skysight-inc/HackerNews huggingface dataset:
> but also don't leave SSH open to the public, especially not on :22

100%. These days, at least if you're working out of a cloud provider, there's no excuse for exposing SSH to the world on any port. AWS/GCP/Azure all have different tools to allow you to run bastion-type services without internet-facing SSH.
The 88000 first came out around the same time TSMC was founded, and long before TSMC became the world leader in fabrication.
No worries. Just wanted to make sure I understood.

> More that govt's, in general, have a habit of leaking personal information for their own benefit.

I 100% agree with this.

Cheers!
An AI summary of the article by definition contains information from the article; otherwise it would not be a summary. Whether or not you consider this rehosting is muddy but some people might, which is all my comment was saying.
Chicago and Baltimore spend tons of money for their school system with poor outcomes.

Just supplying more money to a system almost never fixes anything about a broken system.

A few years ago the Chicago teachers Union leader pointed out that part of the trouble with trying to teach students is that they do not have a secure home life. You're not going to fix that by giving more money to school administrators.
Motorola 68xxx is not just Amiga and fun and games. I used to own a Sun 3/60 which is 68020 and most definitely very much business, much more than IBM PC
I've not worked with Java but will certainly have a look as data handling etc I find very interesting. Thank you!
Each valid login+password got the scrapers many many profiles.

23andMe has a feature that lets you see people you're related to and view their profiles. My guess is this feature had few rate limits and allowed you to view the profiles of people very distantly related. So perhaps with a couple thousand valid account logins you could eventually look up the profiles for 1.3M users.
I learned Logo in elementary school, and some scraps of basic in junior high, but I have no doubt that my baseline computer systems engineering knowledge came about because if I wanted to play video games, I had to get my drivers and my EMS and XMS squared away.

When I hear people today ask, “how do I get into security?” My immediate answer is that you’re going to need a very underpowered 486 and a copy of Wing Commander 3 if you really want to do it right.
AFAIK there is a find replacement with sane defaults: https://github.com/sharkdp/fd , a lot of people I know love it.

However, I already have this in my muscle memory:
find <where> -name '<what>' -type f(file)/d(directory)

Works in 90% of situations when searching for some file in terminal, ie:
find / -name 'stuff*'

The rest of the time is spent figuring out exec/xargs. :)

And once you master that, swap xargs for GNU parallel. I bet your machine has a ton of cores, don't let then sit idly. ;)
My Arch system would occasionally boot to a black screen. When this happened, no amount of tinkering could get it back. I had to reinstall the whole OS.

Turns out it was a conflict between nvidia drivers and my (10 year old) Intel integrated GPU. But once I switched to an AMD card, everything works flawlessly.

Ubuntu based systems barely worked at all. Incredibly unstable and would occasionally corrupt the output and barf colors and fragments of the desktop all over my screens.

AMD on arch has been an absolute delight. It just. Works. It's more stable than nvidia on windows.

For a lot of reasons-- but mainly Linux drivers-- I've totally sworn off nvidia cards. AMD just works better for me.
Asp.Net has 5% of the features of Rails? Which 5%? What of the 95% missing do you need?
I think all the reports just say "iMessage" and don't specifically note sms vs iMessage specifically. It's entirely possible that there a carrier side restrictions on allowed image formats, and of course these attackers don't want people to see their exploits and definitionally using sms would allow just that.

But also, in answer to the question: yes, every messaging app on Mac or iOS that could display webp was susceptible to this exploit. If they use ImageIO then the OS update fixes them, if they use their own copy of libwebp they are exploitable until they ship an updated version.
The question was: When does an old iPhone become unsafe to use?

What are you answering "Yes." to here?
That's part of the clickbait-ness. "Surely the actual article uses real numbers, let me click and see..."

Also, this is the problem with current (what gets passed off as) journalism. The quality of the reporting is replaced with creativity, hyperbole, etc. It's hard to take the profession seriously when it doesn't follow its own rules, doesn't bother to police itself, etc.
SBF told someone he was sleeping with Ellison; that’s the only reference to it, yet it’s the first word in the headline?

What a trashy, clickbait headline.

—-

Aside from that, there is no real new information from the trial that wasn’t already known.

The only interesting comment from the trial was when Yedidia said, “FTX defrauded all its customers,” which was later stricken from the record.
I think that seven different answers there and at least that many, also all different, posted here indicates that there isn't in fact a demonstrably correct answer explaining why the global market did what it did.

Of course, any economist would say "Welcome to economics!" at this point. (-:
Yes, wealth can mitigate attacks on your freedom. But for everyone to financially maintain their other freedoms requires a degree of economic freedom not afforded by basically any country on earth. Instead we mostly have managed fiat currencies that are continually inflated, vacuuming real wealth towards a politically-connected center, and making it so that only a fraction of the population can ever be capable of amassing enough wealth to purchase freedom. So your argument is a bit specious in the world we actually have, and ignoring that it falls apart is a recipe for justifying oppression.

Coming at it from another direction, I'd say that government guarantees of freedom are essentially non-fungible assets that resist the ability for lopsided/captured/coercive markets to financially strip them.
The only full-frame image sensor I'm aware of that you can buy in small quantities off Mouser and the likes are the CMV20000 CMV50000 (20 and 47.5 mpix) costing $2000-$4500 per sensor. Last I checked APS-C and especially M43 sensors were 1/4 to 1/10 the price.

So imo it boils down to price.

If I had $1M to burn, I'd love to make the same product in full-frame - with Leica-style microprisms so that it would work well with range-finders. Maybe now that film is getting really pricey, maybe there's more of a niche to use old cameras with digital sensors.
US-based but I've been bribed multiple times to get a gift card in exchange for changing my review to 5 stars. Usually I change the review, take the gift card, and then change it back to fewer stars indicating that seller bribed me.

It's the only way I can think of that actually financially discourages the practice.
From the Readme, their eventual plan for the project is to be able to serve the client through the web browser which would mean that almost all tablets would be supported.
This happens to me (here in California) regularly.

When this happens I leave a review saying so, either on the product itself or on the seller's page.

Amazon always deletes these reviews. So, Amazon knows about the practice, and approves of it. Not much you can do at that point.
If your attacker is stuck manually passing the captcha time after time, they're probably not going to bother.

The thing that worries me more is the possibility that newer AI tools are allowing attackers to beat reCAPTCHA with automation. If that's the case, a lot of folks are going to be caught with their pants down.

Edit: looks like it's more than a possibility[1].

[1] https://twitter.com/sw33tlie/status/1710409035030122731
I was sad to not see vuetify in the reviews. I was wondering how it stacks up since it lists a11y as core feature.
if they’re hosting sensitive data, it isn’t “babying” the user to take some responsibility for the data your company exists on.

if they can’t take responsibility for it, then they’re too irresponsible to make money it.

it would be entirely reasonable for them to say “we don’t want anything to do with this data, we don’t want to profit from it, we don’t want to use it in anyway, therefor we will not retain it at all.”

babying the user by taking responsibility for the very data they profit from? unreal.
Even a proper measurement wouldn't tell me anything. Is 1500 kilometers across big or small for this kind of thing? I have no idea.
> To quote some US officers - "Soviet equipment works well - in Ukrainian hands".

US officials say a lot of things... I'm much more inclined to believe actual VSU fighters who say it's better.
Mapbox releases MapGPT as AI for drivers
> because I noticed this too

When it was pointed out to you.

Maybe if you read what I wrote and try benchmarking what I am saying you will “notice” more of your errors.
Ah, so they were able to use a few accounts, then fuzzed the URLS to victory...

Amazingly incompetent.
> Without proper certification, the incredibly tightly regulated aerospace industry can’t guarantee the parts will actually work

No change there, then.
That's silly, the ozone hole goes from high latitudes to low, and was bigger in the southern hemisphere. Therefore was going to affect Florida well after it affected most other places.

OTOH Florida is full of people who deny global warming. Even though Florida actually is ground zero for coral bleaching, increased strength of hurricanes, and sea level rise.

People act on what they connect with for whatever combination of reasons. This seldom matches what they logically SHOULD connect with.
>Of course, Intel's HDCP master key was either leaked or reverse-engineered, so anyone can generate their own valid device keys

Of an older version of HDCP. New media can require a higher HDCP version where that bypass isn't possible.
Why doesn't Amazon care?
dpreviews for photography stuff
Also 20 years on the http client still doesn't have proper timeouts.
> Apple is winning now not because of "ARMness" but because TSMC pulled ahead of Intel on density and power/performance.

AMD’s processors are also fabricated by TSMC; why aren’t they competitive with Apple?
No, I was confused because there were momentarily ads there, they went away.
Related. Others?

Brute.Fail: Watch brute force attacks fail in real time - https://news.ycombinator.com/item?id=36169954 - June 2023 (259 comments)

Ask HN: How to protect against endless SSH login attempts to my server? - https://news.ycombinator.com/item?id=34077205 - Dec 2022 (27 comments)
My preference is 3x 24 inch screens. In theory, I'd like one of them to be a tablet or a touch screen device that sits underneath the other two.

It basically boils down to one screen for "the app/website/whatever" one for code, and one for a reference. I _can_ hold contexts, but I also have tools to do that for me.
I exercise so that I can have a healthier body.

I get my teeth scraped by a dentist so that I can keep them longer.

I usually avoid getting all the sugar I want because I know that will kill me eventually.

When I was younger, I studied in school instead of playing video games, so that I could learn enough to get a paying job.

These are all examples of what some might consider a hardship.

Living in a better situation than in most navies for several hundred thousand dollars a year does not seem like all that bad of a deal to me.
Humans seem optimized for detailed recognition of visuals, not reproduction of them. Makes evolutionary sense because you can easily see the utility of detailed recognition, but what justifies the additional burden of detailed reproduction?

People who can draw detailed reproductions are either oddballs with photographic memory, or they've perfected the skill of adjusting their drawings as they develop gradient descent style using detailed recognition as the judge of where to stop.
Also it's a desktop environment, not a linux distro.
Cause you keep buying. Or rather, because you haven’t canceled your Prime yet. Do it now.
Init means the distribution of weights prior to training.

Human training begins at birth.

Evolution might result in better architecture and init(inductive biases), but that's a separate thing than training.
Normal watermarking solutions can survive resizes.
Consumer reports is ok but I’ve found it’s better for the I’m lookin for “any” car in x segment type person. If you research your purchases deeper than the average person it’s not worth it IMHO.

I agree for average buyers it’s better than anything else. Especially for the uniformed.
> An electric motor, on the other hand, is really just some magnets wrapped in wires and it only needs a single speed transmission. That simplicity worries the United Auto Workers union.

A classic example of perverse incentives created by labor unions. Imagine building a piece of software and getting criticized by some sort of "software union" that it's too easy to use.
My political candidate does things in good faith, but the opposing political candidate only ever does things in bad faith. Right guys!?
I'd like to echo that Micro 4/3 sensor just makes this really not that useful imo unless it's for toying around, but then you might as well get an older M43 or Fuji digital camera.

M43's crop factor changes the field of view and thus the lenses character. Which imo is the main reason to shoot older cameras - the lenses. Along with the qualities of the film itself. It undoes both imo.
> How can you draw a thing without visualizing it?

This is a great question. I have an inability to draw things from memory (despite being able to recognize them immediately and form strong narrative memories of them). This realization is what lead to me to think I have aphantasia.

A few years ago, I decided to draw a face everyday from memory (of someone I knew well visually) to see if I could train myself to get better. After 6 months of daily practice, my faces still looked like cartoons. My technique got better from rote memorization, but importantly I never got to the point where I could recognize my subject from my own drawing. They all just looked like random people poorly drawn. I can recognize the mistakes as soon as they're on paper but during the initial creation I feel like I'm guessing where the lines go based on some verbal/narrative structure ("I know she has long hair, how about this..."), then saying "hmm that's not right". I have no reference image in my mind to work off of.

But I can immediately pattern match against my drawing to see how far off I am, which means the visual information is encoded in my brain somewhere. Still no clue on how to voluntarily access that memory - it's as if my visual systems only fire when photons hit my eyeballs. Which only helps after I've made my shitty drawing, not while I'm drawing.
To put it another way - there is no security risk that fail2ban helps with that can't be resolved in another, better, more robust and less risky way.
Alation | Sr. ML Infrastructure Engineer | Full-Time Hybrid/Remote | US

Alation is the original data catalog and empowers analysts and business folk to find and make use of the data they have spread across their enterprise.

We are looking to build AI/ML features throughout the product and need scalable, robust infrastructure to power both our experiment pipelines and our deployed models. If you've helped build ML infra before and want a chance to own it from the ground up we'd love to hear from you!

https://jobs.lever.co/alation/43d4fb01-9126-449c-a146-d0a45b...
>to layer context

Such a good way of capturing it.
Interesting. I don't understand the revocation process though.

What stops the blu-ray reader from just ignoring the revocation list on the disk?
I think the flow should be

I give summary => site gives me panel descriptions to choose from

I pick descriptions = > Site creates a "skeleton" layout option for each panel. At this point I can modify the skeleton or save them

I get skeleton layout => Site makes it look pretty

With each stage modifiable

I think this is very cool and well made.
In the world of amazing fast vpn solutions why is your RDP port open to the internet?
Perfect time to buy a MacBook.
> It can be fun to speculate but by definition it is impossible to know.

I think the distinction is way more blurry than you're acknowledging. For example, the way we "know" what atoms look like is by technology like x-ray crystallography or scanning tunneling microscopes. In these cases, we're in no sense directly observing the atoms, were looking at correlated electric or photonic signals and using mathematical equations to infer what the atoms look like.

In this case there truly is an "impenetrable barrier" to observation, instead of speed of light, it's wavelength of visible light.

The amount of physics we cannot directly observe is much larger than amount of physics we can, without even getting into quantum phenomenon which we also cannot observe even in principal.
They might be smarter, but the actual numbers seem pretty questionable.

According to their numbers, Musk is fully twice as smart as the Ford CEO, and Hassabis is like a full 33% smarter than that.

Seems dubious.
The difference in couplers between the US and Europe is a fascinating bit of history. The US mandated automatic couplers in 1893, taking effect in 1900, since the existing manual couplers were a major cause of industrial accidents. Even today, most European freight rail depends on absolutely ancient manual couplers. A major secondary benefit of the AAR-style automatic coupler is a much higher strength, allowing for much longer and heavier trains than are possible with the manual connectors. Historically, the few European trains using automatic couplers were exceptionally large/heavy, like Swedish iron ore trains between Kiruna and Narvik.
Control+C, Control+Vs in your path
Comments now available in Vercel's Slack integration
Steampipes is amazing. It is a light in the darkness to anyone taking on enterprise compliance reporting. The growth of the platform laterally
WRT plugins and features while somehow making cross-org/multi-account even easier for end-users on top of building a cloud-hosted solution for teams is a testament to everything in this article.
Also games. 3x24 inch screens felt like the best balance to me. I had 2x27 and 1x 24 for a while, but I dropped back to 1x27 and 1x24 and prefer it. That's what I roll these days
A paid LLM solves this?
I find that Wirecutter is still fine, despite its weird new reputation.

Rtings.com for electronics.

https://www.audiosciencereview.com/forum/index.php?reviews/ for high-end audio products.
As well as NeXT computers which started out on 680x0.
I tried bumblebee again recently, and it works shockingly well now. I have a thinkpad T530 from 2013 with an NVS5400m.

There is some strange issue with some games where they don't get full performance from the dGPU, but more than the iGPU. I have to use optirun to get full performance.

It also has problems when the computer wakes from sleep. For whatever reason, hardware video decoding doesn't work after entering standby. Makes steam in home streaming crash on the client, but flipping to software decoding usually works fine.

The important part is that battery life is almost as good with bumblebee as it is with the dGPU turned off. No more fucking with Prime or rebooting into BIOS to turn the GPU back on.
The character's facial proportions change in the animation, which is a complete no-go. Programmers wont care, sure, probably marketing neither, but this is really what separates artists from people who get duped by these tools. It doesn't look good. To a trained eye it looks like shit.

You can argue it will get better, sure, but you're showing what it currently is, and that's all it can really be judged on.

This isn't moving the goalpost - It's impressive it can do this. Its just not good enough for me to use it, and that goalpost has been there a while.
Yep, I've posted more than a few 'Seller sent me a giftcard to bribe for a good review' - Amazon deletes them.
The 12 Mini does not have the same ergonomic factors. The screen is larger, and there are UI elements (further) out of reach of one-thumbed users.
Not sure what your are smoking tbh.
The custom music wasn’t followed the game levels — the game was designed for you to swap in your own CD, and the levels would be generated off of that music.

It’s why the digital re-releases have been somewhat lackluster — the default music is fine, but not notable on its own.
Thank you for your interest! Yes, we have an integration with Slack.
yes that is what I meant

generally if you have multiple embeddings for the same document you have two choices:

- create one document for each embedding and make sure non membedding specific attributes are the same across all of this document clones -- vespa makes this more convenient by having child documents

- have a field with multiple documents, i.e. there are multipel vectors in the HNSW-index which point to the same document -- vespa support this, too. It's what I meant.

vespa is currently the only vector search enabled search system which supports both in a convenient way, but then there are so many "vector databases" poping up every month that I might have missed some
Wow, that's a great idea.
My solution is same as your plan A. Except that local backup is a NAS that also stores all backups from computers as well as photos from phones. Then everything goes to back blaze and photos go to Google photos for convenience of sharing.
Maybe instead of hiring private contractors to invent new propulsion systems and then conceal them from the public good, we should give some of our ~$600 billion military budget to these agencies.
Looks like the Sega Genesis used it because they got a 90% discount, and then paired it with a Z80 over fears it couldn't handle sound and video at the same time.

https://en.wikipedia.org/wiki/Sega_Genesis#Development

https://www.siliconera.com/former-sega-president-talks-about...

It was a decade old at that point. A decent win for an aging technology I'd say, but not a money maker. Power PC consoles came much later.
> I think that is what happened with SBF, and I cannot say that any of us would have behaved much differently, given the circumstances.

This is just entirely speculation. Yeah the "holier-than-thou" attitude is annoying, but it's really not that hard to not launder money.

> This Christmas season, let’s try to find a little generosity and understanding for Sam Bankman-Fried. Dig down and recapture some of the awe and admiration you felt for the kid just a few short months ago.

This is one of the worst puff pieces I've ever read.
Central planning probably had not hindered small scale production such as most military procurements (except ordinance). It really hurt them in the mass consumer goods though... Rampant corruption and central government planning go hand-in-hand.

> Sure. There's a lot of stuff I wish we would nationalize, personally: basically everything that could reasonably be considered an essential, from healthcare to education to food to broadband, leaving aside things like video games, luxury cars, jewelry, blah blah. What is or isn't an "essential" is a necessarily moving target, evolving with society.

I for one would prefer essential services not to shutdown because of politics like what almost happened a week ago.

> However, I also have zero faith in Washington to execute anything remotely like that. Canada, maybe, or one of the Asian or Nordic governments...

Canada and europeans have historically failed to keep up with US despite (some would say "because") more government-centric approach. Exercise for the reader - which NATO countries are meeting its declared 2% millitary spending target if you don't include things like pensions.