skysight-inc/HackerNews huggingface dataset:
Two things wrong here: (1) they didn't use an electron microscope, and (2) the microscope they did use was made by a German company Created Gmbh.

This experiment was not done with an electron microscope, which shoots free electrons at a material at very high energies. Instead, they used "Kelvin Force Probe" microscopy which basically measures the electrostatic force from atoms on an ultra-fine tip of metal. Sounds crazy, but it's a technique that has been around for decades.
https://archive.is/9sbc0
Europe has CRA and RED. Maybe start with those?
Politics aside, something like a potential name change of a country is important to know for people on here e.g. those who implement systems that in some way have to deal with the names, for example when Turkey changed to Türkiye it there was also a thread on here.

Now in the end those choosing which name to display can never be apolitical, you can only be very clever and diplomatic about it — but in order to achieve that you have to stay informed about the context of different variants.

E.g. think about China and Taiwan. If you have Taiwan in your applications list of countries, you are political. If you don't have it in your list of countries, you are also political.
Plz eli5 catastrophic forgetting,

I assume this means losing all the energy and compute input for a model to know, perform, infer on inputs already indexed(?) (What is the proper term here?)

But is this the premise -you lose all prior investment of resource to a (I don't know the term for an AI archetype of knowledge) {btw, I love the embedded etymology of knowledge

"The ledger of things that we KNOW"}
This is definitely an interesting idea I've also pondered before. In my experience (just speaking from intuition) what's "easy" for LMs to predict often doesn't line up with our human expectations for what's "obvious". Often LLMs will learn seemingly "low information content" statistical correlations that just helps it lower its training loss.
What's your take on Adam Smith?
Ask HN: Is Micro a Viable IDE?
I just tried micro, and I was blown away with how feature packed it is, it could do almost anything VSCode can do, but with a small memory footprint.

Do you think micro is a viable IDE? What's your experience with these kinds of text editors?
Prof. Mark Lemley hosted a conference on Interoperability in January 2023, which I was at. Doctorow's work was part of the reading list.

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4412862

Much of this stuff was covered there, although I wouldn't claim the conference reached a focused, actionable conclusion.
Good grief. The tool is what moves to make the cuts. If you seriously think this is the same thing, we’ll, boy, I don’t know.
The sad part is the kernel devs can't tell the difference. Doesn't matter if something is open source or proprietary, if they can't take it and relicence it under their GPLv2 licence then it deserves no comfort.
It really is pretty remarkable. I research and write about a historic topic that has its roots in France so I had always had the idea of some day localizing my site into French. And it is shockingly good at translating full articles. It understands the context of what is written and knows which words to use to keep the same meaning when literally humans can’t even do it well as there are terms and phrases used 200 years ago that just aren’t used anymore. But are correct and relevant in the context of these antiques.
I've seen the show. There's so much denial. Even here at Hacker News, suggesting that fat people eat too much food gets you downvoted and flagged.
Definitely possible if supported by transformers.js. If I see enough folks wanting it I'll likely add it at some point.
The erlang version will allow it to be played through the speakers of any or all devices in the cluster. I'm not sure we're ready for this amount of power.
I can't post on the official website (not a US citizen) but I have thought about this question a fair bit and have worked in security adjacent tech in a past life.

An important note: my suggestions would make many business models unviable. I see this as a win-win because I think that profiting on bad security is extremely unethical and should be illegal.

My requests are as follows:

1. It must be at least a 1-year jailable offence without bail to sell an IoT device that does not have the software and firmware 100% open source. This is the absolute minimum and allows end user auditing. Implementing anything else before this is meaningless.

2. The company must pledge to provide security updates for at least 5 years for any device they sell (if there is no sale, this should not apply).

3. For a security update to be valid in the eyes of the FCC, the update must be signed by an existing employee (accountability must be assigned).

4. If an IoT supplier wishes to aggregate data to sell to 3rd parties, this MUST be optional and it MUST be opt-in.

5. Vulnerability detection and registration must be handled by a 3rd party with a lodgement portal, and companies should have at most 1 month to patch it once the vulnerability has been lodged in the 3rd party portal. Failure to fix in time should accrue exponentiating fines.
The graphics weren't elaborate, I just remember things like the illustration of a storefront before you worked on an inventory spreadsheet, or the ascii picture of a telephone and modem before the "Communications" tool (i.e. telnet) section.
> not something inane like engine revolutions per kilometer

Unrelated to the thread but I just read that Top Fuel dragster engines only do about 240 revolutions over the 1000 foot race[1].

Never thought of it like that before so blew my mind a little.

[1]: https://en.wikipedia.org/wiki/Top_Fuel#Performance
Yes, I use the chase jarvis method, run though and star everything that's usable first, purge zero stars, then run through and 2 star a single image from a burst that is the best of the group. Purge. Then look at your keepers and pick your deliverables.
I’d probably make the same choice, but I haven’t had the offer yet.

I’m curious what do you expect to happen to your salary over the years if you stay at the same level? Or are you able to be promoted and remain an IC?
When asked to objectively measure their food and keep a log, fat people will lie about it, as revealed in "doubly labeled water" studies. Read the study I linked.
I learned this as standard practice at Google back in 2015.

We got really good at data migrations and it was no big deal - but we only got serious about this after we had a major DB and functionality update that went wrong and took us down for 2 days.
even in the first epoch the loss goes up? that seems.. odd
I'm not sure the current tech scales terribly well. but hopefully they can expand on it to develop something that does scale.
I have been in contact with the Nist a few years ago to fix some very irrelevant issues with ImageMagick CVE's which were marked as "insecure before version 7.X" in the NVD even when the fix was backported to Version 6. It made me wonder how noone from ImageMagick, nor Debian, nor anyone else gave a fuck about correcting the NVD. It just takes a single mail with a link to the backport github commit. Debian has this link almost always in their security tracker. That could probably be automated...
At the same time it showed me how arbitrary the NVD (and the whole process in general) is.
Some times they wanted a bit more proof, e.g. when I claimed v6 was unaffected. I had to go as far as searching the commit introducing the vulnerability to get them to believe me (which I think is good!) - this once led me to get a CVE from "unaffected" to "wontfix" on the debian tracker because of a mistake on their site.

- You don't really know what the NIST wants until you send them a mail (and even then they respond with very short messages). Apparently the same goes for MITRE...
- there is no "person" behind anything
- the whole process is 100% intransparent. Noone is going to see my mails ever expect for the NIST
- it seems like each distro does the same work (and noone is contributing to the NVD. Though I was looking through a narrow hole with the imagemagick stuff, others are hopefully doing it)

IMO a fully transparent (but for security reasons probably partially embargoed) process could make this whole stuff much more reasonable... But I doubt either MITRE or NIST will change anything as long as there's no competition.
Oracle's hands are tied in so far as they can't revoke the CDDL licence that Sun provided.

They could sue you as a kernel contributor, but only if you do something to violate the GPL. The only thing that would clearly violate the GPL, in the era of proprietary nvidia blobs, is if you tried to ship the ZFS source code in-tree.

Everybody agrees that's a bad idea, nobody does it. ZFS instead is shipped as a separate kernel module.
I agree with your post, but can you elaborate on the observable outcomes you mention?
If you believe Russia cares about Snowden's travel documents, I've got a bridge to sell you in Brooklyn. Snowden should consider himself lucky that he got detained in Russia because Moreno would have given him up before Assange.
I have a theory that the RSI is mainly developed by the angle of the hands relative to the keyboard. Which is why the profile change is sufficient to mitigate the problem.
>Don’t run data lines and power lines right next to each other (electric signals flow through a field surrounding the trace/wire, not in or on the metal itself)

Not true. The electrons certainly do travel within the copper. The movement of the electrons generates a magnetic field around the conductor, but the electricity does not "flow through a field surrounding the trace/wire". The electric power absolutely does flow through the metal itself.

>PCB pros avoid right angles for the same reason.

This is a myth except maybe in very rare cases. Most hobbyists aren't ever going to have a problem with right angle traces.

https://www.nwengineeringllc.com/article/right-angle-pcb-tra...

>Verify PCB traces with a multimeter before soldering components to it (or if it’s been assembled by the PCB manufacturer, verify everything before powering it on for the first time)

You should be sure that your design works before sending it to be assembled. If you designed the PCB with proper software that does analysis between the schematic and the PCB design, then there really shouldn't be any surprises that would require you to verify any PCB traces with a multimeter before soldering components. Sure you may have had it manufactured by a crap PCB company, but it's unlikely, PCBs have gotten really easy to make. Software like KiCad if used properly make it practically foolproof to design a PCB that matches the schematic.

Designing the schematic is another matter though, it's very easy for a noob to get that part completely wrong and testing PCB traces with a multimeter is not going to fix that.

>or if it’s been assembled by the PCB manufacturer, verify everything before powering it on for the first time

Not sure what that would accomplish. What are you going to test? Many components can't even be tested unless power is applied. Seems like you're suggesting superstition more than practical knowledge about hardware design and manufacture.
Here you go, a 100% guaranteed conflict free blood red diamond

https://www.australiandiamondvalley.com.au/products/10ct-aut...

https://www.solidgold.com.au/argyle-red-diamonds.html

If you object to the mine owners (rio tinto) "blood on their hands" (from > 2,000 years of mining since Roman occupied Spain) then get rid of all your steel products as they're a major supplier of raw high grade iron ore (and copper, and ...)

https://www.riotinto.com/en/operations/australia/argyle

(NB: If you're going to downvote at least provide a comment as to why)
I recently started at a big connector manufacturer... And I have to say, there is so much more that goes into connectors, even "simple" ones, than what is obvious to the end user.
I don't have anything of value to contribute past the insightful comments already made by others, but seeing an FCC regulator reach out to our shoe stringed highly qualified community un YC / HN, has got to be the most encouraging thing I have seen from the US government in over a decade. Thank you for your efforts on this important topic of how we address the wide spread security concern of IoT internet connected devices.
Also, are you using wireless headphones, they add latency.
Don't ban cults, ban coercion.
I'm trying this out, but suddenly I feel my mouse clicks are not clicky enough.
proof of stake blockchains certainly have leaders. MEV doesn't exist if there aren't designated block proposers
> The fact that the government pursued Snowden

They had to. He broke the law. He would have had the chance to go to trial and defend himself and seek whistleblower protection status. Given the politically charged nature and public opinion at the time, he might have had a pretty fair shake and could have been living comfortably in the US working for the ACLU or something.

Instead he plotted an escape to an openly hostile country (not even a quasi-neutral country or a non-extradition country) and allowed all of his stolen material to fall into the hands of a foreign intelligence service.
Major discussion 23 days ago:

https://news.ycombinator.com/item?id=37108111

(167 points/129 comments)
OpenAI's Code Interpreter in your terminal, running locally
Depends on location. If your real estate is in a place with liberal immigration policies and demand, then local birthrates are irrelevant.
Do you know/can you share any info about how weak that person's password was? So people have an idea what to expect in terms of what can/has been cracked.
1000 sponsored links that are exactly not what you searched and filtered for.
This reminds me of something I thought about taking back up:

A while back I wrote a number of Emacs scripts so that I could listen to Discord messages, as they were streaming in basically, and then 'do Lisp' on them. For example, take the data that was streaming in and format it into a web page with a few links I could then investigate. I may get back into that.
Usually there's not just one jpeg of a photo, but several. The camera might do one at a very high quality level, but that's going to be different than a downsampled one served over the web, or the mobile resolution one, or the color corrected one, etc.

Regarding your other comment, sure, such a manual system might be possible, but that relies on either Reuters publishing all of their unedited raw photos (which they probably won't) or a third party photo escrow service with all the rights to the Reuters originals. Neither seems likely.

I don't think this is an easy a problem as you might imagine? Perceptual hashing is a thing but there's no guarantee of forensic accuracy there.

Reuters has a history of doctoring its photos: https://en.wikipedia.org/wiki/Reuters (photo controversy section)
Milk-V Goes After the Raspberry Pi Compute Module4 with RISC-V Alternative
I have used that "insecure" system for 20 years. However, over the time I added additional several additional obfuscation levels, especially for accounts with monetary value. And then there are of course site password rules that force me to use various variations to my scheme. Additionally I use a different email address for every account. Those with monetary value are not predictable.

Of course all this became unmemorizable for less frequently used accounts over the years. So I had to use a password manager. However, I store only the rule/hint to generate the email address and password, not the data itself.

Could dedicated hacker with a keylogger learn my scheme? Absolutely yes. Am I afraid of any automated attack? No. I guess the keylogger is the real threat here. Once I am infected with that, the dedicated hacker can save their effort to learn my schemes. (Where I use keylogger in a wide sense, covering accessing your clipboard / browser input fields.)
The problem is prevention is worth less than the cure. Attia talks about it in his book - the heroes of medicine are the ones that operate and save people, not the ones that ensure that people never get to that poont/
I went to a FAANG at a similar point in my career to where you are now. More than tripled my pay. I firmly believe that any dev can get in if they practice enough leetcode problems. We are not special. I say go for it if you want it.
That’s an ingenious way of validating when you don’t have a reference like the one that was produced.
As the article we're commenting on makes very clear, Snowden had no such documents.
Show HN: ColorMood
Does your mood affect which color you like - a tool that attempts to find your favourite color right now
Crafted with Swift

When I see this, all I really see is

Uses more RAM
"This allows humans to prove their humanity by running an AI model on biometric data locally, without having to reveal the data itself. Or a model-provider like
@OpenAI can prove that it ran the model it promised to run, and not a smaller/faster/cheaper one, and finally put those "GPT-4 is getting worse" rumors to bed once and for all"
isn't it highly dependent on what is your one epoch of data? if there are a lot of repetitions of similar concepts in there then can you say it's learning from one example?
>> Part of uploading things to the internet is reconciling that everyone can see, copy and distribute the content you provide

In some ways this is a narrow definition of the Web. There is a lot of activity placed behind a login to expressly prevent the information from being public access.

If I upload a private repo to github I expect it to be private. If I interact with a Dr or lawyer on a site, I expect that to be private.

Of course inter-operability controlled by the -user- is different to the idea of interoperability controlled by the host, or by some external entity (scraper). The former is good, the latter less desired.
> He would have had the chance to go to trial and defend himself and seek whistleblower protection status.

Is this what you would've done in Snowdon's shoes?
Since nobody is proposing alternative solutions that actually work, people are looking to Cloudflare and Google for help with the real problem that impacts them right now.

People are looking for solutions to:

- How do we only allow real humans to access it so we stop wasting money on handling spam requests?

- How do we permanently ban a known malicious individual from accessing it?
I used to have similar hopes, but I think our first priority must be increasing efficiency of research. Consider the transition to open access; it is still a minority of research effort so many researchers waste untold resources reinventing the wheel. Also the incentives to publish mean a lot of fields consist of people writing papers for the sake of writing papers, without much progress towards anything resembling novel ideas
You can archive from a GCP VM, then rsync the results. Way faster than trying to archive from a home connection, even at 1G.
I am definitely ready to call out shams, sellouts, and "enshittification." But I don't see how this one option is any of that.

I'm building a back end with Deno and MariaDB, and pretty psyched about it so far. I haven't built a back end since I did one with PHP 5 in 2011 or so. Thus far I've found it easier to get something working than I did with the tools years ago. So much so that I'd consider throwing these guys a bone by paying for a service.

But... I don't know that a key/value store suffices for what I want to do, which will involve relational queries.
If you use Wix, it's built-in: https://support.wix.com/en/article/wix-stores-creating-a-dig...
I used to be rich with selling a part of the stuff. FrameMaker. Used to be $5K US / copy Which came originally from Frame Technologies. [ Hi Steve Kirsch . I see you're rich still ]. PDF specification is wild. So right you are. At the time, many - including yours truly - said it was rude capitalism. So, you got it. People did not talk enough about DRM. Ps: I left Adobe embrace courtesy of my then wife, and me myself. I hate DRM as a user and as a -former- Salesman. Hola
How is that healthy?
Any real world accounts as how it compares to Autohotkey?
I'm hoping that the sale is restricted to US-based entities, because this seems like a precious resource which could easily get bought up by a foreign power looking to exert some influence.
Let's forget about publishing. He took a top secret document on NSA spying on China to Chinese territory and then on to Russia. The fact that the Times published them and not his preferred journalist is besides the point. The damage was already done when he took them to Chinese territory and then on to Russia.
Search engine scrapers are friendly to me, in that they make it possible to find content that I want. A cool blog post is no good for me if I can't find it.
Haha, this morning wanted to give this site another try, from my iPad. When I decline the cookies, it just keep reloading until Safari declares that "there is some problem with the website" and refuses trying to display it.
I've worked at a large company where everything was under feature flags, think a dozen teams working on apps alone. We didn't push straight to develop, but we definitely had possibly unfinished code on production. For example a feature could be "done" but a bug was found, and the app was already released. That feature flag would simply not be turned on until the next version where it would be fixed.

We had a lot of tests for each feature flag variation, both unit and ui tests.

The codebase wasn't "littered" but there definitely existed unused code under flags, either to-be-used, or to-be-deleted. We had a grafana view of experiments that were old and not yet removed to manage them.

Overall we never had incidents around this, to my knowledge anyway.
This gets me wondering if anyone's made lab grown diamonds with real, ideally their own, blood. Maybe stuart semple.
Lolwat? Have you been to Disney? They take all your money. Have you watched a movie? Chances are Disney made it happen.

I want to know in what world a company like Disney goes anywhere and then send Microsoft and Amazon there.
Absolutely. When you make the choice to become a whistleblower, you are making the decision that the information you have is more important than your personal freedoms.

Any major US news publication or the EFF would have put their legal team to work protecting him. He could have fled to a friendly country like France that has strong civil liberty protections. He could have gone to a neutral country like Switzerland. Instead of trying any of these things, he went right to Russia and horse traded information for protection - which plays a lot more like an asset coming home than a legitimate whistleblower.
Just apnews.com and reuters.com

I used to read a lot of Al Jazeera and The Guardian and but they became pretty skewed after Trump. WAPO too.
Isn't it still the second hardest thing that exists?
While I have neither, I'd much rather use a smart oven to see its status than have a constant camera feed of my kitchen.
GPT-4 (I haven't really tested other models) is surprisingly adept at "learning" from examples provided as part of the prompt. This could be due to the same underlying mechanism.
Show HN: Theoriz3r, minimal proof of concept exploratory theorem prover
theoriz3r is a wrapper for Z3 in python. The idea is to use Z3's model checking to do "exploratory theorem proving": an interaction style where the computer curates a giant list of automatically generated questions by eliminating questions that are answered as a trivial consequence of assertions that the user has already made.
The Friendship that made Google huge