skysight-inc/HackerNews huggingface dataset:
The real problem here is the x86 architecture. We should stop using it. It's too complex, it's full of stuff made for backward compatibility purposes, it has too many instructions that may have unpredictable results, and for that exact reason it's extremely difficult to get things right. Somewhere in the thousands of instructions that it has you will surely find a bug.

We should move forward. Apple did a great job with the M{1,2} processors. Not only they are fantastic in terms of performance and energy usage, but also (to this moment) they don't seem to suffer from these issues. The reason is that the CPU is simpler, and a simpler thing is easy to design right in the first place.
A new clue to the reason some people come down with long Covid
We used the broken algorithm from `bx` in a custom Rust program to brute force this.
I don't understand what you mean by the possibility of making a 'light grand'. Surely no amount of weighting can get around the fact that it is harder to lift a object up against gravity than it is to move it sideways, all else being equal. As such, I would expect a grand to require more force than an upright of comparable quality and leverage. Please could you elaborate on this?

The latter half of your comment I would agree with entirely; I would enumerate the factors like this:

1. The hammer falls down to its resting position with grands. This allows it to return to its resting position faster, at the expense of greater force required to move the hammer.

2. The double-escapement action of grands allows the hammers to strike again without the key having been fully released. This increases the maximum rate at which the same note can be played in succession, but again at the expense of greater force required because of the lack of leverage when not using the whole distance of the action.

3. Double-escapement mechanisms can be found on uprights, but these are different from the traditional grand action and are exceedingly rare. (From a cursory search online, the only such upright I can find currently for sale is the Bechstein Concert 8.)
Thanks! That's the push I needed.
I put stuff in systemd units and route them on HAProxy. For home network it's more than enough. Occasional container if app is designed so badly the authors can't figure out how to make it easy to install or package
Im on brave mobile and it downloaded the pdf automatically when I clicked the link.
No. That's not what is happening here - we have made the planet more vulnerable to these events by changing the climate otherwise this eruption would have simply been situation normal. Now it is going to cause us problems.

The alarmists in this case are on the right side of history.
> I don't think there are many $100K+ jobs for general project managers

I hire project managers and I would say this is very location dependent and also very industry dependent. Find the right type of projects in the right industry and $100,000 should be very very achievable in a medium-cost-of-living city. It should be a no-brainer in NYC or SF.

That said, again depending on industry and type of projects, there’s a lot of risk in switching jobs for 20% more salary. How long until those projects dry up and you’re first out the door?
The imminent death of the Pac-12 is the point of no return for college sports
Put another way, that estimate means "between 4.32 and 8.64 seconds per line, 24 hours a day, no breaks whatsoever", so... No.
Apparently the perpetrator who sold out their users to the highest bidder is named Benjamin Kramser and they even freely admit the deed on their homepage! (https://www.kramser.xyz/)
That is correct, you still have 2^32 permutations of possible values.
So since when is the YouTube home feed a feature that requires watch or search history? It's hard enough as it is to find interesting new things if history is on, because the goal for the algorithm is to present something relatable to me.

All social media really does is to isolate people by not showing alternative points of view on the world.
Please rename to "Blocked by Firefox"
I considered this, but we have pretty good evidence that the chipmakers have not been busily secretly patching Spectre attacks:

1) Microcode updates are visible and Spectre fixes are hard to hide: most have performance impacts and most require coordination from the kernel to enable or make effective (which are visible for Linux). There have been a large number of microcode changes tied to published attacks and corresponding fixes, but no corresponding "mystery" updates and hidden kernel fixes to my knowledge which have a similar shape to Spectre fixes.

It's possible they could wait to try to bundle these fixes into a microcode update that arrives for another reason, but the performance impacts and kernel-side changes are harder to hide.

2) If this were the case, we'd expect independent researches to be at least in part re-discovering these attacks, rather than finding completely new ones. This would lead to a case where an attack was already resolved in a release microcode version. To my knowledge this hasn't really happened.
Why shouldn't you be able to disable 2G in normal mode?
eh, modern ECUs, accident compute, etc are doing timing and tuning calculations in real time such that you need something a little more adequate. A 40mhz PowerPC CPU with an FPU, for example.

Aside from mandatory ADAS, most cars can definitely get away with "90s tech" but probably not "80s tech"
Transparent PNGs using CSS filter:progid:DXImageTransform.Microsoft.AlphaImageLoader is my shudder. Flat design would have made life so much easier back then.
I hope so; modal editing is an evolutionary dead end designed for Lear Siegler ADM-3As that had half the keys modern keyboards do and which had arrows printed on the HJKL keys for some reason: https://upload.wikimedia.org/wikipedia/commons/7/77/Adm3aima...
> But wait, how is it even considered a processor bug ?

These side channel attacks allow an attacker to read registers from other processes before any context switching has occurred, or independently of any context switching (even if the OS has been written to correctly clear state).
These are all examples of businesses that should never take VC funding.

These are all bank loan types of companies. Why on earth they would go the vc route makes no sense.
I agree, I think it's awful. It's a waste of everyone's time and insulting to people who have a problem and feel slightly vulnerable. People aren't just numbers or conversion rates, and especially in digital health they should be treated respectfully.
Looks very much like infinite wisdom of neural Paul Graham.

http://karpathy.github.io/2015/05/21/rnn-effectiveness/

Let me quote:

"...We can also play with the temperature of the Softmax during sampling. Decreasing the temperature from 1 to some lower number (e.g. 0.5) makes the RNN more confident, but also more conservative in its samples. Conversely, higher temperatures will give more diversity but at cost of more mistakes (e.g. spelling mistakes, etc). In particular, setting temperature very near zero will give the most likely thing that Paul Graham might say:

“is that they were all the same thing that was a startup is that they were all the same thing that was a startup is that they were all the same thing that was a startup is that they were all the same”

looks like we’ve reached an infinite loop about startups."

If I understand correctly, transformers are auto-correlating machines (their output gets fed to them as input) and it is not unexpected to see them get overly excited on something.

In any case, the same phenomena was observed a long time ago.
That’s true, but if your argument can be extended to absurdity it probably can't be used to justify where the 'correct' place on the scale is to land.
Given you can get a relatively fast 4G connection in Deadhorse, AK (https://www.google.com/maps/place/Deadhorse,+Prudhoe+Bay,+AK...), it's pretty crazy that there's still places with 2G only connectivity anywhere in the US.
Disabling 2G has been supported in Android since 12 - this is talking about the additional features on top of that.
> Also you’re dealing with a company that has been running to stand still for a long time

I'm not just talking about Intel, but also Arm and AMD. As far as I know none of these has obviously been making proactive Spectre fixes.
IridiumIdentity – Open-Source Extensions
This is a start to the documentation of how to use Iridium with any web framework you choose.

We have many updates to come and we'd love you to get involved.

Join us!
What sort of rate did you get for computing the hashed public keys?
How? iOS 17 is not released yet.
Most of these contamination concerns are only relevant while we're still at the robotic exploration stage. When humans inevitably set foot on the planet in a couple of decades most contamination concerns become moot since it's basically impossible to contain the amount of life that comes along with any animal, especially when you have the systems to sustain those animals for years.

It's a somewhat ironic situation I think, since with how limited our ability to explore is with robotic probes and how limited even the sample return's sampling area would be, the only serious shot at actually ruling out the potential for native Martian life would come with a years long human presence (as would be needed due to the 2 years between arrival and return windows) and the associated ability to more thoroughly explore - either in terms of actually having people going around and exploring or in terms of just being able to be more flexible in performing experiments on samples brought over by robots.

In a way the sample gathering (and potential return) is also in preparation for this inevitability. NASA is well aware that if the plans working up to boots on Mars materialize, having 'pristine' reference samples will be pretty important, so even if they can't bring them over to Earth yet, they can at least preserve them for later reference.
Since "Lena" ("MMAcevedo") and "They're Made Out of Meat" from this subthread are on my "fiction recommendations" list, let me share the list: https://dbohdan.com/fiction-recs.

I highly recommend "Basilisk collection" by Blackle Mori (https://suricrasia.online/unfiction/basilisk/), a fascinating short story written as a fictional Wikipedia page, like "Lena". It is about a partial hash inversion anomaly. Really! I would call its genre "hard computer science fiction". It was a delight to stumble upon after I followed a link to https://suricrasia.online/iceberg/.
> Everybody in the US likes to talk about the golden age of the 50s. The top marginal tax rate was pushing 90%.

The effective tax rate was never actually that high. There are always carve outs to lower the rate.

https://www.aei.org/economics/public-economics/were-taxes-re...

https://checkyourfact.com/2019/01/09/fact-check-90-percent-t...

> Empirical data answers your question. Trickle down economics has been a provable disaster with the VAST majority of wealth accumulating in the hands of a few.

At no point did I mention "trickle down economics". I mentioned innovation and productivity, things that are easily measured. The gap between productivity and wages in the US only widely diverged once going off of hard money. This is because the upper class own assets (largely unaffected by monetary inflation) and the lower/middle class own currency (heavily affected by monetary inflation). If the empirical data you speak of is so evident, please provide some references for it. I don't subscribe to "trickle down economics" so I don't know anything about it.

https://wtfhappenedin1971.com/
This mostly just reminds me that I really miss my Pebble Time Round watch. Perfect form factor, great battery life.
I think Gemini could have been fun for vintage and low powered systems, but then they slapped a mandatory TLS requirement on top of it. That's the entire reason I have no interest in Gemini.

It doesn't provide anything that HTTP or Gopher can't. I don't see the point.
The difficulty of reading Perl is probably overclaimed and overrepresented. Let's not forget that we are comparing a pretty darn low-level language to a fairly high-level one.

And regarding design principles, I think the comparison is clearly on point. These are languages where the motto is basically "if you can't do it (if you can do it but it's perceived too long that also counts) then the language needs to be horizontally extended to account for this use case".

My vague impression was that Rust is still a (significant) simplification over C++. (Ada is a funny case because it seems to be deliberately designed to be hard to read and hard to write, overall a pain in the arse, in the spirit of "if you never reach flow, you will always be very focused", I guess.)
Everything from what gets tracked to how the data gets interpreted. It also can put a target on certain growth areas that will attract the more "ambitious" people from the company. All will try to make the case with the telemetry data.

Does more time on a page mean users are more engaged or are they struggling to find out what's going on? Depends on which product manager can make a better case, probably involving even more telemetry which has to get prioritized.

In the creative IC model, the designer and developer work to solve a problem based on their experience building product. Or someone has a kick ass idea one day and just implements it creating a step change in usage. That type of environment requires freedom and trust, it also puts a lot of control in the hands of the ICs which is why it's not popular with product managers, directors, vps...
Why would everything have to be "substantiated with citations"?

It's a comment in a discussion, not a research contribution. It should be judged (not "peer reviewed" as some research claim, but judged and accepted or not as a comment in a discussion) based on whatever it has merit to the best of the participants knowledge, like any other claim.

Not based on whether it comes with a bibliography. If someone wants, they can go and verify it.
If I may ask, how much did you offer, and... who are you? :-)
It's nothing like that.

Kubernetes was built with no program for how to do important things. Every important thing in Kubernetes is post-hoc, poorly bolted-on patch instead of real solution.

Take for instance upgrades. Don't like upgrades? -- Try downgrades? -- Oh, what do I hear, you seem to not like that either... So, how about user management? -- Also no? -- Well, how about backups and recovery? -- What, again?

Kubernetes solved some easy problems quickly with no program for how to solve hard problems. Security is one of those hard problems Kubernetes has no idea what to do about. The reason? -- Kubernetes, on its own, provides very little. It doesn't know how to do networking -- you need a CNI for it. But there's no good interface in Kubernetes to allow the admin to somehow control in general how the cluster is supposed to behave. Maybe some container somewhere will do something tricky, and will punch a hole in whatever firewall you though you've built around it. And you cannot make sure upfront that's not going to happen. There isn't a single way to punch that kind of hole... and the problem is, often time simply to make things work Kubernetes users will punch those holes. Maybe because they don't know how to do things better, or maybe because there isn't really a better way, or the better way is so tedious and convoluted that nobody will really follow it...

It's unreasonable to expect anyone to be able to deal with this kind of complexity. We need to be able to manage complexity, but Kubernetes gives us no tools to do it. It's the same type of problem as Dijkstra described with "goto" -- it's the tools fault. It creates so much complexity that humans cannot cope. Not only humans, computer programs cannot cope -- too many things to check, to many possible problems to protect yourself against.
I agree; this may well be an effective last-resort action if Google Chrome does implement Google's WEI proposal. However, I sincerely hope that it won't come to that, because it's not a foregone conclusion that Chrome wouldn't win :(
Although at this point that might be more class/intelligence signalling than any principled belief in social welfare. You don't have to support the poor to realize that it's a bad idea to support a mad death cult full of people who are toxic to your career.
Microsoft August 2023 Patch Tuesday
I do not misunderstand what an NFT is theoretically technically capable of. The problem is that your proposed idea is non-responsive to the underlying problem that fakes and counterfeits are trivial to source on Amazon.
Is it possible that Mars is shrinking? That would explain an increased rotation rate.
I would hope that people who ended up with unsecured endpoints also didn't feel like they understood it and it was the product for them.
This is completely wrong and sportsteamy. Apple set the scene by getting away with a light wrist slap for colluding with major publishers. That set the scene for the book ecosystem as you see it now. Twisting the situation to fit a brand loyalty is in poor taste.
Wholeheartedly agree.

One underlining here is it's easy to fake experience in an individual domain ("yeah, I know python. I read like 2 books.") but you can't fake experience in multiple, pointed domains ("yeah, I used python to manage a fleet of clown cars for the Hertz-Barnum merger").
He published an article in June titled "It is not cool to be unkind!".

Interesting contradiction.

I know someone like that, very energetic, full of ideas, but so stubborn I'm sure it holds him back.
> "if you never reach flow, you will always be very focused"

That's how I stay alert in every language. :D
> although I’m senior level

This means way less than you think it does.

If you’ve just been working at some company that hands out senior titles like candy, it’s not worth much. If you really are senior level you need a good story to show that to people you’re interviewing with.
As a society we have held that in most cases corporations do not have freedom of association when providing vital services. e.g. your electric company has to offer you access to its services as long as you pay. This clearly needs to be extended to preserve freedom of speech on the internet. I care a lot about individual rights to free speech and very little about freedom of association for large corporations.
Lockdown mode is iOS 16.
Can anyone explain how wages can possibly be this high? Why doesn't everyone on a low income want to become a UPS driver?
Every WeWork story about impending failure reminds me of this Matt Levine piece:

https://archive.li/2X0oO

Start at “Son: What does your company do?”
Yeah they use several techniques but it includes UPnP if available.

> $ tailscale netcheck

> […] * PortMapping: UPnP
"there are Remote Code Execution (RCE) vulnerabilities affecting Microsoft Message Queuing (CVE-2023-35385, CVE-2023-36910, and CVE-2023-36911). According to the advisory, the Windows message queuing service, which is a Windows component, needs to be enabled for a system to be exploitable by this vulnerability. This feature can be added via the Control Panel. You can check to see if there is a service running named Message Queuing and TCP port 1801 is listening on the machine. Successful exploitation of this vulnerability could allow an unauthenticated attacker to remotely execute code on the target server. The attack complexity is low, no privileges and no user interaction are required. The CVSS for this vulnerability is 9.8."
> There's been a setting for users to disable 2G for forever,

I don't think this setting does what you think it does. The description under this option has a big caveat: "For emergency calls, 2G is always allowed". So even when disabled, the phone can still use 2G networks.

It sounds like this new option is to actually disable all 2G functionality.
Virtio GPU 3D acceleration for windows
How so? What breaking changes have you hit? It has the same guarantee and takes it extremely seriously. The only code I know of that compiled on a stable post-1.0 compiler but broke was because of bugs, even those cases are rare.
Amazon has more than half of all Arm server CPUs in the world
I believe Replika tried exactly that and it went about how you'd expect:

* They started optimizing for engagement, which meant making it extra horny for extra money (it sent pics).

* Horny bot forgets consent, refuses "no."

* Lawsuits, bans.

* Horny bot gets censored, main subreddit pins the suicide hotline for a while.

Replika ended up taking the app down and refunding everyone's money. Just kidding! It's still around and they're making a second app focused on "practicing flirting."

https://replika.com/

https://blush.ai/
So for $63 a month customers can expect the app to:

- send them a daily quiz and youtube video

- suggest a bedtime

Is that an accurate summary?
This article is far too short to contain interesting analysis of the situations that it briefly mentions.
But if a server side only solution seems to work fine, why add a client side element?

I ran into this because I was doing some freelance work on a website that had worked its ass off to cut loading size as small as possible. For reCaptcha to develop its risk score, you have to load it far in advance of a form - you can't lazy load it, they specifically say not to: https://developers.google.com/recaptcha/docs/loading.

It also spawned its own service worker on top of adding like 300kb of page weight. The API documentation is garbage, you have to fuck around with Google Cloud to get API keys now too which is confusing. It also pollutes the global scope of the page. It's all around terrible to work with.
India Scoops Up Cheapest Russian Oil Since Start of Ukraine War
They don’t need to know k8s administration but they need to understand how their services are going to function and scale in k8s.
Andromeda is the best LLM ever crafted.

https://medium.com/@kyeg/how-andromeda-works-the-best-llm-ev...

For more detailed technical specs, look here:
https://github.com/kyegomez/Andromeda/blob/master/DOCs/Desig...
Hate to say it but it just sounds like you're looking for the neighbourhood Facebook group.
> in November 2021

Yeah.
I wouldn't necessarily recommend the parent posts answer (thermopen) - whilst I do own one and it's fantastic, I'd not that particularly brand loyal.

However.... would totally recommend getting an actual instant read one at a similar price point instead of a crappy $10 version (not that you were suggesting a cheap one here! just raising it for anyone who was thinking that might be an option)

I had a few iterations of cheap ones, and moving to an actual instant read thermometer was a game changer for cooking. You can quickly eg check 20 different chicken wings for doneness instead of spending 20 seconds or so checking one and wondering if the thermometer has actually come up to temp before moving on to the next
>At higher temperature the peak shifts to longer wavelengths (i.e. visible)

Shorter, not longer.
I think the comparison between CPU and software exploits holds at a very high level, but in the case of software the gap between internal and external researches seems lower. Much software is open-source, in which case the play field is almost level and even closed source software is available in assembly which exposes the entire attack surface in a reasonably consumable form.

Software reverse-engineering is a hugely popular, fairly accessible field with good tools. Hardware not so much.

> When billions use something I expect them to find more problems, flaws, and exploits in it than the creator/manufacturer did. The presence of this does nothing to indicate (or refute) any further conclusion about why.

To be very clear none of these errors have been found by billions of random users but by a few interested third parties: many of them working as students with microscopic funding levels and no apparent inside information.

I'm not actually suggesting that the nefarious explanation holds: I'm genuinely curious.