skysight-inc/HackerNews huggingface dataset:
What’s the threat model of TPM? They claim it’s for “physical attacks” but they can only enforce it when there is no software vulnerability or unauthorized privileged access anywhere so it’s a very small area of the Venn diagram where you have an attacker whose capability is “physical access” but also “does not possess any exploit or one-touch-access”. This narrows down the list to:

• Malicious coworkers, family members, and house keepers against a computer who is NEVER left unattended (i.e. screen locked when you leave 100% of the time)

• Local government agents (i.e. the local police) who can confiscate your powered on device but cannot afford to buy 3rd party cracking services that utilize exploits or more advanced extraction techniques (external RAM dumping)

• A device that is completely powered off and confiscated by a powerful nation state agent but not later on returned to the original owner and they forgot to wipe the device in case of implants.

In any case the design of TPM is completely flawed and suffers from “astronaut architects”. If you grep the three volume 1000+ pages of the TPM 2.0 architecture documents, you’ll not find a single mention of “threat model”.

Specifically TPM is a multi-million dollar industry signed on by many tech companies (including Microsoft who uses it as an excuse to get you to buy a new PC because TPM == more secure right, but also because older computers don’t support it) because places like governments and banks require it because they also don’t understand threat models.

TPM protection is fundamentally flawed because:

• It cannot protect against a compromise in the boot chain (e.g. a UEFI driver is exploited, and it lies to TPM about the subsequent stage of code that is loaded while running a malware implant)

• It cannot protect against RCE (remote code execution). This means if Windows ever has a vulnerability that can be exploited remotely, they can keylog -> steal your PIN -> replay it later to dump the key. Or just dump the key in memory if they have a PE (privilege escalation) as well.

• It cannot protect against a user volunteerly installing malware (Bonzi buddy?)

• It cannot protect against an attacker who installs something on your unattended computer (USB Rubber Ducky, Flipper Zero, etc)

Basically the most common ways people get compromised sees no protection from TPM while esoteric attack situations that no attacker will realistic attempt are protected.

TPM can never protect against these cases because it is logically (fTPM) and/or physically (dTPM) separate from the CPU. That means it cannot perform any policy enforcement against a CPU whose execution is under control of the attacker.
It's not `await` which is doing that; it's the Promises themselves. For example:

Promise.resolve(Promise.resolve("abc")).then(console.log)

This will print `"abc"`, not `Promise.resolve("abc")`.
> This thread is about the regulation of open source foundation models, not specific uses of them.

You think opensource models should be immune from the requirement to document how they behave and waht data was used to train them just because they are opensource?
Microui v2: An Implementation Overview (2020)
Oh I was assuming the launch was actually from Vandeburg in California and that’s why people said the hole was the size of California. But it could have been from Florida.
That's not entirely correct. There was a debate among the Navy and Army about whether they should or not or whether isolation was a better option. In the end they opted for isolation because due to Australia's geography (vast unpopulated). There is little doubt that if Japan had succeeded in the Pacific War that they would have gone after Australia (and Indonesia). It would be silly to write them off. The entire war was predicated over control of natural resources for an imagined future Empire.

https://en.wikipedia.org/wiki/Proposed_Japanese_invasion_of_...
It really isn't. State - really, conservative party - antipathy to Twitter is well-known. This antipathy was instigated by Twitter's role in incubating several large, progressive movements over the past decade: the Arab Spring, Black Lives Matter, the anti-TPP and anti-SOPA protests, the Umbrella Movement and its descendants, etc. We know this antipathy exists because many of the states vulnerable to similar movements and that have the power to ban Twitter have done so.

Twitter also allows for the real-time dissemination of information unfavorable to corporations, like during outages and accidents, and the widespread dissemination of less time-sensitive information by journalists who aren't beholden to corporate media gatekeepers.

Elon Musk's various ventures rely heavily on buy-in from the government - SpaceX relies on NASA's resources, Tesla has only been profitable because of generous renewable energy grants, and even Paypal benefited from lax oversight from financial regulators. That there is likely a relationship is less "Pizzagate" and more "Trump and Russian interference." And if you're going to pretend that that's not a damning analogy, all that does is expose how unserious you are about the matter.

All of that aside, there is also the matter of Musk 1) having had a checkered history with Twitter as it was, including its users, and 2) not having actually wanted to buy Twitter after his initial due diligence. Considering that his actions after completing the deal included firing most of the workforce, stripping users of multiple privileges, and stripping the company itself of its branding, it's not at all farfetched to conclude that he has no intention of simply renovating Twitter, but instead means to strip it down to studs or foundation and build a gaudy temple to his own warped sense of entrepreneurship. This is, after all, the man who insisted that the model names of his cars spell out "S3XY".
Mr. Porse is the most famous Porse of all.
I applaud the attempt to quantify.

Couple nits:
- frequency estimate should be more aggressive, should be looking for an upper bound on all numbers to quantify max potential impact. I would crank that up to once a day or more.

- a hole allowing twice as much sounds like a comolete guess. Could it be 100x, 10,000x? or perhaps less than 10%? Other comments make the ozone layer sound more important. The hole punching effects on that layer are unknown (to me and the article does not mention it). In effect, this could be a light show, or it could be a routine perforation of each layer of the atmosphere (more data needed)

- that extra radiation is not spread out across the area of the earth. Instead how many people and animals are present under that hole. Everyone underneath the hole presumably would get the full blast. Thus, it is simple, those people get twice the radiation, whatever that factor is, it is not averaged across the whole planet because it is a local effect. Thus, the area sizes only matter for determining how many people and animals receive extra exposure.

- starlink donated their services to Ukraine. That one act of donation does not make it a public good. Starlink is a for profit service, not a public good (some services can be quite good, but that is different from "a public good")
What do you mean? The FAQ (https://librewolf.net/docs/faq/) is prominently linked on the homepage, and goes into detail.
Having done some tech support before, you are an exception. The vast majority of things customers ask are along the lines of "how do I <thing explained on the faq page>" and "how do I <basic technical question that is not specific to the product, they just don't know how to use their computer>".

An LLM is basically perfect to answer these. It would be nice if there was improvements to detection that the bot can not directly answer the question.
I'm afraid that in my location by the time the roof pays off, the roof will be so badly polluted with pollen, moss, and residue from air pollution applied by the rain, that the fall in efficiency will render the entire system inoperable.
You may want to retake a middle school education on "work" and "thermodynamics"
Depends on the company. PNM (Northern New Mexico) doesn't ever reset unless you opt to get paid cash. If you decline that, you get a (so far) endlessly available energy credit, with which you get 1 free kWh for every banked kWh, so it is a much better deal than the cash paybacks, at least if your use exceeds your generating capacity for part of the year
everything COULD be digitized these days. I could put a tiny mic into your seashell.

But physically hiding or locking up your secrets still works.
HSR has multiple purposes, but if you think it isn't meant for commuters... well, it's not worth arguing with you.
Thanks for this. I didn’t know there was a name for this technique. If you listened to RFK jr on Lex recently you heard many many examples. And also Trump. I’ve only heard it described as “flood the zone with shit”, which is a reference to a football (American) tactic
So a one off garage sale run doesn’t seem “unreasonable” —they came upon it… accidentally or gumshoed it… but once it becomes systematic and pervasive I definitely believe it is in contradiction with the fourth amendment to the constitution of the US
General rule of thumb: any proposal by one of the big tech companies should be considered bad and harmful for the FOSS communities or anyone who still values their privacy in the internet.
Urbit's current chat implementation solves a lot of these issues and there's a clear path to things like search getting way better since all your chat data is stored on your local urbit.
It gets a lot more expensive when you factor in what the lawyers get paid
I've worked various jobs, but the most grueling one was at a glass factory. I worked for 4 years at the factory; part of it swing shift, part straight days, and part straight afternoons. I was mentally understimulated and depressed for various reasons. Working swing shift screwed up my sleep schedule, probably for the rest of my life. The upside is that I can go significant times without feeling tired. I think the longest stint I was awake was 38 hours with one hour of sleep.

I wouldn't want to do it again, but it made me thankful for the job and skills I have now.
Rather, it is the dilution of the meaning of open source because true and pure open source such as GPL or Apache is too powerful for some people to accept.
Github repo (not referenced in the paper)

https://github.com/vmware/differential-datalog
I was wondering if this counted its business in SK as well. The profits mentioned are in won, so I lean toward yes, but when I was in SK, fuckin' everything was Samsung. They even got Samsung autonomous autoturrets now[1].

How is Samsung not printing money? South Korea has the 12th highest GDP on the planet.

[1] https://en.wikipedia.org/wiki/SGR-A1
Only a whistleblower could make this happen.
>this is not a formal verification

Then what have you meant by "allows to formally verify"?

>Haskell example:

I think (I'm not gonna insist on it) they are misusing the word "formal" too. Formalization must involve logic/math, i.e. a formalism, either in code or in prose. Just having lambda calculus as a base somewhere deep doesn't cut it. Haskell's type system is known to be (logically) unsound/inconsistent for example. This is an executable specification imho.
Without having a real opinion on Esr’s eedits, a snapshot of earlyish hacker culture (whether or not conflating LISP and UNIX) is historically interesting. With tech today so mainstream and with so many subcultures and branches one could of course a glossary but it wouldn’t be the same.
sad that this guy could've continued doing good CS research as assoc prof but instead is compelled to do youtube and sell productivity courses of the three same rehashed ideas ad infinitum.
> The amount of inaction you’d need to be guaranteed to comply with the GDPR would be equivalent to never starting a business at all.

Tell that to GitHub for instance: https://github.blog/2020-12-17-no-cookie-for-you/
... It is not, but now I am curious. Is that a thing in the Britzone?
Guideposts from Just War Theory: Managing Covert Political Action [pdf]
Do they get updates?
> the archaeologists observed a local farmer plowing his field nearby. They figured it was worth paying close attention to, since stray finds are always a possibility. You never know what can be found near the top layers of soil. Sure enough, as the farmer plowed the field after the season’s onion harvest, the archaeologists witnessed the statuette coming up from no more than 15 inches below the surface.

Interesting how it went on and how the archeologists tracked the farmer for so long. I hope that the farmer was treated fairly.
This is my blog post, if anyone has any questions.

I'll add that since I wrote these two blog posts, other people have sent me their other interesting work:

(1) I link to this at the end of the post (using zstd dictionaries): https://github.com/cyrilou242/ftcc

(2) today someone sent me this (bag-of-words better than gzip): https://arxiv.org/abs/2307.15002v1
It's not a matter of one single identity. Whether you use one or multiple you have a real practical problem which does actually happen which is prevented by discord without the need for using a 3rd party tool or you have a selection of alternatives which don't. Giving discord your phone number (which theoretically could be a problem) is really not an issue by comparison (hint: while not exactly the paragon of virtue, discord in general is more trustworthy than a random user of it).
I recently found an awesome flash decompiler[0] and used it to get around site-locking on some swfs I downloaded years ago.

Some swfs require files from the sites they are hosted on but I downloaded them and modified the swfs to find these files on a local server instead.

So cool being able to modify the source code whereas back in the day I had to rely on hex editing to invert conditionals.

[0] https://github.com/jindrapetrik/jpexs-decompiler
Better solution: Just make your own for whatever project you're working with. AIWORD was originally a product of Stanford's AI community. Let it rest and make a dictionary that reflects the usage of your own group.

..........and mercilessly mock Eric Raymond for his pretensions. :D
Yeah, it's terrible compared to Apple. I tried an iPhone for a few months but just didn't like it :/
I wonder, do you still need to pay their ridiculous subscription plan just to access Dropbox sync?

See previous discussion: https://news.ycombinator.com/item?id=29000674
Well sure, I used a bouncer like everyone else because of this issue (and for persistent presence since I dealt with people in different timezones), but that is a workaround for a protocol that isn't actually reliable, which is sort of my point.
That depends on your definition of purpose. If the purpose is to be niche tech, then yeah, sure, you're right.
> It really isn't equivalent, this opinion just reads like copium.

So what is "capturing value" other than rent? And yes, I would hope that water wars were copium, but they might be a bitter reality soon...

> If I jump ship to a better paying job to capture more value, am I now the "rentier oligarchy"?

Yes that's fine, I guess you are anyways not very interested in community (which seems to be the thing with many people around...) - btw: what exactly will happen in that place if you have a car accident and can't work for 1-2 years?

> No, I just move to where the money is as it benefits me and also benefits the state who's taxing me to fund social welfare.

Good. But don't complain once you wake up in a dystopian, oligarchic nightmare.

> as staying behind and falling to do so means less wealth, less tax revenues, and less welfare for its citizens.

The US is clearly leading in the money metric and yet most metrics much more associated with human welfare (such as lifespan) are trending down... In that metric even Cuba is now better than the US ... There might be more to that than you assume...

> It will also heavily reduce your lifespan,

I guess either it's ChatGPT here or you are very deep in copium-territory...
This is pretty darn close

https://www.theverge.com/23727583/spacetop-augmented-reality...

https://www.sightful.com/
Those are interesting numbers but they only are half of the equation. Is this a crisis depends on: how productive are Japan’s workers?

Something like 80+% of America worked in agriculture in 1800 but now it’s around 10%. The information revolution has similarly made so many things incredibly more efficient. So how far does that ratio need to go before it’s actually untenable? And how much of whatever breaks do we actually need?
Personally, as someone with limited familiarity with Erlang, I had difficulty reading this site on mobile, due to the text wrapping on mobile. Maybe it's more intelligible to someone who's familiar with the language, but I would have appreciated scrollable, full width code blocks instead of text wrapping.
I'd be curious to see the timeline where IBM went with the 68000 instead, with a similar resulting proliferation of chipmakers and chips. Making Motorola compete, as well as having to push the envelope, could have led to some special designs.
What leads you to believe a solar roof will last "much longer" than 25 years?

>Since I dont expect a sudden failure in 4 years, my guess it that it will last another 10-20 years.

Oh, you're just guessing.
It is physical fact that each degree of temperature increase means the air can transport 7% more moisture and recent studies confirmed that the change in the last decades perfectly match the theoretical value.

price per watt decays similar to moores law. thus cloud cover, latitude etc soon become negligible though
For the record, I had 4x some small panels (165W) from a reputable company that shall remain nameless. They had a 10 year warranty.

Turns out that (a) the 10 year warranty actually meant "generating at least 90% of rated capacity in full sun after 10 years, but pro-rated across 10 years if not" and (b) they fell under this level after less than 5 years.
Around 20 minutes in, he gives his year total as around 54MWh (which is still insane to me, but less than a third-higher figure would be).

Looking at my bill, we average between 36kWh/day and 45kWh/day on all months except August (where I do put in the window shaker ACs and the usage soars to 65-70kWh/day). That’s for a family of four, lots of computer usage, working from home, and a 250W basement computer rack (6kWh/day on its own).
Personally, I think that all the nostolgia with cyberpunk, at least for me, is that I grew up in the 80s and Neuromancer was a formitave book for me... and the thing is, as someone who has helped build the tech world we live in --

"Wouldnt it be cool if" was inspired in me and my ilk that we saw these opportunities in tech, and though "wouldnt it be cool if we did XYZ"

And then, as tech nerds from the 80s - we brought as much sci-fi and cyberpunk as we could to how we built out the technoscape.

While being too young to understand the consequences of "what if"... and thus we have Snowden and Wikileaks, and 100% surveillance state... and now we have FN UAP confirmation in the USG...

Cyberpunk has basically molded modern society even if one may not want to acknowledge it.
Well this would be included in your payment for the service, a day care type home for regenerated humans. Maybe covered by insurance even.
Who are women over 30 dating then?

Yes, there are more single older woman over 65 but that is more due to the fact that men tend to die earlier. I don't think that women generally prefer partners that are ten years older. Certainly not in the 30s or forties.

So assuming the vast majority of relationships are not poly, the math does not add up.

Now it could be simply faulty data or differences in reporting based on gender but I would still love the hear a proper explanation of the data.

My personal observation is that both man and women tend to be similarly lonely when it comes to long term relationships but who knows. Would be glad if someone could prove me wrong.
Same here. I have two pairs of shoes of the same brand (one blue one sand) that’s comfy to me. I have ten Gildan white cotton t shirts, two jeans, two hoodies, and a jacket, and of course undergarments. I maintain this stock for under $200 and it lasts me a long time. When I move I can move using just my smol crossover SUV. The largest items I own are my desktop computer and monitors.

It’s just so easy to live this way.
> I say this as someone who at 40 years old has never learned to drive and who has walked/bicycled/taken the bus virtually everywhere I’ve needed to go.

I say this with no mockery or disrespect, just description . . . you are not normal. I mean in a statistical sense. Not only are you part of (maybe the last) generation who salivated over the thought of getting a driver's license at 16 and getting away from Mom and Dad, for the vast majority of Americans, this is a totally unrealistic ask for day-to-day life. Either because of urban design or else living somewhere rural enough where it's infeasible.

Urban solutions do not always work across a country as vast, huge, and diverse as the US.
You sound like the Dropbox guy. No one wants to jump 10 hoops for what’s considered a basic feature set nowadays.

Can you even write multi-line messages with IRC now?
> Then he got on twitter and started talking

Sadly, I've see this happen to several people I used to admire.
> You can't lose a message in the middle of a stream without the whole connection being closed, and your client would tell you about that.

I don't know what to tell you other than "that doesn't mesh up with the reality of my experience" shrug. Even if they did tell me about a connection issue (which they often didn't), those messages are still gone with no indication that I missed anything ("hey your connection blipped" != "here are the messages you missed while you were gone").
Family? Are we so broken that it doesn't pop out as an obvious choice? In China (lived there 10 years) I feel like many would accept this without even a moment's hesitation.
Go Face Bears
See also

https://news.ycombinator.com/item?id=26514456

https://news.ycombinator.com/item?id=33521561

https://news.ycombinator.com/item?id=27512224
Thanks for the hint. While they don't mention the issue in that post (and neither in the linked one regarding plumbing, where they say they regret libera's decision to request disabling portalling, like it came out of the blue), let's still hope it is fixed in this release.

Again, I find the communication from matrix' side absolutely pathetic. Yes I know, it's an open source project, I don't pay them, they don't owe me anything, but come on, wtf. I really wonder how many people have had weird miscommunication because of this and never became aware of it.
Sorry, more specifically, platform meaning reliance on Play Store or App Store. Work was also being done to build their own OS. That's been canceled for now, but I wouldn't be surprised to see it come back.
Accepting this logic: a top-end figure tells you nothing about the nature of the progression to get there. In particular, it doesn't say anything about the relative conditions on each step of the progression, nor (again) about how many make it up each step. The extreme version of this is, of course, how many food service and retail companies have billionaire owners while their lowest level employees qualify for Section 8 and food stamps. Clearly, there is a better way to represent conditions in such a company, beyond simply stating the CEO's take-home. (QED /s)
> IRC has "lost" many times before and yet it's still around.

IRC is no more relevant than the fossils that are still underneath the ground.

> while the previous "winners" are all gone or irrelevant.

So Matrix is gone and irrelevant?

> Even if Discord is tolerable today how long before it becomes terminally enshittified?

Even if that happens I can guarantee you that they won't be going back to IRC.
How do ambulances work in city cores if not roads?
For whatever reason, wind power tends to be back-of-mind for me. Clearly, I'm missing out!

What amazing machines!