skysight-inc/HackerNews huggingface dataset:
Provided the signature of the original raw pixels is left in the final JPEG, I think Canon/Reuters can be expected to produce those original bits to any sufficiently curious/legally authorised third party, who can verify the signature to check that they are indeed the original bits. At that point said third party has the initial and final images, which is likely enough to conclude whether the edits were legit (the chain of edits themselves isn't as interesting).

Mostly agree on the blockchain shenanigans, though I suppose using an external blockchain allows you to prove that the image was taken before a certain point in time.
I wonder if the price is inflated
If the domain name,, company name or whatever changes, you can change your password too. Also, it doesn't have to be domain names though.
That uses Pyodide. From Pyodide's own pages:

"At present a first load of Pyodide requires a 6.4 MB download, and the environment initialization takes 4 to 5 seconds."

So, yes, it works. But there's plenty of situations where a
big download followed by a 5 second stall is a non-starter.
Which makes it rather unfortunate that Haskell is a language where the recommended way of writing a program to e.g. read two numbers from the user, add them, and print the result, demands understanding "Monad".
Basilisk collection (2021)
FLOP = FLoating point OPeration, akin to the work that needs to be done (which could be measured in Joule)

FLOPS = FLoating point Operations Per Second, akin to the power of a given machine (which could be measured in Watt = Joule per second)

A task of W FLOP on a machine capable of P FLOPS will take T=W/P seconds. Or, a machine capable of executing a task of W FLOP in T seconds is capable of P=W/T FLOPS.

TL;DR: 1 FLOPS = 1 FLOP/sec
jersey city took care of this years ago, like 70% of voters passed a bill regulating airbnbs. [0]

any rentals less than 30 days are not allowed unless it’s a room in your house, that you live in, and you have to be there, present, while the guests are there.

[0] https://www.nytimes.com/2019/11/05/nyregion/airbnb-jersey-ci...
USGS Topoview
It was not just Motorola. Referring to it as 16/32 was not unusual at the time, because it was nowhere near as clear-cut as you want it to be.

The fact we could add/sub/move 32 bit quantities was more important a lot of the time than the specifics of the data bus.
I used to spend hours with all the fancy stones and ceramics and such.

Anymore I just sharpen everything on my belt sander. Takes only a few seconds, and gets you about 80-90% as sharp as the fancier methods.
If a git commit hash was directly tied to a data hash at that state (IPFS), that would be trivial.
In an ideal world, IoT and smart device manufacturers would be required to pay for “end of life” insurance.

Ridiculous that a company can brick your devices by shutting down their servers and/or going out of business. Some people have suggested forcing companies to open source their software on death so that someone, somewhere might be able to keep the smart devices alive but this is difficult implications for capitalizing hardware companies and probably causes more problems than it’s worth.

That’s why, instead I think we should make hardware companies which produce “smart” devices dependent on their software to function should be required to do what we make banks do: pay for the risk of their own failure.
A 3 karat diamond is still a crystal (approximately) the size of your pinkie nail that takes a fairly large energy input to create... and only the ones that've grown clear and without flaws are viable for jewelry purposes. The bigger it gets, the lower the yields are at the appropriate quality level, and so the more effort / waste is involved in getting one. (As opposed to industrial diamond uses, which mostly don't have those requirements and so have their price even more heavily impacted by synthetics.)
Just looked at prices out of curiosity. Tiny studios in Manhattan going for 3500. Not sure how people rationalize paying that for such small space. That's crazy to me, and I've lived in some very expensive global cities.
I say this to all the artists who attack the very existence of AI. The cat's out of the bag already, we're either going to move with the times or they will keep moving without us, as they always have.
As an aside, those “feature flags as a service” tools have some neat features, but are just way too expensive for what most apps probably need: simple binary flags that can change at runtime.

Example: just use a database table. Query and cache in memory for 60s. If you want, build a simple internal web page or tool to toggle flags. This works, and scales (from experience).

Do many apps really need A/B testing or segmented rollout? Maybe, but probably not.
Get a pre-nup and most of that is handled..
https://www.youtube.com/watch?v=ia-9wWl2PoY
GPL's source disclosure requirements trigger on distribution.

AGPL's trigger on distribution or on allowing remote user interaction over a computer network.

> I could use a defense that I’m not distributing MongoDB, I’m distributing my proxy service I wrote myself

You aren't distributing either of them. When you run code on your server and people interact with it over the network that's not a distribution. If it was a distribution there would be no need for AGPL. GPL would be sufficient.

> It just happens to be that my proxy service talks to MongoDB to do its job, but according to you that’s not a derived work, because network access doesn’t count.

It's not a derivative work because it doesn't incorporate copyrighted elements of MongoDB (assuming you didn't actually copy code from MongoDB).

> For AGPL to still protect MongoDB in this scenario, the proxy-plus-mongoDB combo would have to count as the derived work, and I think the only way to do this is to count any API access as deriving a work.

AGPL would protect MongoDB in that scenario because you are allowing remote users to interact with MongoDB over a computer network. That this interaction happens to be taking place through a proxy shouldn't be relevant.
Sources to any of these wild (and grossly outdated) claims?

> Most diamonds are mined under exploitative conditions

You’ve clearly never been to a diamond mine. More than 70% of diamonds come out of “modern” countries like Australia, Canada, Russia, and South Africa. Botswana used their diamond bounty to teach hundreds of their citizens to grade/cut/polish the very stones mined in the country, ensuring tons of high skill jobs.

> the owners are almost without exception "blood on their hands" people

Well you’re only right on a loophole on this one - the Russian government owns the company that produces 40% of the world’s diamonds and it would be tough to argue Putin is blood-free.
Beginner here, so just musing:

I like the idea. You would need your own mutable copy of the model, which is usually huge. And you need to backprop so there is a bit more computation. It might be doable for a local model that is smaller than GPT3.5/4.

You also need to decide what is worth memorizing long term vs short term.
Whichever has the most information wins. When the information has structure you can heavily exploit it for generating synthetic data. For this I point you to Apple Sim. It’s a repository of 3D models for interiors. You can generate many layers of information by controlling the renderer and then use it on real photos. That’s done all over images so vectorial spaces are pretty natural for embeddings. You don’t need to add much structure algebraically speaking.

If your domain is heavily algebraic, you might even be able to generate correct examples arbitrarily, which is a situation I recommend anyone to be in.
RWKV also uses some sort of L2-esque regularization, which was supposedly an idea taken from PaLM (although I can't find a source on this point, other than some message in the RWKV discord)
You're concerned about bogus data, and using the Daily Mail as the source of truth for verification?
I think I get the point of your comment but can you expand? For instance, I’ve resorted to pinning a specific terraform version and plug-in version in a custom docker container. I can use the same TF scripts I wrote 4 years ago against the AWS API which has not changed since.
Bitcoin's primitive is sha256(sha256(x)). There's zero reason anyone would ever use a funky construction like that for password hashing.
Back when I worked at Mozilla in 2012 a coworker excitedly explained Bitcoin to me and said that "someday the mining difficulty will be so high that it'll be more profitable to mine the keys protecting wallets than to mine new bitcoins". I don't think anyone could have thought far enough ahead to understand how much more trivial it would be than that.

All those consumer gpus in now-illegal Chinese crypto farms are probably hard at work mining for keys. What else are you going to do with them?

> these numbers radically come down when a determined adversary also has other large-scale computational assets at their disposal, such as a bitcoin mining operation that can coordinate the password-cracking activity across multiple powerful systems simultaneously.

Yeah, and the best part is they already paid for the cards and can't use them for mining anymore because they're on their last leg and have been surpassed by newer generations of hardware. I'd bet a lot of the operations that got stinking rich five years ago are absolutely swimming in cards that they'd otherwise just be paying to get rid of. The ROI must be incredible, it's probably just a few hours to crack a key and you get to do a Storage Wars-style walkthrough of the secrets some poor LastPass user thought would be secure.
Seems like a good workaround for Intel and Tower.
My laptop runs macOS. On macOS it's a bit annoying because you have to use accessibility frameworks for that kind of things I think.

I think over time it might potentially be easier to maintain a keylogger on top of a forked web browser, than to maintain a system level keylogger on macOS, when all I am interested is the keystrokes I type in the browser.
Yeah I guess some people also don’t want to go through the hassle or cost to change the locks on on their actual homes when their keys are compromised/move into a new home
Not a history buff, but it seems like the HRE is a particulary bad example. What about like the actual roman empire.
The big ones still make for excellent "portable wealth" when you're in that kind of situation. But as middlemen go, jewelers make realtors look like saints.
You will find active learning interesting. It starts by attributing a value to each point in your domain that it learns to match the expected gain in some performance metric.

This metric can be learned so it’s okay if it’s really hard to specify.
Ditto

For those unaware, on GitHub you can get highlighting by giving the language at the start of the code block. For example:

```yaml
---
- hosts: all
vars:
idk: {}
```
I take it from this that we're not likely to see any of rockstar's games showing up on gog.com any time soon.
Guess: It's one of the operations specified in IEEE 754, and traditionally the implementation is supplied by your hardware vendor rather than implemented by you (even if that implementation is "really" a software algorithm).
Yes, I benefited greatly from learning Haskell. Found myself writing beautiful new abstractions in TypeScript based on what I learned. I suggest going through https://haskell.mooc.fi/ to learn.

Beyond the practical value you'll also discover the delightful beauty with which you can express things in Haskell, and these sparks of joy could give you a new motivation to grow and appreciate deeper, beautiful ways of coding and thinking.
Yes, GroundingDINO is an open set object detector. There are some others (eg DETIC and OWL-ViT) as well.

We’ve been working on using them (often in conjunction with SAM) for auto-labeling datasets to train smaller faster models that can run in real-time at the edge: https://github.com/autodistill/autodistill
This is why I simply don't understand the modern approach in Password requirements, while yes, it is simply too easy to crack a password if it's somewhat simplistic.

I've been on websites where they force you to update your password every X months (and it has a lot of special key requirements) and you cannot reuse old passwords (which would really not be a problem regarding cracking... unless they store your old passwords... which is counter productive...)

It basically turns into being unable to memorize all your passwords and being forced to use a service like this, which OBVIOUSLY any genius knows eventually will get hacked and your passwords leaked, ALL your passwords, at the same time.

If you instead attempt to memorize (like I do) because of all the different cases in which you have to swap passwords, you end up with at least 20 passwords you gotta memorize for every site...

I actually absolutely hate how the web works today especially regarding logging in.
I knew a lady who was born with very complex spina bifida. Her parents were wealthy and had very manicured lives. They signed her over to an institution at birth. She grew up with people with profound mental retardation. She receive no education. At 20 she was found by an uncle who always suspected something had happened that was not being disclosed. He began to visit her and teach her to read. He explained that she had a right to leave and helped her start her life. In a couple of years she was able to enter University and graduated despite the lack of any education before 20. She developed a friendship with a lady with CP and they were housemates when I met them. She died of pneumonia several years ago due to constricted lung size. She was a lovely friend.
A lab-created diamond and a "natural" diamond are equals. They are both diamonds, identical chemically and physically.

An artificial diamond would be something like cubic zirconia.
title is clickbaity. HN title should improve on it. This is about rough cut diamonds under 2 carats. the price is down due to popularity of synthetic diamonds of these sizes. retail price of a finished product hasn't felt it yet, and may not.
Encrypted password manager file
Previous tax returns
License key list
2fa backup codes

Losing any of these would not kill me, but some would be horribly painful.
Yes, people do all kinds of things to their code, but this makes it possible for you to download your own.
Commissioner, thank you for raising this important issue and bringing more attention to IoT security. More transparency around support lifetimes is a step in the right direction, but I worry it doesn't go far enough.

The problem is that consumers simply aren't equipped to make security-informed decisions even with perfect information. How many years of updates matters little if the software has vulnerabilities to begin with. And there's no guarantee manufacturers will fully honor the length they claim.

Rather than disclosure rules, I believe we need minimum security standards that all IoT devices must meet before sale, eg:

No hard-coded credentials/keys
Encryption of sensitive data
Ability to patch known vulnerabilities
Use of secure boot to prevent unauthorized firmware
Standards could be tiered by device type and risk level. Compliance could be self-certified with spot audits, like PCI DSS.

This puts the burden on manufacturers to build more secure devices upfront, not just promise to patch them later. Consumers benefit from safer defaults without needing to become security experts themselves.

Standards also allow security to improve over time as threats evolve. Disclosure rules would quickly become static and outdated.

I'm sympathetic to manufacturer concerns about costs, but I think basic security is a reasonable consumer expectation by now. If we act soon, we can prevent IoT disasters before the market grows even further. I hope you'll consider proposing minimum standards within the FCC or partnering with other agencies like NIST who could.
why don't you just buy the stones and have the bracelet made?
That would require a conspiracy by someone with physical access to the camera. Spoofing the GPS would require even more elaborate techniques. At a minimum if you trust Reuters and their camera people, you know the images taken were taken by them in their custody at those locations. That’s a lot more than we have now.
Mine the sun.
IBM 3740 Data Entry System [pdf]
Using 8 inch floppies instead of punched cards, but otherwise the same workflow. Also check out the 3742 dual data station: two operators share a CRT- mirrors show half the screen to each operator.
> so the ring would hold more value

A nice little white lie by omission anyway, as the resale value of a diamond drops up to 50% when it leaves the store! If you were planning for an investment, you'd be better off looking elsewhere.
They broke my trust multiple times across my ~9 yrs as a customer. They failed to use enough iterations, they failed to update my vault to the right number of iterations when they discovered the flaw, they failed to keep the weak vault safe.

This spring I spent a good 2-3 days pruning old accounts, I used 1passwords migration tool (which worked flawlessly)[1], and changed every password that had any monetary or identity value. I've definitely been targeted for attacks in the ensuing months as numbers keep texting "Hi <name>" or other kinds of (spear) phishing.

At this point I don't really know how to protect my self and think it's mostly 2factor thats kept me safe.

[1]: https://support.1password.com/import-lastpass/
If real estate agents in NYC can do that I would be very impressed given they generally struggle to find and rent apartments when given basic criteria as to what is acceptable. It would definitely improve the entire profession if they could replace airbnb.
They've been operating in one form or another for like 20 years and their whole deal is experimenting to find optimal recipes. Kenji Lopez started on that show and has guest appeared recently.
It was a nerd joke. Not an actual formula.
The only thing they share in common is they both have a tracker sequencer.

Renoise generates audio using samples and VST/AudioUnit plugins.

Bintracker generates audio using emulated sound chips. It is specifically for producing chiptunes on vintage arcade/console sound engines.
Interestingly, gmail trusts the from field, so if I send a message “from” you to your account, it will put it in your sent folder.

Urban legend says people have been fired after forged harassment emails were delivered this way.

Google claims this is a feature, and the sent “label” isn’t meant to mean that it came from your gmail account.

For instance, there could be a corporate service firehosing spam at coworkers on your behalf, and obviously you don’t want to notice that, so it puts it in the sent box.
Personal Cloud Storage seems ripe for disruption
Personal Cloud Storage seems outrageously expensive.

Virtually all online storage vendors have settled on about 10 bucks per TB per month, and those figures are substantially cheaper than AWS (20/TB-month generally AND high transfer costs)

Meanwhile, hard drives are now down to $8 per terabyte as of this post in retail channels, where multiple 10TB drives can be bought for $80.

Yes I understand that there are:

- server costs (which are constantly dropping)

- electricity costs (generally dropping as cheaper gas turbine and wind/solar come online)

- backups/redundancy (ok... 2x the hardware cost)

- transfer costs (which are virtually free for large DCs)

But paying more for storage per month than it costs for buying the actual physical capacity? We are not talking "enterprise grade" or "storage network" needs that would necessitate SSD storage.

Is this simply large scale profit taking? Are there massive hidden costs in storage farms I am unaware of? I simply cannot imagine a Hetzner-style company could not offer dirt cheap consumer storage on the order of 20$/year/TB or even cheaper, say 20$ per TB-year for the first year and then 10$ per TB-year after that.
Not much because the total market cap isn’t high for isotopes..
How often are there competing implementations in scientific computing? Most of the time people are doing just enough to publish a paper, or maybe maintaining a single library that everyone uses. Few people have the inclination, and even fewer the funding, to "rewrite everything".

In finance, which has a lot of parallels with scientific computing but tends to end up with semi-secret, parallel, competing implementations of the same ideas, functional programming has had significant (though by no means universal) success in doing exactly what you describe.
Residents of cities very often pay more in taxes than they receive in services. Total opposite of rural residents. In what way are the city residents "leeching from the global population"?
Sure, that is still a problem. But that problem exists whether or not your flags/configs are pushed atomically with your code/binary changes.

Having flags push separately adds another problem on top of data corruption.
It does lose it for me if I click on the reply link[0] and start typing. It works just as you say if I'm on the post itself[1] by clicking on the timestamp, and typing in the pre-existing reply box.

[0]: https://news.ycombinator.com/reply?id=37400631&goto=item%3Fi...

[1]: https://news.ycombinator.com/item?id=37400631
How is this different from other manufacturers? Focal distances are pretty similar between all of these for SLR versus mirrorless.

Canon offers adapters for their mirrorless cameras, both EF-M and RF. https://www.canon.ca/en/products/Lenses/Mount-Adapters

Nikon has the f to z adapter: https://en.nikon.ca/nikon-products/product/lens-mount-adapte...

Sony has an A to E adapter https://electronics.sony.com/imaging/imaging-accessories/ima...
They discuss averages though. What is likely happening is a convergence on the mean, and a pulling in of the tails. The stars (or the stars at negotiating) are likely making less in both scenarios, and the disproportionately low wage earners are making more, while the middle of the distribution is unaffected. (No proof of this forthcoming just conjecture)
Unfortunately, the Open Web just makes it easier for Google to smart snippet all the things. And it's not even about monetization (via ads) for the source content provider, but how about giving some credit to the source.
>> Anyone with access to the encrypted files would need to brute force a truly random RSA2048 key which is NSA territory (and elliptic key can also be used now).

I'm thinking the canonical example of an open network is Bitcoin. Here, everyone knows the public key and could potentially crack the private key from it (for enormous gain obviously). Just do the same thing with a sufficiently large AES key for example.
That mirrors similar rhetoric surrounding wind and solar just before they hit large-scale deployment. As it turns out, sustainable resources tend to be much cheaper than unsustainable ones.
> "We forgot that video isn't always a medium that people prefer."

I've recently encountered this same apparent strong preference for video at work (where I lead a platform team whose deliverables support dozens of other teams) and while I can accept it (and even embraced it as we create howto videos), it remains very strange to me. When engaging with new tech I always want to see code and well-organized prose, but if there's a video I usually can't be bothered -- because the quality and signal-to-noise ratio are so often terrible, and it's got terrible ergonomics for highlighting or sharing key takeaways.

Good reminder that creators often aren't representative of their target demographic, or even well-aligned with their preferences.
New York rental agents are awful. But the usual workaround for these laws is an N-day lease with <N use days. So the law winds up being a rate limit, versus a ban, which I think keeps everyone happy.
Too bad we can’t use virtual NFT engagement rings mined specially with high carbon footprint with the gas fees donated to the babies of divorce lawyers.