skysight-inc/HackerNews huggingface dataset:
The EFF covered this issue, it was an abuse of the DMCA.

> First, youtube-dl does not infringe or encourage the infringement of any copyrighted works, and its references to copyrighted songs in its unit tests are a fair use. Nevertheless, youtube-dl’s maintainers are replacing these references. Second, youtube-dl does not violate Section 1201 of the DMCA because it does not “circumvent” any technical protection measures on YouTube videos.

https://www.eff.org/deeplinks/2020/11/github-reinstates-yout...
A little trait heavy, but overall it's ok! I like the extractors, didn't at first but I learned to love them.

Middleware::from_fn was a life saver in the current version, middleware was kind of annoying before that was added.

Would prefer something more like graphul but haven't given it a shot yet.
Charitable interpretation 1: non-tech org with systems that integrate poorly, which they work around by shuffling around data dumps/Excel sheets periodically. This means that customers (who may have initially consented but unsubscribed later) could end up being dumped into whatever mailing list software repeatedly.

Charitable interpretation 2: list of consenting subscribers from a one-time campaign, but due to human error, someone ends up importing the same list again 3 months down the line.
Being brutally honest here, but I just cant get over the control scheme enough to even appreciate the rendering demo. It is unusably unintuitive and awful.
For a minute I was super excited seeing this headline because I thought my time machine had worked...
Yes I pretty much stopped reading the article properly there. It starts by first redefining intentionality to be something LLMs can do, and then effectively has 18 paragraphs of flowery language recapitulating the definition they started with.

What LLMs do may happen to fit some technical definition of intentionality that has been previously explored but that definition doesn't align with the actual debate that is going on about LLMs abilities.
I cant tell if he was a serial abuser, an aspie who was poor at reading the room, or just someone who was a weirdo. All are plausible and its even possible more than one is true.
Why do you think something "should" be a download button on every site? Who are you to tell someone who has created something that they must give it away? How much work do you do for free?
Ask HN: What is libinjection and why did it catch in prod?
I have a backend python app running on Google Cloud Run. There are also a few sql injection rules placed in my load balancer / network security. Here was my original WAF rule:

`evaluatePreconfiguredWaf('sqli-v33-stable', {'sensitivity': 1})`

Our client told us that all of the sudden they could not update a specific piece of data that had a certain word in it (it's a Japanese address, in Kanji). We checked through the load balancer logs and we found that this waf rule: owasp-crs-v030301-id942100-sqli was the one that was called from our network security policy.

We then set the policy waf rules to:

`evaluatePreconfiguredWaf('sqli-v33-stable', {'sensitivity': 1, 'opt_out_rule_ids': ['owasp-crs-v030301-id942100-sqli']})`

And it passed without any issue. We made sure that the change was reflected by also changing our priority level on this particular policy, and the log confirmed that by showing us the new priority level on all passing POST/GET requests.

The description for 942100-sqli is: SQL Injection Attack Detected via libinjection.

I was curious, why did it first let it pass and successfully insert the data but then caught it as a SQL injection when our client tried to update it? (there was about a month in time difference between inserting and trying to update).

I can assume that maybe GCP updated somethings on their end, influencing the sqli rule, but another weird part of it is that it works all the time on our staging cloud run. It has the same settings as our prod (including the initial sqli rules mentioned above). In staging, we can insert / update the same data with the same kanji without any issues.

Although it seems to have been solved by opting out of that specific rule, I wanted to ask why this was? Why did it start to catch it all of the sudden and why doesn't it work / catch the same things on staging? What is libinjection?

(cloud armor link: https://cloud.google.com/armor/docs/waf-rules)
Could one use case be: Precisely identifying framing members (studs, rafters) behind stucco, thick lath & plaster, and roof shingles? That would be super valuable for construction work.
You could see it as the whole international flight system being refactored, consumers will still use planes like before
Apple is pushing AirPrint for printing in MacOS and iOS. I've noticed in certain cases you have to download the HP app from the App Store to get full functionality for HP devices.
It's astonishing how much effort Google and other companies spend fighting their users.
> Pilots occasionally have to fat finger them into ruggedized I/O devices

you're saying what-3-words (W3W) is unsuitable for safety critical applications ? /s
A-fucking-men!
> What spaces are those?

Town square. Snail mail. You're thinking very 2020s/technical here.
> Previously when you told it your favourite song (directly or indirectly)

How did I tell it what my favorite song is "indirectly"?

> it would have outputted something like "NB: favourite song is X"

Again, how? Let's say the model is trained to add this to notes when asked directly. What exactly is "indirectly", and how will it recognize that it should add "Alice will be back from office at 5PM" and "My favorite food is sushi" and not "we order Chinese takeout on the weekends"?
The original youtube-dl was taken down by GitHub because of the DMCA complaint, not because it violated the DMCA. It was subsequently restored by GitHub. This project is simply more actively maintained; it's existence has nothing to do with the DMCA scandal.
The Go command can auto-update now
starting with Go 1.21, the go command has built-in toolchain updating functionality (like nvm or rustup but without needing a separate tool).

Today you can set:

go env -w GOTOOLCHAIN=go1.21.1+auto

And it will download Go 1.21.1 (if you haven't already) and use that as the default toolchain. When you want to update to 1.21.2 (or 1.22 later on) just update the go env -w command, no need to download and install the Go binaries again.

For more details:

Blog post: https://go.dev/blog/toolchain

Doc: https://go.dev/doc/toolchain
You gave a criminal example, hence my discussion of what was illegal.

Regardless, the right to privacy, much like the rights to speech and to bear arms is complicated and can’t be easily captured.

I believe people have a right to privacy, but I also believe there is nothing wrong with me seeing you outside, writing this fact down in my diary, and selling it without your permission.
What are the health implications of this? Isn't that like an x-ray?

Any good research out there on WiFi, cellular and RF in general?
The law they’re prosecuting them under is from 1890 and doesn’t mention consumer welfare once. The judiciary has made up and implemented the consumer welfare standard without the approval of Congress. Agree it’s gunna be interesting how the government pursues the case! I haven’t read the full complaint yet but I plan to :)
https://chat.openai.com/share/c904d3a0-9564-4d6f-8b62-406d3f...

I’d like it to say “C harmonic minor” but honestly my knowledge of music theory might not be good enough to properly evaluate its response. What do you think?
If two waypoints have the same name assume its the closest one to the adjacent ones in the route-chain rather than the one 4000 km away
If I have to believe several recent articles, there's an interesting gender imbalance as well. Whereas young women are making spectacular gains in higher education (in numbers, scores, degrees), young men are not going to college at all, do go but drop out or they under-perform in comparison.

If you brush aside male-dominated studies like tech, the new baseline is 60-40 female/male. Not even that because some are already affirming men, without the correction it could easily be 70-30 and there's a case known of 80-20.

In part this is due to old reasons (men going into trades) but also for new reasons (men preferring to benefit of a decent economy) as well as some men just staying home and playing video games.

This growing female dominance has a lot of interesting side effects, many not particularly positive. Life on campus is different as it comes to dating/romance/sex. The men tend to not commit to anything as they are in a luxury position. Whilst surely a good time for the men, this destroys any hope of genuine intimacy and scars women for the rest of their lives into thinking that all men are trash.

To men, female dominance is bad in the sense that there's a lack of male role models. They possibly had none at home, then again none in early education (90% female teachers and growing), and then very few in higher education.

Recent cultural orthodoxy (excessive safetyism, "woke-ism", mob justice) is also a somewhat feminine invention that is unappealing to (some) men. Which leads to an ever-growing political gap between men and women.
> physical access means you've already lost

I agree, thats why I figured if you can get away with fooling around with a lock, some wires and a laptop in the hallway, you can probably pick the backup key more discreetly.
When exactly did we decide that digital video shouldn't be easily recordable like analog video?

In any case, a download button is basically like a DVR. It is also an obvious feature that

- is easy to add

- is logically part of any video hosting site

- is wanted by most users

DVRs may be legal according to the law, but youtube and other sites spend an extraordinary amount of effort to make it hard for users to record the videos they are watching. It's basically a technologically enforced ban on video recording for the 99% of users who can't easily use youtube-dl or other tools.
Astronomers inspect an ultracompact X-ray binary system
If he does, he probably does not anymore.
They've had multiple power crises recently in which survival was in question, so the particular outcome in the last one says less than the expected frequency for more borderline events in the future.
It's amazing as a layout program for sure, as long as you're not going to interact with it much on mobile.

Then it's pretty bad but still better than writing some custom software like people would probably do without it.
Where are DVRs banned?

Edit - the parent wildly edited their comment so mine no longer makes sense.
This is the first time I've seen someone use this question in defense of privacy, instead of against it.
so what is it about radio waves that you feel is disrupting? my only reference to this is the Chuck McGill character from Better Call Saul
If Microsoft had simply ported Visual Basic in a compatible way to .NET history would have been very different. What's the point of the common language runtime when all the common languages are just reskinned C#?

This was a major missed opportunity for Microsoft -- if they had brought Visual Basic proper in .NET it would have given hundreds of thousands of applications a smooth upgrade path into modern development. It also would have given the entire Office suite an upgrade path from VBA to .NET -- something they've still not managed.

To this day, our office still has one critical commercial 3rd party application written in Visual Basic. It's replacement is, of course, a web app written in .NET.
Microsoft purchased Nokia's Devices & Services division, and rebranded it as Microsoft Mobile. Nokia then pivoted to telecommunications infrastructure and IoT. So there's no longer a relationship between the two companies.
The problem is that reality is complex, lots of special cases. Dates are a well known example, with lead days, leap seconds, time zones, DST, etc... So is localization.

You may have the perfect code for your use case, with the right level of abstraction, until reality kicks in. For example, let's say you are writing a device driver, each device identifies itself with a unique identifiers, fine, until one day, you get different devices with the same id and you need to issue a special command to differentiate between them. And then, the next device receive commands in little endian order, even though all the other ones were big endian. And then another device sometimes silently fails to execute a command, you then need to a bit of time and check that it was actually taken into account and retry if it wasn't. Etc...

You can't plan for all that, if you try, it will only make things worse. All that will invariably result in ugly code, it is not bad design, it is just that reality itself is ugly.

If you try to start over, if you are really really good, you can reduce it to something nice until the next dose of reality. But more likely, you will make things even worse. Believe me, if you think you are good, try rewriting a legacy app that is used in production in a way that doesn't break production, I predict a humbling experience.
That sort of thing happens already; for instance, the MCDU of an Airbus aircraft will present various options in the case of ambiguous input, with a distance in nautical miles for each option. Usually, the closest option is the most appropriate.
I'd like to be able to download YouTube videos easily. Maybe it's a feature uploaders can toggle on and off per video
This post is a bit meta, isn't it?
Remember the Defund the Police thing? Turns out that places that diverted money to non-police alternatives for things like mental health calls have been doing well so far. So, get rid of the bad cops and give that money to people who can help without a gun.
GP's point, aiui, is that using a DVR/VCR isn't really that different in concept from downloading a video off YouTube.
Problem is, they're still relying on oil in a truck to deliver those groceries.

Guy in the suburb needs to turn their lawn into a full garden and become as self-sufficient as possible
Probably. But what seems much more interesting is to have a spatial model pre-seeded in the LLM, so that it "attaches" language to that as part of its training. Ditto for other models of the world we want the language module to be able to draw on and reason with.
Potentially answered in another comment:

https://news.ycombinator.com/item?id=37470025
I waited in the airport for 6 hours before learning that my flight was cancelled, and had to rebook... I was flying to New York to see my family, so I didn't really have any alternate transportation options!
I was just objecting to the idea that being against discrimination seems like a no-brainer. It isn't because the status quo widely allows it, if only it's the correct type.
100%. In general, if you're submitting a PR for a bug fix then an automated test (ideally a unit test) should be included in the PR that tests the bug fix.
%d is pretry useless, yes. But %.3d is great for time durations where millisecond resolutions are sufficient. Or %_d (group digits) for large numbers like filesizes.
Tech isn't even close to being among the top sectors contributing to energy consumption
Awesome, thanks for the links.

Apparently it's part of the open source courses and learning materials portal on security, x86, ARM, malware, VM, intrusion detection, pcap analysis, crypto, trusted computing, smart card, reverse engineering, forensics, secure coding, software exploits, etc:

https://opensecuritytraining.info/Training.html
I wasn't, I actually didn't even read the attached article only the HN comments who seemed to mainly disagree with the article and mentioned quite a lot about the different approaches to async in Rust. I really want to learn it but prioritising up-skilling my DevOps capabilities at the minute so it will have to be next year.
> “Energy”, “mental batteries” - these are entirely made up concepts.

Close. They're abstractions that I used to describe my experiences. I used them because I'm not trained in psychology and the analogies are close enough.

> Any sort of activity is tiring - it is especially tiring if you aren’t very good at it, if you have to make a conscious effort rather than being so competent that it’s “second nature.”

Correct. That has nothing to do with introversion, however. Being socially awkward doesn't (necessarily) mean that you're introverted.

Introversion isn't something that can be changed with practice. Introversion can't be changed at all. Extroverts usually don't believe this.

Note: I'm not using words 'improved' or 'overcome' here. Those words would imply that introversion is a problem that needs fixing or mitigating. It is not. It's a part of the rich tapestry of human existence.
Well, I got bored too, so here's some results with CUDA (on an RTX 3090):

The SHA256 hash of this message begins with 534d765
The SHA256 hash of this message begins with c18b2de
The SHA256 hash of this message begins with 7fe17da2
The SHA256 hash of this message begins with a7fdc855d
The SHA256 hash of this message begins with 46eae34f1

My unoptimized implementation takes about 40s for 9 digits, so it will probably take about 10 minutes for 10 digits, about 3 hours for 11 digits, etc. It shouldn't be hard to use words instead of hex digits, if that's desired.
Some would argue that a car highway prevents right of movement for pedestrians and cyclists.

I get what you're saying but you're very narrowly trying to define right of movement to make your argument and without your narrow definition it falls apart.
It was killed by VB .NET, a different language that looks similar to VB6/VBA on the surface but has nothing at all to do with it.
> Guess what, all these have Objective-C bridges, usually multiple ones, because the combination of being just a thin shim on top of C as well as that thin shim being essentially a Smalltalk with full dynamic messaging and runtime introspection + intercession means interop is Objective-C's bread and butter.

Exactly.

In fact sometimes in lieu of shell scripts I write simple utility JavaScript files using Objective-C APIs and run them under osascript.

For Python, the easiest way to copy a file while not using twice the disk space (using reflinks) is still using the Objective-C API: https://github.com/RhetTbull/osxphotos/blob/20ef78bbd45a6787...
Yeah. "Great person" is appropriate to describe Musk when it comes to "great stature" or "great influence". It seemingly does not apply when we use it to refer to "great character".

The problem is that "Great man" as a term is now too vague and we must now make the effort to distinguish between people's achievements and their personal character. Else people will pick the interpretation of "great" that suits their worldview.
Epstein Barr Virus and CFS have been linked I believe. The Epstein Barr virus can trigger false positives for mononucleosis and has been shown in some cases to linger and cause chronic symptoms for years.
Newly discovered comet visible in night sky this weekend
They tried so hard.

I went through Stanford CS in the 1980s, just as it was becoming clear that the predicate-calculus / expert systems approach to AI wasn't going to do much outside of very well defined problem spaces. It was very frustrating. I'd already done machine proof of correctness work, but that's in a problem space you can formalize. So I had a sense of the limits of the approach, and was rather surprised by the broad claims made for it at Stanford.

I took McCarthy's "Epistemological problems in artificial intelligence" class. One day he was describing the missionary-and-cannibals problem (amusingly, in a less violent form). He started out with it as a word problem, and then he set it up so that his new "circumscription" approach could be applied. Turn the crank on that algorithm, and an answer pops out. The word problem to formalism conversion struck me as the step where, as an old New Yorker cartoon showing a mathematician explaining something put it, "a miracle occurs".
Formalizing the problem is the hard part.

The classic critique along those lines is "Artificial Intelligence meets Natural Stupidity", by Drew McDermott.[1] That was written in 1976, and basically describes why that class of AI systems hit a wall in the 1980s. The "AI Winter" followed, the 1980s AI startups went bust, and not much happened for 15 years. Well-known history.

[1] https://cs.fit.edu/~kgallagher/Schtick/Serious/McDermott.AI....
If you pay for Youtube Premium you can download any video to your device for offline viewing. I'm not sure if this is configurable by the video uploader. The video can still only be viewed from within the Youtube app so it's not like a general-purpose mp4. I suspect this is in part so that Youtube can continue to monitor how many times you watched a video so they can correctly compensate the uploader (and, obviously, to maintain control over their library).
See elsewhere in the thread for details, but youtube-dl was restored by Github and is generally not considered to be in violation of the DMCA. You can see it on Github here: https://github.com/ytdl-org/youtube-dl

A copyright holder abused the DMCA process to take it down the first time.
Talk to a radiologist and ask them about the stuff they’ve found incidentally in “healthy” people. The average person is very much as described in the medical literature, with some small variations. This isn’t a good use of my time. I’m done replying.
Yeah it was kind of misleading/clickbaity that they worded it that way. I guess they wanted to highlight how sharply they could image the room.
They've already given it away for free by uploading it to YouTube. That I choose to consume the content outside of the free web player is not their business at that point.

Most frequently I do this because I am analyzing the audio, and it's hard to reliably seek in the web player; my offline tools are much better at this task.
I wonder if this is something Unicode could address. You could have something like quote marks that mean "Anything between these is data that shouldn't be seen in digital media but should be printed"

So you could have urls like:

example.com?<a single icon>&productname=somethinghumanreadable
PeerTube is decentralized video sharing software that works with a federated protocol but not enough people choose to host their content on PeerTube. The problem isn't Google or the law on copyrighted content and who can make copies of it. The problem is people choose centralized content hosts like YouTube and all that it entails because it is more convenient than running and federating PeerTube nodes.
Lets move from the street to 'private spaces'

You attempt to go to your local grocery store. They use 'Google Identity' which they are perfectly allowed to as a private business. You are accused of sending spam by Google (who the hells knows why, they never explain anything) and you are barred access.

Being the staunch libertarian you are, you leap over the public roadway afraid of catching communism if you touch it and go to the grocery store across the road. It turns out they are using 'Amazon Identity' and via an information sharing agreement with Google (private businesses can share information about you, right?), and you're also denied access to that store.

You'll go to another store, right.... Oops, turned out after we got rid of monopoly laws there are only two different stores in your community after consolidation of the industry. Luckily for you there is a toll road that you can take a 30 minute drive to another place that uses a different set of identifiers to let you in.

We busted monopolies and company stores years ago because businesses harassed and murdered people left and right!. Have you forgot the history of the Pinkertons, or are you just blindly ignorant of that part of US history?
This project deserves attention, but I'm not sure it needs attention. No upvote this time.
Not really, WhatsApp is used in Europe, Middle East and India. Japan, Taiwan, Thailand, South Korea are on Line. China Weibo I think. Even in the West the market is fragmented with Signal, Telegram, Facebook Messenger, Instagram, Discord, etc.