skysight-inc/HackerNews huggingface dataset:
Can Big Tech / Credit Agencies / Lexus Nexus / etc. sell to the PRC?

I’m not disputing you I honestly don’t know, but that would be, surprising to say the least.
This would simply mean your server gets pwned at the speed of light. There is no way you could ever keep up to date with every security patch across that many integrations on one public-facing server. The compute would be expensive too, but that would almost be an afterthought to the first problem.
"Marcy also developed a record of working to promote a welcoming environment for women in science, advocating progressive university policies, and mentoring many female PhD students who subsequently went on to successful careers."

So he's the Joss Whedon of Astronomy?
Yeah most self-help books start off as viral articles, popular newspaper editorals, or conference talks, and publishers will then approach the creators of these ideas and ask them to write a book about it.

The formula is simple, the idea you presented has already demonstrated itself as extremely popular. But only a thousand people can attend that conference, let's print it as a book and sell it in airports, websites, and stores around the world as a nice packaged book that everyone can buy and it will surely be just as popular but we can sell it to more people.

But then the problem. Writing down the original idea only takes a few pages, maybe 10-20. So we let the author expound a little, which brings it up to 80 pages. But still no one is going to pay $20 for an 80 page book, so the publishers ask them to break small sub-concepts into entire chapters to get to the magical 275-325 page mark that 95% of books sell at. These fit into shipping boxes well, every store bookshelf is designed around this size, even US Postal Service's "Media Mail" is optimized around this sizing.

So in the end, you are left with most self-help books being extremely padded to get to the the standard mass-market-paperback size. So books that should be long blog posts or a 15 min presentation get dragged out into 275 page epics where it becomes clear by the end that the author has ran out of stuff to say and is just filling the page count.

One great example right now is the top-selling book: "The Subtle Art of Not Giving a F$&#". I highly recommend everyone go to the nearest bookstore and read the first introduction and first chapter. They are absolute gold. The author summarizes the whole book in about 20 pages and does an excellent job. It is well written, entertaining, and enlightening. Everything you want in a good book. But then you can put the book down and walk away. Because the next 225 pages are just rehashing the same thing from the first chapter. Repeating itself. The author is clearly trying to reach the minimum 250 page count that the publisher will allow. He is grasping at straws and just re-iterating the same basic concept for 80% of the book. Sadly most self-help books are the same thing. Great concepts that need to be 20-50 pages.
I feel like this kind of operation on a list feels more naturally expressed by filtering the list and taking the length of the filtered list.

Like this line of JS feels so much easier to read than that line of python:

ages.filter(age => age > 17).length

Directly translating this approach to python:

len(list(filter(lambda age: (age > 17), ages)))

Although a better way to write this in python I guess would be using list comprehensions:

len([age for age in ages if age > 17])

which I feel is more readable (but less efficient) than the APL inspired approach. Overall, none of these python versions seem as readable to me as my JS one liner. Obviously if the function is on a hot path iterating and summing with a number is far more efficient versus filtering. In that case i'd probably still use something like reduce instead of summing booleans because the code would be more similar to other instances where you need to process a list to produce a scalar value but need to do something more complex than simply adding.
It's a fun spy-movie idea, but none of our foreign enemies are robbing banks and such.
> Comply with all industry security standards relevant to your business such as PCI DSS, HITRUST, ISO27001, and SSAE 18
> Comply with local laws and regulations in jurisdictions applicable to your company and your customers, such as GDPR, Binding Corporate Rules, and Standard Contractual Clauses
> Ensure data localization requirements are implemented in line with local regulations and contractual obligations

Whoever wrote this must be so irrationally out of touch with the startup space (or thinking of older billion dollar unicorn startup) to think that an MVP needs to do any of the above. I wouldn't care about GDPR until I have a somewhat strong EU userbase. Try to respect the spirit sure, but it's not like it will be enforced on a small business within it's first few years of existence.

Localization for an MVP is even more out of touch. Make an English US-centric version first (I'm not even American) put it out there and work on localization once you've had some success.
Can somebody explain to me how I am supposed to use this?
The issue mostly comes from the current yellow journalism state of science news sites. It's a game of telephone where the further you get from the paper, the more details are missing and hyped. Often times losing the very essence of what was discovered.
I won't even pretend to care about the tracking or see it as a national security threat, I just want a big China-based internet company to get banned from outside markets. "Stones in glass houses" when they complain about it.
To put this as an example of why your logic doesn't work: it would mean that an utility bill is just a bill if paid to Comcast or Pacific Gas, but a tax if paid to a publicly-owned utility like LADWP for exactly the same services.

A bill isn't a tax just because it's a bill from the government.
waffles, fresh tasty waffles
It is summing but being used for counting (in imitation of the same style from APL) via punning on True/False as 1/0.

Not what actually happens but conceptually:

ages = [17, 13, 18, 30, 12]
sum(age > 17 for age in ages)
=> sum([False, False, True, True, False])
=> sum([0, 0, 1, 1, 0])
=> 2 # via conventional summing

Since True and False are 1 and 0 for arithmetic in Python, this is just a regular sum which also happens to produce a count.
Agreed. They're such sheep, it's embarrassing. One day they'll acknowledge our obvious superiority.
> It sounds like they're promoting comedy without a wide audience

Guess you didn't read the article then, because the show was sold out.
If Trump gets convicted we might never get another infrastructure week.
It's a feature of the latest version of task manager. I don't know of any way to do it with the win10 task manager, but you can always "Get-Process | Out-GridView" which will present a GUI process info table with sorting and a filter.
Related:

Apple OSS Distributions - https://news.ycombinator.com/item?id=30256703 - Feb 2022 (3 comments)

Apple Publishes Open Source Code of macOS/iOS on GitHub - https://news.ycombinator.com/item?id=29490866 - Dec 2021 (1 comment)

Apple Open Source - https://news.ycombinator.com/item?id=29490581 - Dec 2021 (212 comments)

Apple releases open source modules of Big Sur - https://news.ycombinator.com/item?id=25675763 - Jan 2021 (107 comments)

Darwin-xnu: The Darwin Kernel - https://news.ycombinator.com/item?id=15373055 - Sept 2017 (83 comments)

Apple Open Sources iOS Kernel - https://news.ycombinator.com/item?id=15371111 - Sept 2017 (23 comments)

MacOS 10.12 Open Source Components - https://news.ycombinator.com/item?id=13027718 - Nov 2016 (159 comments)

Apple Releases OS X 10.11 El Capitan Open Source Darwin Code - https://news.ycombinator.com/item?id=10701864 - Dec 2015 (6 comments)
Unfortunately, the gatekeepers of science care about feelings, more than they care about science.
"HTTPS only" is Google's end goal though. There is already the rule that all new web features are only enabled for https. As they write in the OP, it's possible that plaintext http will even lose features in the future that are still supported currently, like long-lived cookies.
I get it. Trying to highlight the difference in attitude. Almost all universities in Europe are public universities (state owned) so they are not seen as businesses and we don't consider them service providers in that sense.
I think he's been the most effective Democratic President of my life time. Possibly any President, not just the Republican ones. And he did it by being everything the loudmouth was not. Quiet, serious and disciplined.
"However, a stubborn 5-10% of traffic has remained on HTTP, allowing attackers to eavesdrop on or change that data."

How do we stop Google from eavsedropping on us via data exfiltration.

Unfortunately, whether intentional or not, HTTPS assists so-called "tech" companies with exfiltration of data from computer users, which they perform on a mass scale. It inhibits computers users from monitoring the traffic, traffic that is initiated by so-called "tech" companies not the users themselves, from their computers to these so-called "tech" companies such as Google. That's a potential problem for computer users but it's an advantage for Google and other so-called "tech" companies that rely on surveillance and data collection in order to profit from online advertising services.

Many companies MiTM TLS in order to monitor data exfiltration. Today, many employees work from home. Computer users at home should be allowed to monitor the traffic leaving their home computers and travelling over their home networks.

Of the alleged 5-10% of traffic that has remained HTTP it would be useful to know how much is actually being eavesdropped on or changed. How large is this problem in comparison to the problem of data exfiltration.

The only example I know of is the case of an ISP injecting online advertising into web pages. When an ISP attempted to inject ads into HTTP, the public responded. The ISP was caught out, immediately. However with data exfiltration protected from public scrutiny via HTTPS, Google can continue to avoid such public objection.

Whether it is an ISP injecting ads or Google collecting data to provide services to others who want to inject "personalised" ads, the goal is the same: to profit from annoying users with online ads.

Unlike speculative problems of eavesdropping and data manipulation associated with 5-10% of Chrome traffic using HTTP, the amount of useful commercial surveillance data being exiltrated from Chrome is a real and daily occurrence for hundreds of millions of computer users.

Chrome's TLS roadblocks and warnings to prevent any and all computer users from acting as their own certificate authorities in order to monitor the traffic from their computers via Chrome are especially dubious.

Please do not misinterpret this comment. I am not against TLS or HTTPS. I am in favour of respecting the choice of some users to act as their own CAs in certain situations, for certain purposes. I am against "forced delegation of trust". Everyone has a right to trust themselves as opposed to completely delegating all trust to Google and the commercial CA business. This should be a choice made by the computer user, not Google. Trust is a two-way street. If computer users "trust" Google, then Google must trust computer users.
The irony of this comment is sublime.
Lets refine this further...

Why is child porn bad...

And, why will the government punish you out of existence if you allow the trafficking of it?
Ok, we'll use that instead. Thanks!

(Submitted title was "macOS 13.5 source code released")
Much has been said about how music has become a commodity. People today are much less likely to listen to the same album over and over, instead quickly moving on to some other song out of the endless offer on streaming services. Quantity has definitely changed consumption.

Moreover, in literature there has been a perception that the sheer amount of things on offer today has led to reduced interest in longer works, they become seen as more challenging than before. Dickens' doorstop novels were written as popular entertainment but today few have time for them.
> parse the file using ffmpeg, ghostscript, libreoffice ect

> Known illegal md5s

Yeah, no. Those lists (of known formats and of known illegal files) will quickly grow unmanageable.
For what use case? I've never had to charge my EV anywhere other than at home unless I'm on a road trip, and I only charged it up to 50%
And it's not a big problem. Assholes should ride a bike. I'd rather see more assholes in cars change to cycling than I'd like to see asshole on bikes switching to cars. Because an asshole on a bike or walking or using public transport is much less of an issue for others if an accident happens.
This Soviet style nonsense is why western society is going to fall to China by the end of the century.
The goal is to prevent fraud. They don't want people passing fake transcripts.
Helium Mobile Debuts Crypto Wireless Network for $5 a Month
In theory nothing assuming it involves only consenting adults. In practice it’s very exploitative of vulnerable people to such a degree that it becomes ethically fraught.
Discoverability is a difficult problem. I know my local representatives names. But, I don't know the representatives of adjoining counties. I'm aware of loud national figures. But, to become a national figure generally involves working through the pipeline of local to regional to national authority. Some people might have concern about just voting for someone without experience. Or, how is person without political experience 431 different from person without experience 563 ?
I’m a sec eng and worked at startups, I don’t love this list. Some of it is valid but generally it seems off target regarding how process-focused it is and ideas like startups doing data flows, vuln management and getting application-level logging done.

You’ll get much more bang for buck for the product’s security by working on the enterprise and infra side - deploying EDRs (somehow not on this list?), tightening up Gsuite sharing and email settings, Okta (I see SSO on the list), anti-phishing capability, guardduty and sechub, a pw manager, getting on IaC early to support ops and sec goals, and a lightweight SlackOps infra for security alerts. Somehow mostly none of this is mentioned.

The emphasis around the application seems misguided due to how (a) pragmatically it’s going to take much longer to get appsec controls and logs vs infra and enterprise controls/logs and (b) the vector in is usually Bob and Jodie in recruiting and HR getting phished, vs an appsec breach.

Also, it seems to break the golden rule of security enabling revenue with acceptable risk trade-offs and pragmatic controls. All the process in here doesn’t seem pragmatic. The controls
in here seem useful overall but not where I’d go at first to secure a fast startup.
Imagine if you could only fill an ICE car with petrol to 3/4 full, that it would be bad to exceed that, and to bumble through life thinking this was okay.
I personally think of a transpiler as a transliteration compiler. Say my favorite language is scala but I want to write a neovim plugin which must be written in lua. I can write a compiler that transliterates scala

val greet = (whom: String) => print(s"Hello, $whom!")

to lua

local greet = function(whom) print("Hello, " .. whom .. "!") end

I think this is a perfectly reasonable thing to do and it is very straightforward to implement for cases like this in which one truly is just doing syntactic rewrites with no analysis. If I had such a transpiler, I could write new code using my preferred syntax but transpiling to the host language. My project collaborators don't even have to know that this is my process. Writing a transpiler is also a great way to learn a new language since you are forced to learn the language constructs from the bottom up.

I do agree with the author though that usually you want to do more than just direct syntactic rewrites. But if you first write a transpiler, then you can extend it to do additional analysis but reuse the code generation components.
Shouldn't HTMX be a W3C proposal?
The purpose of all these schemes is not to make copyright 100% enforceable, but to make it costly and/or risky enough that the majority simply won't bother.
TFA seems to only mention errors where the time is set to the future, which would probably indicate that Microsoft at least thought of this. Their responses seem to indicate that they also don't think that it's a security issue, which means they likely don't know of any _explicit_ way to exploit this.

It seems to me that it could still be used to bring down a windows server right around the time that you wanted to, which is still a potentially serious security concern.
> I assume that any years where the Republicans control government will be years where nothing happens.

Now now, I think you are being too generous. In fact, it takes a lot of effort to actively set the country back socially, culturally, and environmentally. Give credit where credit’s due. They work (in reverse) hard.
:) I started early
That is only marginally effective when a large portion of the voting public is motivated by "fuck you" and a conservative court is happy to intervene when regulations do get put in place because they'll make their friends' companies earn smaller profits.
Manufacturing never left:

https://www.macrotrends.net/countries/USA/united-states/manu...
Yes, part of that is by design: its not a "blue state" bill--that's Trumpian thinking. It's an American bill.

But the other part, is well, because southern states have fewer regulations getting in the way of building things.

For my part, I'm happy enough with it. Get those states invested in green tech, and they'll defend their industries.
I can get down with that sentiment. Sadly it’s just not something that can exist without being ruined, but I admire the fact someone wanted to try with (hopefully) positive intentions.
> it was an interesting experiment in humanity.

How so? Atleast one guy did something that made you shut it down. What insight does that give? Surely you knew there is at least one bad guy using the internets before the experiment?
Yea, CP on anonymous and messed up shares has been a problem for just about forever.

Saw a company that accidently DMZ'd their printer with a public IP, and this had to be over 15 years ago at this point. Had anony ftp open on it, and yea, exactly what you expect happened.
The Eudora Email Client Source Code (2018)
Isn't that also what Sprints attempt to do, to vanquish the "geek in a closet" silence that dominated most software development?
What if you also fake the envelope and pretend that the sender is the university?
You can use it for certificates, it just looks like there's an extra step to say that you really trust it as a root:
https://support.apple.com/en-us/HT204477
>Josephson junctions don't seem to work well as non-cryogenic temperatures for reasons unrelated to superconductivity

Can you point me in the direction to learn more about this?
Maybe take the feedback to heart instead of acting like a kindergartner and brushing it aside, hmm?

I don't see what Reddit has to do with anything either, it usually has better moderation than here.
Hi there, I'm the founder! I didn't catch all these comments right away!

I understand your point, and I truly believe in our mission. I'm driven by my own experiences with ADHD, along with my family's journey, I'm committed to making a real difference. We have a very strong team with relevant advanced degrees, 30 published AI papers, and meaningful collaborations in healthcare.

We moved quickly with a proof of concept in just a week, and we're in our 16th iteration now of what you could call and MVP—embracing Reid Hoffman's advice that launching early is key. And regarding my chosen semantics, I live by words of Yoda: "Do or do not. There is no try!"
How to Build a Cognitive Map
That's just a CSS variable. You don't need Tailwind for that.
Bitcoin? Heartbleed? SSL? Wow anon, you must have hit your head hard. C'mon, we're gonna be late for the Windows 98 launch party!
The Verge is a better source and has a more accurate title.
Well .. we still have a regulations problem. Its damn hard to build. The number of solar and wind projects just sitting in the pipeline waiting for approval is mindblowing.
I'd think having wifi turned off while mobile services are on is very common when on the go.
Looking from a distance you are living a very unique media situation in the US that I feel doesn't necessarily extend across the whole globe.

I do agree with you that water wars will be the principal source of world order instability.
If you need someone to test your content, I'll very happily raise my hand and provide feedback if desired.

Awesome of you to start a project like this.
The AI Power Paradox–Can States Learn to Govern Artificial Intelligence in Time?
Can you share more information? Industry, location, any special skills, any personal attributes that might make this more likely to have happened for you than others?
I think the problem that you're getting at is that people need a steady stream of income in order to have the time to innovate beyond what AI is capable of regenerating, but that steady stream of income has always been predominantly comprised of exactly the sort of derivative work that AI is going to completely undermine the market for.

Without the ability to do the usual stream of generic graphic design arrangements, or advertising Jingles that pays the bills, the aspiring genre-breaking creative has little or no means to develop an excursive masterpiece that the next generation of AI will slavishly absorb and regurgitate.
How is pirated software an issue or "abuse" in any way? Just take it down when you get a DMCA request and that's about it.

I think it's much more likely that people used it to host CP and malware....
You'd think so but every Democrat voted for it and every Republican didn't.
> it is certainly a possible interpretation

anything is possible, including that none of these words are actually the words we think they are and we're actually communicating across an interdimensional gateway that's doing the translation for us. it is certainly possible, but just like with which interpretation of abstracted to take, it's certainly not probable.
How does this work? I know that LLMs predict the log-likelihood of the next token in a sequence.. so I guess you initialize the LLM from scratch, say that each token of the input text is the Nth most likely possibility, and record what N is for that token? And then you do some combination of run-length encoding and Huffman trees or something to record the Ns?

Since this is not open-source, but seems simple to do, perhaps I'll make my own.
> Democrats have been forced into a neoliberal corner

Democrats jumped there headfirst led by Clinton in 1992, and have not, since then, been any farther out of a “neoliberal corner” than they are today (which is not that far, to be sure, but its absolutely not the case that its something they recently backed into in response to Trump.)
Plain HTML?

Compact file format. Contents & image links editable as easy as plain text ('cause it is). Images move on the rendered page as desired, but stay in their place in a filesystem - optionally changed independently from the HTML that references them. If looks matter, go crazy & add some CSS.

Sorting such lists among each other, is a few directory- or file renames away.

Win-win.