skysight-inc/HackerNews huggingface dataset:
It is amazing how much of that incredible performance we can eat up and then end up with something slow anyway

And also the fact that we eat up just enough of that performance for it to be slow sometimes but usually no more, because we can’t
Show HN: Phase – open-source encryption and key management for developers
Hello HN!

We are developers and security researchers making tools for developers to encrypt data at an application level while maintaining sole control of their keys.

We believe that data should always be encrypted unless it is part of an active computation. Encryption is relatively easy, but key management is challenging. There are plenty of encryption tools and SDKs that are out there (Hashicorp Vault, AWS KMS etc.) but we are focusing on ease and speed of implementation, developer experience and self custody of keys.

A few months ago, we quit our jobs and started full time on Phase.

So far, we have created a dashboard to create, manage and deploy keys, a key management service (KMS) to serve encrypted shards of a private key to an app during each decrypt operation as well as SDKs for JS, Node and Python.

Give it a try (https://github.com/phasehq/console)! We’d love to hear what you think!

Website: https://phase.dev/
Docs: https://docs.phase.dev/
Russian Internet Censorship
> only the mildest concerns about risks and blockers was tolerable

What kind of value did this person provide to the organization? Plausible deniability?
Feom what I understand of these universities with endowments they use money to hire administrative staff and to "last forever". Teaching staff is secondary to those.
We have all three consoles due to kids. I play pretty much only on the steam deck. It’s been great for getting back into pc gaming. Currently replaying Oblivion on it but also a bit of Yakuza 0.
IANAL, but I'm wondering if this license really is GPL3? Because it's like a modified version of it - "GPL3 with a condition". From there, that possibly non-GPL3 license says that you can "use" the software, but not redistribute it.

But anyway it sounds like he needs to decide what he wants, and that's probably a non-open source license, if he doesn't want commercial use.
+1 for putting together that blog post on Cold Steel. Greetings from PH3 ;)
It's a very good question but I don't think it's impossible to probe what consciousness is merely because we can only directly experience our own consciousness.

There are plenty of other things that we can't directly experience but we can still use science to investigate them through indirect observations.

I think the biggest insights into consciousness so far have come from people with brain traumas and dysfunctional. E.g. people who have had their brain halves cut, or that guy who got most of his brain taken out by a bit of rail, or the Memento guy.

And it definitely is a thing that exists in our physical universe. A very weird thing, sure, but science doesn't say stuff can't be weird. We can definitely learn about it.

Maybe we'll never learn fundamentally what it is, but that's true of normal physical things like atoms and time too.
Above: someone tries humor on Hacker News. It goes exactly as expected.
PlayStation has a lot of exclusive games that have never come to PC, or only arrived on PC until significantly later—see: Killzone, Gran Turismo, The Last of Us until recently, Horizon Zero Dawn until recently, Dark Souls until recently, Bloodborne, God of War, Death Stranding. People want to play those games, and they want to play them now.
SOC2 is behind a lot of that. Companies need to be compliant to sell into enterprises. They don’t want to go through the compliance process for each individual team, so they try to standardise. Lots of locally optimised teams don’t necessarily make an effective and efficient system.
Xbox has the highest rated racing game (Forza Horizon 5) which is one of my favorite gaming categories.
Show HN: Time Series Benchmark TurboPFor,TurboFloat,TurboFloat LzX,TurboGorilla
GNOME's GConf says hi
>But eventually, you live or die by the bottom line. By contrast, a government keeps existing no matter how poorly it manages its finances. Look at Zimbabwe, Argentina, Venezuela, South Africa, Greece, etc.

That's just survivorship bias. Some counterexamples:

https://en.wikipedia.org/wiki/Fall_of_the_Berlin_Wall

https://en.wikipedia.org/wiki/26th_of_July_Movement

https://en.wikipedia.org/wiki/1997_Albanian_civil_unrest
https://lore.kernel.org/linux-bcachefs/5ef2246b-9fe5-4206-ac...

[...]
So, without intending any particular hostility:

<puts on maintainer hat>

bcachefs's x86 JIT is:
Nacked-by: Andy Lutomirski <luto@kernel.org> # for x86

<takes off maintainer hat>

This makes me sad, because I like bcachefs. But you can get it merged
without worrying about my NAK by removing the x86 part.
[...]

https://lore.kernel.org/linux-bcachefs/dcf8648b-c367-47a5-a2...

> No, I'm saying your concerns are baseless and too vague to address.

If you don't address them, the NAK will stand forever, or at least until a
different group of people take over x86 maintainership. That's fine with me.

I'm generally pretty happy about working with people to get their Linux
code right. But no one is obligated to listen to me.

>
>> text_poke() by itself is *not* the proper API, as discussed. It
>> doesn't serialize adequately, even on x86. We have text_poke_sync()
>> for that.
>
> Andy, I replied explaining the difference between text_poke() and
> text_poke_sync(). It's clear you have no idea what you're talking about,
> so I'm not going to be wasting my time on further communications with
> you.

No problem. Then your x86 code will not be merged upstream.

Best of luck with the actual filesystem parts!

--Andy

https://lore.kernel.org/linux-bcachefs/20230620201851.qrcabl...

[...]
> >> Andy, I replied explaining the difference between text_poke() and
> >> text_poke_sync(). It's clear you have no idea what you're talking about,
> >> so I'm not going to be wasting my time on further communications with
> >> you.
>
> One more specific concern: This comment made me very uncomfortable and
> it read to me very much like a personal attack, something which is
> contrary to our code of conduct.

It's not; I prefer to be direct than passive
aggressive, and if I have to bow out of a discussion
that isn't going anywhere I feel I owe an explanation
of _why_. Too much conflict avoidance means things
don't get resolved.

And Andy and I are talking on IRC now, so things are
proceeding in a better direction.
XML is the future
Wait, I thought Aussie coral reefs died due to global warming?
I wish I know how to do marketing ;) I'm just a developer i enjoy making automation to repetitive tasks That's when I came up with the idea to develop a tool that provides quicker access to ChatGPT, which led to the creation of Atua.

Here's a use case:
Imagine you're using Slack and want to enhance your message's quality. Before, you had to copy the text, go to ChatGPT in a browser, and request grammar corrections or rephrasing. This process was tedious when done frequently throughout the day. With Atua, you only need to create a command once and assign a hotkey such as ⌘+P. Pressing the hotkey activates ChatGPT to rephrase your text, allowing you to paste the improved version with ⌘+Enter. The entire process is smooth and automated.

While this is just one example, Atua offers numerous possibilities, including text translation, article summarization, coding assistance, or answering random questions. Everything what chatgpt can do
How is this 'better' / different than Sandboxie?

Edit: i see.
> If the universe is deterministic, how can punitive justice be justified?

Determinism doesn't necessarily mean that organisms always act in the same way. They act in the same way given the exact configuration of them and the world.

Obviously, justice changes the configuration of an organism (fines, prison, ...).
To me it boils down to the question whether justice decreases the likelihood to commit crimes again. Given that our systems of justice have evolved over a long time, I'd give them the benefit of the doubt.
Its second trigger is backwards.
Not the commenter you're replying to, and I'm sure you already realise this, but crime/punishment in a fully deterministic universe could be seen as a 'self correction' mechanism of the whole system.

One could imagine an impossibly vast cellular automata system which develops individual cellular 'agents'. Over time the agents develop some means of reproduction/death/reward system and become more and more complex. Then the agents that evolve with cooperative behaviours start to dominate. One might imagine that the system as a whole would also evolve these kind of 'self corrective' behaviours for anti-cooperative behaviours of the individual agents.

This is ignoring the whole philosophical ethics discussion and consciousness of course.
Also log files!
Yes, I was referring to the electric version. I forget that fossil vehicles are still sold en masse in other countries!

The point was really that the F1 Lightning is not a vehicle for personal use, and for work the buzz is much better.
So guix?
Ask HN: Has Apple Silicon's unified memory benefited your workload?
One distinct advantage of Apple Silicon is that you can get up to 96GB of of high bandwidth (400GB/s) for an M2 Max and up to 192GB (800GB/s) for an M2 Ultra.

Has anyone's workload greatly benefited from this architecture?

I'm thinking AI inference for models where memory size matters more than compute?
Updating is fine as long as it's from a auditable repository with full source code history, and built by a third-party like a distro (or the build is reproducible).
On M2 it is completely broken. Any usage of dtrace will hang the whole desktop. (Not sure if just the desktop or is it the whole kernel crashing)

Feel free to reference my feedback entry FB12061147 if you're reporting the same.
They key to making money in the stock market is to have a good balance between risk & reward.

Here is what I plan todo.

Have 80% is something that is very safe like 1 Year treasury bills that appreciate by like 5% per year.

The remaining 20% should be put in high-risk, high-return instruments like BTC (or other Coins you see potential in), Small Caps & Midcaps of companies and these tend to always appreciate way more than the index or large caps in a bull market.

- Be wear of financial euphoria i.e only buy in a bear market like this one and never buy in a bull market (you should be selli in bulk markets)

- Keep your quantity of shorting to Zero, statistically the market is biased to go up. The maximum you can make from shorting something like BTC is 100% profit, by going long how ever BTC or other stocks can easily grow by more than 100% like how BTC grew by 800%

I prefer this to index investing because the index can tank by 30% in one day and if your 100% in the index and the timing is unlucky i.e your getting ready for retirement, you may not be able to wait in the stock market to recover from these losses.

Being unable to wait for the recovery from losses is referred to as reaching an "uncle point"

The barbel-strategy I have described above of 80% T Bills & 20% high risk, high returns. Trys to eliminate these uncle points.

There are really only two solutions to risk management, either you reduce your, investment in risky assets or you invest 100% and buy insurance, otherwise your just a sitting duck for a financial meltdown.
Anything running as a daemon/service should support this capability IMHO, especially if it is servicing active traffic.
Also: processes / running programs should provide a straightforward way to show their configuration.

While "sshd -T" shows the effective configuration from all configuration file parsing, there is no straightforward way to see the configuration of the/a currently running sshd process.

This has footgun potential, as someone could think their sshd is secured and hardened by checking with "sshd -T", while the actually running sshd process still uses old configurations.

Apache also makes it needlessly hard to find out its effective (and active / currently running) configuration. I don't know of any better way then awkwardly using mod_info ( https://httpd.apache.org/docs/2.4/mod/mod_info.html ) to get such insights.
So a “registry”, of sorts :-)
Xbox has always had more comfortable controllers imo. This gen it’s closer because PlayStation finally copied the ergonomics from an Xbox controller.
You can use sysdig instead, which doesn't use ptrace[1] and is much faster (as well as generally more pleasant and powerful).

[1]It used to have its own kernel extension but is eEBF based these days.
It's a little bit away from the domain of config files, but I think CSS is the most graceful example of handling this as a generalised problem. Style configurations cascade, and the last one read is the one that gets applied. There are overrides to that flow, but you have to very overtly add a piece of syntax to the overriding line like `!important`. Two overlapping overrides revert back to the "last read" approach. The approach is so fundamental to CSS that the entire language is named after it, so there's no ambiguity or forwards compatibility concerns in this regard whatsoever.
Games. It's the same reason I also own a Nintendo Switch.

By the same token, I would happily own an Xbox as well if it had the games I want, but it's severely lacking in that department.
That’s my only gripe with obsidian.. I’d like sync between my devices that avoids central servers.
Just like fio, I supported the possibility to run the benchmark not with io_uring, but with the standard API. But, these results are quite difficult to interpret. Let's say, with the same number of threads io_uring produces more IOPS, but the load on the CPU is higher.
Amazon Prime Video’s microservices move doesn’t lead to a monolith after all
You don't lose your consciousness when you fall asleep. You time travel to the point where you wake up.
I'd add: everything should use configuration files that are stored on the machine. I know services that use configuration files and you are expected to upload them into the service using an IDE and a plugin to then store the config in it's database.
Climate lockdowns, they will claim, will do this. They will use the conveniently created lockdown framework with QR and cell-surveillance, to enforce compliance.
While I agree with this premise, taking an extreme view, practically all software which users routinely update are vulnerable to the first party / author being compelled to ship a harmful release.

The lack of a distribution trust model for the web has long bummed me out, but even snake oil E2EE
is a good thing because it makes an active (and potentially detectable) intervention necessary to exploit a client.

Supply chain attacks remain a huge mess. Unless you can validate the worthiness and authenticity of an update, or sandbox it sufficiently, most software can become a threat.

A more manual, opt-in update process for web apps (via service workers) would be a nice innovation, but I doubt it would provide much more safety to non technical end users, since the harder question is whether a particular update is harmful. Solving that verification problem is the crux of the issue regardless of how rapidly software updates.
> (ignoring the fact that t takes longer to build than the available time to transition)

We're reaching a point where anything we should do will take longer than the time we have to do it. That is a weak claim, given that the same is true for any solution we try to implement, and that late is much better than never.
E2EE not only protects the users against the company; it protects the company against the users. You can't leak data that you don't have. It makes compliance easier.
Like everything it comes down to trust. I fail to see how shipping Javascript to a browser schould be treated any different than code shipped to a phone or your desktop. Yes the frequency of updates is different, but other than that if you can't trust the entity that sends you the code that you run, you are out of luck.
A repository with history is not enough. It's easy to circumvent.
You need software packages reviewed and signed by trusted parties - aka a traditional Linux distro.
What do the trees in the Amazon breathe?
I found this true in the early days, but I think there has been some settlement on basic facts.

The Russians have not conquered Kyiv, their invasion has stalled but they have caused enormous damage. Ukraine has not managed to expel the invading army, though they seem determined to do so.

It seems like Russian sources have largely taken the mask off. They are there to weaken the West and strengthen themselves and are fine with that coming at the expense of Ukraine. They continue to call Ukrainians bad names, but it feels less like a serious critique of Ukrainian nationhood and more of a rallying cry for their own benefit.

The two sides do disagree on specific issues like who dropped which bomb where and who controls a given village but we seem to have moved on from the days when Russia was claiming total victory. Some of Ukraine's messages about the future are very optimistic, but it's always important to take forward looking statements with a grain of salt.
I share TeMPOraL's opinion.

I'd assume Apple and Google would seriously consider relocating if they were so ordered, even if they ultimately decided not to; but let's say for the sake of argument that they decide they have to supply the unencrypted content of messages of apps they didn't write running on operating systems they did write.

If I was an engineer tasked with doing that, I would refuse, even if it meant leaving.

But if I wasn't that kind of person, I'd have the OS take screenshots whenever a certain app was in the foreground.
Decent daycare is expensive, period. Think of it: if you want an employee for every ten kids (norms often don’t even allow this for toddlers), parents will have to pay ⅒ of the salary of such an employee.

Add in the cost of a daycare center (typically better equipped than the average children’s home), its administration, etc, and there’s no way daycare can be cheap.

The only way to make it seem cheap to parents is by subsidizing it.
> Zotero was key to finish my long delayed thesis, reducing the toil of managing a lot of references on a topic that I disliked more and more by the minute.

Exactly the same for me, I'm forever grateful.
> Unless you can validate the worthiness and authenticity of an update

That's the job of traditional Linux distros.

> or sandbox it sufficiently

That does nothing when it comes to E2EE.
Rust has explicit support for it in the compiler, which is not great.

Zig does it the right way - it's defined in zig itself, no special cases in compiler like in Rust.
> even when taking transmission and storage into account.

I would take reports that account for stuff never done before with a pinch of salt.
At first glance, $8/month might seem more affordable, but it adds up to $96/year. With Atua, you'll only need to make a single payment of $19, and you'll pay OpenAI exclusively for the resources you use.

You're free to use any model you prefer, including GPT-4, provided you have access to it. All your data is only stored on your device.

I offer a 7-day trial, and if you're not satisfied, I'll provide a full refund, no questions asked.
If the encryption happens client side (even in browser) then it’s fine, as long as you (only) can access the private key. How to prove that this is the case is a different question, is there a way other than open sourcing your code? I don’t think so
“OceanGate’s submersibles are the only known vessels to use real-time (RTM) hull health monitoring. With this RTM system, we can determine if the hull is compromised well before situations become life-threatening, and safely return to the surface. This innovative safety system is not currently covered by any classing agency.”

That is going to come back and bite them.
From a quick search, the switch has 122m units shipped to 116m ps4 units shipped.

Based on that, I’d agree that Nintendo and Sony are on pretty comparable footing - certainly not that one brand is notably more widespread than the other.
Because the punishment is part of the input that determines what you will do.

In fact, if free will were absolute, punishment wouldn't make any sense because it wouldn't have any effect on your will.
Most of the E2E claims are based on technicalities: like when you upload a file via HTTPS it is encrypted and then when you download it later via HTTPS, the transfer itself is encrypted. Therefore, E2E encryption.

In a previous life, the killer app for E2E was "encrypted email" where a lot of companies would claim they do email encryption by having outside recipients visit a website for which the recipient would get a password by SMS in order to read the email sent. And because the website was hosted by the sender on HTTPS... voila, encrypted email. And the sales people from this companies all kept a straight face when explaining how secure the encryption was.
1) The Russian militias about to be tricked to join Wagner against the Kremlin dodged a bullet directly to their heads.

Ukrainian army not reacting hastily to manbearprig's display was also a wise move.

2) The event showed how fragile are both (Kremlin and Wagner) currently.

Prigozhin has declined his unique chance to recycle from War criminal into a top respected politician in the PostPutinism. Making a lot of noise bragging about taking the Kremlin in hours, just to end exiled in Belarus has no sense. Is too risky unless the only point was a desperate attempt to escape from a certain death in the war front while saving face.

3) The recent visit of African leaders had some influence in the decision, probably

Wagner has been spoon-feed with African gold and diamonds since 2014, often taken by assassination and force. This can happen only with the complicity of several African governments and with Putin receiving a part of the loot. But the current lack of grain hits directly against the political survival of those people in power. Now everybody knows who is behind Wagner, so the African politicians must choose between either supporting Wagner (while praying not to be dethroned by them in the future), or not aggravating the man who holds the key of the grain in Kremlin (and, with luck, avoiding a situation of famine and rebellion by their own citizens). Goldmine's access could close for Wagner tomorrow, and Putin would still be receiving his part by a different channel.

4) Wagner's future is bleak and Prigozhin future is uncertain.

In the best of cases Wagner will be put in a icebox and let alone to lick its wounds but without a new sponsor the private army can't sustain themselves and will disintegrate in several gangs. Putin was Cesar once, but now is looking more and more like a new Nero, so Prigozhin could just wait the opportunity to return to PostPutin Russia, keep a low profile and have a future as oligarch even if Wagner don't survive. In any case Belarus could be a complicated retire, where a rogue tactical nuke could "malfunction" at any time, creating a plausible deniability situation for Putin. Lukashenko and Prighozin could be beheaded in one single movement, assimilating Belarus into Russia and giving Putin something to show and a sort of "victory".
There's a second trigger there for the grenade launcher, you can see this at ~1min.
So you could also build a low-fi BrowserStack or Lambdatest with this?
I think the same argument means any rpc type encryption is also
insecure.

Even if the encryption itself is done using a 3rd party trusted library that is definitely kosher, the endpoint may have been compromised to leak whatever information to the public web.

Ergo there is no such thing as e2e encryption unless you have military level control over both ends of the pipe
and the pipe itself.
There's also fs_usage that doesn't require disabling SIP:

https://mohit.io/blog/fs_usage-trace-file-system-calls-on-ma...