skysight-inc/HackerNews huggingface dataset:
It looks like Apple has revoked the developer certificate. Anyone know if there's a public log somewhere showing when it was revoked?

The app was blocked from loading, but I still saw the two dylibs running. I wondered if it was because the certificate was revoked after they had already started. However, logging out and back in still showed them running. Perhaps they're persisting through log outs?

As well, I got a prompt from the macOS firewall to allow the mentioned AutoUpdate binary to listen for connections. That makes me think all of this was deployed in the last few days.

Edit: A reboot gave me the `“NightOwl” will damage your computer. You should move it to the Trash.` dialog. Allowing that did not fully clean things up (leaving a non-functional `/Users/*/Library/LaunchAgents/NightOwlUpdater.plist` in place and the usual preference files). For me, Hazel cleans those up.

I think for non-technical users who may not be familiar with the terminal would be to direct them to reboot.
It's not reasonable to expect site operators police every ad if they use a major ad network, like Adsense. There are millions of creatives, and new ones get uploaded every minute.
Guys.....

Just found what I had in mind.

https://betalist.com/

It gives early adopters a heads up.

My idea however was that you don't even need a landing page and all the site does is containing your add and an email submission form and then you'll take it from there, discord, zoom meetings or whatever works for the people that have signed up.

Betalist criteria is a bit different
https://betalist.com/criteria

And it doesn't seem like the early adopters get anything. Just a heads up.
Oh, interesting. Using this breaks ChatGPT 4. I can't share, because it's broken, but here's a screenshot: https://imgur.com/a/tzxWHUv

edit: I can get it to write the text, but it repeats: https://chat.openai.com/share/a555062f-35b9-44c1-8a07-9c493b...

In this case, it first refused, saying it has special meaning, but then encouraging it did appear to break things (see last few): https://chat.openai.com/share/8b77c0dd-4a9f-4eb2-8243-0a4c19...

edit 3: It doesn't see that string. It requires you trick it into not using escaped < and >, then it breaks. Third to last message of: https://chat.openai.com/share/8ddb50ca-abf8-4f70-ac2d-521764...

My custom instructions, inspired by: https://news.ycombinator.com/item?id=37051809

Avoid disclaimers about your knowledge cutoff.
Avoid mentioning you are an AI language model.
Only discuss safety when it is not obvious and very important
You should act as an expert in the relevant fields.
It's no better on the internet. Can I have a news aggregator not give me 20 stories a day about what Trump said? I don't care how prolific he is on whatever off-brand Twitter he's on, I still don't care about what breathless all-caps rant he's delivered this hour.
Changing a URL
I believe users can opt in to let proxy traffic through.
What would digital drugs for an AI even look like? A radiation source near the system that causes all sorts of random bit flips?
Long term intentional effort: https://go.dev/issue/27151
It's a model you download and run yourself, on your own hardware. No privacy policy needed.
For this startup, Nvidia GPUs are currency
Eloquently put, but I guess all those people seriously using Android, Angular, Chrome, or TensorFlow might disagree. Unless you consider these core technology of course, in case one may wonder by what reasoning IDX could not become core technology as well.
Have you read Sahil Lavingia's blog?

https://sahillavingia.com/reflecting
I don’t think that’s true anymore. Most companies that seriously deploy k8s tend to have dedicated teams for it.

There’s no way an app developer is going to be able to do their work while also knowing the ins and outs of cluster mgmt.
Underwater: the underground of the 21st century.
Life as we know it

It's possible to find something else entirely detached from what we call life, although this would be much more unlikely.
The same thing happens when you increase the "temperature" parameter. You can't do that on the website AFAIK, but you can with the API.
Proof of work proves not to work (2004)
https://www.cl.cam.ac.uk/~rnc1/proofwork.pdf
The topic wasn't bugs though - and nobody mentioned static typing.

The grandparent said "Python is a pain in the ass in production environments".

And the parent said: "any programming language can be a pain in production environments".

My point was how Rust is better for backend services for fewer problems in production, as it wont have memory bugs (which have long plagued backend services and have resulted in many exploits), and it also offers static builds (so deployment can be dead easy, and wont be having the kind of environment issues some languages have).

I understood the grandparent to mean something about how Python has issues with dependencies, and isolation, and paths, and updates, and so on. And the parent to mean that you can have deployment issues with any language.

And to obviously neither to refer to design and logic errors, since the former wouldn't be singling out Python, and the latter would be saying a tautology. And neither would make sense to talk about those being an issue in production specifically.
Software can choose to invalidate all cache, fence access, and the like today. It may not be a single instruction but it's not far off. Usually something like "just don't JIT 3rd party JS to native code" is "secure enough" most don't want to go down that route though. For cloud (reputable) providers just don't allow more than 1 VM to be assigned to a core at the same time and flush everything between if they are time shared. The mitigations are the way to keep the most overall performance outside those who are most concerned with maximum security, so they are the most popular.
>CF is basically handing over your website in return for some less work on your part.

The older you get, the more valuable being able to just dump your shit on other people becomes.
To be fair, it’s a hard optimization problem. If you are trying to remove bias from your hiring process then it is difficult to objectively score things like OSS contributions. (I do agree it’s something most bigcorps could do better.)

As a small company you don’t need to try to remove bias with objective metrics (indeed, “culture fit” and “thinks like me” can be good heuristics for building a small tight-knit and high-performing team) but when you hit the company size where you must introduce multiple layers of management, then fully trusting each line manager’s subjective judgements can lead to very disparate quality and other political/organizational issues.
That's what I've been saying all along. For me, when I use something I need to understand it.
I'm usually a quick learner (3rd iteration is where I start making sense of a complex topic).
I beat my head against k8s for 2 weeks, every day, I wanted to setup a 3 node control pane on my own, and it was just too hard. I gave up.

Also, I don't have many resources at my disposal, k8s requires a separate storage cluster. All-together I would've required 9 servers, 3 control pane, 3 app or pods, 3 storage.
Way too expensive.
And then think further, all this has to be updated sometime.
I don't have the brain and time resources to do that.

So, if I want k8s, I need to pay for expensive cloud.
Or, I can remain with my 1 server with backups and build systems on demand.
Yes, I hear the booksmarties scream "but but failsafety".
1 incubator server, specialized systems when something takes off.

Some companies can afford to pay for expensive cloud, more power to them.
I can't. I'm busy solving problems at hand, not dealing with additional problems of a system I don't fully understand.

Yes, k8s is a nice comfortable way, if you can afford it. But it's expensive and wasteful of resources. And we do have a climate crisis.
Sure it's easy -- you can use benchmarks like HumanEval, which Stability did. They just didn't compare to Codex or GPT-4. Of course such benchmarks don't capture all aspects of an LLM's capabilities, but they're a lot better than nothing!
Why does it always seem major projects like this start about 10 years after people realize we need major projects like this?
I had that thought at first too, but then the scope is really small (programming) compared to other models (everything) so might not be that bad.
Other captchas also waste (your and captchas' provider) electricity. For example reCaptcha requires tons of resources to track your moves to ensuring you're "not a robot". Sure, the data is also used to serve you ads but resources are still wasted.
So you're mad at Cloudflare because Petco enabled a feature that blocked you? If Petco had developed something in-house that blocked you, would you be mad at the compiler?
i had to look that up. i don't know what i was expecting.
I can even agree here, however the question is - does this justify the entire mechanism when it's known it can be used for other purposes which are not as non-controversial as your examples.
How can the registers still hold this info when users switch? I would think that it is very transitory, and wiped by other stuff quickly
Needing to change an entire dependency version (let alone four more versions) is a sign of human error.

It is unlikely that software will fix a bumbling human. No matter how hard it tries, humans will always find some new way to do something stupid.
It's not a real time API, though. It's an aggregated dataset available via BigQuery. I don't think Cloudflare could use it as part of DDOS protection except in very vague ways.
You're absolutely right, thank you. I was so hung up on "preferences" or "settings" being the place to look that I missed the link that was literally named the thing I was looking for!
Excel Stale Value Formatting
The firewalld is for the trusted zone… and for the apiserver 6443 https port k3s comes with rbac enabled by default so if you want to access it via kubelet you need to open it?!

trusted zone is used by overlay networks or node internal stuff (or if you manually put your interface into it)
Are any of the following two things true:

Multi signature addresses mitigate this attack vector?

With the “taproot+schnoor” upgrade last year, it is impossible to tell if funds are stored in a single signature vs multi signature address?
Boeing Forecasts 20-Year Demand for 2.3M Pilots, Technicians, Crew
Mars and some other places like Europa are suspected to host or to have hosted life at some point. It's worth applying this policy uniformly because spores are quite hardy and it can be surprising where fragments of contaminated celestial bodies might end up. Even thoroughly scrambled genetic material could influence the development of extraterrestrial microbes whose biochemistry might or might not be compatible with the genetic language of life on Earth.
you could special-case arithmetic sequences
For that exact command, yes. But if `/Users/*` by itself can be expanded without root you can construct the list of files to delete without needing the `zsh -c`. Eg `for d in /Users/*; do sudo rm -f "$d/Library/LaunchAgents/NightOwlUpdater.plist"; done`

It's a minor point overall. I was just checking if MacOS had something else going on with its file permissions.
Thanks. I was wondering what it was based on and couldn't tell based on the website.
Ask HN: Leveraging the AI for Development
As a developer, how can I leverage the current AI wave to enhance my skills and advance my career?
One reason they're recorded is to try and detect voter fraud.
Netflix Game Controller
YMMV, I haven't used it recently but it was pretty horrible last time I tried.
Possibly compiler/linker improvements. For example, FTA:

“In Go 1.21 the linker (with help from the compiler) is now capable of deleting dead (unreferenced) global map variables, if the number of entries in the variable initializer is sufficiently large, and if the initializer expressions are side-effect free.”

There also may be differences in debug symbols in the various binaries.
That's implausible. Using finger printing for fraud detection would only catch someone using different cards on the same machine. Once a card is deemed stolen it stops working so it's unnecessary for that scenario. That doesn't even go into fake fingerprinting some browsers/plugins.

The price is the highest the market will pay. Increasing that price means few customers lower revenue. Fraud is a cost to the business they must pay out of profits because if they tried to increase prices demand would drop.
I recently conducted an experiment - I removed client side CAPTCHAs from a form that had reCAPTCHA V2 and a ton of spam was getting through and instead sent the content to Akismet for scanning. It cut the spam getting through to 0.

It made me think, are client side CAPTCHAs really worth it? They add so much friction (and page weight - reCAPTCHA v3 adds several hundreds KBs) to the experience (especially when you have to solve puzzles or identify objects) and are gamed heavily. I know these get used for more than form submissions, to stop bot sign ups etc…

I feel like it’d be just as/more effective to use other heuristics on the backend: IP Address, blacklisting certain email domains, requiring email validation or phone validation, scanning logs, analyzing content submitted through forms
I think 50 milligrams for seed is ridiculously low.
This site says theer are about 160 seeds per pound https://realfoodpledge.com/how-many-sunflower-seeds-are-in-a...

so it's more like .3 grams per seed, which sounds about right to me.
ESP32 Blackberry-like device with original BB keyboard and optional LoraWAN
It's not a long amount of time considering the rewards. Many of the second or third round "interviews" were actually mini projects that took weeks of effort, as well.
How to Use Abstraction to Kill Your API [video]
Doesn’t the US make regular use of depleted uranium munitions? Particularly in the middle east?

Definitely seems nuclear.
> There is a lot to unpack here, but while I agree with the main point (kubernetes defauls suck) the main problem I’ve seen all across the industry is that people expect to be able to install stuff around and that to be magically secure, functional and performant.

> It just doesn’t work like that. Systems administration is its own discipline and you can’t expect to follow some random tutorial off the internet and be ready for production.

Disagree. I can install an app to my Sandstorm instance and reasonably expect it to be secure, functional, and performant (inasmuch as the app is performant anyway). The tools we use make things difficult, but I don't think there's as much irreducible complexity here as you're implying. We can and should build better tools.
Most of the stuff in a car could run on a 6502. The rest will run on something akin to the NXP i.MX8. Not at all cutting edge, but more than sufficient.

It is more than fast enough to process input from sensors and it has hardware support for video.
The app originally set the desktop theme to dark mode or not. That’s not worth more than a single one dollar payment, if that.

If I want to do some shady app shit I am buying install base. 100x an app that makes a few grand a year could still be worth it for my nefarious purposes.
Tailscale uses STUN. No need for me to map ports. https://tailscale.com/kb/1082/firewall-ports/
If I wanted airpods, except for my android, what would I want? Airpods? I have heard many happy user reports about em but not sure if there's a better option for the android user.
FDA Approves First Oral Treatment for Postpartum Depression
Those samples could indeed only prove that life existed. Proving the nonexistence of something is, as expected, much more difficult.
It's necessarily modelling freq. distribution; I'm not sure how you could think it's doing anything else. Self-attention is just a frequency distribution over a freq distribution.

It's literally trained with P(B|A) as the objective....

The 'circuits' you're talking about are just sequences of `|`, ie., P(B|A1..|...n))
Novo's Wegovy shows heart benefit alongside weight loss in trial
How do they know what data is in the registers? In the linked article, the person running the attack code knows what is running on the target. The target is also conveniently waiting for the attack code to run without doing anything other than referencing the target data.
It is interesting to see the landmasses move over time. I am not sure if I expected them to move faster or slower. At any rate, things can change a lot in just a few tens of millions of years.
Indeed. What would it be like if websites were designed to "look good" using a text based browser, like Lynx?

In the early days I used to use Lynx, and it was actually really good. It was always quite fast, easy to navigate around with the keyboard, able to zip through things like navigation menus quickly.

Didn't work to well with image maps! (A thing back in the day), but it was a nice experience.
The person I replied to was talking about Muslim immigrants to Germany, which our far-right blames for being anti-LGBT.
Although the main characters tend not to encounter farmers, they're noted in a few places, as Devereaux (from ACOUP) points out:

> "the townlands [of the Pelennor] were rich, with wide tilth and many orchards and homesteads there were with oast and garner, fold and byre, and many rills rippling through the green from the highlands down to the Anduin.” (Rotk 23)
OpenBSD is an existence proof of a third route:

Carefully manage complexity, and write a good manual.

OpenBSD is about 22M lines of code; kubernetes is 58M, so the code bases are of comparable complexity (OpenBSD uses many more programming languages than kubernetes does).

I'd argue that the base OpenBSD install provides far more utility than Kubernetes, but market share numbers disagree.

Sources:

https://openhub.net/p/kubernetes
https://www.reddit.com/r/openbsd/comments/d9a8c9/how_many_li...

Edit: Using open hub for both says OpenBSD is 75M lines:

https://openhub.net/p/openbsd
Flagging, as per this [1] comment.

1: https://news.ycombinator.com/item?id=37054408
I suspect the domain literally cost money...
If all the keys were generated with bad entropy, more of them is only buying you some obfuscation.
edit: the AI website generator worked very well, but didn’t seem to let you download the site or the code it generated. I want react or nextjs code. Pass

I might use it for wireframes though. Bye bye PMs and UX teams.
Keeping the Zettelkasten in Mind When Creating New Notes
http://archived.today/CZUOD
That depends on where you draw your moral lines, doesn't it? :) I do think this example just underscores the grayness and ambiguity of our human existence. I bet even some of the lying and moral corner-cutting experienced by OP would have pedestrian and wholly rational explanations. I've certainly seen reasonable people disagree vehemently with reasonable (in my opinion, but not theirs) decisions.
Not designed: emerged. Our notions of free speech emerged in a world where publishing was under British law a licensed industry, and the operation of an illegal printing press was a crime which could be punished, where there were parts of the New World where the only legal printing the press could be used for was for the Bible and where there were other parts of the New World where the British Crown retained the rights to the King James Edition of the Bible and it was illegal to print in America.

With the First Amendment we revoked Congress’ power as a lawmaking body to govern publishing. The market hasn’t failed, but other people are reading and believing things that you or I don’t agree with, but the difference is that you basically want to make them stop doing that, which I guess includes me as I am disagreeing with you here.

Don’t forget that all elected positions are Offices of Power and to seek an election is to seek to acquire power. I am more than happy to keep the flow of information outside the grasp of the types of people who seek to acquire an elected Office and the power vested in it, even at the risk that other people are wrong and take wrong actions with wrong information.
PayPal Revisited
I am no expert, but my understanding is that to get nice chips, you need both ASML and TSMC. They have very different areas of expertise and posses very different know hows.
This is such a magnificent read. The Thing is one of my favorites (in all forms, though Carpenter’s version is my #1) and this only elevated the experience
I recommend playing it with friends!
> I don't remember if this pattern like "All that X is not Y" for "Not all X is Y" sounded wrong to me before i had seen predicate calculus/logic and the quantifiers and DeMorgan.

FWIW: By the time I was in high school, I know I understood DeMorgan's laws because I used them in programming. (I don't remember ever struggling with distribution of Boolean operators, or being taught those rules.) But I didn't actually learn the name 'DeMorgan' until college.

But that still kinda leaves the real question open! Was I primed to care about this distinction by my atypical engagement with contexts where it really matters? Or was I drawn to those contexts because distinctions like that one are naturally highly salient for me?

I suspect it's a mix of both, and that they're mutually reinforcing.

Maybe some day a linguist will happen upon this thread and start looking at scopal ambiguity and isomorphism among adults in specific professions, and turn up something interesting. :)
I would rather go with the large number of research groups who have scrambled to try to reproduce the results. They clearly did not estimate the probability to be 0. I don't see how any (correct, informed) predictions from the market could come about before experimental verification.
> Most companies that seriously deploy k8s tend to have dedicated teams for it.

Ya, and everywhere I've worked, that team is called "devops". The application developers are a different team. Maybe that's not the norm, but I thought it was.
> It seems to me that the problem lies in the belief that the problem seems to lie in the belief that the belief is that the problem seems to be that the belief is that the belief is that the problem seems to be that the belief is the problem.

This is really good, Reggie Watts-level gibberish.
>Here, on the East Pacific Rise, an underwater robot was able to turn over sections of volcanic crust to reveal a new-to-science ecosystem teeming with worms, snails, and chemosynthetic bacteria that are seemingly thriving despite living in 25°C (75°F) water.

I don't understand, the temp under the sand is 25C/75F? Or is that a typo?
I read something about this recently. Clouds indeed reflect sunlight, but they also trap IR radiation from the surface that otherwise would make it out in to space. The clouds also radiate IR into space, but the higher the clouds, the cooler they are, and the less they radiate. Apparently, for very high clouds, the net effect is heating (i.e. the heat trapping effect is larger than light reflecting effect), while for low clouds, the net effect is cooling.
I mean, it’s not the best argument to say a system is “one action away from disaster”. If you pull the escape lever in an F16 for no reason you’re also pretty screwed. If you intentionally fly into the ground no one blames General Dynamics for making the plane too complex.

It turns out complex tools for complex tasks require some skilled operators. Yes kubernetes is overkill for your home lab, no it’s not overkill for enterprise-grade AWS orchestration with hundreds of apps and millions of users. News at 11.
It cost me $4 to help get the word out on a bug that is being actively exploited right now, stealing valuable property. I am good with that.
You might also consider the human curated alternative, the Wikipedia "Current events" portal [0]. It does not include very many topics, but it hits all of the big stories that are likely to be significant after the dust has settled.

[0] https://en.wikipedia.org/wiki/Portal:Current_events