2E cannot protect you from the provider of the cryptographic software. It also fails if the end points themselves are compromised.

There is still tremendous value in being protected from absolutely everyone else.
Agreed, extraordinary solutions require extraordinary justification.
Thankfully, PlayStation exclusives do appear to be coming to PC more often nowadays. Hopefully the timed exclusivity window continues to decrease.

Death Stranding came to PC ~7 months after it released on PlayStation, which isn't too bad if they were focusing on finishing the game for the PS release rather than working on the port.

The delay in the FFVII remake was painful though, ~2 years before hitting Steam. It's a shame to see FFXVI release only on PS5 as well, the game looks interesting.
Charging for the sync is their primary revenue model. Zotero is doing the same.

I don’t bemoan this approach that basically gives everything local away for free.
On Linux you can use bpftrace which is basically the same thing with slightly different names.
Yikes, I guess I’m way too sensitive to ever be a kernel dev.

Kent seems way out of line. “Direct” is one thing, telling a maintainer they have no idea what they’re talking about is another. It’s totally uncalled for.

Are they trying to imitate Linus, or something? Sorry, you don’t get a license to be an asshole until you literally invent Linux.
I would look for something like this in the help output, i.e. --help or -h. And of course the manpage if you do supply one.
Not again. We had this same bad argument just last week[1].

Custom-engineering backdoored client software, and rolling it out to a subset of users in a targeted attack, is not comparable to storing everything in plaintext on the server and looking through it whenever the fancy strikes. Practicality matters a great deal in information security.

Yes, it is perfectly possible to do the former – just like it is possible to enter any home and simply bug all hardware inside. That doesn't mean this scenario should be part of a normal person's threat model.

The article is correct in the sense that technically, web-based cryptography requires a degree of trust in the server provider. But the article is utterly wrong in concluding that this makes it snake oil, because attacks are substantially more difficult and costly.

[1] https://news.ycombinator.com/item?id=36386884
You trust that CPU doing the build? Have you heard about the mess Intel Management Engine is?

Unless you build from the transistors up you have incoherent security theater.
You can still hook your SNES to your TV and replay Chrono Trigger, although I have to admit eventually things will break and old machines will end up getting dismantled and recycled.
If you do something potentially fatal enough times then fatality becomes a statistical certainty, just like Russian roulette.
Unfortunately true. Then when it all goes south, they are like "oh well, we tried". People really don't understand how hard it is to do something right, you know, the kind of things customers love and will stay in line to buy it. And when an engineer (an actual one) points out some flaw they immediately call him a jerk.

I never understood what people mean by "a jerk/asshole": sometimes they mean an actual jerk but a lot of times it seems to mean "people that don't agree with me".
How long does it take you to type out that path?
"Outliers".

A good reminder that practical inteligence is way more important than the qualification you get in an intelligence test.
As a Citizen Arming Ukraine
Well, someone's in trouble. If a faculty member allowed their name to be put on this thing then that's on them, if they didn't then whoever did the submission has to go. Also all the papers of all the co-authors who allowed their name on it are now suspect for me and should be investigated seriously. Sure, if the fact is that they said "don't put my name on stuff that you publish unless I have specifically agreed" or "don't publish this thing, it needs work" and then that message got lost - they are off the hook for me. But there needs to be a look at the culture of the labs involved even in that case. That's brutal because as I say there is a possibility that they are victims of someone going over the top, but unfortunately I think MIT has to do it.

In addition, for me there is a much wider ethics issue here. How many papers can really be checked properly by someone claiming authorship even if that author isn't really contributing? I can read a paper like this in about a fortnight because I have a job and a life. A faculty member also has a job and a life - they are doing admin and teaching as well as research. So to me it's impossible for someone to check 25 papers or more a year.

I am seeing far higher counts than this by many academics.

But, this is an extremely conservative threshold in my opinion. When I have contributed to scientific papers it has taken me at least three months of solid work each time. Often these papers get rejected (rightly) and then have to be substantially amended (or occasionally just abandoned) I am not that talented for sure, but I really find it hard to credit that anyone with an actual job (so not a post-doc or a student) can contribute to more than one academic paper a year. Potentially two or three if there is a confluence of papers getting ready for print... but not on a sustained basis.

There are two solutions. Every university and research institute needs to investigate all the publications of academics with high paper counts per year. This is a red flag. I definitely think that if folks are in the top quartile in a department it needs to be looked at carefully.

The other solution is that no academic publishing venue (conference or journal) should accept more than one paper per year from any author.
Agreed, and due to the way LLM works, misinformation tends to look very plausible.
The article talks about songs about inventions, a couple that spring to mind:

Lily the Pink by The Scaffold (about a medicinal drink)

https://en.wikipedia.org/wiki/Lily_the_Pink_(song)

The album "Making of a New World" by Field Music is about the lasting impact of World War I and several of the songs are about inventions:

https://en.wikipedia.org/wiki/Making_a_New_World#Technologic...

Including sonar/ultrasound, skin grafts, sanitary napkins.

And Stainless Style by Neon Neon is a concept album about John Delorean's efforts to build the DMC DeLorean.

https://en.wikipedia.org/wiki/Stainless_Style
You can change the commandline string at runtime. You could inject a fake "-c correct/path" even if it's not there. (That's useful for other things too, like injecting the git revision of the app into the commandline)
I read that but there is no good technique to rule out close duplicates. I know because I had tried to build one for my product. At best it relies on BLEU, embedding distance and other proxies which are far from ideal.
just try using the unix command lsof

if you know the PID aka Process ID for the application yr running try lsof -p PID_NUM_HERE

it will give you a list of every open file your application is using along with it's full path

finally, if that gave you too many lines try lsof -p PID_NUM_HERE | grep -E 'txt|properties|config'

I know you wanted the files listed it in a help file however this will work 100% of the time

Best,
Stephen
Current a15 is still in 5nm but outperforms latest snapdragon that’s on 4nm - those fastest android arm chips matching iPhone chips from 2 generations behind last time when checked Geekbench
Wine 8.11
Imagine paying for a Harvard education and getting taught by a chat bot. Not sure they thought the optics of this one through.
I have never used a phone (nor a laptop) where the battery wasn't easily replaceable and to be honest I can't really imagine using one. Batteries can (and do) go bad and start expanding. Using a device where the battery isn't easily accessible feels absolutely distressing.
> So what is SUSE, chopped liver?

I didn't mentioned SUSE because:

- they are re-compilators. With long history and didn't sold in recent years, yes, but still small compared to RH. You can hear they do things, have customers not only from Germany so they have a lot of expertise but to my nose they are not realy self-sufficient without RH. They are more like small mechanic shop close to global factory - low throughput. Am I hand waving too much ? It's becouse SUSE pro&cons are not realy known. So moust likely they are small shop. Even if 2nd after RH.

- they use rpm's so with a bit of pressure or becouse of management wanting to cover asses they or their customers will easilly roll back to IBM

- SUSE do not look like wanting to be global. Not saying it is easy or even possible without controlling your own cpu's production...

Also:

- I asked for non-rpm distros

- I personally am burned out with rpms since 90's - blame RH for not implementing Debian like net features years after Debian did it

- git repo is better binary package. Source tarballs for LTS versions, done. IMO. And tar can be replaced by whatever in "tarbals"...

> Red Hat and SUSE have been around doing a lot, and it's a shame that so many people don't want to pay for actual commercial Linux expertise. :(

Agree. But easy to understood: a) MS is monopoly, Apple do not count as platform for development (multi-billion corporations don't count and even them do not develop on Apple - just modern "terminals" :) ) b) no serious RH alternative - as in: security and open source code development, including new features and apps
Deno major Outage
Can’t this argument be made for nearly all implementations of cryptography?

I trust Metamask and 1Password and Meta with their claims of not sending my secret keys to their servers. Just take their word for it!

I trust Apple with their claims about the “secure enclave”

I trust Google with their claims about Chrome not “phoning home” all my keys

I trust Intel with their SGX extensions (and Signal does also)

I trust AWS with their KMS (“key management service”) and so does Magic crypto wallet etc. and even “the experts” like tptacek tell is “just use AWS”

If we ran the national elections electronically, then in theory, Google or Apple could defraud millions of voters into recording incorrect votes and help steal the election.

Our hardware is made by only a few companies. They could have put all kinds of backdoors.

I am not going to go so far as to say the NSA promoted weakened EC2 crypto curves, but I guess it’s possible

But in general, everyone has a Trusted Computing Base:

https://en.m.wikipedia.org/wiki/Trusted_computing_base

Which is why I don’t want to rely on individual devices for security. I prefer a blockchain and having multiple devices secure data.
I think the best way to achieve this is by providing an OS API that results in the files always being created in the same place. Applications/libraries could still choose their own filenames and syntax, just the location would be OS controlled. I think there is room for a new desktop/laptop OS to emerge and one good idea from mobile OS design I would like to see is having everything be an API call that allows the OS to impose standardisation, permissions and user preferences rather than the free-for-all desktop OSes have (though I propose letting the user run non-compliant applications, and not porting the iOS app store only model into the OS).
Very true. Hell, even Python has them in a library.
https://web.archive.org/web/20230625092045/https://www.nytim...
It doesn't help at all that Microsoft's usual brand insanity infected this product. So whereas Sony have made the Playstation, the Playstation 2, the Playstation 3, the Playstation 4 and now the Playstation 5 - Microsoft names products based on picking a handful of "hot" words with no specific meaning, and so like a modern CPU you need to go read a detailed specification document to even figure out what you're actually buying.

Do we need Windows Azure .NET Live? No idea, maybe it's similar to Microsoft Active Core X except targetted at a different market? Here's a blurb telling us it's "For the smart professional", presumably as opposed to products which are only for dumb amateurs ?
I have heard the joke that MobileIron (an enterprise software for iOS devices) had its name because it turns you iPhone into a mobile iron.
Have you been to a bar lately and overheard people talking about politics ? They 100% are probability machine, of lower quality than ChatGPT
Fun trick to use if you use a css post processing (less, sass, etc.) is "&&&", it will resolve to a very specific rule which overwrites the other rules