skysight-inc/HackerNews huggingface dataset:
Second this. It's a swiss army knife of a map. Supports planning, track recording, export to various formats and online services like Strava, tools for Geocaching, map overlays, points/track database with folders, dashboards that turn your phone into a bike computer, and many more. And yeah the developers are super nice people!
What exactly would we want to incentivize landlords for if land was free?

???

They are not creating anything unique or otherwise. It’s not remotely comparable.
It wasn't "the West" that was freaked out, it was Israel. AIPAC spent a ton of money to oppose the deal.
I assume the copper wire was designed as a simple resistive switch? That will cause electrolysis and corrosion. There's an improved design that involves measuring capacitance, which also uses less power. I have a commercial sump pump monitor that works this way.
Docker content trust (ie signature checking) is disabled by default.

We won't even do this for webpages, but we find it a fine default for code that executes inside critical infrastructure.

It's utter madness. Cool to see someone is doing something about it.
The McGee series are fun reads, timewarp back to 60s/70s gumshoe work.
I would understand if the choice were good quality with logo versus questionable crapshoot with no logo. That's not usually the option, though. Perhaps you can't just look at clothing and see whether it is quality or not? Look at the stitching and materials, for instance? I happily pay more for good quality, no-logo than, frankly, logo with middling quality.
I guess if you're not already familiar with the Signal protocol specs, the current documentation might feel a little incomplete.

TLDR is, SS (shared secret) derived rom Kyber is mixed in to make the handshake, which outputs SessionKey (SK), pq safe. Note though, offline authentication (of identities) itself isn't pq safe (the authors plan to address this in the near future, however).

// CipherText (CT) and SharedSecret (SS) as outputs from Kyber
(CT, SS) = Kyber(PostQuantumOneTimePublicPreKeyBob)
// DH1, DH2, DH3, and optionally DH4 are Diffie-Hellman-Merkel outputs
SecretKey = HKDF-Signal(DH1 || DH2 || DH3 || *SS*)
// or
StrongSecretKey = HKDF-Signal(DH1 || DH2 || DH3 || DH4 || *SS*)

From Signal's PQ-XDH spec (section 4.11):

> Kyber hashes Bob's public (pre)key with Alice's random bits to generate the shared secret, making Bob's key contributory, as it is with a Diffie-Hellman key exchange. This does not reduce the dependence on Alice's entropy source but it does limit Alice's ability to control the post-quantum shared secret (SS). Not all KEMs make Bob's key contributory and this is a property to consider when selecting pqkem.

The pqkem (Kyber) happens 2 phases (1a & 1b below):

----------
Alice:
xx. recv(publickey)
0a. msg <- prng(256bits)
0b. random1, random2 = sha3-512(msg || sha3-256(publickey))
1a. ct = encrypt(publickey, msg, random2)
1b. ss = shake256(random1 || sha3-256(ct))
xx. send(ct); store(ss)
----------
Bob:
yy. recv(ct)
0a. msg' = decrypt(ct, privatekey)
0b. random1', random2' = sha3-512(msg' || sha3-256(publickey))
1a. ct' = encrypt(publickey, msg', random2')
yy. assert(ct == ct')
1b. ss = shake256(random1' || sha3-256(ct))
yy. store(ss)
----------
Both:
zz. sk = ss mixed with X3DH
zz. AEAD verify sk
----------

Refs:

- Crystal-Kyber: https://pq-crystals.org/kyber/data/kyber-specification-round... (pg 10 - 11; algorithms 8 & 9)

- NIST ML-KEM: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.ipd.pdf (pg 30 - 32; algorithms 16 & 17)
> Some people just don't have the ability to say "yeah, we've got enough".

It seems fairly clear to me that having more stuff makes people more greedy. And, yes, there is causation there, not just correlation.

You can even see this in young children. Give a pack of preschoolers a mountain of toys, more than they could possibly use, and they will immediately begin hoarding and fighting over them. Give that exact same group of preschoolers three empty cardboard boxes and a wooden spoon, and they will use them as props in a cooperative game.
So your argument is that infringement is okay, because they would have done it anyway? Not a great legal defense
I would say though that you have to pick your battles. On your path you might vanquish shitty web sites but just not being able to read them, but I think a real victory against enshittification involves breaking away from the web user interface which is some of why there has been so much bot blocking lately. It's not that people are going train an LLM on a shitty site but that you're going to get the LLM to read the shitty site for you, that is the real death of shitty sites. (e.g. agent posts your question to Reddit on your behalf, picks out and summarizes the best answer; instead of looking at craigslist every day for farm animals you get notified of the good ones; instead of seeing an ad for a Laurie Anderson concert on the bus when the tickets are all sold out the system tells you the moment the tickets go on sale...) But who knows? An HTML 5 parser is a good place to start towards that end.

I had similar motivations for developing my smart RSS reader and intelligent agent YOShInOn which has gotten me to work on filtering and "deshittification" right away as opposed to face a 1500 man x year project before getting to the stuff that matters to me.

For me the path not taken was developing a "reader" that works like archive.today, there was a summmer in the pandemic when my son and I were driving back and forth to Buffalo a lot and talking about missile defense systems and I did a "spike" project to develop something that would archive, process and deshittify web pages and I came to the conclusion that it was a long road to make something that was better instead of worse (every archiver I've seen is way slower than just browsing the page and sorry "slow X" advocates, slow = bad)

This winter I turned to the problem of end-to-end active learning for selecting articles and had great success as it. Sometime it sends me to archive.today but the goddamn CAPTCHAs never end when I use it from home so the question of the archiver/reader has come back but now that the thing has a workflow engine and could archive articles before I look at them the archiver/reader looks appealing if I can find something open source that is good enough.

There's a commercial product

https://www.getupnext.com/

which took the opposite approach of developing a reader and now they are working on recommendations. That's a path that makes sense because the reader cleans up the text which in principle is good for NLP but for what I am doing I think the signals in dirty text have enough value that I am doing just fine. They've got the issue that they're very unlikely to really develop content-based recommendation for a multi-user system because collaborative filter is such a good shortcut, also YOShInOn uses a Tik Tok style interface which for some reason has hardly been tried despite being a hit with Stumbleupon, this interface collects good negative samples and gets great results with a simple classifer... if you get a few 1000 judgements.*
Sideloading is going to eliminate the small indie dev who could make an honest living through the simple model of 1) make software, 2) let the user buy it once and own.

No subscriptions, no servers required to use. It is very rare now. Apple made this ecosystem it possible by being an intermediary between you and your customers, ensuring they do not run cracked versions of your work to save money and rip you off. It would suck to see it go.

Note who lobbied for this law. Not coincidentally, not the companies that actually did the above (selling software to own), just big corps with competing platforms.
The triangle count on the mario example seems reversed. Super Smash Bros Brawl (2008) for the Wii has 3,049 triangles but fully modeled buttons? The description says the 3ds version has 31 more triangles and I'm just not seeing how that's correct. Is this an error or am I missing something?
Not accurate. Early thermodynamics (in the broad sense, including gas laws) like Boyle’s 1662 Law and others led to Papin’s 1679 invention of the steam digester and related inventions (steam release valve) which directly led to Savery’s 1698 steam engine.

Vacuum science is also a critical predecessor to the steam engine, developed by Galileo in the 1630s and demonstrated as artificial vacuum and the barometer in the 1640s.
Unless the older, more well-known company has a larger ad budget, which seems… very likely.
... and libwebp gets statically linked into Chrome which gets updated via the Play Store even on Android devices that "don't receive security updates anymore".
For me movie theaters are unendurable. Constant smartphone use and talking make the experience terrible. Not to mention barrage of pre-film ads/out of focus film/deafening audio/uncomfortable/dirty seats.
> I'm not really clear what this means? All power plants require financing for their construction cost which is pretty definitionally the market cost of construction.

It is hard to finance a plant when you will on average sell the power at a loss. The money has to come from somewhere.
And yet I still can't back up or transfer my message history out of my iPhone/to Android. Priorities.
>rather than just a capitalist incentive to create more art?

That's the entire point. It's in the US constitution, stating that exact reason.
Does it? Living on a boat means you aren't using my local infrastructure. That infrastructure costs money to build and maintain. This will of course raise the price of things close by to said infrastructure.
I don't think it was on purpose, just perverse incentives of the system.
But it will likely help those specially anointed with a license to larger profits --- at least until the nit wits catch on to the ruse.
The original 3DS and 3DS XL gave me headaches. Whatever they tweaked with the New 3DS XL made it much more manageable because it does some adjustments with face tracking.
Their owners and managers are.
Signal does not ban third party clients. I use a private fork of Signal Desktop every day and it works fine.

I know several others who operate Signal bots using API clients (in Java, IIRC).

They don't like it, but the ToS doesn't prohibit it.

We would consider it ridiculous if Google updated their ToS to say you must use Chrome to access google.com. I consider HTTP APIs of which I am a legitimate user to be the same; I will use whatever client I wish.
Roaming used to be very expensive and so people almost never used it. Instead they would buy cheap local prepaid SIM cards when they traveled across intra-EU borders.

The carriers would charge high prices to each other for roaming, and pass those on to their customers. The market had worked itself into a stupid corner where nobody wanted to come down on wholesale roaming costs because they would lose out to cross-border carriers.

The EU capped the wholesale rates and mandated that there be no retail cost, so now carriers are charging less to each other and consumers are roaming on their own numbers without worry, and without the hassle, expense, and waste of buying SIM cards all the time.

It's been moderately beneficial for carriers, and a huge benefit for the public. The imposition of regulation has enabled the companies to be more profitable and consumers to get more value.
If your android is out of security updates, this won’t be the only thing to worry about, I would probably worry about the easier to exploit ones first.
Agree, and I do the same. So many books, so little time.
I'm replying to "you should ask permission from Moebius' estate, since they stand to lose revenue by your model" - there are no damages. Whether it's infringement or not is not really relevant to that point.
It's not so bad. Buy a half-dozen dongles, grab a new one from the pile when your current one breaks, and buy another half-dozen when you take the last one from the pile. I find Best Buy's Insignia brand lasts longest. Is it as good a headphone jack? No. But it's not that bad either.
I’m a Windows fan, but this bugs me so much, prior to Windows 8 I could go Ctrl Alt Del and instantly start typing my password, now I have to wait a couple of seconds before entering being able to enter my PIN.
US prison labor is cruel and pointless legalized slavery. I know first-hand
Does anyone have a credible source indicating that LLM learning is anything like human learning? That's the first step in this argument
And they don’t control fair use or promulgating the ideas in the book. That Wikipedia article summarizing the key contents in an editor’s own words? Perfectly legit.

What copyright buys is that no one else can distribute verbatim copies of large amounts of your work. But a lot of other uses are allowed.
I use our used coffee grounds to "3D print" plants via the compost pile in our garden.
"Late capitalism" (in German) attributed to Werner Sombart in 1902: https://en.wiktionary.org/wiki/late_capitalism
Create AI-Generated Art via SMS with Replicate in Python
It's their equiv offering of AWS Lambda. So the difference is on demand use vs 750hours/month billing cycles.
https://www.lazard.com/research-insights/2023-levelized-cost...

> The same argument according to which solar panels and such will become cheaper as demand increases (because of economies of scale and technical improvements) also applies to nuclear power plants.

The French nuclear scale-up famously did negative learning by doing. Economics of scale is not something you can assume. This is from before Flamanvile 3 started, that is even more negative learning.

https://www.sciencedirect.com/science/article/abs/pii/S03014...
I think many games had antialiasing enabled in 2D mode, which was disabled in 3D mode. I guess the sudden appearance of jagged edges (which may be mitigated by stereo vision) may be perceived as a dip in image quality.
Good to see someone do this.

Funny I was thinking about this recently - I've been trying to push for action from regulators / government here in NL (especially wrt Google) but there was very little appetite with the people I'd need to convince to stand with me to make something happen.

Considered briefly starting a new browser. However I've had experience attempting to design a very simple OS (a long long time ago, I got a mouse/pointer working on the C64 then realised that it wasn't worth it).. and modern OSes and browsers are of a similar level of complexity.

So now I'm focused first on family (due to working insane hours the last few years they've been neglected - pretty sure you worked a little bit on the same projects so know where I'm getting at) and a bit later in the year on something where I have a >50% chance of seeing results - fixing healthcare IT here in Europe. If I can say anything it would be to remember that as a parent - especially one who wants to be responsible and present - we don't have a lot of space available for serious side projects.
The Barakah plant also took over 10 years from start to finish. But even this is irrelevant for my comment: I am going by the official plan in Poland, which is 2033. We are in 2023. If you factor in the time nothing positive will happen, it's questionable if nuclear can ever make up for that lost time. The CO2 emitted until the plant is finished will not disappear once it's finished. That damage cannot be reversed. This is especially true now because now is the time to go fast.

On top of that, the Polish plant will begin construction 2026, so the build time is planned to be even faster than the UAE plant. I think this is highly unrealistic.
Ask HN: Can you “teach yourself” Computer Science?
I've been a developer for several years now, and I'm at the point where I am pretty good at programming and problem-solving with code.

However, I never formally studied CS and I feel like this has left large gaps in my understanding. I don't have a strong grasp of fundamental CS topics like compilers, operating systems, object oriented design, algorithms, etc.

I want to address these gaps in my learning so I can become a better developer. My first instinct is to go to free resources online, but I'm not sure if it's really possible to get a good understanding that way, or if it would take too long. The other option would be to apply for something like Georgia Tech's OMSCS program to get more intensive and formal training.

What are your recommendations for me? Is it possible to "teach myself" the foundations of CS? And if so, is it even necessary?
The JVM is one of the most optimized, most performant, most monitorable, most secure and most predictable software-runtimes there is.

How exactly do you consider it a big disadvantage?
> to make money it helps to insert yourself between people and something they may want or need. this is how pretty much every business works.

Sure this might be true. Also true that changing topic every three months is a sure way to ruin your reputation
I agree there isn't a lot of good content on Prime. Expanse was excellent (even though they rushed the last season) and The Boys is really good.
This analogy never made sense to me.

It's like saying I can kill people with a swiss army knife so I should be able to own a nuclear bomb since it's _literally_ the same thing, besides the scale but that's a detail right :)
[1] Using enums as a compile-time safe state-machine.

Very powerful tool.
I wish Go had (real) enums.

https://github.com/containerd/runwasi/blob/ba5ab5ada5a401762...
Google Searches for “Is College Worth It” Surge 1400%
Protectionism never works it just delays the inevitable.
From the spec (https://github.com/WICG/compression-dictionary-transport#fin...):

> The existence of a dictionary is effectively a cookie for any requests that match it and should be treated as such:

> * Storage partitioning for dictionary resource metadata should be at least as restrictive as for cookies.

> * Dictionary entries (or at least the metadata) should be cleared any time cookies are cleared.

Given that, I think it offers no more client tracking possibilities than any other existing web tech (cookies, local storage, etc)..
> Well, we don't know for sure that an exploit exists for this bug on Android yet

If the target is an Android, definitely an advanced exploit like this isn’t needed, so even if it will work, an easier ones most likely to be used.
Valve is a wonderful upstream contributor to Linux and the open-source community
Copyright indisputably covers more than the verbatim reprinting of a book
You get a lot just by making sure each application has its own user access.
I think that what's actually happening is that "the center" in the US (and some other Western countries) is now so far to the right due to the moving Overton window that to maintain a "centrist" position requires, as you say, willful blindness to various societal and economic problems. This doesn't make it "more extreme centrism"; it just means that "the center" is already flirting with what would by any other measures be the far right.

...Actually, I think there is another force at work here: many of the people who consider themselves "centrists" in the US are the same who considered themselves such 20, 30, even 40 years ago. But

a) with the aforementioned moving of the Overton window, they are having to suppress increasing amounts of cognitive dissonance to continue to self-identify as centrists without recognizing that they are now well to the right of where they would have been previously, and

b) with the (slightly paradoxical, only possible due to the increased polarization) simultaneous increase in awareness of the marginalization of various groups, and acknowledgment that it is neither good nor neutral to continue that marginalization, anyone advocating for either maintaining the status quo or returning to some prior state has to either openly state that they want to continue the oppression of these groups, or, again, suppress the cognitive dissonance in any of various ways.

In the end, I think it's really just a long-winded way of restating the Desmond Tutu quote: "If you are neutral in situations of injustice, you have chosen the side of the oppressor."
Which Java baggage do you mean?
EU paid for some/most of old gear we send to Ukraine. Poland was the first to send tanks while Scholz was busy scaremongering about WW3 on TV and deleting armor from list delivered to UKR, over three hundred PT-91 modernized ex soviet ones + Leopard 2A4s instead of promises of some in 2024. We send jets before public declarations, we send ~100 modern AHS Krab artillery pieces, >50 Rak 120mm arty, 200 modern Rosomak APCs, 30 Oncilla APCs, 12 Mi-24 helicopters, some S-60 old soviet towed AA and 50 deathtrap BMP-1s (still better than civilian trucks). We didnt dig old decommissioned stuff out of museums or deep storage, it all came straight from active use in military units. Purchases you see announced are backfill for that equipment, we are out of stuff to send.
I don't think you need to focus on lack of growth at all...

Lets instead look at natural/living systems. If you imagine you have a new kind of plant that has no predators and no diseases that affect it, you can imagine it may spread "like a weed". But in any ecosystem you cannot imagine impeded growth will last forever, even if there is plenty of fertile soil to grow in. Animals and insects eventually adapt to feed of the abundant source of energy the plant has created. Illness and disease spread in monocultures.

There are 8 billion people on the planet. The handful of VCs could be perfect angels and it would be just a drop in the ocean compared to the number of people that are not VCs and will not ever have massive amounts of money, yet want more and realize they may be able to get it if they grift off the ecosystem.
Only humans can violate laws: the AI isn't using copyrighted materials, it's human owner/operator is.

The human owner/operator did not have proper licensing to perform this action, trying to argue "but with an AI" doesn't change the act.
thins the blood, ostensibly making it easier to pass through cholesterol encrusted arteries
Imagine if, after having read and trained a single, bright student through university, you could clone them a million times and get their clones to churn out content for a penny per 4k tokens.

One solution to this would be to say this:

* The copying done while training a neural net is "fair use", similar to copying the DVD into RAM and onto the screen while watching it.

* The resulting neural net is a derivative work of all copyrighted works used during its training: No copying of the derived work is allowed without permission of all copyright holders

* The output of the neural net is subject to normal copyright laws for humans: i.e., it's only a violation of copyright if it's obviously a copy.

Basically, you can either train every instance of a neural network separately (like you have to do with humans) or get a license for all your training data.
I live in Finland. My favorite place to get sportswear and just daily wear is H&M. No logos. My favorite design house is Makia. Really amazing stuff. https://makia.com/ but if it has a big-assed Makia logo I don't buy it.

When I lived in New York there were so many options it was hard to choose, but I'd check out used clothing boutiques for fun things.
Nice catch! I noticed that issue as well. I was too lazy to fix it, but I'll take care of it this weekend. I also plan to work on improving the mobile version. I hope you'll consider using it for our next estimation scrum. :)
Good thing I didn't throw away all those DVDs.
By that logic, would you write a web site where every link was actually a POST unless it was to "static content"? That would be a disaster, no?

I guess the person I was replying to, and you, were talking about Javascript API calls rather than ordinary HTML executed by a "browser". It still seems like a wrong idea to me, but if this is what you do on actual apps and have success, I guess that's a thing.
I feel like there are a lot of CVE's in the JS community that basically require an attacker to already have access to server side code execution. That seems like it raises some bigger questions.