skysight-inc/HackerNews huggingface dataset:
> TV? WiFi? Bus?

At least the first two words are different in German:

- TV: [der] Fernseher

- WiFi: WLAN (Wi-Fi is rather a trademark of the Wi-Fi Alliance; in my observation spreading the usage of this trademark was mostly successful in the USA)
> Even though Apple is the largest company on the planet an entity that has a small fraction of the budget is apparently able to do a better job.

NSO Group is Israeli and (most likely) filled to the brim with former Unit 8200 staff. About the best of the best what the IDF has to offer - they've been said to match the NSA in quality.

> I don't see why Apple couldn't make those people an offer they can't refuse.

For all that can be guessed, they're a semi-private company, deeply connected with the Israeli government [1]. No one can pay these guys enough. If you want them to stop, you'll have to get the Israeli government to agree, and they won't give up any asset that gives them an edge over Iran or its numerous other enemies.

[1] https://en.wikipedia.org/wiki/NSO_Group#Relationship_with_th...
It would be nice to have this in something like coreutils so that I can be reasonably sure it's included in most systems.
Because in the example I gave, you’re not making profit from your own labour, you’re also “exploiting” machines and software. How does this not meet the generally accepted definition of capitalism (a system in which private individuals or businesses own capital goods)?
Yep, disappointing that I can't bring my Mullvad credentials over and have to pay for a new account.
I don’t know if I 100% follow or agree with the comparison of iMessage and GitHub actions. But iMessage has had a number of interesting security vulnerabilities over the years in image parsing and deserialization. One example:

https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...

Or a story from today:

https://news.ycombinator.com/item?id=37425007

So perhaps the similarity between iMessage and GutHub actions is there are a lot of things that could go wrong. In iMessage it’s a pile of memory unsafe code that was not originally designed to withstand attack. In GutHub actions there is a lot of trust in their parties that could potentially be exploited.
How can a 0-day exist if its not possible for that software?
> I think as a culture we've gotten far too comfortable being complicit in casual corruption, rationalizing that "it's just the way things are."

What do you suggest as an alternative in this scenario with Rotten Tomatoes? Nothing really rides on it. People are widely critical of it. I just don't really see a big problem here.
It can be overcome with time and it is getting better, those are just the historical reasons it's not already better.

Google has contributed lots of fuzzing time and security improvements to eg ffmpeg already.
No difference on my side, but Copilot has always been reliably slow in my IDE of choice. Do you have the “allow public code” setting thingy enabled?
...and Adobe is an artist tool company that just never stocks any paints or canvases.
The problem is systemic. How would you enact such a change? Neither Chicago nor Illinois have mechanisms for citizen initiatives amending laws or the relevant charters and constitutions, so you'd need a three-fifths supermajority of politicians to agree to hobble themselves.
It is related: https://support.apple.com/en-ca/HT213907
Yes I am sure! Zeitgeist: many (some) anglophones know that the German Zeit is "time" and geist looks similar to ghost and that riffs with spirit and off we trot. Besides it is generally pronounced (the spirit of the time) as something like "zyt'gyst". I lived in West Germany for a few years as a child so I go in with the tz sound on the initial Z. I have never heard anyone get the geist bit wrong. We are well used to weird diphthongs.

Fingerspitzengefühl suffers from being a bit much for us. We like it verbose but there is a threshold.

We have a word: floccinausillihillipillification (I may have misspelt it) which means something daft and was dreamed up by a Victorian gent. Can't be bothered to look it up. It was a bit silly (hilly etc) and was probably a response to a conversation like this 8)

OK lets have a go: finger (must be finger) ... spitz (I know that means point or peak - I've skied on a few - but most anglophones don't) ... engefühl (no idea). I'll guess at "fidget spinner"

... search ... how wrong can I be! - https://en.wikipedia.org/wiki/Fingerspitzengef%C3%BChl and also that article is talking complete and utter bollocks when it states that word as an English borrow word. We love to pinch other languages words and concepts but Fingerspitzengefühl is too long, even for me.
> I think the candela is a scam
Seriously. Machine-readable semver is a pipe dream. You're relying on everyone else getting it right every single time. At best it's an indication of a maintainer's intention. But it's not a substitute for QA; if your dependencies change, you need to test your software no matter what. So what does semver actually do? Using it as a guideline for setting your own version numbers to communicate to humans is one thing. Treating it as a machine-readable indicator with absolute certainty is taking it too far.
There are cases where generative AI can be trained for the explicit purpose of ripping off a particular artist's style. Take a gander at all the artist/art style LoRAs for Stable Diffusion. Some of them are harmless (a Rembrandt LoRA for example) but others are trained to make convincing knockoffs of living artists who are trying to put food on the table.
So even with power limiting, with 4 3090s, you’re looking at 800w from GPUs alone. So about 1000w give or take. Yes?

M2 Ultra [0] seems to be max 295w

[0] https://support.apple.com/en-us/HT213100
Doesn't the -A zip cause it to skip the subpages? That's what I'm saying...the filter is keeping you from traversing main page -> sub page -> zip file.
do sign languages even have words? i understand that they have signs, and they have methods to communicate words from a spoken language. but is there a sign language that has words, not signs, that are specific to the sign language?
There's four kinds of intellectual property: Copyright, patent, trademark, and trade secret. Which of those did they violate?

Is your business defensible?

(Remember, APIs generally aren't protected by intellectual property. It's the implementation or patents that protect your product. For example, if copying your API violates your patent, then you have a case.)

It should go without saying that these shouldn't be new concepts to anyone running a startup.
In the last couple of months I’ve seen him absolutely destroy a BBC journalist in an off-the-cuff battle of wits. Is luck the only reason you’re not richer than him?
But if the story is correct about it being 3X (or more) the average truck driver wages in the lower 48...
The downsides of using Lockdown Mode are minimal and well worth if you are an at-risk target. It's about reducing the attack surface and potentially getting notified if nation state actors try to attack your phone.
It’s not actually that difficult. By differentiating on the spherical harmonics of each point/Gaussian we can approximate materials and their response to lighting.
WSPR is very different than LoRa. WSPR is usually used at HF, and has very low bandwidth. LoRa is used at UHF frequencies, and has very wide bandwidth, as it's a spread spectrum modulation scheme.

There's more differences but those are the ones relevant to this discussion.
My local coffee shop gave up and closed after the 4th hour of this outage. They tried accepting cash for a while, but apparently nobody in Seattle carries cash anymore.
IMO it got popularized a lot by computers and other similar devices because it's so omnipresent in UIs.
Ask HN: Feedback on a cash flow management tool
Hi all, I'm launching a cash flow management tool for seed & series A startups.

-> https://www.getmentium.io/

The idea: A single place to manage vendors, contracts & bills. No more overpaying. Cash flow forecasting. Integrations with accounting tools and a chatgpt like bot that will allow you to talk to your data.

Would love some feedback on this. Many thanks!
cargo-semver-checks checks almost entirely only major.minor versioning issues. Rust's flavor of semver doesn't impose or demand any particular rules about what is a minor and what is a patch version.

So I'm a bit confused about the position you seem to be arguing against, when the tool and the entire ecosystem are doing exactly what you (AFAICT) consider a good idea.
>(VPN of choice for all kinds of abusive/fraud/hacking traffic).

This is a pretty bad take. With your logic anything pro-privacy like Signal/Matrix etc would also be "x of choice for abuse/fraud/hacking etc" and thus shouldn't be used.
Still preferable than being the robots' equivalent of the big mammals that went extinct during the stone age . At least our specy would get to survive.
I’m working on this right now!
Its super interesting to me how much its emphasized that you shouldn't use Lockdown Mode unless you are a journalist or otherwise in direct palpable danger. They really do try to talk you out of it. Its curious, because there's very little difference in functionality (as experienced by the user) other than disabling a lot of Apple nonsense from running in the background expanding your attack surface.

And everybody parrots the nonsense caveat that everyone shouldn't use it, only those special enough should like it was a zero-sum game or scarce resource. Everyone should use it because it disables a lot of nonsense that doesn't serve you and probably even saves battery power. Also, the more people use it, the less it can be used to fingerprint specific users.
As in, Dutch for (hay) bale?
In Russian there's no "dada", it's "papa" instead.
Yep, just had some issues with homebrew updating the system to OpenSSL 3 which broke some workflows as OpenSSL 3 can't read Apple Developer certificates...
Wait what was horrible about it?
“and live on your savings.” << this is an obvious strawman.

There are plenty of ways to start a business without instantly giving up other employment.
> He barely took photos on his phone before he moved to Alaska; now, he has about 10,000 of them. Most of them are in the same place, just different seasons. The long grasses change colors — red, pink, beige. That makes the mountains look different week to week. And then there’s the sky. Because of the ice crystals that form in the atmosphere during the long winters, “sun dogs” appear where it looks like there are three suns in the sky. Most fantastic might be the aurora borealis, which can make it look like the sky is swirling, shooting fingers down. “It will make your insides feel funny,” Mustang said.

I wish he would post his pictures somewhere. I’m sure a lot of them must be fantastic.
No, because HLS still uses SLS. Imagine if NASA used commercial fixed-price contracts to get astronauts onto HLS in addition to the existing HLS contracts.
Check out the GitHub repo hierarchal localization which uses DL + traditional SfM
Will Rust be able to prevent such overflows?
Ask HN: What high quality paid (non-subscription) software would you recommend?
More and more software is moving into a subscription model. I'm looking for high quality suggestions for software that you can buy and fully own without having to keep paying for a license/subscription. I'm fine with software where you eventually have to pay for a new version - if the new version has genuinely compelling features and the old version continues to work.

Good examples that I personally paid for and keep using:
- Sublime Text
- GoodNotes (iOS app)
- Pycharm (sort of qualifies)
- Strongbox (offers a lifetime license)

Anything else that people really enjoy and they feel like they got their money's worth?
I still find the first noun phrase and relative clause (first 5 buffalo words, Buffalonian bison that Buffalonian bison bully) to be just unparsable. If you switch up the nouns it’s slightly easier to grok:

Vancouver birds Toronto bison bully

But the missing “that” connector in between the two just doesn’t parse in my brain no matter how many times as I read it.
They're two names for the same thing, but yes, people should use the current name.

Also, it was never “OSX”, like the article uses, but so many people call it that.
> Guest needs to have spice-guest-tools installed and probably be using gnome - I have had no success with other environments but my testing was shallow.

Well that's just a nonstarter.

(The waypipe thing is interesting, though)
The price of an Android zero-click is now 500k more than the price of an iOS zero-click for Zerodium now. It would appear they have a significant stock of iOS zero-clicks and a lesser amount for Android:

https://zerodium.com/program.html
I got sick and tired of running code in the debugger just so I could see what fields an object even has.

Or even worse, what fields an object has, at what points in time, as fields can of course be added and removed whenever.

Just, like, no.

Also Typescript debugging is no harder than JS debugging, setup the source maps once and it works, same as setting up debugging symbols in C#, except Visual Studio typically does that for you. If you want to debug C# code running on a web server (which you can totally do! It is an amazing feature!) you'll need to provide Visual Studio with a link to the symbol files yourself, no different than Typescript and source mappings.
> I have no idea what “kaput” means…

"kaputt" is a rather colloquial German word for "broken".

My stance as a native German speaker: don't use it in written German, and avoid it in spoken German, too, since you will appear somewhat uneducated (remark: in spoken German, you typically use a more formal language register than in spoken English).
I have a friend who worked at Microsoft... if his opinion is anything to go by that's very far from true.
> The US can spend this kind of money .. with not much progress .. and no real consequences for failure. Adversaries see this as weakness because that is what it is.

I've heard just the opposite about the similar SDI/"Star Wars" - that the US pouring billions into this blatantly impossible and pointless programme, and suffering no real consequences for doing so, was what finally convinced the USSR they couldn't win.
The interesting thing is that, as the article states, Lockdown Mode, which is intended for users with exactly that kind of risk profile, does in fact prevent this attack.
A lot of LBs in the 40s and 50s. I’d qualify those more as medium sized (but meaner) uglies :)
Worth noting that these are only the trees that line roads - so quite a few of those dark areas are actually parks and woods crammed with trees.
> Ukraine disarmed their nuclear stockpile. Obviously Russia wouldn’t have invaded otherwise.

They disarmed their nuclear stockpile and their long range strike capability under an international agreement where the largest players in the world made promises / guarantees to them.

My guess is that they suspected that Russia would actually follow them and not break it because they felt like it.
> This notion that just because you didn't add/remove an input or output parameter means you didn't change your API is extremely naive.

If I didn't change the behavior with any set of input parameters valid for the prior version, I haven't broken compatibility.

> because almost no projects in the wild continually preserve separate feature branches with backported bug fixes

Maybe not “continually”, but nore than 0% of real software projects using SemVer do release bug fix releases of m.f.b after feature releases of m.(f+1).0

> The user on the other side of the fence wants the best version of whatever you have that doesn't break compatibility with what they're doing.

They may not, because feature releases may be assumed to have greater risk of expanding the risk surface, whether or not they break backward compatibility.
No, but there have been dedicated advertisement campaigns to convince you that they are the same thing. Theft specifically involves depriving some one else of their belongings, which is why the issue under discussion is copyright.

The way it works is more like when you create an original work you also possess the sole right to copy that work. I believe (80% confidence) that an independently derived work does not violate copyright, obviously easier to make a convincing case for instances like code or song lyrics where you genuinely expect the implementations to shake out the same from genuinely independent parties.

Sidenote, the document that says you cant copy something is the law. The documents I think you are referencing are licenses - the terms under which you are allowed to copy a work. The distinction I'm trying to make is that they can't extra forbid you, they just withhold their permission (as expressed in the license). Its not a super important distinction but I read up on it and felt compelled to share.
I don’t understand your comment. Are you saying that involving trial lawyers and US juries to collect big settlements from Apple is going to stop the NSO Group? Or is it that the NSO Group should be liable for the actions of their clients?
Nothing, I’m a nix user. Here’s what I have installed in general though
Absolutely. I’m from a big family that is ask culture both by necessity and temperament and relating to families that are guess-based is just so exhausting, in both directions.
It definitely does not.

v43 to v44: fixed "teh" in a comment

v44 to v45: restructured the whole thing, steps for users to migrate are expected to be in the man-months for most projects

Semver is a human convention that can also frequently help machines. It'd be nice if it were a machine system that also helped humans, but very very few compatibility systems achieve that.

There are no other options currently to achieve this, and it works pretty well in practice. Use semver, don't make everyone else pay for your willful ignorance.
The beetle itself has a different colour than the puppet, though.
Background on this, and explanation of framerules: https://www.youtube.com/watch?v=7rIJNT7dCmE
NSO is reported to consist of mostly Unit 8200 staff. No way they're not deeply connected with the Israeli government.
Those countries aren't the ones using these exploits either.
Televizor, WiFi, avtobus
Falcon 180B LLM is Open Source
The US enjoys some fruits of their labor and they're conveniently distanced from any explicitly funded operations to avoid blow back when exploits are publicized. They won't enforce sanctions or, more practically, withhold the massive defense subsidies they give to Israel.
> Rust's flavor of semver doesn't...

Semver.org says:

Semantic Versioning 2.0.0
Summary
Given a version number MAJOR.MINOR.PATCH, increment the:

MAJOR version when you make incompatible API changes
MINOR version when you add functionality in a backward compatible manner
PATCH version when you make backward compatible bug fixes

Three fields. If you're saying that cargo-semver-checks doesn't need three fields, then you're saying that it doesn't benefit from semver as defined by semver.org.
I agree. If a company asked its team of MBAs to figure out the ideal work situation, they'd run the numbers and conclude that saving on expensive office space, expanding the talent pool, being able to hire in cheaper regions, keeping employees happier and reducing attrition etc. made remote work the more favorable option. The problem is instead power tripping execs who ignore this advice and go nah, what we really need is to go back to the good old days where I could boss people around.
Yes this version should work.
There are lots of languages in the world that don't have any word for taxi, because they don't have taxis. The same is true for many of the other words talked about here or in the article.

Of course if you want to say "Of the languages that have a word for X, then is the word more or less the same?", then "taxi" might count. It's even the same in German, a language that intentionally chose words that were not cognates: Fernseher for TV, Fernsprecher for telephone, Handy for cell phone.
It's universal! Radiolab has an episode on it [1]. We've been talking to babies the same way for thousands of years.

[1] https://radiolab.org/podcast/91514-sound-as-touch
And you're probably on xorg if you're following these instructions because wayland only supports libinput.
That depends entirely on what the software needs to do.

For image decoding in particular, you can put the software into an exceptionally restrictive sandbox, or use a language that builds in the same restrictions.

No I/O. No system calls. Just churn internally and fill a preallocated section of memory with RGBA.

The broader system will still have weaknesses, but it won't have this kind, and this kind keeps happening.
I think it would be interesting to study the effect in sports that have no restrictions on who gets what number. Like (I think) basketball.
Computer in Chinese is 电脑, pronounced “dian nao”; it roughly means “electric brain”.
A Danish naval architect wants geographic origin (lat:0,LNG:0) named after him
Elcomsoft is their Russian analogue
This could be a feature request.
There are also facts we know and things we’ve built because someone watched a manned space flight as a kid and decided to go work in STEM because it’s just so freaking cool. Discounting “inspiration” on the grounds that it has no immediate, tangible results is pretty shortsighted.

Also if you’re willing to count facts like “details of Martian geology” as potentially valuable, then one can also say that by doing manned space flight we have learned a lot about how to transport humans to space and keep them alive there, no?
Definitely, but GP was specifically using this as an argument for Google not supporting a codec in Chrome. If anybody can spare the effort to do it safely, it’s them.
From the README,

> What is the difference between searx and SearxNG?

> TL;DR: SearXNG is for users that want more features and bugs getting fixed quicker. If you prefer a minimalist software and stable experience, use searx.

> SearxNG is a fork of searx, created by a former maintainer of searx. The fork was created because the majority of the maintainers at the time did not find the new proposed features privacy respecting enough. The most significant issue is with engine metrics.

> Searx is built for privacy conscious users. It comes with a unique set of challenges. One of the problems we face is that users rather not report bugs, because they do not want to publicly share what engines they use or what search query triggered a problem. It is a challenge we accepted.

> The new metrics feature collects more information to make engine maintenance easier. We could have had better and more error reports to benefit searx maintainers. However, we believe that the users of searx must come first, not the software. We are willing to compromise on the lack of issue reports to avoid violating the privacy of users.

> Furthermore, SearxNG is under heavy refactoring and dependencies are constantly updated, even if it is unnecessary. It increases the risk of introducing regressions. In searx we strive for stability, rather than moving fast and breaking things.

https://github.com/searxng/searxng
Reminds me of Hebrew where Who is he, He is she, and Me is who.
Thanks for the numbers, that puts it in better perspective.

Although I'm guessing that was an uncontested election, sounds like <10% turnout. Still, it's material.
Wouldn't you have to first prove that your content came from Microsoft services? Hopefully you track & certify the provenance of every line of code and content you paste? Microsoft surely won't just take your word for it that your content came from them, so how would this play out in practice, exactly?
"kaput"

Possibly either "broken" (German) or perhaps "head" (Latin). Kaput is also an English borrow word from German. I've thrown in kaput/capit(a) for a laugh!
Wikipedia says sentience means "the ability to experience feelings and sensations" so "Animals feel pain and can experience suffering just like humans can" is describing sentience