skysight-inc/HackerNews huggingface dataset:
How is data related to Bank Secrecy Act requirements (or similar requirements in a non-U.S. jurisdiction) stored? For example, a U.S. bank must contact regulators about a cash payment of more than $10,000. The payment itself is not information that must be kept secret from the customer, e.g., the bank can share information with the customer about the specific amount, date, etc. However, the act of reporting to regulators cannot be shared with the customer. The question is, from an IT perspective, is the act of reporting part of a "customer data structure"? Is it possible for IT staff to do simple database queries such as "date_that_customer_began < 2022-01-01 and large_cash_payments > 0"? Or is Bank Secrecy Act reporting data segregated into separate database tables or even separate IT systems?
Strong arrows: a new approach to gradual typing [in Elixir]
The latest increase in popularity of the AfD is in part due to the question of home heating devices...
I consider offsite storage a must-have feature for surveillance equipment, because one of the prime threats is that the thieves carry off the surveillance equipment itself. With modern WiFi cameras without mounting wires and cheap plastic mounting points, that's real easy, and if you had a physical server to store the recordings it would be a target as well; the history of surveillance systems is littered with examples of "The thieves stole the tapes, too".

Finding someone trustworthy enough to store your offsite footage, though, is a real problem. If only there were some sort of union of peoples capable of causing consequences for companies that act as poor stewards of data.
Rage, rage, rage: transference and Zizek on accelerationism
Bard Can Now Connect to Your Google Apps
What do you mean with accuracy here?
Usually 50% accuracy means cointoss, meaning 20% accuracy is equal to 80% accuracy, which is better than the article's 78% and not that far from 90%.
Merkel trees with restricted access are probably the more applicable notion here.

E.g., what most Free Software development uses.
With thousands of drones crossing the city sky, there would have to be some kind of system to organize that traffic, both to minimize collisions and sound pollution.

It's not hard to imagine how systems like that could be organized.

It's also important to consider how many road vehicle trips this would replace.
Congrats on the announcement! This seems like an impressive step forward to accommodate larger Svelte apps while making the language simpler.

One thing that popped out was that it seems like .js files will also need to be transformed now to accommodate the $ to rune translation.

Feature request to make that optional, perhaps something like:

import { rune } from "svelte/rune"
let $count = rune(0)

Oh, one other thing. Will reactivity apply to nested fields in objects and arrays?
No, what I replied to said that about 2-way data binding. React also (just about) forces you to do unidirectional data flow, just like Solid.
It's not a true Astro integration, but Imba works with Vite, and I was able to use that to include Imba code in my Astro site. A real integration would allow for server-side rendering of Imba components, which would be great.
Yes, it is. I'm using gokrazy with blocky[0] on a Raspberry Pi as a replacement ever since my PiHole died to sd card failure. It's been running very reliably.

Another thing that should very much be in Xe's wheelhouse: For non-go software you can write a small go wrapper which launches the software from a nix closure. This is a fun way to get a single-purpose RPi up and running.

[0]: https://github.com/0xERR0R/blocky
> No real reason other than to re-enable more spyware and garbage.

Why would the Google app have more spyware than the Translate app?

That doesn't make any sense. If Google wants to spy on you they'll put it in all their apps...

Regardless of what you think of Google, the reason a feature lives in one app and not another is not to increase spying...

The same functionality spread across two apps doesn't spy more than one.
The story probably endures because things like this actually happen [0, 1]

0. https://www.cnn.com/2023/06/27/us/janitor-alarm-freezer-rens...

1. http://www.st-v-sw.net/Obsidian/Martin/gravity.htm (search sprinkler)
> I should add, unless it isn't clear, that we really should retire the dataset.

From a research perspective, MNIST is basically solved. I think current performance on MNIST is better than humans, correct?

But it's still valuable as a teaching tool or a "Hello world" data set, because it's so simple and because most reasonable algorithms will reach 97% accuracy. Even if you build your tools from scratch, it makes a nice homework-sized problem. And it's an obviously useful task that anyone can understand. "Oh, digit recognition for mail!"
But you have to be root outside of the container to run Docker. Which means the author has to run every single little command as root. That violates the principle of least privilege, increases the potential damage caused by bugs or mistakes, and therefore is a very legit risk.

Also notice how the shell snippets in the article doesn't use sudo to run docker. That indicates that the author probably added their user to the docker group, which is equivalent to always logging in as root. That's terrible, terrible security practice.

I can't agree that root inside the container is different from root on the host, either. The kernel makes no such distinction unless user namespacing is enabled. When containerized processes gain access to host resources, whether intentional or not, they'll have the same level of access as root on the host.
Into the Multicloud-Verse with Crossplane
Hey everyone,

I put together this short newsletter exploring Crossplane.

My goal is to introduce you to Crossplane in 5 minutes or less so you can decide if this is something interesting for you to explore further.

I hope it's helpful!
Indeed, a klingon-like death for a cat would be honorable.

The Japanese do derive a lot of their culture from the Chinese, don't they? I would like to one day read some of the stuff around the Three Kingdoms. Alas! So much to read and do, and so little time!

Anyway, thanks for this conversation, I enjoy it.
In america, "democracy" actually means "democracy that is beneficial to us". If we don't approve of it, it's not real democracy, and we can just send in the CIA to make it the way we want it to be. It's why "populism" is so bad yet people here still reference the popular vote when their preferred candidate got more votes overall.
Go is similar to C in that neither supports closures (in the form of lambda expressions with untyped arguments). For my own implementation of lambda calculus in C, I chose to implement a so-called Krivine machine, which is one of the simplest abstract machines for the call-by-name lambda-calculus.

Although I never wrote a Turing Machine interpreter in the lambda calculus, I did write one for its close cousin, the Brainfuck language [2].

[1] https://www.irif.fr/~krivine/articles/lazymach.pdf

[2] https://gist.github.com/tromp/86b3184f852f65bfb814e3ab0987d8...
Unrelated to Electric Clojure (https://electric.hyperfiddle.net/)
The key to making friends is having a good story.
People with nothing to lose make fantastic targets for snake oil fraud.

Principally, I agree with right to try, but I'm not sure what appropriate safeguards would look like.
Maybe in the 90s. Unplugging the drive is how you kick FDE in now. The drive only has value while mounted and running on the host OS.

Even cellphones...you want them running decrypted, but inside a Faraday cage of some kind to block remote wipes.
`folly:IOBuf` and zero-copy networking
> Long slow bend

That’s probably it.

If I were designing a wiper fluid warning, I would use some sort of fluid level sensor and I would denounce it aggressively: the indicator would only light up if the sensor detected a low level for more than a couple seconds. That way traffic circles, bumps, etc would not cause many false positives. I might even couple it to some kind of acceleration sensor so a warning would not turn on during or shortly after any heavy vibration or acceleration.

A long slow bend would cause a prolonged, steady centrifugal force and/or sideways acceleration due to a banked road, which would defeat these mechanisms.
> 1 point
Nah. Maybe $1000 bucks here or there, but you're not moving 8.1 million in paper money easily. And that money has to be laundered. Plus bills are traceable by number, and will often have markers on them. And they have to move, by hand, truck, package, etc., which means they can be found, often with little technical skill -- rando customs guy decides to open a box using the cutting edge tech of a letter opener.

BTC makes dealing with all of that a (potentially automated) bash one-liner.
Tabby v0.1.1: Metal inference and StarCoder supports
I like how OP jumps from “highly regulated world of aircraft” to a solution with zero regulation.

Imagine being on a sinking ship and the captain is all; don’t worry, if we tie this life jacket to the handrail, it’ll stop the descent by floating on top of the water.

IT has been taken over by the rent seeking industrial complex. Peddling hallucination to prop up book sales and conference travel.
> The fundamental relationship between smart-home companies and their customers is founded on trust.

Sadly, very few companies are trustworthy.

Not all of them are evil; wanting to get into their users' data; many are just cheap and lazy. They don't want to spend money on the types of employees and process that will result in trustworthy kit.

It's actually not hard to understand (less easy to forgive). The device market is crazy cutthroat. Margins are razor-thin, support costs can be high, and competition (especially with nation-state-funded competitors) is savage.

But I don't know how many times I have had one of my friends proudly whip out their smartphone, showing me live video of their kids playing at home, not realizing that their ultra-secure password ("fuckyouhacker") is no impediment to lots of others, getting the same feed.
>>On September 8, 2023, The Verge reported an incident in which some Wyze customers were able to access live video from other users’ cameras through the Wyze web portal.<<

an unintentional, adult, video shareing platform, sounds like something a sector of society would consider a feature.
Sure they can. That's what the whole asylum idea, and laws, is about.
In outright totalitarian countries government access to your agent will be mandated.

In more democratic countries we'll see lots of suits and court cases over getting access to these agents and assigning intent to your IRL actions based on your 'thoughts' with the AI.
Svelte has never looked more like Vue to me. I don't mean this as a dig, I think it looks great.

It's just even less obvious to me why I might pick it over Vue at this point.
Do you ever wonder if that's because of the growing up part and not the phone part? Growing up for most people tends to be pretty fun and exciting compared to adult life. And with or without phones, the 80s and 90s were a very different time when it came to kids being able to go out and play outside on their own. Move to a country where it's common for kids to play outside and you'll see that times aren't much different even though kids all have phones. In a way, it's easier because now you're just one text and location share away from meeting up with them.
I worked tech support that included a device for software developers that had Ethernet connectivity. I learned very quickly to say "Try reseating the Ethernet cable" because if I said "Is the Ethernet plugged in" about 1/3 of the people would respond very negatively (e.g. "I'm not a fucking moron") but by having to reseat the cable, they would sometimes discover it's not plugged in.
I'd argue that there are way more libraries, since vanilla JS libraries integrate beautifully, unlike in React. Unless you are only talking about component libraries, of course.
Hey, I work at Electric,

The CouchDB/PouchDB pattern is how I originally got interested in local first, they are such a good tool, but having the full power of Postgres and then SQLite on the client, I believe, is a real game change.

Sounds like Electric could be a really good fit for your use case. If want any advice join the Discord and we are happy to help out.
If you're in the area, what books are some good guides on this topic ?
Interesting that your car is a Mercedes...

I know an older guy at church, whose kids all graduated college - except for one.

His "failed" son is the top mechanic at a Mercedes dealership. He does some supervision, training, etc. But the reason the dealership is paying him $200K/year is his skill at figuring out and fixing problems like that, for the dealership's most desirable and profitable customers.

(That I've heard, none of the mechanic's "successful" siblings are making that kind of money.)
That’s weird. I use both logging and tracing where I can. And metrics.

While there are better tools for alerting, metrics, or aggregations, it helps a lot in debugging and troubleshooting.
> I don't understand what's so hard simply shipping the immigrants back on a big ship once every 2-3 months.

Because as a result of the events from 1933-1945, everyone has the individual right to claim asylum in Europe. Despite the far-right working hard to abolish that, we won't.

Besides, for countries like Syria there's a deportation ban in place by the European court system.
There are three types of intelligence: intuitive, cognitive and narrative.

Tech has, for years, seen people with cognitive/narrative intelligence as the people who are actually smart.

LLMs help the intuitive people reach the level of the cognitive/narrative people. Cognitive/narrative people can't really understand this in the same way the intuitive people are bad at syntax or database structure. The steamrolling will be slow and merciless.
Amazon's Eero Max 7 Mesh Router Adds Wi-Fi 7–For $600
Not affiliated, just been following the product.

I've been using this for a proof-of-concept internally at $DAYJOB and liked that it had out of the box support for querying data from MySQL and Postgres (we have separate services that use either one of these depending on the team). I've been working on a pipeline to pull data from both databases, and used GlareDB to do that alongside some transforms. Also looking at DuckDB as well.

I saw that MotherDuck[0] opened up signups today and figured I post about GlareDB since there's some feature overlap (like the "hybrid execution"[1]) and I've been following both for a bit.

[0]: https://motherduck.com/
[1]: https://glaredb.com/blog/hybrid-execution
Vultr.com Ubuntu OS used non-random passwords between 10/11/22 and 9/12/23
The article emphasizes the wrong thing, in my view. The interesting part is that compression -- without learning a model -- can be used for classification. This raises the question of what other information-theoretic measures can be used; cheaper, lossy ones.

To Compress or Not to Compress- Self-Supervised Learning and Information Theory: A Review
https://arxiv.org/abs/2304.09355\*
Probably because PM understood this was complete garbage?
Eh, if OpenAI gets their way, your local AI will be banned as being too dangerous.
oh no. real in their terms mean diamonds that have a profit margin for them. the theft of those african diamonds mean those diamonds are now untraceable and that scares debeers
I don't think GP was restricting 'human' to 'text processing elements of a human'.

At any rate, it's certainly true that GPT-3 is missing a great deal. So is GPT-4.
What is the current verdict on Ubiquiti being trustworthy after the incidents with Krebs?
The "big burst" problem is usually solved by a few (say 4) plants, not one.

But another thing about growing anything is that it works better if you work around it's schedule rather than the other way around. Hothousing and international shipping have got us out of the habit of thinking seasonally or by growth cycle of a plant, but it's not hard to adapt to.
I loved MobX. Used it for years with React and Inferno.

But not only it's an added layer of abstraction, it's also a complex piece of machinery which is not needed when the framework solves reactivity.

When I started using Svelte back in 2019 I was very happy to let go of MobX.
I dunno, I've used all kinds of languages, from the ones people often consider lower quality to the ones people often consider higher quality, and they all have something like this.

And maybe there's some as yet unexplored design space out there for which this isn't true, but my prior is that we're actually just circling around some essential complexity at the core of the problem, which will never be eliminated.
Reminds me of when I was young I did a volunteer session at soup kitchen for the needy. After dinner was served we went around and collected the used dinnerware from the patrons there.

I went to one lady and took her plate, upon which she angrily scoffed at me "I can take my own plate up! I am not one of the guests here!".

She was in fact one of the guests.
There are ten choices, so getting the answer right 20% of the time is very plausible.
What happens when someone asks you whether you have received a court order of some kind? Are you compelled by court to lie about it?
5-Bullet Data, Five Interesting Topics in Data Engineering and Analytics
There are 10 classes in Mnist. Random guess would is 10%.
Argument from character - exemplified by a post history - is a fallacy.

Other than that, sorry to break it to you, but "America" (the USA govt, more specifically) is really bad for almost everyone other than US citizens. Which is expected - officials routinely say they have their own citizens and industry well-being in mind. The US has had almost 40 years of monopoly in what you could call a "protection racket" if it wasn't already called a NATO charter. As a result, as with all monopolists, the price of belonging to the club was very high (both economically and politically, and in other areas, too). And that was even before Trump, when a lot of trust in stability of long-term commitments went down the drain.

To many countries it's still worth it, of course. To many, though, it's just the only option, irrespective of the costs. To them, "America bad" is an obvious statement of fact. And I'm speaking about nominal "allies" here! Imagine how it looks to Iranians or Afghans.

I'm not "against America", I'm against exploitative monopolies, no matter where they come from. The fact that every other option is even worse, doesn't really negate the fact that America can, and many time is, objectively "bad" news to others.
That is a fair point. So would it be more of a gradient than a line?
In the category "using your hammer to screw in a rivet", you don't machine a shaft with a laser-cutter. As you point out: you use a lathe.

For "circular" work that you do use a laser cutter for, 0.03% tolerances are below the variance you get from the cutter itself. Expecting higher precision from the cutter that is somehow "messed up" by the deviation from the standard Bezier approximation of a circle, when the machine you're using can't give you that precision is using that proverbial hammer.

Of course, if that's really all you have access to (first of all: what are you even doing? look into buying a second hand lathe, or have everyone pitch in so your hobby space can buy one, they'll set you back less than a thousand bucks) the laser cutting is step one, you're not done after cutting, and you know you're not done after cutting because you know laser cutters are not high-precision machining tools like lathes or mills. You cut slightly oversized, and then you clean up the part and machine it down to final dimensions until your micrometer says you're within tolerance.
I think it's already been made clear that the main reason for the "asymptote" is wrong data input. These models attempt to learn from random internet text ... and this turns out to not be all that accurate.

Also, I've observed a model I was training having the same problem as I do myself. If I at any point learn wrong data, which happens of course, then getting that wrong data back out is very hard and requires 10 or 50 times the effort I spent learning the initial data. In fact I strongly suspect I never unlearn bad data, I just additionally learn "if I say X, it's wrong, say Y instead".
It’s been said that the Turkish government has videos of a former secretary if justice of The Netherlands (Joris Demmink) engaging in sexual acts with young boys in Turkey and that Turkey has used this at times as leverage against the Dutch government.

In return the Dutch government is supposed to have jailed a Kurdish leader Baybasin (under a pretense of him smuggling drugs) perhaps to get some leverage over Turkey in return (eg threaten to release him from captivity if anything on Joris Demmink is ever released into the public).

Of course this is all hearsay, but the whole situation around the captivity of Baybasin in The Netherlands sure is fishy. And Joris Demmink also had some weird relationships in the past (I believe once with an eastern European pornographic actor) and was known to pick up men for sex at certain places.
I decided after much consternation to hijack ".home" for my home network although ".internal" was also in the running. I really wish they hadn't just ignored the actual existing usage of ".local" when they decided to reserve it exclusively for mDNS.
Why Silicon Valley’s biggest AI developers are hiring poets
Before: <http://db48x.net/temp/Screenshot from 2023-09-20 09-14-36.pn...>

After: <http://db48x.net/temp/Screenshot from 2023-09-20 09-14-26.pn...>
Hello,

We are writing to inform you that the "ubuntu" user account on your vultr.com subscription may have a non-randomized password. Providing secure, reliable, and performant products and services is our highest priority. As part of this goal, Vultr proactively identifies potential areas of risk to our customers and works to diligently resolve any findings with minimal service impact. While we are not aware of any disclosed issues related to this finding, we have taken precautionary measures to mitigate any potential risk as well as providing this notification.

Here's what you need to know:
- All Virtual and Bare Metal servers deployed with Ubuntu from the Vultr OS Library between October 11, 2022 and September 12, 2023 may have a non-randomized password for the "ubuntu" user which could present elevated risk for unauthorized access.
- New instances from Vultr's OS library deployed after September 12, 2023 are not affected.
- New instances deployed from snapshots created from affected instances may also be affected, however we have implemented automation with cloud-init to disable the password for the ubuntu user at the time of deploy.

Here's what we have done:
- Vultr has taken steps to ensure newly deployed instances are not affected.
- Vultr has scanned for affected instances and disabled the password for the "ubuntu" user wherever it was found to be accessible.
- Vultr has not accessed any data on your instance.

Here's what you need to do:
- Even though we have taken precautionary measures, it is recommended that you delete the ubuntu user, or change or disable its password.

- Take the opportunity to review some security best practices here: https://www.vultr.com/docs/security-best-practices-for-vultr-instances

If you have any questions or concerns, please contact our account management team by opening a support ticket here:

https://my.vultr.com/support/create ticket/

Thank you for your business,
---The Vultr.com Team---
Anyone have a recommendation for the an affordable security cameras that would works without a cloud? I want to replace a collection of Blink cameras. Looking for doorbell cam, indoor and outdoor. Home Automation integration a plus.