skysight-inc/HackerNews huggingface dataset:
Well, there's several Cavium devices that support the deprecated/back-doored Hash_DRBG.

For example, these devices were validated for the completely appropriately named "SonicOS 6.2.5 for TZ, SM and NSA". Gotta appreciate the irony.

Cavium CN7020 Hash DRBG

Cavium CN7130 Hash DRBG

Cavium Octeon Plus CN66XX Family Hash DRBG

Cavium Octeon Plus CN68XX Family Hash DRBG

I don't know if that's hardware support or just a software validation - but it's still interesting that they validated it.

https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Valid...
Leaving out the extortion part makes it very hard to read your comment as being made in good faith.
ADSBexchange JETNET Dan Streufert sued alleged theft of IP by contracted IT firm
Virtual threads don't give you async IO, they give you (the illusion of) more threads. If one VT blocks, the underlying OS thread switches to another VT. All IO is blocking.
PDF court filing linked.

From the filing:

====

Dan Streufert knew that he did not own the software platform or a license that he could transfer or extend to JETNET. Just weeks before the transaction, he tried and failed to obtain Golden Hammer’s consent. Nevertheless, Mr. Streufert went forward and sold the business.

JETNET immediately asserted ownership of the software platform. Mr. Streufert, now a part of the JETNET team, demanded that Golden Hammer grant him and a JETNET engineer access to Golden Hammer’s computers, computer systems, and computer networks in order to move and transfer the software away from Golden Hammer’s servers. Golden Hammer did not provide JETNET with permission. Nevertheless, Mr. Streufert went forward and transferred the software.

On or around January 31st, 2023, Mr. Streufert provided a JETNET engineer with his credentials from ADS-B Exchange which permitted the engineer to access Golden Hammer’s computer network. Once logged in, the engineer installed scripts that attempted to brute force login to protected services, and to establish a reverse SSH tunnel between Golden Hammer’s network and an unknown external server. Use of this tunnel disabled the ability for Golden Hammer to monitor its network traffic, identify the type or content of transmissions being sent to and from the external host, and to determine which commands the engineer executed on its computer systems. On information and belief, Mr. Streufert and the JETNET engineer used this tunnel to conceal their activity and exfiltrate Golden Hammer’s confidential information and trade secrets without having their actions logged or detected.

====

Crazy! Someone is in trouble! Will this lead to criminal charges against Dan Streufert / JETNET?

Also, looks like the developers that created ADSBexchange have launched the alternative after the kid that owns the .fi domain decided to go on his own and refused to cooperate with them after months of work.

The new website is airplanes.live.

https://airplanes.live/about/

AIRPLANES.LIVE was founded by four passionate aviation enthusiasts with a dedicated focus on serving the aviation community. Our website merges multiple receivers to capture ADS-B (Automatic Dependent Surveillance-Broadcast) and MLAT (Multilateration) data, consolidating feeder data to deliver real-time aircraft data, both in your local area and across the globe. Our mission is to establish an enduring, cost-effective data source for the aviation community, emergency services, developers, and anyone with an interest in aviation, all in the pursuit of the public good.

In recent years, the aviation enthusiast community has witnessed the sale of several aviation-related entities, both commercial and non-commercial. Notably, platforms like FlightAware, FlightRadar24, and ADSBExchange impose substantial fees for data and API access. Our unwavering objective has been to establish a worldwide aviation data aggregation platform that remains accessible to all aviation enthusiasts.
[Author/submitter here]

Yes, I did find out in the responses to the post -- which was part of the point of the exercise.

Yes, there is indeed, but as you say, it's neglected, it's 32-bit only, and updating it would probably be a substantial amount of work. It was for the one in openSolaris, which is one of the jobs that Joyent did in making SmartOS.

Then, if it were updated, it would need continuous maintenance to keep parity with the Linux kernel. It's a moving target, and an exceptionally complex and difficult moving target as well.

Whereas what I'm suggesting -- and that's all it is, a suggestion, not even a proposal -- needs neither, it provides a much higher level of compatibility for little work, and merely by updating the kernel in the VM you get 100% Linux compatibility essentially for nothing.

The FreeBSD bhyve hypervisor does sparse memory allocation for guests: only guest RAM that's used is allocated on the host. So the guest instances could remain pretty small.

An unstated assumption is that this is an idea for 64-bit OSes (host and guest both). 32-bit Linux is on the way out now anyway.

It might use more computer resources but the idea is that it uses less programmer resources, which is a large part of the point.
With that sort of timeline you'll need to tap into some existing channels for marketing & sales. What does your network look like? Is there an existing vendor ecosystem you have experience with?

Consulting might help with short-term cashflow at the risk of distracting from your product.
What was $50 as a percentage of your meal? Typically for a party of 10 the 18% gratuity is automatically tacked on to the bill, so there should be no room for discontent from the server. It’s common to see this disclaimer on menus “for a party of 6 or more a gratuity of 18% will be added to your final bill.”
Too much defence, they need to start adding offence in these vehicles
Because things like GPT have a limited contextual memory. When you exceed that token limit it starts forgetting things, which becomes problematic on long pieces of code.

Just copying the latest code every once in a while (as long as it isn't too long) and putting it in a new window commonly works around issues like that.
Comparing WASM and JS is fine.

Claiming JS has the same performance as Java or Go is not.

JS also has had decades of optimizations. So if WASM with essentially no optimization is just as fast as JS, that's a huge interoperability win.
It's a different priority, not a down grade. Most people in Loom discussions really don't understand why cooperative async is set up the way it does and why explicit yielding is important if you need to manage a single UI or GPU bound thread. Most of the replies you get are just thinking about raw bandwidth of nameless threads.

But the structured concurrency stuff they added is sorta kinda familiar to explicit yields (as long as you set up everything properly). IMO its uglier than async/await but I also deal with main threads a lot.

I'm excited to see if this breeds any interesting UI frameworks or if its mostly just about server bandwidth.
Is your office a data center?
There's been plenty of remote 0days in MikroTik's products. At one point people were paying a pretty penny for them.
Well, yeah, that's been Java's explicit philosophy for decades. Let other languages evaluate cool new features first, then learn from their mistakes and promise backward compatibility "forever".
The Atari computers (except the 400) had S-video from the very beginning, and the JVC-made Commodore 1702 is a great match for them because it has separate luma & chroma inputs.

Interestingly, LaserDisc players, the best consumer video medium until the late '90s, mostly didn't have S-video outputs because the luma & chroma signals were mixed on the disc; providing a separate output for each wouldn't have gained you anything.
Same. Crashes Firefox, but not chrome.
>but I'm not discussing what you or I think should happen (you used that word again)

Well then we're really talking past each other because that's the only thing that interests me about this case. What actually happned is neither surprising nor particularly mysterious.

We are in a situation where a handful of globally dominant platforms and infrastructure providers can unilaterally shut people down for any reason whatsoever. Those of us whose livelihood depends on those platforms need more rights.

Google's interest to shield itself from reputational damage should not be permitted to outweigh all other considerations.
query a known (or attempt reaching a previously known) peer
Think it was a different green area - the Fertile Crescent, not the Sahara. Eden would have been where modern day Kuwait is. As for ancient towns in Sahara, for a long time people wondered how the desert people lived in such a harsh area - but it turns out they've just been there since it was lush. They didn't move to the desert and learn how to survive there, they're just what's left of those populations from the Sahara, and adapted to the changing conditions.
I would hope not... That could get awkward!
I had >30k users on a bunch of systems in 2001 (I inherited that approach, mind, I'm not -recommending- it).

We moved to LDAP a couple years later because it was a much nicer architecture to deal with overall, but performance and consistency weren't problems in practice.
What's in it for Google is not getting disrupted by OpenAI and losing their entire business, if it turns out that Chat is the new Search.

While we seem to be cresting the peak of exuberance and coasting towards the trough of disillusionment, recall how freaked out everybody got a few months ago when everybody started using ChatGPT; Google's stock price tanked and they were getting slaughtered by analysts, so they needed to show a return to dominance on AI. I think if you had ChatGPT but with up-to-date information, you'd see a pretty big substitution effect from Google's search product, so it's better for them to "disrupt themselves" than have another company steal their golden goose.

OpenAI competition aside, it's just clearly (to me) going to be a massive product area in the future, and it's going to be lucrative for AdTech companies like Google if they can build the right product (chat sessions are going to be even more valuable for ad placement than search queries).
Has anyone managed to enable this on Google Workspace (business) accounts?
We don't have a legal right to perform stand-up in a club, nor is there a legal right to be able to upload videos to Youtube. If I own a pub and want to ban Russell Brand based on no evidence at all, I'm allowed to do so.

Russell Brand DOES have a legal right to bodily autonomy and freedom to walk around the world etc. So to take that away DOES take a legal trial and a jury etc.

Private entities get to make the call based on whatever they like whether someone gets to perform on their website or in their venue. If I think someone is "dodgy" or whatever, I can bar them from performing in my club and the same applies to Youtube.

In life sometimes there are consequences for behaving badly and Russell is finally facing some of them.
How to Manage Passkey Authentication for a Nintendo Account
Hey Tim! Thanks for being with us since the beta. Would love to help you walk through that git query issue. Might be easier on our community slack if you wanna come chat about it there!

https://join.slack.com/t/graphite-community/shared_invite/zt...
Can the JVM represent a uint32 yet or a uint64?

If so, I overlooked it.
I don't think .NET has virtual threads (async/await doesn't count), and it definitely doesn't have anything similar to ZGC/Shenandoah — two garbage collectors that provide sub-millisecond pauses with heaps up to the multiple terabyte range. You can also go completely pause-less on commercial JVMs from Azul.
China is way less dangerous to me than the NSA
Annoyingly, the ER4 uses the Cavium Octeon III. I have a few of those in production.
For sure, but since a state has basically unlimited resources to find vulnerabilities, I'd assume it's possible for state actors to reach a target if they are determined enough.

Might as well make it difficult though.
I think they modify it a bit, parent that, put it in orange book, have insurance companies recommend this instead of the original, it could deter the generic makers because patients will be looking for the modified version say(extra long release).
This property is not really part of the type system though.

Also, as mentioned by another commenter below - is a file exists operation async? Sync? Why, why not?
> Yeah, he was also a rich guy born with a silver spoon, who never faced any actual adversity in life, and so spent his time fetishizing those who do, while LARPing as one of them in controlled environments.

I am all for being critical of class-based inequalities but having resources does not exempt one from adversity. Very few people would consider someone who spent their whole childhood in debilitating sickness, someone who lost their wife and mother 2 days apart, rode western with cowboys through a winter in North Dakota as someone LARPing in controlled environments. Not all of this is romantic ideology. One can be born with a silver spoon and still experience the realities of life, the trauma of losing loved ones, prolonged sickness, etc. Saying that he "never faced any actual adversity" is black and white while being arguably wrong.

The Edmund Morris trilogy gives a good overview of his life for those interested.
Other countries spy on you and sell it to your own country.
Will drop a line the next time I hit it!
A case for not holding my scrollbar hostage
I wonder if we'll see Lombok markup for @OnVirtualThread or whatever the pattern shakes out to be.
> Google Docs

and Overleaf

> discord

and Teams/Slack
Perfect timing. And it looks like I was right – the update is quite substantial: extensions and a new model (not the Gemini, but still).
I keep JS disabled by default and only enable it in certain situations.
If your site doesn't work without JS and I try to view it I am probably just going to leave.
Why would it be wrong to use floats?

That would have been my default assumption
> (again, after promising not to the last time)

The lesson to be learned here is to never trust a "promise". Enter contracts that one party can't change on a whim. If a product you're using to run a business can pull the rug out like this, maybe move your business to one that can't.
>“100% open and auditable from the operating system to the cpu” is the main goal of the Betrusted project: https://betrusted.io/

Hopefully there's a 4G version coming. This seems too good to be true.
You aren't going to get valid distance from a single platform like that.

If you had a large scale integrated sensor network, then yes you can triangulate an F35 and track it.

Except the F35 would switch to Wild Weasel mode and start shooting down your sensors (aka, SEAD missions) until it was safe to approach closely.

--------

That's the thing, if the F35 is already in your face to take direct gunfire like that,bits because the commanders are already sure that all advanced radar sensors are destroyed by HARM missiles.

That's the power of a stealth CAS fighter. It's got way less ammo and runtime than an A10 but stealth more than makes up for it.
OpenAI is generating lots of revenue:

https://fortune.com/2023/08/30/chatgpt-creator-openai-earnin...
After being out for 2 years while the EU held us to terms of the TCA. And if you think literally putting a border between two parts of the UK while all our agricultural goods are held up being inspected when going to the EU is a good outcome, I don't know what you'd think is a bad outcome.
Shilling indeed.
So sorry about that! If you update to the latest version of v1, we added a check to verify your Git version is up to date -- we use a feature from v2.38.

Reach out to me (Jacob Gold) on our Slack Community if you're still seeing this issue. The link's on the Graphite website.
Parking in San Francisco just got a lot safer.
No. Allen Dulles and the rest of the fascists gave us NSA.
The harsh reality is privacy became a commodity, and due to overabundance it is relatively cheap. Even apparent competitors sell each other marketing data in this ecosystem.

If you want to participate in the modern economy, than you need to assume there is never any isolation. Even creeps with phones will show up taking photos on private property, as some app paid them $5 to risk their lives trespassing.

Mozilla Firefox collects beacon telemetry with a UUID by default (as does most browsers). While there is a lot of community goodwill around the popular browser, most are not technically advanced enough to mitigate the dozens of defaults that do not respect user privacy.

Additionally, most modern OS are just a crude sales funnel for OEM products and services. Technically, tying and racketeering with a computer is still illegal, but cultural norms have shifted expectations on corporate conduct.

This is the modern web, and arguably it was a mistake =)
They're obnoxious vehicles carrying obnoxious people mostly, so this counts I guess?
a couple of reasons:

* cars destroy cities, they take huge chunks of the public space,

* air pollution,

* noise pollution,

* safety,

* fast floods favored by impermeable soil covers,

* social inequalities (not having a car make you less capable in a car centric environment),

* climate change
I enjoyed Mark Dominus's blog post [0] about the billing system he cowrote, moonpig. It restates much of the other responses, namely that ignoring infinitesimal errors/rounding would have instilled a culture of - at minimum - doubt. Perhaps another way to see this is to look at a visualization [1] of the discontinuous coverage that floating point gives to the numbers we want to represent.

[0] https://blog.plover.com//prog/Moonpig.html#fp-sucks

[1] https://observablehq.com/@rreusser/half-precision-floating-p...
LLMs and the Limits of Language: Creativity and the Problem of the Improbable
How are they superior though? What do they gain by doing this (other than added complexity)?
> by a rollout of autonomous features

I thought no car had SAE driving automation 5 (steering wheel optional driving) yet, even thought Tesla specifically sells their SAE driving automation 2 (hands off driving) driver assistance as "Full Self-Driving".
It is absolutely illegal to plant food on random land. Even on your own land, there is a strict limit to what you can grow, and how much of it.
Should be easy now, I implemented a lambda calculus to birb transpiler. The resulting program would be huge (like several MBs), though.
Sure, and for what it's worth I trust Kagi. But I can understand those who are more strict with their privacy.

In the end I think we have to accept in some way that everything we say, write and do is subject to surveillance, and that the government might want to kill you for any reason that you'd have no chance of preventing.
I'd be surprised if it's not already there due to the fact there's already internal cameras?
…and patent trolls…

Just Sayin’…
Sure. See you in the gulag, comerade
I cannot make this issue any simpler, I'm afraid, but here is a try: it's not about the binary existence of "wind" "somewhere within the grid", it is about having enough wind AND wind turbines to power your entire grid from that corner alone. Again, no grid has ever or will ever operate like that, as you acknowledge by not pointing out any counter examples.
Isn’t Duet AI for that?
My understanding is that Bard is for consumers while duet is for workspace.
The best art exhibition I have ever seen was Van Gogh and Japan at the Van Gogh Museum in Amsterdam circa 2018.

It juxtaposed his paintings with traditional Japanese woodcut prints from his personal collection (~500), or that he would have seen at contemporay Japonisme exhibitions.

The influence is clear, and in some cases very direct. Sometimes with subject matter, others with composition, or texture, or contrast of textures. The Japanese prints were as wonderful as the Van Gogh.

All together, an educational and sensory delight.
I have no sources at hand, but I understood the FBI/CIA is embedded within every major news org in the US.
I'm glad they're measuring by weight instead of volume for more accuracy
Supposed news organizations openly employ spooks as commentators on things like foreign policy.

Journalists knowingly report lies, acting as the mouthpiece of the government.

We know at least one news organization had the whole Epstein story locked down and they buried it because they were afraid they’d lose access to the royal family for future news/puff pieces.

You think you hate journalists enough, but you don’t.
And if you are in a position where nation-states are a likely adversary, you'd best assume that all commerically available hardware is compromised.
Can anyone tell me why it is named after a bird known for stealing? Is this a deliberate joke? How did that get approved?
Something I'd probably do is make a very basic app (e.g. 'todo' app) in each framework, deploy all 3 to heroku, and check out the 'metrics' tab. For a few hours' work, that should give a rough idea of CPU and memory, at least for a very small app.

One other thing:

> I want to spend as few dollars on hardware as possible.

This is a perfectly sensible objective, but always keep in mind any trade offs between development time and server costs. Sometimes less efficient frameworks are faster to develop in, and it can be worth suffering a slightly greater server bill to get an MVP out quickly, especially if the server bill is small to begin with.
> In restaurants where you get access to the kitchen I tip straight into the kitchen.

I’m not familiar with this, can you elaborate? Like you walk right over to the open kitchen and hand some cash to one of the cooks?
I'd argue against that interpretation, the importance of invading Belgium had more to do with avoiding the French line of fortresses and hoping that the Belgians would just roll over than capturing rail networks that they wouldn't be able to use without a protracted war, which they had no anticipation of as they expected to be marching into Paris 900 hours after mobilization was declared.
I think there's something there, and I did enjoy your article. WW I had a lot of causes, at the head of which I'd put the Kaiser's stupidity and weakness.

But yeah, Cannae did (and still does) exert a big influence on military planners.

As others have pointed out, Schlieffen depended on massive luck and adherence to The Plan, neither of which obtained. It was not machine guns that made it fail.
It actually goes back further than that -- they wanted to join the EEC in '87.

36 years. This is actually higher than the median age of Turkey's population.
VCMI engine is free and open source software licensed under GPLv2.

Original game assets (music, sprites) are proprietary and you have to buy them in order to play. There actually Heroes 3 Mac demo that can be legally used as alternative source of Heroes 3 game data, but it missing some towns.
I think there was a paper from Google showing that if you included 5% of your original dataset together with the new data during the finetuning then catastrophical forgetting didn't occur. Perhaps it's that simple.
and more beatings.
I take these performance benchmarks with a rock of salt. They are mostly hyper-optimzied generics which are as far away from actual production code as it can be.
They are written in a way to allocate as little memory as possible and is done by people who know exactly what they are doing.

Especially the garbage collection strategies of Java are second to none (sorry, don't want to be a shill).

> For real-world applications....compare IntelliJ, Eclipse, Visual Studio, or Sublime against VSCode.
My experience is that VSCode has horrible input latency and Intellij is blazingly fast once indexing is done.
Haha so as long as you append some light proof of work to every task, you get them on a technicality?

Honestly though, who the fuck are they to tell you what to do with the hardware that you bought? Like telling people they are not allowed to drive their car on gravel roads or not being allowed to drink wine from a beer glass without paying for a special overpriced version or something.