skysight-inc/HackerNews huggingface dataset:
I’ve played CTF challenges where the latency to the host was a key factor in determining if you could get a flag or not. For those, I’ve often found it useful to spin up a cloud machine in a datacenter near the target (or, better yet, in the same datacenter if we can figure it out).

A very common case is when the challenge has a short timeout but requires a lot of interaction, e.g. you only get ten seconds but you have to perform 10000 queries for a heap spray or something.

The most insidious case I remember was a read() call that didn’t check the result, causing it to return short if the fragments of the input didn’t arrive fast enough.
The part about weak symbols is wrong, at least on modern systems in their default configuration.

Weak symbols only work for linking (ld). They do not work at load time (ld.so). The result of this is that weak symbols are mostly only useful in loose objects or static libraries (though I think the strong symbol can be from a shared library if you're careful).

Also, the original problem description is incomplet - even if the public ABI is identical, multiple copies of a shared library can cause problems due to multiple copies of private globals, or due to different internal ABI. These are usually a problem when mixing versions, where most symbols bind to the old library but newly-added symbols necessarily only bind to the newer library.
why are they never nervous when they outright betray the demographics they should be pandering to?

latest examples would be the bud light and target fiascos
Not really buying this. There are the other comments about how this is wrong, but also -- there's no side-by-side comparison!
That’s scary
Last time I used one, Epilog’s software was pretty terrible. It seemed to designed around a workflow in which you either design your cuts in CorelDraw and then print to a Windows print driver.

I sincerely hope that the upcoming Windows third-party print driver deprecation kills this.

(Also, what’s wrong with them? Even ignoring cost, I would rather have a Chinese printer that had a publicly known control interface and supported Lightburn than a “nice” American laser printer that was only operable with bad proprietary software.)
I think there is a misunderstanding here. My point is that gambling is less important part of casino's revenue. Hence few whales don't make or break Vegas.

I.e even if we take the top of your guess (<$1000), it is still much less than other expenses (lodging, dining, entertainment, etc).
It's incredibly easy to get a video demonetized on YouTube now. I don't know what videos you're talking about, but I wouldn't assume that they haven't long since been demonetized.
This is one of my favorites of all time!
Yes! Early stage businesses can get bogged down in "next feature folly" - keep adding and adding as each new (bespoke?) client comes on. Then the product has features baked in for narrow cases and turns off the larger part of the bell curve.

My line in the sand is: never build a feature on the first request. Ideate, research, measure others opinion of the same features.

One should have a tight beta group for this.
Well so much for the "we censor because of the advertisers demands" excuse for their censorship then.
EU: Court denies full transparency about emotion recognition
>As much as I'd love to be able to play Mario or Zelda in 4k 60fps

You can do this on PC with emulators if you want to. It's probably not "legal" but if you have already paid for a copy of the game there isn't much harm in it.
2500+250/mo is steep for the marine use device , especially when a lot of emergency-use data equivalents will charge you by the byte -- which makes the devices make good sense to have aboard but never used.

I know of a lot of mariners that would probably bite at Starlink if an equivalent pay-as-you-need service was offered,even with the pricey equipment.
I’m 100% in favor of cleaning house with that generation of musicians and performers that openly preyed on women. But is that what YouTube is doing? When is Aerosmith getting demonetized? https://www.rollingstone.com/music/music-features/steven-tyl...

How has it taken YouTube this long, anyway? Hasn’t much of this stuff been openly known for a decade or more? Is YouTube literally just reacting to the media cycle and nothing more?
They haven't stopped _distributing_ Brand's videos. They just have stopped paying him money from the ads.
>but Musk had to pay over $40B to have Twitter and no one came around to offer him to build a Twitter for $39B.

As far as I understand, musk offered $40B for Twitter, unprompted. Is there any evidence that he put out offers to build an alternative for $39B? Because I feel like it would have been taken up given the widespread belief that he was overpaying, and even Musk believed that since he tried to back out.
This is the kind of delusional thinking that just doesn't work in the real world.

Because in the real world there are defamation laws. There are serious consequences for news organisations that publish accusations that are not able to be corroborated. Especially so when the claims are so significant i.e. multiple rape/sexual assaults.

Which is why despite apparently everyone in the comedy and entertainment industries knowing this was going on for 20+ years no allegations have made their way into the media.
I think they meant to post a different link. The latest satellites are dimmer than 7 apparent magnitude (meeting the AAS recommendation) despite being 4x larger.

https://arxiv.org/abs/2306.06657
Monetary policy and innovation
Antitrust Lawsuit filed against rent-setting software Yardi
You don’t need to make robots that are equivalent to humans. What’s important is that robots can equal and surpass the relevant economic outputs of humans. That is, it doesn’t matter that a self driving car doesn’t have a personality.

By the way this is also why GDP (and gdp/capita) is a terrible measurement for a society. You can double GDP growth by firing your factory workers and replacing them with faster machines, but that doesn’t necessarily benefit those workers. And all of the gains can go to the top.
To me, that feels like a broad brush and lazy way to shut down any uncomfortable conversation. If you find it works for you, more power to you
Yeah, ClickHouse seems to me to be best in class, but I think Pinot is still aiming at the same general market segment.
Is this September Endless?
Wear and tear on the tires, not the parents. The latter is a given.
> This is like saying that if you don't like the planet Earth, find yourself a planet suitable to terraform, go there terraform it, populate it the way you like and live there.

Not at all like that because building a video hosting service is a relatively trivial task, with the only limitation being money. Which the US government has more of than Google.

> Sure, you can do that but you can also solve the problem at hand.

I would rather the government provide the video hosting as a utility rather than commandeer Google’s computers.
Ten seconds per regulations.
Sadly I imagine this would also block people on poor connections such as cellular, satellite or Tor.
The YouTube “adpocalypse” suggests that YouTube is sensitive to it in a way that google and Facebook aren’t. I don’t know how their ad purchasing system works though.
If I put that through ps2pdf and remove compression, I can see:

stream
q 0.1 0 0 0.1 0 0 cm
/R7 gs
10 w
0 G
1500 1000 m
1500 1276.14 1276.14 1500 1000 1500 c
723.859 1500 500 1276.14 500 1000 c
500 723.859 723.859 500 1000 500 c
1276.14 500 1500 723.859 1500 1000 c
S
Q
endstream

i.e PDF has no arc command, it was converted to "c" bezier curves.
Have you ever seen the kind of stuff people post on Facebook or on local news sites under their own name, next to their own photographs? These theories about internet civility have been disproven repeatedly over the past decade plus.
Indeed, but that's why you can buy those items at different stores. With Apple, not so much.
The user in question can take out its content at any time as well too.
I don't know much about Chinese critical infrastructure. I would however say, that if a bombing campaign on home soil starts anywhere in the world, it is pretty easy to leverage that into a united front. If people start losing fathers, mothers, sons and daughters they tend to want blood in return, at least until they're tired of war, and they'll support whoever gives it to them.
Lipreading Courses
I can imagine that the spec would to some extent reflect an attempt to capture the behavior of the jvm they actually wrote, as opposed to being created first and then having Sun implement afterwards? It sounds like an interesting exercise to recreate it based on the spec and see what got missed.
I’m in the same boat. Every once in a while, I go back and look at my old Haskell, OCaml, and Go code, and I remember why I like Go. Generally, I can hop back into my old code easily. That’s not true with more advanced languages. I just can’t resist the urge to be clever when writing them. OCaml is still pretty nice, though. Not gonna lie.
Their ability to walk to another casino remains unhindered by the terminology arguments of internet commentators.
This is so weird. The idea of an adversary covertly walking off with an IBM Mainframe or covertly bringing an electronics lab, a microscope, logic analyzers, glitching hardware, etc to the aforementioned mainframe is rather strange. Whereas someone doing that to a phone or a laptop or a game console is very likely.

If I wanted to store an important long term key in a secure facility, I would worry, first and foremost, about software attacks, attacks doable over a network, malicious firmware attacks, and maybe passively observed side channel attacks. Physical attacks would be a rather distant second.
IMO the solution is to give users the tools to run apps in a sandbox without forcing them to or making it the default. If an operating system like macos were to ship with a user-friendly UI to change what a given app has access to, then even relatively non-technical users might decide to e.g. turn off WhatsApp's access to various things if they happen to read a news article about the app's data collection.

In addition if an OS provides a way for sandbox settings of apps to be changed, then something like "ublock origin for the OS" could be created, where someone maintains a list of what capabilities should be granted to various apps, and users can just install something once and forget about it to harden their system.

Most users trust most of the apps installed on their computer, but might have a few things that they are suspicious of — such as things they have to install for school or work. Providing a way for users to restrict the capabilities of specific apps when they feel like they need it could be valuable.

Linux already effectively has this because it has stuff like user namespaces and better support for controlling other processes using ptrace than other OSes. This enables users to use things like proot and bubblewrap to apply sandboxing when needed.
It's about EV per phone. The more security, the lower the EV. Eventually, it isn't even worth it for informed, career pickpockets to take it. There'll always be pickpockets, but phones are much less of a target because of measures like these.
what on earth does Crypto AG have to do with this subthread?

they apparently just happily sold themselves to German and American intelligence.
But the SVG in Inkscape is not a PDF on a machine that accepts PDF CAD drawings.

When you print to PDF, the circle will have to be approximated, which is what the article is talking about.
I had not realized just how much I missed the old-school cypherpunk jive. I wonder how they would have reacted then to what we know about DES now?
just because investors have the presumption that presentations are lies and founders have the incentive to lie during the presentation doesn't somehow warp reality into thinking that prediction was a good one.

It may have constituted a good business decision to lie during presentation day, but whether or not that's true is wholly independent of the state and accuracy of the prediction itself; that prediction sucked.
Excuse me.. Really? How? Pray tell.

Read the Wikipedia link. There has been known and established link between Khalistani elements in Canada and Punjabi/Sikh organized crime.
It’s 100% about protecting the brand.

Twitter has lost something like 60% of its advertisers because it turns out Proctor and Gamble doesn’t want an ad for Dawn dish detergent next to someone called BasedFuhrer1488 posting about how the Holocaust didn’t happen.

If it wasn’t for that all these platforms would let anything legal go as long as it drove engagement.
And also Rabbit has streams[1]. There's a lot of overlap.

[1] https://www.rabbitmq.com/streams.html
Basic facts don’t seem likely? Or am I just missing your sarcasm?
"betray" in this context meaning advertise to LGBT people?
Yes.

The tree of knowledge of good and evil is basically just the spark of consciousness. Humans are unique in our ability to consciously foresee and plan for the future.

On the one hand, that's a blessing because we've made tons of progress towards alleviating objective suffering and scarcity.

On the other hand, it's a curse, because we always have to be aware of the impending inevitability of our death. We can't ever completely live in peace and paradise ever again, because we have become conscious of our existence and the context our life experience exists within.

Would it be better to not have gained that spark of consciousness and live the paradise of ignorance as animals in the wildreness? Lives at peace except for occasional bursts of pain and terror.
AI emits less CO2 when writing and illustrating than humans
You answered your own question: the advertising that they produce is what they're comfortable with.
To be fair, no one has yet needed to do this.
In particular though, anal sex has a higher chance of passing on specific STDs. Gay women have a statistically lower (but not zero) chance of passing on STDs.

https://stanfordhealthcare.org/medical-conditions/sexual-and...
As a non US citizen living in a western country, the NSA has no qualms analyzing everything I do/say/think, including in my activism, and tell on me to the government of my country.
> The usability on a laptop goes out the window as you realize you can't accelerate past the edge of your touchpad. Getting to the top item in the menu -- maybe even the most important item -- is extremely hard. You rapidly become limited to the number of items you can have in this menu.

Not really. Put a second finger at the bottom of the touchpad, then release the first finger (without dragging while both fingers are down). Poof, you just got yourself a whole touchpad's worth of additional height.

They've worked like this forever, and since I pretty much only use a touchpad, movement like this is pretty second-nature for me.
none of my phones have been stolwn

all of them had parts replaced, some of them multiple times

I'd much rather pay for theft insurance than have to pay 10x for parts replacement
Oh no we're all going to die
Scroll down and learn about FVEY+3 and friends.
Allegedly. If a bunch of people come forward accusing you of assault, odds are pretty good you did it.

However, private businesses punishing people for having charges brought against them but not yet tried? That's judge, jury and executioner, which is incompatible with the set of laws that the US is built on - for which the source material was English Law, and precedent even older than that.

So an American company pre-punishing a Brit based on a news article is the beginning of another level of dystopia none of us wants.
There is a blog created to collect similar stories: https://500mile.email/

This blog has also been discussed in a few other threads:

https://news.ycombinator.com/item?id=23908171

https://news.ycombinator.com/item?id=29215383

https://news.ycombinator.com/item?id=35708339
Yep. Who was hurt by all that? The problems arise when bunch of incels congregate on some anonymous imageboards or forums.

People saying dumbs stuff with no follow up is never a problem. If anything, they are quite interesting because you can look at those and see what kind of stuff they believe and talk about IRL. There are people analysing those to tackle actual issues because banning it online doesn't stop it from beings discussed in private or small groups.
> US law does not apply in that other country

The US arrests or gets foreign citizens extradited to the US for acts committed in a foreign country on a regular basis. I'm not sure how you're not aware of this since it has happened to several very notable figure such as SBF, Kim Dotcom and Assange.
"brand" isn't a single scalar value. Apple is one of the most known brand in the world, but Nintendo it the top reputed brand for gaming.
IT's like someone decided the problem with communist dystopias was that they inefficient and unwieldy, and that by unleashing the technological ingenuity of the free market we could create snappy and responsive ones and turn dystopia into a growth industry.
Conspiracy nuttery, mostly
After unionizing, players get half of profits while owners get the other half.
There is differences in resource distribution: a society where no work is available but everyone has their wishes taken care of, to a certain degree, is way different from a society where no work is available and some few live like royalty while the majority of the population lives in absolute poverty.

Both futures would be possible with AI that makes human labor obsolete.
If the change /doesn't/ break old code, it's also poorly justified.

It means code doesn't care about the issue being addressed.

The feature is only justified if it changes existing code, such that bugs you didn't even know about are fixed.

I.e. people read about the issue, investigate their code bases and go, oh hey, we actually have a latent bug here which the change will fix.
> People criticising what Youtube does and talking about what a video hosting website would ideally do helps to create the conceptual foundations for the ideal video hosting website.

The only problem is that your ideal video hosting website doesn't work. You won't:

a) Get enough users because most people want moderation.

b) Raise enough revenue because most advertisers want moderation.

c) Be able to legally operate because most legislators want moderation.
If they're blocked?
It interesting seeing Mr Beast talk about AB testing thumbnails — his old style was apparently not actually what the algorithm wanted but he'd never tested it properly.
If you want more money and better treatment, you'd better make yourself worth more to the market

there is another approach besides just a higher minimum wage.

provide better education to everyone so that they can achieve higher qufications and get better jobs. that will solve the problem of minimum wage jobs because noone wants those anymore. (but, just to be clear, i am not against raising the minimum wage, just that by itself it's not really going to solve the problem)
I don't find the "theft prevention" argument raised by many of the comments here particularly convincing.

If the concern is to prevent the resale of stolen devices or parts, Apple could simply provide users with a way to report the device as stolen (e.g. via iCloud.com), which would put the serial numbers of both the device and its parts into a blacklist. Problem solved.

Instead, the current system effectively assumes that ALL parts coming from a different device must've been "illegally obtained", which is nonsense.

You can do theft prevention without actively making independent repair shops' lives miserable. But Apple's goal is to make independent repair shops' lives miserable; theft is just a pretext. Just look at their track record, from the humble pentalobe screw all the way to the repair program NDAs.
Are there any particular sections in the paper which were alarming to you?
Keep posting about D, I'm sure it will catch on soon.
The docs are full of remarks like "removed in 3.0 and reintroduced in 3.4" or "deprecated in 3.10", etc. A big one is the removal of the loop parameter in asyncio, but a lot of asyncio internals are (still?) undergoing significant changes, as getting the shutdown behavior correct is surprisingly difficult. Personally it's never cause me any issues - I'm always on board with the changes.
I think that the biggest thing missing is an open/libre mrc.bin implementation that is written from scratch (as a clean room implementation).

Coreboot to this date still relies on the Google Chromebook's dump from more than a decade ago.

And it's probably the hardest reverse engineering challenge, because Intel isn't offering any details.
RBI (India's central bank) doesn't implement the actual user facing stuff. If you read the article, it's two banks and two non-banks. One of those is Transcorp. Cheq UPI seems to be using Transcorp's backend.
If the USG wants in, it's just a click away in any case.

What's a legal and practical mechanism the US Government could use to do this? In almost any number of clicks, never mind one.
Endless September, the time of the year we retell the old tales.
> The initial shared private key exchange could be done with more expensive, quantum resistant cryptography but the actual communication could be done through symmetric encryption.

That's exactly how Signal's symmetric ratcheting works (with the addition of an asymmetric ratcheting step to limit the forward impact of a key compromise on either side, which you can't do symmetrically).

> For the key exchange itself ("PAKE")

A PAKE requires a short shared secret. That does not usually exist in Signal's scenario.

> And for the symmetric encryption: [...]

Why that over regular AES?
thanks, you're right - RAR (with .par). phone autocorrect.
How interesting. This is a niche I keep seeing mentioned on HN but never made the connection to providing a solution. Nice work!
Big congrats on 1.0! Super exciting project.

My dream scenario would be installing hydra as an extension into my main rails application database. My usecase is showing analytics numbers directly to users, like "how many people visited my listing", which regular row-level postgres is not suited to answer. To do this now we need a to get that data from our DW, which is slow for single queries, so we need a cache, which we need to keep in sync, which is complexity I don't want. It would be amazing if I could do user-facing analytics queries directly in my main app db.

What put me off after a quick scroll:

Installing the extension changes the default table type to be columnar. I don't want an installed extension to do that, my main workload is still row oriented oltp, I only want specific tables to be columnar and I don't want to change all my normal migrations to specify `USING heap`. IMO timescale does this really well, it's an extension, not a new database. At least that's how I would want it to be.

It also seems like you're trying to claim postgres foreign data wrappers as "hydra external tables", implying it's a new feature? Postgres does this (reading other databases and external files) out of the box and it feels sneaky to try and brand that.

Also the FAQ says "Hydra is not a fork." When the engine clearly is: https://github.com/hydradatabase/citus I realize you want to monetize this as a bigger platform and that's completely fair, but it strikes me as dishonest to deny the citus originins in the FAQ.
Yeah, I don't know what effect he is talking about here. SVG has <circle> which I would assume is normally rasterized to pixel-level accuracy (as opposed to approximated with beziers), so there are lots of "perfect" circles to be found. https://developer.mozilla.org/en-US/docs/Web/SVG/Element/cir...
You were warned.