skysight-inc/HackerNews huggingface dataset:
Seeing the discussions in these submissions doesn't give me that impression.

Instead, I am inclined to think that mass-flagging is being done by Stripe sockpuppets as a means of mitigating negative impact on Stripe's public image.
> Sad to them see it years later being a horny app.

This is like the LLM equivalent of Zawinski's Law (Every program attempts to expand until it can read mail. Those programs which cannot so expand are replaced by ones which can.).

As noted on SO [1], the second sentence is important too. People prefer horny LLMs.

[1] https://softwareengineering.stackexchange.com/questions/1502...
The intersection of probabilistic optimization and timing based side channels is a gift that will never ever fully go away.

Everything _really fast_ which is approximately any very mature systems gear has probabilistic optimization in it now, and that's where a great deal of modern performance comes from.

Even thermals and power draws produce side channels. Eradicating every side channel is untenable, research is required to understand what side channels are tenable, then we have to patch them up as best we can.

I'm waiting for the one where we find that binning is involved in an integrated way, and that some arbitrary sub-population of popular chips turn out to much more exploitable than others due to particular paths being disabled and leaking extra timing info. That'll be a really fun and awful day.
... You do realize that examples don't provide a constraint, right?

... right?

Anyway, you seem very confused with internet vernacular; everyone else was able to grasp the context. You appear to be the only individual experiencing difficulties. Just saying.
You seem to be on some mission on this thread, maybe you should take a step back and reflect the discussion and arguments.

1. Hate crimes are hugely different from battery/assault, so I'm not sure how your reference adds anything
2. Police data is not a trustworthy source, as police is biased too. Just check some news articles about police refusing to even take in a report about hate crime, where this is more likely to happen, and consider what this means for the stats you're quoting
What's wrong with debt deflation?
The issue is that no, it doesnt exhibit emergent basic signs of gi. It’s buggy software, nothing more. These people need to stop anthropomorphising their product.
Show HN: AI Art Generator and AI Art Search Engine
There's more money to be made in performance and efficiency than security. If chipmakers could design and build the perfect processor, they would. But like anything else complex, there are compromises everywhere.
TFA says Panama canal slots routinely exceed $350k so who knows. If there are times of year it's navigable, there could be lots of potential support services offered - keeping it clear of icebergs (if that's a concern), monitoring, ensuring a channel with the right depth, managing traffic etc., whatever is normally done in shipping channels.
The quality and depth of the analysis here far exceeds the work done by the original Korean team. It is very unlikely the Korean team has successfully manufactured the Cu-doped phase given the thermodynamic mountain required to climb, and its clear anybody attempting to replicate their recipe was essentially producing a random assortment of garbage.

The Korean team needs to disclose any alternative formulations or just accept failure and move on.
That's true, but it leads the odd assumption that the vendor managed to fix N side-channel attacks before release but 0 thereafter, while random individuals fixed M thereafter over a period of years with N >> M.

This seems to be much less likely than the conclusion that vendors are not in fact fixing many prior to the release and then stopping "cold turkey" after that. Especially since these attacks seem to cross chip versions, in many cases 6+ generations of chips: if vendors had substantial and increasing efforts on new chip versions they'd also be catching issues that applied to old released chips as well. We don't see that happening.
WeWork raises going-concern doubt, shares tank
FYI - Go no longer uses GOPATH for managing dependencies since the official module system was released in Go 1.11. There's still plenty of tutorials and the like out there that mention GOPATH, but it shouldn't be needed any more for basic scenarios.
>It prevents you from using apps that require it.

Then don't use that app. The app won't work on a different phone Linux distro either.

>The Amazon Fire phone was discontinued after only a year.

The Amazon app store still exists. Windows even partenered with Amazon to bring their app store to Windows.

>What investors? The purpose of Debian is not to make money, it's to make operating system.

Making a successful operating system is much easier if you have funding.

>30% of nothing is nothing.

Even the Ubuntu software store was able to find people willing to buy software off of it.

>Moreover, the 30% is a monopoly rent -- they only get away with it because they're the only viable store for that platform. Who is going to pay 30% in a competitive market?

That is part of the business strategy that will need to be figured out.

>They find new ones every year. :)

Yes, but it is something we can get better at preventing and detecting to the point where it stops happening every year.
>so a technically superior device might fail on the market just because of current players artificially blocking it.

Technically superior products can fail. A users choice on what to buy isn't just what in the most superior product. Apps not trusting a phone is a major drawback of a phone. It's not anticompetitive that apps don't automatically trust every new phone that comes into existence.

>Notice how users aren't defending that "security of the industry". Isn't it strange?

Because users on average do not care about security until its too late and damage has already happened. They don't care about how to stop spam, they just get angry when they get spammed.
>Using finger printing for fraud detection would only catch someone using different cards on the same machine.

In this context the goal of fingerprinting is to detect requests coming from an attacker. It does not care about the ability to distinguish between individual machines.

>Once a card is deemed stolen it stops working so it's unnecessary for that scenario.

The whole point of automating it is so you can cash out many stolen credit cards. If you only have one you might as well do it manually.

>Increasing that price means few customers lower revenue

Making more revenue doesn't matter if that extra revenue ends up getting eaten by chargebacks.
Setting up a one node cluster is as easy as typing kubeadm init. You don't need anything fancy for that.
Hospitals and public health systems owned and operated by city and county governments are not actually unusual in the US. They're fairly common.
Do they ever fall out / do you toss and turn much?
> Lisp makes this so easy to write macros ... Because writing macros is not that simple in the first place

You have to get your talking points all in a row.
>We should not destroy the entire internet to protect/increase adtech profits.

Yeah, ideally businesses wouldn't be built on this model (free service funded by ads at the expense of privacy and now user control). Then we might not have had to worry about widespread fingerprinting AND we can maintain user control too.
I quite agree! And would it even be harder for beginners? When trying a new a program written in a language I don't use frequently, I usually spend a good half-hour working out what command to run to install the dependencies and going through the logs working out what implicit requirement wasn't in the README. A holistic package, even one written for a different software distribution than the one I use (Debian at present), would immediately get me 99% of the way there.

PS. If you find yourself in the same situation I do, Repology is your friend: https://repology.org/
One of the favorite features of my custom keyboard is passsword hot keys.
> People of every background will soon be able to create code to solve their everyday problems and improve their lives using AI, and we’d like to help make this happen

Yeah, this is not going to happen. Anyone who has ever tried to gather requirements for software knows that users don't know what they want (clients especially lmao.) The language they use won't be detailed enough to create anything meaningful. Do you know what language would be? Code... Unironically, the best language for software isn't English. It's code. Should you specify what you want in enough detail for it to be meaningful suddenly you're doing something quite peculiar. Where have I heard it before? Oh yeah, you're writing code.

These tools are all annoying AF. Developers don't need half-baked hints to write basic statements and regular people don't have the skills to hobble together whatever permutations these things spit out. Which rather begs the question: who the hell is the audience for this?
Have you considered void? ip and ifconfig are both things, services are runit scripts like in 2008, snaps aren't installed by default, your firefox will never be replaced by a snap, you don't have to use gnome, and configurations are by default lean?

Keep in mind that availability of software is not as good as Ubuntu although you can use flatpak if nobody has created a package for something and you don't want to.
Yeah, I guess so! My bad for trying to fall back to something quantifiable rather than opinion and conjecture. Definitely not relevant.
Neumann has moved on to a new grift

https://fortune.com/2023/07/13/adam-neumann-why-marc-andrees...

SoftBank has had five consecutive negative quarters.

https://finance.yahoo.com/amphtml/news/softbank-qtrly-loss-n...
+1 for the big swoosh at the bottom of the file.
The DFT calculations were performed on a phase which is not possible to form via the recipe provided by the Korean team, as demonstrated by this latest preprint.

Which raises doubt on what the Korean team actually tested or whether they are withholding alternative recipes.
YouTube contractually must pay extra when people play music in the background. It's why it's a premium only feature.
Since Applied Cryptograhy and everyday since publication it's been well-known and well-understood that NSA's never-ending efforts to weaken systems to make it easier for them to do their work wrecks havoc and costs billions to everyone else. Luckily their attempt to get everyone to adopt a PRNG that was broken on-purpose was thwarted.

But who's to say that any chipmaker gets bribed to backdoor their design to allow the reading of any page of RAM from any protection level doesn't happen? It would make their job super easy.
> During the Troubles, police officers in Northern Ireland were regularly attacked by republican paramilitary groups.

They weren't attacked by Unionist paramilitaries because the police and the Unionist paramilitaries were the same people.
For specifically the 90s, its crime rate is genuinely better than the absolute horrible time of 70s and 80s. To this day when we say "crime is decreasing", in a fraud way we always compare it to those peak bad times even though compared to 90s it creeps back up (all of this is US specific). With collapse of Soviet Union and absolute victory of Gulf War, western world and especially USA is in euphoria until 9/11.
It seems like a perfect storm of more dry years, deforestation (although not much in the last decade), more water demand from the city, and more electric demand on the dams.
Is this personal cruising/yatching? Do they keep a vlog or blog? Looks like something I would be interested in watching
Anecdotally I notice this same issue. In your Firefox install do you have `resistFingerprinting` turned on, and do you have Firefox's anti-tracking protections turned on? It's possible if you're using a default install and if you're not using VPNs that you might never see a difference between behaviors. But that's only a guess.

My experience is that Firefox as a policy is not blocked, but if anything about my setup looks sketchy (I'm on a VPN, I have Javascript disabled, I'm blocking cookies, etc...) being on Firefox seems to make Cloudflare a lot less "tolerant" for lack of a better word.

I don't think Cloudflare has a policy against Firefox, but I do vaguely suspect that certain behaviors that wouldn't trigger blocks for Chrome do trigger blocks for Firefox (particularly if it's hardened). I don't have any hard data to back that up, maybe it's my imagination -- but it is what I personally notice.
Can you disable 5G? I can't, and it causes endless issues here. Lots of stock android controls are hidden, and it doesn't seem to be a carrier thing.
Rapid7 lays off 18% of employees
All that old information is terribly confusing, but it's not entirely useless. GOPATH is still critical, as it's how you can run fully-offline builds of Go programs and override dependencies without changing the root project itself.
x.com works right now.
Not at the moment but let me bring that to the team so we can brainstorm what it could look like.
That's the term/information I was looking for. Thank you
Your comment gives me an odd vibe that seems to imply a towns "worth" equates to its GDP
I don’t think it’s fair to blame the developer unless you can prove that they knew this was going to happen
Yeah, that one made me actually laugh. Keep it classy, GGPT.
there are a couple crypto programming youtube videos like that, remix IDE put up a warning at one point

its an interesting attack vector

provide educational resources with compromised examples

wait for dev or their users to deposit funds in the copy and pasted contract or dependency

long game, been wondering how well that worked
Less than two years ago, Adam Neumann was taking credit for the WeWork turnaround and SPAC merger.[1] Will he also claim credit now? It's not as though the problems are novel:

> As a result of our losses and our projected cash needs, which have been impacted by the recent increases in member churn, combined with our current liquidity level, substantial doubt exists about the Company’s ability to continue as a going concern over the next 12 months.

The same could have been written in the IPO filing.

[1]: https://www.youtube.com/watch?v=Dgp-CM-gQik
Well, you could technically connect some bodies of water and make the trip shorter, but ice would still be a problem.

The biggest issue while building the Panama canal was the accidented terrain, a lot of mountais in the way, something that is not a big of a problem so far north.
The person who called out "Don't Use Stripe" [0] tied a very legitimate account to their accusation.

jacquesm is a very prominent user, and called out another one for being too vague, with no reply [1].

The third was clearly selling an NSFW AI service [2] and admitted it.

The other three I'm willing to believe, I'm just cautioning against believing every submission you see.

[0] https://news.ycombinator.com/item?id=34036111

[1] https://news.ycombinator.com/item?id=34272248

[2] https://news.ycombinator.com/item?id=36969195
At the end of this video? https://downfall.page/media/gds_aes.mp4 They appear to match to me, albeit with the last few characters hidden by the timer. They are visible when the key is copied though.
> Even this sample could be marginal, going by the original paper.

If the sample they claim is superconducting isn't superconducting; why should we assume that this material is a superconductor at all? Because of some vague idea that their prof thought it might be more than 2 decades ago?
This is fascinating. I always joke to friends that earth is alive, just slow moving.

"Is a rock that gets stuck in your shoe just trying to travel?"

Does this theory have a name or a place I can ready more about it?
Yes, it does come across as a rather immature, unenlightened, productivity bro take on life.

My reality is that all wants are illusions. So to me it’s all a game. You can’t sacrifice anything ad those other wants and desires were never real in the first place.

Take time to be kind to others, go for a walk and then make some tea. Sit quietly at a table and avoid writing sanctimonious blog posts on productivity. ;-)
Especially once they get some of that Greatest Transfer of Wealth, ever.
> to remedy a form submission

The correct way to deal with an error in general is to return the form as filled by the user on the error page. Sadly so many SPAs just ignore this, that I usually manually copy before submitting any meaningfully sized text.

> I would probably just never go back to the site

Of course you would need to measure and reasonably reduce false positives. But in case you are serious about getting users to report them, an effective solution I've found with minimal friction is to fully use the mailto protocol scheme. Online shops can be static sites up to a scale, by adding product IDs and quantities to the mailto body, and having the customer order via e-mail.

> The only way this could work

Depending on your target audience, a CAPTCHA might not be possible.
My Samsung S21 running the latest Android (13) doesn't offer the option to disable 2G while keeping 4G/5G. The list is literally: 2G/3G/4G/5G, 2G/3G/4G, 2G/3G, 3G only, or 2G only. If you want to keep 4G and/or 5G you're SOL. Personally, I would prefer 4G/5G (as the 2G/3G fallback on my network next to useless outside the 4G/5G coverage footprint). Hopefully when Android 14 comes to the S21 it comes at least the option to disable 2G as described in the article.
I'm always waiting to be corrected and it's difficult since I correct myself and others don't know it.
Well, Alpine wouldn't fit that definition but is still a user-controlled Linux.
> Outside researches need to reverse all this by probing a black box

The kids are calling this activity "prompt engineering".
I hope my prior comment isn’t taken as derogatory toward Panama. Based on when I was last in Panama they’ve done a great job of governance. At least compared to when the Canal Zone was still an American territory. I think, overall, we Americans by 1970s ended up being detrimental to the growth and development of Panama. While it bothered me to lose my hometown I can see the Treaty was the right thing to do.
What I don't like about standard kubernetes (kubeadm) is how hard it is to configure pods being secure by default, so developers couldn't just mount host directories into the pods. You would need complicated configs for that and nobody does that.
The leap from thinking about your program with inheritance to thinking about your program with traits is large and cannot be overstated.

It's one of the reasons why Python developers don't like working in Ruby, for example.
https://github.com/huggingface/candle/blob/main/candle-kerne...

That’s the C++ variant of cuda, not Rust. They’re just binding it as one might in Python. At which point, what’s the value add?
I hope they consider this: https://github.com/deislabs/bindle/blob/main/docs/invoice-sp...

Bindle seems interesting but I'm not quite sure how to use it or whether it will take off anytime soon. Maybe cargo has some of its interesting features.
Another term I've seen used is "traditional Linux distributions" as opposed to locked-down/less general purpose like Android and Chrome OS.
Given the assertion that "More Than Half of Earth's Species Live Underground" [0] it makes sense that some significant amount of life exists below the seabed.

0. https://news.ycombinator.com/item?id=37047858
Does this help prevent scammers from calling me or spoofing someone else’s phone #?

If not, it’s way less interesting.
Does your service support payments with Bitcoin? / Do you plan to add support for paying with Bitcoin?
Rapid7 Lays Off Workers
My Samsung S21 running Android 13 doesn't have this option. My carrier is One NZ but from what I understand it's just stock Samsung firmware/software without anything specific to my carrier. Curious what Samsung phone you have, I wonder if it's only available on the more recent models.
honestly I think captchas that track you are stupid ideas.

For pow, can't you just turn the dial to more work?
You didn't have to think about this when you ran your code on your own chips; so it's your fault for backdooring the front end into the datacenter.

But now we have the 21st-century mainframe we like to call the cloud, where everything is shared. So I upload a container image with the vampire vuln intending to read all the activity on the host. Other customers jobs, the OS itself, even steal internal keys used at Amazon.

The motivation to do this kind of attack now is incalculable.
For the antiquarians on the site:

http://www.hashcash.org/
1. Hate crimes don't exist in Germany. It cant be measured like in the US because its not a thing.

2. You distrust police data and then tell me to refer to journalists instead. Same people who need to exaggerate their findings to generate income.

What am i doing here. You should be the one bringing up numbers on how Saxony is worse.
Ask HN: Have you ever done mailto: abusement?
Have you ever used mailto in a webpage, to set the subject and body?

It occurred to me that one could build an online store without a database, with JS serializing the cart into an email for the customer to send.

This would avoid the need of cookies, consent forms, database costs, and let you use just a static site and an e-mail address.
> Isn't a k8s cluster behind a network firewall?

Of course not, unless you configure it this way.

> RBAC would be useful in a specific case where you want k8 service accounts (no one uses these) to have different levels of security.

What? How comes no one uses service accounts? They're used extensively for many things.
This version of LK-99 is transparent? Have any of the other groups attempting replication noted the transparency of the material?
Maybe they're simply victims of Kernighan's Law of Debugging: "Everyone knows that debugging is twice as hard as writing a program in the first place. So if you're as clever as you can be when you write it, how will you ever debug it?"

There is no doubt that Intel make chips "as clever as they can". Hence, by definition, they can't fully debug them.
We can't have that. Big pharma doesn't get the check.
If you haven't already read it, then I can highly recommend Nick Lane's 'Transformer - The Deep Chemistry of Life and Death', which goes into deep detail on this hypothesis.

He's touched on this in a couple of his earlier books, I think The Vital Question and one other, but in general all his works are relatively easy to read, and worth the effort.
Although Valve promised to release the steamOS image publicly they still haven't done so officially.

I believe companies like Asus or Lenovo would greatly benefit from putting steamOS on their consoles instead of spending their own developer resources in trying to make windows work. It just doesn't.

I have an Aya neo 2, I put chimeraOS on it and although there's a couple details missing, it generally works very well, it makes the thing usable as opposed to having windows on it.
Unfortunate timing to be on HN - it only closed a couple of days ago. Out of interest, might you be able to share your paper/project here?
Who then? Distros? One of my favorite software engineering comics is "User Friendly" from 1999: https://distrowatch.com/images/other/userfriendly-comic.png