skysight-inc/HackerNews huggingface dataset:
Reality is that Unity loses vast sums of money year after year. Know that if you develop with them, you are tying your company to a company that is vaporizing money by developing their platform year after year.

If you are going to develop with them, then you should want them to earn a stable profit, so their platform is around for you. You may not agree with this pricing structure, but you should hopefully want them to make money and raise their prices somehow.

However, I think it's perfectly rational to conclude that they are an unstable partner that isn't earning a profit, and it's too risky to tie your development to them as this article sort of suggests.

I just strongly suggest you either are in favor of them raising their prices somehow or switch providers, because losing over hundreds of millions of dollars every year is completely unsustainable.
Yes you can, but that would be using

> additional data and heuristics

Directly mapping is impossible, so you cant just do a dumb ID-at-time pre-processing step (which is what your comment seems to suggest). You need a more complex pre-processing step that’s capable of understanding the surrounding context the identifier is being used in. A major issue with the flight planing system (as highlighted in the article) is that they attempted to do this heuristic mapping as part of their core processing step, and just assumed the ID wouldn’t be too ambiguous, and certainly wouldn’t repeat.
Hokuto Shinken self-application; all the neuralgic points, and with determination and lots of force.
Notepad++ v8.5.7 release: Vulnerability fixes
> That's mostly right, but it's not reported to anyone.

IIRC, its reported to a centralized state database in (near) realtime in some states, but in any case it is definitely the case that chain pharmacies generally have their own electronic tracking and flagging to avoid getting nailed the way CVS did [0], which may be shared systems like MethCheck [1], which can also be used by independent pharmacies.

So, you’ve got to choose your targets carefully for your “shop at lots of different pharmacies” plan.

[0] https://www.justice.gov/archive/usao/cac/Pressroom/pr2010/14...

[1] https://totalverify.equifax.com/solutions/methcheck
If only there was a simple physical maneuver that could transform the location of something from behind a pharmacy counter to the customer-facing shelves!
We're just a single household and we've already got TBs of photos and videos. Many more TBs of other media too and (prior to compression) over a TB of email.

I can't claim to know what kind of data Save the Children had, the article mentions 800GB of that was financial records alone, but I'm not sure the amount of TBs a company has sitting around tells you much about how beneficial they are to society. It doesn't surprise me that a company that has been around since 1919 would have accumulated 7TB of data.
While the google cloud thing is a weird design, that seems like the wrong place to blame.

TOTP and SMS based 2FA are NOT designed to prevent phishing. If you care about phishing use yubikeys.
This might be true in a programming language but it’s not for mathematical functions which is what they refer to in the first half of this paragraph.

I think what they mean is that two functions won’t have the exact same signature and result typings, though in practice this isn’t normally true for computer systems. Although there’s an argument that if it has those exact same things maybe you don’t need two functions but to improve your one function to be more robust.
This is remarkable, enough that I felt the need to submit it.

https://news.ycombinator.com/item?id=37501904

Thank you for sharing, @niccl!
You have a funny definition of 'good news'.
What Snowden did wasn't covered by the whistleblower laws.

First, under the relevant laws for intelligence community whistleblowers the kinds of actions covered by whistleblowing laws are illegal conduct, fraud, waste, or abuse. It is not clear that all of Snowden's disclosures qualify.

Second, the whistleblower laws only cover public disclosure only if that disclosure is not specifically prohibited by law. If the whistleblowing is about something whose disclosure is specifically prohibited, which would include much of the classified material Snowden disclosed, you have to limit your whistleblowing disclosure to people who are authorized for that material. For an NSA contractor like Snowden that would include the NSA's inspector general and members of some congressional committees and maybe some others.
My observation seems to be two broad groups. Maybe the fit ones eventually become the bottle ones? Maybe the no-bottle ones are resisting medicine?

One thing is for certain - it makes me uncomfortable how many different medications some people take every day.
I, like many others I suspect, bought phenylephrine when Sudafed first disappeared from store shelves. It was 100% ineffective for me from the first dose.

In the meantime, Sudafed has become one of the most difficult to acquire substances for my daily life (I need it every day as directed by my doc). So many times when I go to a pharmacy to get it, they're out of 96-count or 48-count or any count, meaning my one allowed purchase/month nets me less than a month's worth. Or the state's tracking system is down (this happens frequently) and they won't sell me anything. IOW, buying Sudafed is difficult and often infuriating.

Meanwhile, meth problems haven't gone away—-in fact meth use is WAY up since these restrictions were put in place in the aughts. Sure, hiding and tracking it got some of the meth production moved south, but it didn't negatively affect meth availability. Supply is plentiful, prices are down, purity is up. Even Oregon, who restricted Sudafed to prescription only, has seen a 3x increase in meth deaths. [1]

Sadly, the restrictions on Sudafed are unlikely to ever change as lawmakers rarely care that their laws hurt a ton of law-abiding people as long as they can claim something about being tough on crime.

[1] https://www.nytimes.com/2018/02/13/us/meth-crystal-drug.html
Symbol tables, compression, etc seem one level of abstraction above what msgpack provides. Such features could be implemented on top of vanilla msgpack as long as all parties agree on the msgpack schema.
Creatures from Primordial Silicon(1997)
Lead acid has some really good benefits for low end off grid solar, not least of which is the relative lack of rapid exothermic decomposition.

And the only inverters we know will last 30 years had to have been made in the 90s …
At least it's the same R&D team from Bushnell/Warner, just under new management. On the consumer side, there's a lot of continuity between the Warner and Tramiel eras. The Tramiel era was a much leaner/meaner Atari, trying to shed dead weight to avoid bankruptcy.

After Tramiel "merged" with JTS the company was liquidated. The consumer side of Atari no longer exists as an R&D house, all that's left is a brand name and some IP.

The "fun" era was under Bushnell/Warner when they were flush with cash, lots (likely too much) of R&D spend. The Tramiel era had not quite as much innovation as Tramiel famously refused to spend money on development R&D or marketing. A lot of cool stuff was done that went nowhere, their tech failed to impact the market.
HUD 4000.1 governs and you’re closer to correct than I am.

Pass the crow?
Web 5? Lol. As far as I can see all of those things are already totally possible with web 2.0. Except maybe NFTs? Hard to argue that they are useful though except for money laundering.

Could you perhaps pick one or two from that list that you think are the best and explain why they can only be implemented with smart contracts?

I mean, take voting for example. You can do voting with a web 1.0 website. The challenge is always going to be preventing vote stuffing, and the only real way to prevent that is to associate votes with real world IDs. How would web3 help with that? The proper solution is government issued key pairs, but that doesn't sound very web3 to me.
> I have to imagine it's more convenient to cook street meth back into Sudafed to fix your stuffy nose than it is to cook Sudafed into meth to get your fix.

Maybe, but more people are willing to do felonies to get/sell meth than to do the same thing for pseudoephedrine, and its just as illegal to by meth to cook pseudoephedrine as to cook meth from pseudoephedrine.
The problem with Fido (and other such solutions, including smartphone-based passkeys) is that they make things extremely hard if you're poor / homeless / in an unsafe / violent family situation and therefore change devices often. It's mostly a non-issue for Silicon Valley tech employees working solely on their corporate laptops, and U2F is perfect for that use-case, but these concerns make MFA a non-starter for the wider population. We could neatly sidestep all of these issues with cloud-based fingerprint readers, but the privacy advocates won't ever let that happen.
It was also a bit weird how they kept emphasizing how their on-prem installations were not affected, as if that lessens the severity somehow. It's like duh, that's the whole point of on-prem deployments.
Sounds like you're talking about anti-latency arbitrage mechanisms, which aren't a new subject. The book Flash Boys talked about IEX, an exchange set up in Canada with an enforced minimum latency via propagation delay, just by having long coils of fiberoptic cable...

I don't think nanosecond-sensitive trading should be a thing, personally, but sweeping changes to the way security exchange works seems less likely than societal collapse. Most apparent experts insist that letting algorithmic money vacuums operate is "good for liquidity," and that there is no viable more-fair alternative. I don't really buy it. IMO the obstacles to something better are just public ignorance, industry inertia, and a deeply lacking interest in fairness, i.e. corruption.
Near term naval and aircraft.
Regarding rural third world: the thing about a satellite is it is basically going around in a circle. If the business plan was built around being profitable over the first world then everywhere not over the first world is basically free because you have to build whatever bandwidth you want to provide the first world around the entire orbital ring.
I find this useful. Just curious - if you are using the ChatGPT API, it costs money. Are you planning to have ads on your site to offset the cost?
Pros of Ion vs CBOR:

Wider range of data types - Ion supports decimals, symbols, blobs, and clobs which don't exist in CBOR.
Optional schemas and annotations - Ion allows attaching type/schema information to data for validation purposes. CBOR has no schema support.
Text format - Ion provides a human-readable text format for data interchange, CBOR is binary only.
Maturity - Ion has been used in production at Amazon since 2009, CBOR is a newer standard (RFC 7049 in 2014).
Language support - More mature library ecosystem around Ion vs CBOR which is still gaining adoption.

Pros of CBOR vs Ion:

Standardized - CBOR is an IETF standard, Ion is an Amazon-proprietary format.
Simplicity - CBOR has a smaller set of basic data types making it simpler to implement.
Used in other standards - CBOR is used in data formats like COSE for crypto operations and CWT for web tokens.
Efficiency - The CBOR binary format can have a smaller encoding size than Ion's.
JSON interoperability - CBOR is designed to be a JSON-compatible binary format. Ion is JSON-like but not fully compatible.

In summary, Ion has richer data typing and schema capabilities and a long production history. But CBOR is simpler, standardized, and gaining momentum - especially in crypto and web standards using it as a binary encoding basis.

So Ion may be better for applications dealing with complex, annotated data. But CBOR has advantages for an efficient binary interchange format, particularly when standards compatibility is important.
Berkey water filters are a scam sold to the paranoid, and the EPA is abusing its powers to go after something thats only harm is separating fools and their money.

Everyone loses.
Do "chest fridges" have a higher risk of mold? With a chest freezer, humidity just frosts onto the walls and you can periodically defrost and empty it.

With a fridge, moisture from foods and opening the door would collect on the bottom, unless you've got it tipped on its side? Even still, given how deep it is I would think that might be problematic.

FWIW I live in a very humid climate, so maybe it isn't so much an issue for you.
Well, only for 8 years.

1000
998
994
986
970
938
874
746
490
ooops
Local libraries, print shops... but yeah that may be an attack vector.
Because it's not as private and you have to place trust in yet another service? With Mullvad you don't need an email or username, just an account number like 4818818509160540
Stopped reading at "deepfake".

It's the new advanced persistent threat, a perfect phrase to divert any resposibility.

(Yes, there are deepfakes. Yes, there are APTs. This is likely neither.)
I wonder how long it'll be before a similar attack happens before someone's/a companies passkeys are synced to the cloud.
This fails to satisfy one of the core lessons here: trust nothing, not even your own training and culture.
This is what I have a ykush[1] hub for, with an iLok dongle plugged in and VirtualHere sharing that USB device over the network. Only one machine can use the dongle at a time (so it's basically just a way to not have to constantly walk a dongle from a laptop to a workstation to a bedroom computer and back) the iLok binds the machine id of whatever computer's using it and the only way to clear it is to unplug the iLok. Or cut its power. A simple LAN-only server that accepts a "GET /reset-usb" call that cycles the power on each of the ports on the hub solves that problem

[1] https://www.yepkit.com/products/ykush
Genuinely an incredibly flexible, amazing vegetable!
They may be looking for a real emulator not a virtualization- but to emulate you need to emulate the display …
Who googles dev docs today? Use ChatGPT. /s

But seriously, try the same search query with some LLM, you will get description and code example. Add usecase and it will fit it into example.
https://tvtropes.org/pmwiki/pmwiki.php/Main/BavarianFireDril...
(2010) -But a great story.
2d phaser (photonstorm)
3d babylonjs (microsoft)
He only recently had to apologize for calling devs that refuse to that software idiots.
3D Computer Graphics: A Mathematical Introduction with (Modern) OpenGL
Gizmodo’s owner replaced its Spanish language journalists with AI
Tech leaders want ‘balanced’ AI regulation in private Senate meeting
Murder – open-source pixel art game engine
It isn’t the same principle though. Slack and GitHub can sell data to make a profit etc but the problem with open source is people can just host it themselves meaning the creators don’t even have that option.
Balancing marketing/sales with product development is one of my weaknesses, so I actually wrote a post about it on IndieHackers:

https://www.indiehackers.com/post/my-product-has-been-launch...

That site also has a products page where you can search for solo founders making > $XXX revenue. There are tons of profitable solo SaaS.
In commercial terms, this is called "Intaglio" [1] (TIL! I only knew the Germany word).

While there are lots of printing techniques which are interesting in their details, I always have a special place for this one in my heart. :-D

The sheer size of the printing cylinders (at least in most applications), the enormous speeds those machines run with and the effort that goes into producing the printing cylinders in the first place is just impressive.

Intaglio is also very versatile, though it only makes sense for larger runs, due to the work beforehand.

[1]: https://en.wikipedia.org/wiki/Intaglio_(printmaking)
Do you have yours upgraded to the japanese g3 240mhz? (Or any g3?). Curious about how it performs.

Have you run BSD or anything on it or just classic macos?
Would be nice if someone could intergrate this with the OS itself so that if some USB device stops responding, the OS "unplugs and plugs" it automatically until it works.

USB was always a shitty standard to begin with, nothing should ever require unplugging and plugging to get it to work, yet I have to do that to my webcam every day.
"Safe" is a simplification, but some practices are obviously wrong, like less than the length of two vehicles at 120 kmH.

Some off-road hazard can inject itself onto the road without notice. All vehicles would be creeping along the freeway if they wanted perfect safety from such events.

That's a tricky reasoning line. Safe distance is not intended for those cases. The point is that, given a colision, it won't be propagated.

About congestion, it doesn't seem a problem if you can drive fast enough to make an issue of keeping the distance. Bottlenecks come mostly from exits.
This is strange in that it -feels- illegal. Could you imagine if grocery stores did that? What if you just want to inspect it closer or look the back or something?
I understand your point.

The gap in communication is we don't mean _literally_ no one _ever_ open-sourced models. I agree, that would be absurd. [1]

Companies, quite infamously and well-understood, _did_ hold back their "real" generative models, even from being available for pay.

Take a stab at a literal definition:
- post-GPT2 LLMs (ex. PALM, PALM2)
- art like DaLL-E, Imagen, Parti

Loosely, we had Disco Diffusion for art, and GPT-3 for LLMs, and then Dall-E, then Midjourney. That was over an _entire year_, and the floodgates on private ones didn't open till post SD/ChatGPT.

[1] thank you for the lengths you went to highlight the best over a considered span of time, I would have just said something snarky :)

[2] I did not realize FLAN was open-sourced a month before ChatGPT, that's fascinating: we're stretching a bit, beyond that, IMHO: the BERTs aren't recognizable as LLMs.
Phaser, as game engine, Pixi.js as a powerful render library (FRVR.com games were made formerly with Pixi.js). You can use Cocos Creator (not Cocos2D-x)
macOS has attempted to progress its networking stack for years but would run into regressions and then revert back.

Old article on the topic.

https://9to5mac.com/2015/05/26/apple-drops-discoveryd-in-lat...
I’m not exactly sure what you mean but we can definitely improve auto completion if that’s valuable. Maybe you could try it out and give us some feedback in an issue?
"We just need to wage the war on drugs harder, then it will surely work."
Yea ok but…

Certain things just need an answer quickly. Like, some science that you do in order to do other science. And you can’t get there without a $10,000 device, you can’t even get started with some other experiment.

There isn’t anyone making hobbiest optical sensors. I looked for a project I needed a laser for. My options were, don’t do it, or pay $4000 for a late 80s sensor I needed off eBay then try and figure out how the thing worked with no software and a proprietary cable. Sound like fun? Not to me. And I didn’t have $10k for the USB version from the early 2000s, again with no software. And obviously far from thr $50k for a UBS3 new model.

Optical equipment is stupid expensive and sometimes you just need “basic tools” for advanced things.
Question for security folks out there:

So often I see these kinds of phishing attacks that have hugely negative consequences (see the MGM Resorts post earlier today), and the main problem is that just one relatively junior employee who falls for a targeted phishing attack can bring down the whole system.

Is anyone aware of systems that essentially require multiple logins from different users when accessing sensitive systems like internal admin tools? I'm thinking like the "turn the two keys simultaneously to launch the missile" systems. I'm thinking it would work like the following:

1. If a system detects a user is logging into a particularly sensitive area (e.g. a secrets store), and the user is from a new device, the user first needs to log in using their creds (including any appropriate MFA).

2. In addition, another user like an admin would need to log in simultaneously and approve this access from a new device. Otherwise, the access would be denied.

I've never seen a system like this in production, and I'm curious why it isn't more prevalent when I think it should be the default for accessing highly sensitive apps in a corporate environment.
does iOS have a "is there a call in progress" API?

If so, it would be a good idea for OTP apps to use it and display a prominent warning banner when opened during a call.
There are a bunch of alternative CDNs, from what I found late last year there are basically zero other unmetered CDNs though - they all charge for transfer costs, so if your outbound traffic levels are high, it may be prohibitively expensive to change to an alternative CDN.
Googling around a bit, a typical 20-count box of pseudoephedrine (2.4 grams of "active ingredient") yields roughly 2 grams of "high quality" meth with the shake-and-bake/one-pot method. Not the only ingredient, of course, but close to 1:1 of in/out.
> A YAML file can exhibit identical information with fewer characters and that makes the files easier to read and maintain - especially if they are information dense.

I don't think this is a particularly good yardstick. Code without comments is shorter than code with comments, but I wouldn't call comment-less code easier to read; the more information dense, the worse, really.
Tech titans meet US lawmakers, Musk seeks 'referee' for artificial intelligence
> Repeat ad infitium.

Unlikely since these entities all end when the environment is fucked. I don't know the Latin for: approx next 100 years.
> Google Workspace makes it very easy to set up "Advanced Protection" on accounts, in which case it requires using a hardware key as a second factor, instead of a phishable security code.

This isn't immediately actionable for every company. I agree Retool should have hardware keys given their business, but at my company with 170 users we just haven't gotten around to figuring out the distribution and adoption of hardware keys internationally. We're also a Google Workspace customer. I think it's stupid for a company like Google, the company designing these widely used security apps for millions of users, to allow for cloud syncing without allowing administrators the ability to simply turn off the feature on a managed account. Google Workspace actually lacks a lot of granular security features, something I wish they did better.

What is a company like mine meant to do here to counter this problem?

edit: changed "viable" for "immediately actionable". It's easy for Google to change their apps. Not for every company to change their practices.
"it goes out of its way to obscure the license terms"

They make the license terms very clear. Their license page highlights the differences to the text of the Apache 2.0 license. The only change is that you can't sell the engine itself.
https://defold.com/license/

"intentionally deceptive" "there's a big fat nav item at the top of the site"

The Defold guys have released multiple components on Github with the MIT license. The fact that a navigation item is named "Open Source" does not say that all or most of the software from this company is Open Source. For example, the fact that the Apple developer site has a navigation item named "Open Source" similarly doesn't mean that all or most of Apple's software is Open Source.

"Everything about this screams"

You're attributing unverifiable negative intentions to the Defold developers.

This, the last HN thread about this, and other similar negative feedback create an incentive to avoid the term "Open Source" in order to steer clear of potential negative publicity for innocent misunderstandings and different opinions.

But they also have an incentive to keep the words "open source" in a sufficiently prominent position on their website to ensure that search engines list their page in the results for the search term "open source game engine", since it's a relevant result for almost all people who search for that term.
digg? now that's a blast from the past..