skysight-inc/HackerNews huggingface dataset:
> ASML's EUV machines cannot be reverse engineered.

Probably not as carbon-copy. But certainly important parts, or older versions.

ASML isn't just selling a millions-dollar-machine, they sell maintenance, support, upgrades, refurbishing. All these pieces are important in themselves, not just the whole assembled machine. Any single piece that can be reversed-engineered can be a danger to their moat.

This isn't just ASML, this is any hi-tech industry. I worked in power-plants, where ABB didn't just sell us gas-turbines, they sold a package, from Swiss engineers coming twice a year to help us tune them to "we now have these nozzles that make them 1.2% more efficient in hot weather, we can come replace them".
Or the story on the HN frontpage recently, where Russian airlines are running out of brakes: just imagine being, say, a Russian factory that makes, say, brakes for Tupolevs and you can reverse-engineer Airbus brakes and start making them. High margins guaranteed.

So yes: ASML is rightfully very careful with Chinese competion and espionage¹

¹ https://nos-nl.translate.goog/artikel/2280228-wat-heeft-de-c...
Quite concerning really, it seems there is absolutely no limit to the rubbish beast now the AI race has kicked off.
> 2^600 is approximately 1e19.

No, it's approximately 1e180. You're off by 160 orders of magnitude.
One of the projects I worked on a couple of years ago was audited by Radically Open Security - I was extremely impressed with the quality of their specialists.

They didn't find anything of course (in the the system I was responsible for) beyond a couple of remarks (which I believe we had already explicitly marked with comments as they were marked for improvement by our static analysis tools; think "you can use a better variable name here" and "this can be simplified by using guard clauses" level). Not bad for something built under extreme circumstances and very little sleep (6-month-old-baby + COVID + crunch + 2 other busy young kids = hell).
Because it's a fast way to get that interactivity, rather than having to explicitly code it yourself.

A good example are modern math videos on youtube, like this one (not saying that they're using G9.js in particular): https://www.youtube.com/watch?v=spUNpyF58BY

It's 20 minutes of changing graphics. You could code all of that with P5, and it would be an excruciatingly long process. G9.js would get you there in a fraction of the time.
The problem is that traditional audio/video captchas are not proof of humanity either. Captchas are a method for increasing the amount of work that an automated client needs to do to access your site. They do not block bots, they just impose a cost.

They're designed to block bots, sure, I agree. But we are burying our heads in the sand if we think that captchas imply humanity. They don't. The tests that they impose are not rigorous or strong enough to do that. What audio/video captchas do in practice is impose a cost in front of automated access.

We'd like them to do more than that, but the tech hasn't really ultimately worked out in that direction so even though we'd like a captcha to prove that a user is a human, what the captcha enforces is just a cost-per-request. Sometimes that involves paying a human pennies to solve the captcha, sometimes it just means turning on accessibility features and piping the captcha into a text-to-speech service. Either way, the final request can still be trivially coming from a bot (and regularly is).
Japan slides to record low 13th in most-cited science papers
Hard vs. Soft Line Wrap
> This project would benefit greatly from some screenshots

I can’t think of any project that wouldn’t benefit from screenshots.

I keep seeing project that seem really cool, but their creators do their absolute best to NOT show what it looks like, or what it does. This is a mystery to me.
Ask HN: Avoiding Pitfalls of *Not* Ass-Kissing Toxic Gatekeepers?
Hey HN,

I find myself navigating a professional environment that's high-stakes, pyramidal, and lacks the usual HR checks and balances. In such a setting, there's a clear presence of toxic gatekeepers who expect - if not demand - a certain degree of... well, ass-kissing.

I've personally grown into dealing with toxic people by not engaging in their games. This means not reacting to their provocations, not giving them the attention and praise they are constantly seeking, and not ass-kissing them.

However, a problem arises when these toxic people are gatekeepers.

While I'm not one to indulge in such behavior just to get ahead, I've noticed that taking a (silent) stand leads to unintended consequences - besides being seen as "uncooperative" and "not a team player" - too many times it results in outcomes I really want to avoid: being excluded from key opportunities, social sidelining, as well as facing retaliations.

Seeking insights on:

Tactful Denial: How can you tactically avoid the ass-kissing without finding yourself sidelined?

Navigating the Dynamics: How do you manage relationships with these gatekeepers without feeding into their ego?

Alternative Engagement Strategies: Are there other techniques you've employed that help in getting your point across without resorting to sycophancy?

Resilience and Integrity: In the face of these dynamics, how do you ensure you remain grounded, principled - and importantly - effective?

Anything that comes to mind, along with your experiences, strategies, and resources (online, print, etc.) on this would be invaluable.

Thanks in advance for the wisdom!
So basically the West giving up any and all claims it has or ever had had (given morally questionable behaviors in the history books) to moral legitimacy for the sake of climate programs?

I already strongly question the legitimacy of the US and anything it claims to be based on how they claim a permanent parasitical right to my life (e.g. worldwide taxation of nonresident US persons)

Your comment seems to imply such a world order could be stable enough to accomplish your goals, I counter that with: it wouldn't be more than a few months before we(poster exclusive) would turn to any level of force necessary to put them down.

None of the social engineering projects of the 20th century turned out, a wholesale violation of our most basic rights to try variations on the theme now really isn't negotiable. I almost hope it is tried while the memory of Covid is fresh enough that the number of people we need to be awake still are.
Yeah, this is really bad.

A few weeks ago I started using Simplenote again after not using it for years. Someone on Fedi recommended it and since I’ve become fed up with Evernote I thought I’d give it a try.

I should definitely know better than to use a free service without any SLA, and with only a forum for support… So I don’t really have anyone to blame but myself.

Fortunately I hadn’t yet stored that much data with Simplenote, so it won’t be hard to migrate away.
How do you actually make any money though? It costs you money to provide this service. Where is that coming from?
And open source maintainers are burning out or writing rants how no one wants to pay.

There is no “non commercial software” that is better even if commercial is bad it is still better than non existing one.
https://archive.ph/2023.08.08-171130/https://www.bleepingcom...
I'm all in favour of someone making a successor to capitalism that accounts for all the things that Adam Smith got as wrong as Karl Marx, but there's no guarantee that any successor is going to be better for the environment; and even if it turns out this (currently hypothetical) successor is good for the environment, we're on enough of a time constraint we should still try to convince all the people who think capitalism is The One True Path to do good things for the environment.
What is crazy is that he was able to raise 350 millions from a16z for what is basically a simple property management company. After all the sh*t he did. And then you go to a16z with an idea, and they reject it because it is not innovative enough. Then VCs wonder why 80% of their investments fail to produce the expected money on average.

https://techcrunch.com/2022/08/16/how-a16zs-investment-into-...
As a text browser user I thank you for adding that label.
It's pretty clearly what used to be called "archaic Homo sapiens", which is split today into at least Neanderthals, Denisovans, and "other". The article said they ruled out Denisovan, but didn't say on what basis. Denisovan morphology is not well known; the species/subspecies is defined mainly on a genetic basis. This article only looks at morphology, so all they really can be saying is that this mandible doesn't look just like the one known Denisovan partial mandible.
its sad he took the site down, it looks like a neat project. it seems to be fair use, so it really is just an issue of consent and keeping people happy. the issue is some people will always be fearful/miserable. should the rest of us be held back in exploring culture because they refuse to play?

anyway i'm sure there will be ten other similar sites by the end of the week...
im not discounting them, im well aware there is nuance in everything. Even so, those are my thoughts
I write C++ including the conventions around the strong units library we use. What this article promote as “better” seems pretty bad. They dont like `Money m = new Money(10.0m);
decimal amount = m.Amount;` and images prefer `Money m = 10.0m;
decimal amount = m;`. While it’s nice to not have to say `new`, the implicit conversion in and out of strong units is terrifying and defeats the purpose. For example, while I generally like C++’s `std::chrono` library, it s `duration` types have a `.count()` member function to extract the number. But if you change the type from `std::chrono::seconds` to `std::chrono::milliseconds`, then `.count()` silently changes from “number of seconds” to “number of milliseconds”. For full safety, you need to name the units to “unpack” them. E.g., `Speed_mmps speed = 10.0_mm / 2.0_s; float speed_mm_per_s = getCount<Speed_mmps>(speed);` where if the type of `speed` changed to furlongs per fortnight, the `getCount<Speed_mmps>` call would either not compile or be correct up to floating-point precision.
Not impossible but there are risks in that plan. We could be in a similar problem than chatGPT is having, where part of the combinations would end being wrong and generating newer info, that would reinforce the error.
> biggest revenue source is ads

I don't think that's true if we group all the subscription, "strategic partnership" and other engine related revenue together but yeah, but Ads is about half.

To be fair it might not be that bad because there isn't that much revenue to gain from engine sales, especially using a subscription model (though I don't think royalties are bringing that much revenue for Epic either..). Unity is quite expensive if you're a hobyist, indie or just use it occasionally but it's dirt cheap if you're a mobile ad-filled P2W shovelware developer. IAP is monopolized by Apple/Google so Ads allows Unity to get a bit larger bite of the pie compared to the pittance (compared to overall revenue games made with it make) they get by directly selling the engine.
I typically agree, but I don't think its as simple as a "screenful of lines" criteria.

I find it useful when most of your work is wiring other command line tools together. When that's most of your work, shell scripting feels like it has the best affordances.

Anything that gets too fancy beyond this, with anything that resembles an algorithm or computation, you'll feel real pain :) Bash doesn't even support floating point!
What is the thought process that goes into thinking such a thing is a good idea, then proposing it, arguing for it, and then it being approved (presumably) by product managers and executives?

It's just a downward spiral at this point as each new generation of software and each new year brings a worse and worse privacy default with even more self-justification and half-assed anonymization.

Drivers need to know website usage statistics. Are we really here now?
For the vast majority of services, dump the passwords requirement then.

Physically stealing a token from me is a much riskier, less scalable attack than slinging hashes from someone's hobby site into GPUs.
And as with my job example, the labour market is free for anyone to join.

But stopping at that and taking a laissez-faire attitude is a position with implications.

Just like failing to switch the junction and allowing the train to run over X people.
You can't say "I didn't do anything" you didn't, and X people are now dead.
> Homer had visited windy Troy on a clear day when distant Samothrace was visible … I like to think he had walked south, like Chryses, beside the shore of the booming sea

This passage sounds a lot like the writing style of the ancient classics. I assume the reviewer chose it on purpose for that reason. I don't know that I need to read this book, but I appreciate that apparently it's a work of passion and enthusiasm.
You mean like RSA SecurID?

https://en.m.wikipedia.org/wiki/RSA_SecurID

AFAIK they are still in common use in high security environments. I have one for work, but we are supposed to eventually migrate to phone-based token generators.
The image is too low-res to see the model, but you can see the Lattice logo. This picture[1] is a little better, but still pretty grainy. Best guess is "Lattice ICE5LPxx", where I can't quite make out what the "xx" is. Maybe ICE5LP1K ?

https://retro8bitshop.com/wp-content/uploads/2023/08/F2eV4mB...
It is shocking that all the content of the article is not in the title.
As I understand it, it's somewhat encouraged by the government. China's the sort of place where, if the government has a preferred wacky theory, one may be inclined to smile and nod rather than arguing.
Don’t forget that the VCs backed him again on a somehow even shadier, blatantly dystopian startup idea with a metric ton of money again [1].

1. https://fortune.com/2023/07/11/adam-neumann-new-company-flow...
Not really. Stuff like this is shown around from time to time as a massive "gotcha" kind of thing for a few languages, but it's really just the nature of boxed primitives and interning (=literal bindings).
I have a boxed C64 that hasn't been turned on for over 20 years

I thought I'd try to turn it on but got spooked by the requirements for the PSU

I understand it needs ripple free 5VDC 2-4A+ through a 7 pin din

Am I really going to blow the unit up with a switch mode, does it really need linear regulation?

What's stopping me using 2-3 LM7805s in parallel?

[Background] former burnout frontend dev working at an electronics shop
> I always expected to become fluent in bash at some point, but the AI became too good at writing my scripts now...

This page :

https://mywiki.wooledge.org/BashPitfalls

Is the fastest way of becoming proficient with shell scripting. Whether it's pure posix shell, or bash and its extensions, they're small languages and can be learned in a week end if you're proficient in another programming language. The main pain point is that there's a lot of "surprises" and non-intuitive behaviors, that are all listed here. The first ones, about parameter expansions, quoting variables and leading dashes are the most common issue with newbies in shell scripting.

There's a lot of amazing tooling these days to make sure your shell scripts are fine too.
First, shellcheck:

https://www.shellcheck.net/

I systematically run this on my scripts before using them.

Then shfmt for nice, reliable autoformatting:
https://github.com/mvdan/sh

And finally, checkbashisms if you intend on making pure posix scripts that are compatible with debian/ubuntu's dash. It is part of the debian's devscripts suite, but is often individually packaged in other distros.

> Also you can use the chat as a learning tool

Or you could learn from a guide written by people who have suffered decades of experience of the pitfalls of shell scripting and have shared their woes.

https://mywiki.wooledge.org/BashGuide

chatGPT is good at coming up with magical solutions, but teaching you about all the corner cases?
You say that, yet I can ask these people something. Not so much with those who wear headphones, I have to gesticulate to catch their attention, or (gasp) touch them :)

It's an all-in-one device, so everybody uses it to do something different. Some listen to music, others play games, most seem to stick to scrolling Instagram/tiktok/whatever. I personally reqd my RSS and help people out on IRC during long rides. When commuting regularly, I tend to take a book with me, as that requires a longer commitment.
> That governments skip the private sector coercion entirely and just add their own devices and logging in the middle, which came out of the Snowden leaks as normal 10 years ago.

In the U.S, VPNs are not effective against targeted surveillance. But they very well may be effective against government passive surveillance programs like the President’s Surveillance Program.

The Snowden leaks revealed many things. What stood out most to me about them was that the government _tried_ to stay within the confines of the law. It was a very twisted, contortionist, interpretation of the law, but they did try very hard to stay within the bounds of the legal theory that allowed the program to exist.

Based on the leaks, if you’d have been running HTTPS over a VPN during the PSP, it’s likely a good portion of your traffic would have evaded the program.

https://everytwoyears.org/2020/07/13/tactical-privacy.html
Embracing innovation and automation – the future of buy-side trading desks
> People will break administrative rules and regulations all the time if they get in the way of work

The example I like to use is that the more paperwork you require for something like "obtain an internal use certificate for API endpoints" then the direct consequence will be less encryption of internal API endpoints.

Note that I didn't say "there may be", or "I predict that". No. It's a guaranteed consequence, like gradient descent making AIs better at meeting loss function. Except that it's gradient ascent, and you're making it steeper and expecting people to climb harder instead of just going around your pointless obstacle.

"More paperwork" -> "Less security"

"Less paperwork" -> "More security"

Choose.
>Unity is a game engine company that hasn't produced a single game, moving into film making tools by never producing

To be fair this isn't that different from Adobe or Autodesk for instance. Aren't most professional tools, middleware etc. like that?

Historically game engines seem to have been an aberration in that regard since they were almost exclusively built in house and they sometimes made available to third parties with very limited commercial success in almost all cases.
It should not have been possible for that photo to have been taken anytime or anywhere since 1946, even during Manhattan with war deadlines it should not have been possible. That it was and as late as 2011 is of grave concern. Frankly, I find it very difficult to fathom.

Years ago when I approached my first reading of the full accounts of Slotin and Daghlian I did so as with any other info, since then I have forced myself to reread them several times as a reminder—as both the accounts and photos are grim. They ought to be part of compulsory safety training for anyone vaguely associated with the nuclear game.

Perhaps, as part of that training there should be more acting out roles with dummy materials similar to military exercises where adjudicators tag one as dead for making a 'lethal' mistake and can play no further role in the exercise. This may seem trite but it's not, being forced to play dead on the battlefield whilst the exercise continues because of one's incompetence is both formative and embarrassing (I speak from experience).

Moreover, like military training, the exercises should be practiced until one's actions are automatic.

That said, such training ought to be a second-line defense—as fastneutron rightly points out—as such work environments ought to be engineered to force compliance.
It wreaks havoc. I think wrecking havoc is probably the opposite to what you meant.
FWIW, the company behind Obsidian also offer a paid sync service.
I can't imagine how it would be otherwise! The process described in that Reddit post reads like a parody of tenure-track searches in academia.
Mark ran into some issues with clueless US officials and was not allowed in the country for a while.

Maybe that's what it said what it said.
I may have to get rid of my Samsung phone because of this. There is no way to turn off 5G or 5G UW. I often find myself in an area where the phone will cling on to 1 bar of 5G UW and it's unusable with websites refusing to load. On an iPhone you can just turn off 5g and fall back to LTE. On this Samsung phone my only option is to physically move to another location which is unacceptable.
I’m with the artists on this one. Our obsession with converting everything into input for an algorithm that spits out an ill-defined number (what the hell is “vividness”?) needs to stop.

We already tried this with human communication and gave birth to the dystopian nightmare that is social media, why keep repeating our mistakes?
Review: Beepy a Palm-Sized Linux Hacking Playground
Perhaps that apocalyptic event is the closest thing we can imagine to changing fundamentally.
I liked the spaces but their price are crazy expensive. It makes not sense to spend so much for a wood desk and a chair.
This is an incredibly biased article, hinging entirely on the assumption that AI training is fair use.
Given that it's in the West I still think it's probably NSA compromised, but I'm not nearly important enough for the government to blow their cover about.
I am not against behavioral interview if it’s part of the loop, but these attempts to force candid to answer some standardized questions make no sense. Especially you can easily come up with many of the answers using GPT now a days anyways. I for one don’t even have access to these when I interview candidates and I am pretty sure HR doesn’t even look at them or even have a quantitative way to judge them or verify their authenticity.
Experiencing scientific revolutions: the 1660s and the 2020s
https://archive.ph/2023.08.09-112942/https://gcaptain.com/pa...
Something that we need to learn is that these brief outbreaks on social media burn themselves out pretty quickly. Everyone shouts for a bit and then moves onto to the next bit of manufactured outrage.
IIRC every human population (possibly non-African?) has some Neanderthal DNA. I believe Asian and Oceanian groups also have Denisovan DNA.
The AP1000 is a good design, and China will upscale it (CAP1400) whether the US gets off its ass or not. Check the history of AP1000 including proposed units overseas ( https://en.wikipedia.org/wiki/AP1000 ). Yes there has been pain in Georgia (Vogtle) but the pain has been self inflicted, check out the challenges they've faced since 2010. And look at China's record: "One remains under construction at the Vogtle Electric Generating Plant in the US, and one came online in July 2023. As of 2019, all four Chinese reactors were completed and connected to the grid."

Long and short, the AP1000 was the LAST chance to get 1GWe/unit nuclear up and running the the US. People who hate nuclear energy (without saying so) are pushing "small modular reactors" knowing full well that the grid economics will fail. The Church of Environmentalism has granted indulgences to its followers who advocate for "small modular reactors" and "fusion" so they can continue to throw a monkey wrench into clean grid energy. And these are the people who like EVs, go figure. Their grandchildren will be walking.