skysight-inc/HackerNews huggingface dataset:
I think Bruce has the right perspective, but I also can’t help but wonder about whether calls to slow the pace of AI research are loud warnings about the barn door being open long after the horse has left.

For example: the Chinese have created a massive surveillance network of CCTVs and drones feeding data into the AI-augmented social credit score system. These are the AI technologies of theirs that we know about. I wouldn’t be surprised if they have lethal drones controlled by AI as a military project. We’ve seen time and time again that the Chinese Communist Party are perfectly happy subverting anything and everything in the service of upholding their own power. It’s a no-brainer to assume that AI ethics are just one more line item in the laundry list of the things they’d subvert.

I wonder about the world’s capabilities to counteract such a ruthlessly amoral threat without a deep understanding of the technologies they use, and how to counteract them.
"70 percent of all security bugs are memory safety issues" (https://www.zdnet.com/article/microsoft-70-percent-of-all-se...)
Heavy machinery (in production) is designed that you cannot just walk into them and will stop, if you do. It is a bit different approach from software engeneering.
> High-profile C/C++ projects can't prevent all security bugs, but they can make them easier to find and harder to get in. AVIF and JPEG XL roughly have the same impact in this regard (written in C++, uses Google's standard convention, tested and fuzzed regularly, and so on).

Isn’t all of that true of libwebp? I’m sympathetic to the argument that it’s a lot of work to replace C but I’ve been hearing that C/C++ will be safer with enough diligence and better tools since the 90s and it hasn’t happened yet.
> the cost of supporting an entire extra toolchain and dealing with the support issues

Why I love features like Fastly's Image Optimizer. No extra work on our end but we get the bandwidth savings https://www.fastly.com/products/image-optimization
I think the indended link was: https://old.reddit.com/r/dotnet/comments/16fu7o0/why_isnt_do...
The answer to this question is: you have asked the wrong question.
Minidiscs were a great tech—-we had a couple recorders in the early 2000s, mostly for recording my wife’s recitals. They were a huge step up from DAT in terms of easy, tiny personal digital recording and playback.

Couple things killed them, though. The recording industry did their usual “ZOMGWTFBBQ this will KILL the music industry!” dance that they do every time there’s a new recording tech, so Sony responded by building in 90 layers of DRM all over the place. That meant you could record yourself playing, but trying to get that recording off the disc was anywhere from annoying to impossible depending on the player model thanks to Sony’s proprietary audio formats and connection systems. Until NetMD, the players would only use ATRAC, so you’d have to use Sony’s tools to move content in and out of the devices, with lots of DRM flags to make it harder to use them to bootleg concerts or trade music.

All of that was in place right when MP3 and HDD/solid-state recorder/players exploded, at which point there was no selling point for MD anymore. No one wanted to buy a copy of an album on MD (there weren’t many anyway) when they could buy the MP3s or buy the CD and rip the MP3s instead. No one wanted to record audio in a proprietary format on expensive MDs when they could record it uncompressed to a computer or a solid-state handheld and burn it to a CD if they wanted a physical copy.

Kind of sad, really—-the later NetMD models were tiny, fun to use, and by then Sony had removed most of the obstructions around recording and transferring audio. Solid-state is more reliable, but those recorders don’t have the cool looks and fun interfaces of the consumer MD models.
Well, did you mean that a bigot is someone who is intentionally hurtful? Or did you mean that calling someone a bigot is intentionally hurtful?

If you meant the second, then I'm condemning myself for being too opinionated, which is probably something I can get away with...
That's true. What really happens is this:

- The dishwasher runs balls-out for 40 minutes so it's noisier. (Bosch sells a lot of units on its reputation of being ultra quiet)

- Manual mode doesn't check the soil sensor while washing.

- There is no drying cycle, which is the bulk of a two hour wash.

So if you're okay with that, Manual works just fine for most everyday loads and is pretty much the equivalent of the old school DWs and how they worked.
It's a complete myth that far-away planets can pick up our radio signals from background noise (especially from our own sun). We can't even talk to the nearest star system at 4ly.

https://space.stackexchange.com/questions/22617/can-we-commu...

This misconception fuels the false "why are we alone" question that implies we would have detected intelligent life if it's there. Not so fast.
Haha, yeah. Everywhere I've ever worked and resigned from, all but one have been 3 months notice. Even after raising with the issue of knowledge transfer with them early on, usually it gets ignored until the last 2 weeks and then there's a massive panic because there isn't enough time.
What a surprise to discover that lack of emotional control is a bad thing.
3 Takeaways from Elon Musk’s New Biography
It also guarantees you will not be compensated for the PTO you didn’t use when you resign.

Many places that accrue PTO will pay out for unused days at your departure.
Idk I mean there’s a real trade off to making the app more secure. The causes of insecurity are largely user behavior, and the insecure things are things users want to do for practical reasons.

For example, I have a foolproof way of preventing sim swap attacks: require 256bits of entropy and never allow a password reset, like in crypto. Lose your password? Account is gone forever.

This is more secure but less user friendly. Except for large accounts, I don’t know that anyone even particularly cares if their Twitter gets hacked. You could pretty easily make the argument that preventing sim swap attacks is an optimization for high profile users at the expense of everyone else.
Ya, transactional processing of what I would consider simple and well defined data it's what typically occurs with cobol at financial institutions. In this context the code has been around forever and all the 'Oops we lost your money' bugs have generally been purged from it'.
Making a Transformer by Hand
Previously submitted and discussed: https://news.ycombinator.com/item?id=37476823
Hacker News messed up the link
Can't we also enable random data
How about LED strips to protect birds flying at night?
I disagree with the sentiment here. It treats failure as a purely negative thing, as a four-letter word that shouldn't be mentioned. I don't think it's healthy or in-tune with reality to skirt around failure in that way. Rather, knowing that I've failed and being able to accept it, then looking for the next step, is better. But, I won't lie to myself and say that I haven't failed. I just accept that it's OK to fail.
There are two different possible attack vectors.

1. First, once you "local root" within the sandboxed process what can you compromise?

a. Can the session cookies be stolen? (Think gmail inline attachment rendering a malicious webp image).

b. Can you launch attack on other local network resources from within the compromised sandbox – read insecure filesystems, make tcp sockets to local resources etc – these are not prevented by OS sandboxing capabilities that Chrome depends on.

2. Second, can you probe for vulnerabilities in OS sandboxing that chrome depends on to break out of sandbox? On older unpatched OS versions this is definitely possible. These attack vectors may have been fixed in newer patches of OS already so you won't see a new CVE and patch for the same from the OS vendors.
Thank you! Signing up now.
The article does mention that in passing, though not specifically coal but power lines. It also mentions that house cats literally kill billions of birds a year.
It's useful to divide benefits into "core" and "extras".

Lack of core benefits make employees unhappy. Too low pay results in unhappy no matter anything else. OTOH high pay doesn't make employees happy -- a shit job with high pay never gets better than "barely tolerable".

Non-core benefits make employees happy but lack of them doesn't make them unhappy. For example, free lunch.

The division between core and extra varies to some degree between employees.

The major point is that the extras can never make up for a missing core. Poor pay or a bad boss is going to result in unhappy employees no matter the benefits.
Yes, I agree with this, and it is my pattern too. One can replace MXRoute with other providers you are comfortable with. Google is still an acceptable candidate for your custom domain email. I do have Migadu[1] as a throw-everything-in for all new and other domains that are not that important. The idea is, “Can I walk out of this provider and move to another in minutes?” I have experimented and walked in and out of Gmail, Migadu a few times to see how it goes.

For backup, I have tried quite a few, and the simplest I found (for now) is just to run Thunderbird (daily, weekly) and set it to download a local copy via POP. MBOX is an open and acceptable format by most other clients (if you need to change clients).

I will continue to clean up and streamline the processes, but the general idea is to have a backup (preferably local) somewhere, while the primary email can be accessed from your choice of client or the web.

1. https://www.migadu.com
strange, i was hitting ~20mbps when downloading armored core vi.
I believe Cecil Sharp was one of the first to extensively catalogue Appalachian folk music. He'd done the same in England (but was not the first), and was interested in how traditional English folk music had survived in communities of English descent. Olive Dame Campbell put him onto Appalachia when he met her in Boston. Arguably, his bias towards English-origin music meant that he neglected to record and preserve the full range of Appalachian folk. More here: https://en.wikipedia.org/wiki/Cecil_Sharp#In_America
Tom Magliozzi daily drove a 1963 Dodge Dart (convertible) which his brother routinely harassed him for.

Two years ago, son #3 bought a 63 Dart (hardtop) out of someone's weeds and got it road worthy. It's his daily driver.
Both are inspired by WeChat.
> Make it a "customer" service.

Common path to pain right there — services based on nouns and entities rather than verbs and business processes.

Having a single "customer" service means anything involving customer data has to talk to that single service. If that service has a problem, every other service stops working. You basically have a tightly coupled distributed monolith, so network boundaries instead of function calls between modules.

Think instead of splitting that data to separate services around business processes like billing, shipping, outbound marketing, whatever. Each service owns the slice of customer data required for its processes and can run fully autonomously.
That's a manageable size for a block list
I love Shen, but I have not taken it on. I subscribed to the professional version for half a year, and I like the amount of implementations of Shen in other PLs. The pattern matching, optional type checking, and the built-in Prolog is incredible. It's a case where the creator has been shunned by the wider community, partially due to his diplomacy, but he is brilliant, and the uptake has been niche and bleeding edge. If it had a Mozilla behind it or other, I think it would have been more universally appealing. @deech's talks, though older now, are fantastic and relevant[1,2]. But take what I have to say with a grain a salt: I am an avid APL/J/BQN fanboy ;)

[1] https://www.youtube.com/watch?v=lMcRBdSdO_U

[2] https://www.youtube.com/watch?v=BUJNyHAeAc8
The solution utilizes a native web elements (aka web components) browser API for easier embedding into websites: https://developer.mozilla.org/en-US/docs/Web/API/Web_compone...

Basically instead of using JS snippet for mounting the UI - we're using a custom web element so it can be embedded just with HTML tag without JS.
Op edited. Originally read

> Knowing when half-assing something can be a skill in of itself.
Those same vendors are using Rust and Swift now which have comparable performance and solid interoperability. It seems like time for a policy saying new internet-facing code be implemented in a safe language.
Dude, this is awesome, thanks!
> If I create a machine that kills someone, my "intentionality" is fair game to be dissected in court, and ultimately I may be found guilty as if I had killed with my own hands.

The weapons industry (and its lobby organization, the NRA) would like to have a word with you...
I like the possibility to use different colors and probably the birthday widget would be useful, but I already use another app for that.
if Quiet doesn't catch on to provide that noise, would it be beneficial to flood Tor with LLM-generated conversatinos? We're really good at "cheaply generate near-infinite quantities of human-looking text" these days...
I have so many mixed feelings about Google. They unlike the fruit company, advanced society sooo far with their FOSS. I have sooo many degoogled products, and I need to give them credit for that. They also refused to comply with the CCP, something the fruit company was happy to do during the hong kong protests. They even continue to let ad blockers on their platforms. They also made it easy for a poor college kid to make apps, unlike the fruit company.

But... They also suck. Canceling services, no customer service, removing the aux port to sell headphones, etc... They aren't the same company I was a fan of a decade or two ago.

Not sure what I want out of this. While it seems like I'm taking Ls from all the FAAMG companies, I admittedly think my life has never been better from a tech point of view. (most of that is from GPT and Moore's law though)
Would painting black present potential heat absorption/dissipation issues?
ChatGPT fails in languages like Tamil and Bengali
I did, on Friday. Feel free to support any of the claims you made with specific citations.
Those statistics would be much more useful scaled by power output of those respective sources. The birth date ratio between coal and wind is between 24:1 and 56:1 according to those figures - but surely the current power output of coal across the world has got to be way higher than wind? So replacing all coal with wind actually would kill more birds
Example: a truck stops in front of the autodriving car, too quickly for it to stop in time.

Not sure if it matters for your example, but if that happens to a human, it's his fault for not keeping a safe following distance. It could also be the truck's driver fault if the sudden stop is not justified, but in the case of the robot, it should be programmed to keep the distance.
As I understand its common to ask for far more than you expect to be granted. thats just how these things work - they get pushed down from the starting point in the complaint. Its probably some multiple of per user earnings from google's own public numbers plus some extra for punitive damages
An engineering manager at a previous company here in Germany told me, after I complained about my 3 month notice, that his former role as a CTO had a 12 month notice.
She must not have been that bad if you dated her for years.
Transcoding images is why all old pictures on the web a a blocky mess of unholy JPEG.
People already complain about the pulsing shadows, the droning hum and the optics. I can't wait to hear them also complain about the nightly LED flicker.

More seriously though it should be possible to use LEDs just bright enough to deter birds while also not totally annoy most humans. At that point light pollution and insects might still become a problem though.
QRcode TOTP, and print the QRcode out and store it in a safe/offline.

That way you can easily re add the 2fa token to a replacement device.
If anything, it looks pretty damn good for something 20 years old. Facebook, Reddit, and Google haven't aged well. HN isn't even 20 and feels much older.
I should have clarified:

This piece is about matters of taste. So a national authority regarding aesthetics.
I see a windmill and I want it painted it black…
Valve released the server binary one day before the client launch, and you could use that to register with steam. I knew someone with a two digit steam id from that.
Sure, but many people do think it does, and such an interpretation is totally compatible with QM.

The Schrödinger equation and wave function collapse are not compatible. Maybe they could be integrated in some theory, but that will need a lot of additional explaining when and how the evolution changes between being unitary and non-unitary.

But it's irrelevant because physics isn't about what things "seem like to humans", it's about what we actually measure and how to create theories that explain and predict it.

You are still missing my point. Quantum mechanics in general and entanglement in particular are arguably hard to understand because they are unintuitive. If all that was going on were some non-local interactions, than entanglement would not be hard to understand because non-local interactions are intuitive to us because we are familiar with things that look like non-local interactions to us.

Now turn this argument around. We are still having a lot of trouble making sense of quantum mechanics, therefore it seems unlikely that non-locality is at the core of quantum mechanics, because if it was and would explain everything, than it would not be so difficult to grasp quantum mechanics because we have an intuition for non-local behavior. This is obviously no rigoros argument but it was also never was meant to be one.
>There are simply not enough competent engineers who master UNIX and who can build beautiful minimalist systems like StackOverflow's

StackOverflow is built on Windows not UNIX.

I know I am nitpicking here but there is a larger point. The technology choice is rarely the bottleneck.
Stop using the phrase 'walled garden'. Its marketing jargon that promotes anti-consumer behavior while promoting ideas of delicious fruits and beautiful flowers.
Massive Data Transfers: AWS Snowmobile
TSMC to invest up to $100M in Arm IPO
> It's better that the codec is 100% safe but there's a tiny amount of unsafe glue code, [...]

I meant that many codec cannot be easily made in such way because memory allocation can occur here and there.
The article cites another article which cites https://www.sciencedirect.com/science/article/abs/pii/S09601... for the coal figure
I am pretty rusty in special relativity, but IIRC, in the ship it basically seems like the distance is contracting as you accelerate. And from earth, it seems like time is going slower inside the moving spaceship.
Ag yes, the new HN creed: “anyone who disagrees with me is a redditor”. Seriously has this site been taken over by children?
Meta’s Tussle with Canada: It’s About Control
If C could get constexpr and templates (with concepts) I would be very happy.

Everything else in C++ is just syntactic sugar to me. Very useful syntactic sugar, but just sugar.

Alright placement new is quite nice too. Since there are so many ways to allocate memory in the linux kernel.

As far as RAII goes, ehhhh I don't know. KASAN and kmemleak do a pretty ok job.
Isn't that why France has a President the position was created just to blame them? lol
Thank you for your sanity on modals. They are horrible on mobile devices and not necessary in most cases.
The main killers of birds are: Cats, cars, glass windows, power lines and pesticides. The amount of birds killed by wind power is tiny in comparison. NIMBYs like to abuse this argument to avoid building wind farms while not caring for birds at all.
Tell HN: Embrace the 'Teraz' Philosophy Celebrate Life's Present MomentsTell HN:
Have you ever wondered how to fully embrace every moment of life? 'TERAZ' is a life philosophy that teaches us that life is most precious in the present, and every moment matters. Join our community to discover the beauty of the present and celebrate life together!

Our Philosophy:

- Life is a gift, and the present is our greatest treasure.
- There's no confirmed life after death, so why not find joy in the now?
- We support each other in living life to the fullest in every moment.

What We Offer:

- Inspiring lectures and workshops on the 'TERAZ' philosophy.
- A community of open minds ready to share their insights.
- Practical tools for living more consciously and joyfully.

Join Us Now:
Become a part of our 'TERAZ' community and start celebrating each day. Don't wait until it's too late!

If there's anything, it won't be an official religion until next week TERAZ.
Because why not?
Intel confirms Thunderbolt 5 name, 120Gbps tech arrives in 2024
Thanks for your feedback!

I'd love to capture a profile next time you have a chance. We've been primarily focused on features until just about 6 months ago, so we have started making significant optimizations only recently.
Maybe using UV LEDs? Birds can see higher wavelengths than us.
> While Apple M runs Arm instructions, it is not any of the cores designed by Arm like the cortex A7 series or the X series

How can we be sure about this since Apple does not disclose any details about their chips?

> Apple's cores are actually completely custom, with no input from ARM the company.

Apple is one of the founders of ARM, with other two being Acorn Computers and VLSI Technology.
I wonder how many are taken out by our windows. More than once I've seen birds die after splashing themselves thinking it's a passage.
Sorry, you missed the point.

If programmer didn't know that repetitions are allowed, they wouldn't appear in the input to the fuzzer as well.

The mistake is too trivial to attribute it to the programmer incompetence / lack of attention. I'd bet my lunch it was because the spec is written in an incomprehensible language, is all over the place in a thousand pages PDF, and the particular aspect of repetition isn't covered in what looks like the main description of how paths are defined.

I've dealt with specs like that. It's most likely the error created by the lack of understanding of the details of the requirements than of anything else. No automatic testing technique would help here. More rigorous and systematic approach to requirement specification would probably help, but we have no tools and no processes to address that.
Thanks for actually responding to my whole comment, rather than the half argument I didn't make in the sibling threads.
> Sure, using your own domain can open you up to mistakes. But at least, you're the one in charge.

...Of the management of the domain and the email itself.

But if Google, Microsoft, or one of the other major email providers decides that you, someone else in your subnet, or even your ISP or VPS provider, is not following the rules they've decided are important, they can just...put you in a black hole. And you have no recourse. And your emails will simply never get to people using one of those providers, and you may not even know that it's happening without a user report.

(Note that this is not me saying "And thus you should just give up and use Gmail." I still run my own email server, and I've managed to get it set up in such a way that it's mostly accepted by the megacorps, but it took months to figure out why it was even being blocked, and then I had to switch to a completely different VPS provider to get around the block. If there's a message here, it's "...and therefore we should break up the big providers under antitrust law, because no one should be allowed to be that big.")