skysight-inc/HackerNews huggingface dataset:
We need to focus on the other direction. How can we have chains of trust for content creation, such as for real video. Content can be faked, but not necessarily easily faked from the same sources that make use of cryptographic signing. The attacks can sign the own work, so you'd need ways to distinguish those cases, but device level keys, organizational keys, distribution keys all can provide provenance chains that can be used by downstream systems to _better_ detect fraud, though not eliminate it.
anything that has connections to google is going to be a privacy nightmare
Mojo v0.4.0 has been released
I would guess the subtext here is related to the 23andme breach.

The problem with fail2ban is that an attacker who has a botnet of significant size at their disposal won't even be slowed down. Not saying it's worthless, but it's not a silver bullet.
Maybe you've already done this, put her device on a guest network to isolate it from others in your home.
I wrote about using fail2ban with postfix[0] almost 15 years ago for blocking IPs that were sending to unknown email addresses on my server. It was a godsend for blocking tons of spam back then.

[0]: https://www.dp.cx/blog/postfix---fail2ban---win.html
Faze Clan SPAC investor presentation (2021)
Up to tenth of Amazon shoppers in GB 'bribed' by sellers to offer good review
love this! will use for personal site
Cisco issues patch for critical RCE in its Emergency Responder software
I think it would be mean, but I don't know if it there would be much skewing. The most expensive make they include is Tata at a $105,708[1] average transaction price. If you just average all the entries you get $54,000, so it looks like they're using average transaction price by make and number of vehicles sold by make to get the overall average price.

https://www.coxautoinc.com/wp-content/uploads/2023/04/March-...
There's value in the body as well, at least from some bodies the exposure level and auto focus options.

However, $600 USD for a 20MP? That had better be a high quality sensor...
I really like that this has a little interactive widget. Higher frequencies lead to more splitting/deflection, and higher pressure means more light traveling along the reflected path.

That said, I must also admit that first video's still-image made me assume I was about to see the Master Control Program from Tron.

> In their experiments, the researchers used an infrared laser pulse with a peak power of 20 gigawatts, which corresponds to the power of around two billion LED bulbs.

OK, so not about to revolutionize photonic computers soon. :P
No one wants Travis Scott tickets, and it's creating a reseller crisis
> amount of opioids intake

*embarrassed British cough regarding the Opium Wars*

That said, your list is half global, half national. We're not all suffering from the mistakes of the USA in over-prescribing things.
I mean the United States should build a risc v supercomputer and fund the research
Ransomware gang QakBot resurfaces after feds' botnet takedown
I agree with you, but my first step in doing a modicum of research on a new subject is to ask questions. I can ask the most basic questions to chatgpt and usually get pointed in the right direction.

Which is my point. ChatGPT is the most basic modicum of research and it is excellent for that. But it also can do a lot more.
It's actually full open source (MIT licence): https://github.com/alphagov/
They're not guessing passwords, they have a list of e-mails and passwords from other leaks and are hoping the users are using the same credentials on all their accounts. Since password managers aren't mainstream yet it works.
> When does an old iPhone become unsafe to use?

As soon as the new model is released ;)
While I admire those who stick to the first-gen 2016 iPhone SE, of which the 12 Mini is its successor, I stand by the iPhone 6, the first larger phone of its kind. Everything else is a phablet, imo
Well, it wasn’t really commentary though. It was a pointer to the interesting information in the link.
Show HN: Nbagent – Simple Nullboard backup agent for Unix systems
Hello, HN! I'd like to introduce you to nbagent[0], an open-source alternative backup agent for Nullboard[1] for Unix systems. If you, like me, are a fan of Nullboard's simplicity and you've been looking for an easy way to have your data backed up, check it out.

I'd love to hear your feedback on nbagent. Please feel free to leave comments, suggestions, or questions below. Thanks!

[0] https://github.com/luismedel/nbagent

[1] https://nullboard.io/preview
Based Clayton Bigsby enjoyer.
MONGOLIAN71682@HOTMAIL.com and password "SHADOW_RAIDERZ123" that was easy.
I remember arguing about this and boat programming.
Extremely debatable, especially when stated without qualifiers.

I know a lot of people who are happily using Mastodon or Bluesky, not looking back and enjoying their chosen platforms a lot more than Twitter.
I think this is where we have to really move towards the io_uring/FlexSC approach.
Yes! Easy enough to find it in the githubs.
>I refuse to pay a subscription for an OS, that should be pay once and be done paying.

Sure

But don't expect to get any updates to what you paid for - after all, updates are no longer the same OS
I like occasional discussions on these things. People sharing tips, experiences, pitfalls, etc. It gets everyone in one place at around the same time to do it, like a small digital convention.
Seems like you'd need to spend 12K in server cost if you wanted to find this in any reasonable amount of time.
I have the condition, as well (that is, I may have a short visual flash or broad impression, but I can't sustain this), still, part of my work is working as a designer and I'm considered proficient at drawing. It really comes down to classic poetics and relying on / trusting your gestures, while you are drawing. The amazing thing is that you can produce a stroke, you couldn't have thought of in a controlled way, and you're kind of surprising yourself. (I believed for a long time, it would be like this for everybody.)

BTW, this may be related or not, but I have learned to detest gesture based UIs in apps, and, since this has become the prevalent form of control, I've removed about all apps from my phone.
No it isn’t, because you can’t see that from the main page so there’s no reason to look at the link or comments if you don’t know what is interesting about the post. This rule makes sense for editorialized titles, but not as much for trying to point to news that is buried in some larger page that does not have a useful title.
More like, "people want to steal information"
Really bad drugs kill through overdose, whether from low quality supply or some users' inability to manage their addiction. I think there are more 'functional addicts' around than most realize. It seems to me that a good comparison to morbid obesity is tobacco smoking; you can keep at that for a long time but the odds of cumulative damage becoming disabling rise inexorably.
Don't Let Zombie Zoom Links Drag You Down
It's rather hard to figure out the difference between interactable and non-interactable elements - buttons have the same drop-shadow as badges.
Did you adjust for company size? I bet the average s&p 500 company is much larger than they were in the 60s. Doesn't seem strange or unjust to me that a ceo of a $1 trillion market cap company can demand higher pay than one for a $1 billion company.
Just be clear, the rise of childcare and restaurants are very clear evidence of the shifting boundary between the private and public spheres. But that shift cannot continue if it just hits more and more commute time constraints. It is like trying to do a faster integrated circuit without shrinking the scale.

Just as we bring the compute to the data, so we bring production closer to the home with mixed things, etc.

And in generally, people don't get what density can offer. For a silly example example, I've bought the clothes I will wear at an event while traveling to that event. Our suburban culture is not keeping up the material possibilities.
Maybe they could send me my dad's account password he lost years ago and no longer has the email address.
That's the interpretation I'm going with. Here, though, there are quite a few restaurants that add a service fee to all dining. If you eat there alone, you're getting a 20% fee.
We already have well established systems to prove the provenance of images and other sources.

At the moment the internet is a wash with bullshit images. Its imperative that news outlets are at a high enough standard to actually prove the provenance of them.

You don't trust some bloke off facebook asserting that something is true, its the same for images.
>Outside of security updates, which should never be charged for

Why shouldn't you be charged for for security updates?
More discussion over here: https://news.ycombinator.com/item?id=37794379
Looks like an E34 to me, and the license plate is Belarusian. These aren’t even Russian colors.
University of Illinois had Blue Waters ($200+MM, built in ~2012, decomissioned in the last couple years).

https://www.ncsa.illinois.edu/research/project-highlights/bl...

https://en.wikipedia.org/wiki/Blue_Waters

They have always had a lot of big compute around.
> the first, MVP-style, attempt will be using Electron.

Good choice.

If you want to stick to HTML...WebView2 is suppose to replace it, but it assumes your backend code is .NET or C++, instead of JS/Node.js. Microsoft Teams is using it.

If you want to use native Windows UI components from JS code, then React Native for Windows is recommended. Facebook Messenger is using it.

All approaches require C# or C++ modules to be used to interact with the Windows Platform. Or there is: https://github.com/tjanczuk/edge.

The recommended approach is WinUI 3 which would involve C#/C++ and XAML.

To SwiftUI/React/JetPack are called module-view-update (MVU). There is an MVU for C# called Comet. https://github.com/dotnet/Comet#key-concepts
Very interesting, would this be related to Acousto-optic modulators - https://en.wikipedia.org/wiki/Acousto-optic_modulator, which I believe can do this using a crystal and sound waves.

Will have to read their paper.
Airlines duped into using plane parts w phony inspection cert in $3M scam
Isn't amazing how actual people can put their heads in sand and say "Oh it's just media conspiracy and lies to fuck over us poor people!" about anything they don't like.

Added irony that the person is a commenter on HN, who is probably the top 10% of the richest people in the world.
Oh yeah, I mean... having the source for the container build is kind of table stakes at this point. No one would accept a 10gb mystery meat blob as the basis of their production system. It's bad enough that we still accept binary-only drivers and proprietary libraries like TensorRT.

I think my issue is more just with the mindset that it's okay to have one narrow slice of supported versions of everything that are "known to work together" and those are what's in the container and anything outside of those and you're immediately pooched.

This is not hypothetical btw, I've run into real problems around it with libraries like gproto, where tensorflow's bazel build pulls in an exact version that's different from the default one in nixpkgs, and now you get symbol conflicts when something tries to link to the tensorflow c++ API while linking to another component already using the default gproto. I know these problems are solveable with symbol visibility control and whatever, but that stuff is far from universal and hard to get right, especially if the person setting up the build rules for the library doesn't themselves use it in that type of heterogeneous environment (like, everyone at Google just links the same global proto version from the monorepo so it doesn't matter).
> Would malicious actors attack an iPhone 8

It depends. The iPhone 8 might belong to someone they’re interested in for reasons as mundane as being a control freak and the iPhone belongs to their partner. Or just someone that annoyed them on the internet.

Or the attack might woken across all device generations in the same way. Then no specific targeting would be required and the phone owner gets caught in the net like all other unpatched versions, except they never had a chance to fix the issue.
Not necessarily. GPUs simply aren't optimized around branch-heavy or pointer-chasey code. If that describes the inner loop of your workload, it just doesn't matter how well you can parallelize it at a higher level, CPU cores are going to be better than GPU cores at it.
Those contracts are reliable in that the customer is extremely unlikely to move to a different product line. Especially when you've got a customer locked in, refresh timescales are pretty predictable.

HPC contracts are generally borne of federal-agency RFPs, and are extremely competitive, and they only 'pay out' upon a passed acceptance test, so it's not trivially possible to predict which quarter your revenue will land for a given sale. You wind up with sales teams putting tons of work into a contract that didn't get selected, which sucks, but even if you win you might wind up missing sales goals, and then overshooting the mark the following quarter.

In a company less hidebound this obviously wouldn't be a problem, but IBM has been run by the beancounters for long enough that the prestige isn't worth the murky forecast.
No, to me that's totally fine! They know what their costs are and they charge you accordingly.

What bothers me is "the price is $X, but if you don't pay $Y our workers won't be able to make ends meet, please support them!" I don't know how much your workers need, that's your job when you set prices! (And if the price is too high, I won't eat there, no harm done.)

I just wonder if they expect you to also add an additional tip, since 2.5% is so much lower than the standard percentage.
CAPTCHAs Are Dead
Dang that's cool.

I'd like to know the turning radius.

What do they mean by "efficiency" when they say, "In the first laboratory tests, a strong infrared laser pulse could be redirected in this way with an efficiency of 50 percent?"
My first question was... dust!

Film always presented a new frame from the canister, so reasonably it would be free of dust for capture.

With such open sensor the dust accumulation may soon become an issue.
Most people don't actually pay their entire insurance premiums. This is true for people on group plans (the employer pays part of the cost) and on ACA marketplace plans (subsidies pay part of the cost).

Your numbers are hinky. You start with 300 million people and then state costs for nearly 400 million people.

You are also making your estimates based on everyone having family coverage. That isn't the case.
This connection is even more tenuous than your original claim that "the murder rate... lowest in countries with low immigration rates per capita". Now you're talking about crime and poverty, not murder and immigration.

Also, the first paragraph of you link explicitly says: "reliability of underlying national murder rate data may vary". I think k your argument is largely bs, and I'm not interested in researching the citations.

The second paragraph reads "Research suggests that intentional homicide demographics are affected by changes in trauma care, leading to changed lethality of violent assaults, so the intentional homicide rate may not necessarily indicate the overall level of societal violence.[6] They may also be under-reported for political reasons."

I don't think this list even makes the point that you seem to think it does, or, at least, doesn't make the point very well.
Wow, I can listen to the same 40 or so songs in lossless.
"The I’m Back Film’s 20-megapixel Four-Thirds sensor can work alongside a wide-angle adapter to ensure the smaller-than-full-frame sensor covers a whole 35mm-format image area. Or users can take advantage of the crop factor enabled by a Micro Four Thirds sensor (2x crop factor compared to a full-frame image sensor).

As for why I’m Back Film uses a Micro Four Thirds sensor instead of a full-frame sensor, the team behind the product says it comes down to cost. A Four-Thirds sensor offers “excellent image quality at a more affordable cost compared to a full-frame sensor.” Further, as mentioned, when combined with a wide-angle lens filter, users can achieve the same field of view on their lens as they would have when using a 35mm camera sensor."

As someone with a bunch of 35mm equipment, this concept is appealing to me, but why not also offer a full-sized sensor at a higher cost for those who want one? This product will always cripple the camera so it's no longer WYSIWYG. The viewfinder will no longer represent what the photo will look like, even with the "wide-angle lens filter" attached. Yeah, when you add their magnifier (what it should have been called) the CCD sensor will "see" the same area that normal 35mm film would see without it, but the photographer will continue to see a larger viewfinder frame than the CCD will see. This makes it a non-starter for me.

Does anybody know of a similar product with a full-size 35mm sensor?
I made ts_block. It solved a particular problem I had at a particular time. Nobody should be doing RDP across the Internet w/o a VPN but, apparently, people still do it.

Shockingly it still works fine on Server 2022.
Yeh, React is a nightmare. It's too easy to build a tangled, un-performant mess.
Doesn’t it help to mitigate DoS type attacks by reducing the amount of CPU that a bad actor can burn?
Thanks for your comments! I asked dang about it, apparently someone flagged by mistake. I may get a second chance, and there's always another time like you said. Cheers!
Very fair, but if Rust gets a great effects system I think that'll be even better. Will take a while, though.
That's commentary/editorializing. Nothing wrong with these things, you just don't get to do them in the title for the reasons mentioned in the previous comment.
I visited the site in the screenshot and saw someone peddling NATO leaks from their Philippines visit including "PLANCTON, CRONOS, CA SIRIUS, EMADS, MCDS, B1NT etc"
And one more list of some ukrainian citizens database from 2023.

please don't kill me CIA! I swear I accidentally saw it.

welp! time to head back to my work.
> also doesn't allow pointers into the stack, so we can do very efficient copying "in the shadow" of cache misses

How does this work?
You are correct, my bad! Updated my post.
We had 88K nuBus cards for our Macs. I was digging into 88K runtime architecture and toolchains to support it.

Without warning, one fine day we were instructed to immediately remove the cards and return them to managers. No explanations. It was the steepest edge to "this project is getting canceled" I've experienced.
$75k. Tell me the government doesn’t take privacy seriously without telling me that government doesn’t take privacy seriously.

> Three weeks ago, genetic testing firm 1Health.io agreed to pay the Federal Trade Commission (FTC) a $75,000 fine to resolve allegations that it failed to secure sensitive genetic and health data, retroactively overhauled its privacy policy without notifying and obtaining consent from customers whose data it had obtained, and tricked customers about their ability to delete their data.
I've never heard this being called progressive enhancement before. I always thought it was just the obvious proper way to do things, but that people don't do it out of laziness. It's nice to know there is a name I can use to refer to it.

I used to design sites like this explicitly in the mid-00s. I would explicitly test with no js and no CSS. I still aim to do it to this day, but it's hard to get others to do it when most web devs are happy to throw shit at a wall and see what sticks.
Once we improve the tax to be a land value tax, and get rid of the stupid blockers of development, you can convert your house into an apartment and pay way less tax.

If you are a tenant in cross-subsidized apartment building, it is really easy to work as a building-wide childcare. You want to live in as big a building as possible to have as much addressable market as possible. (Basically you might not be the best nanny but you want as many kids as ludicrously conveniently nearby as possible.)
You already don't "own" software

You own a license to use software
If you'd like to make an argument that my work led to the publication of personal records, please make it more explicitly. I'd love to hear it fully articulated. Otherwise it's hard for me to read it as anything beyond a swipe.

We are assuming James posted such details to a public twitter feed. That does not account for the others who did not. The issue in Meryem's case is that obtaining birth records is not guaranteed (especially from a foreign country), and that birth location isn't the same as genetic ancestry. Regarding Alex:

> except for all the illegitimate children

That is part of my point. If my absent parent were actually some famous politician, I would personally not want to have that information leaked. Some might not care - that's great. My point is a simple one - just because having private medical info exfiltrated is not really a big deal for many people, doesn't mean that it's ok to give a pass to the parties responsible for the exfiltration.
You can do it with ufw limit too
Cables under the sea and other nautical nonsense [video]
The interactive component in the article was a really nice touch and made it much easier for me to understand the effect at play. I wish we could see more of this in technical articles and scientific publications.
I personally would rather recommend a whitelisting functionality, using a trusted third party.

I wonder if SSO services can provide IPs of successfully authenticated against their services users.
Former U.S. Soldier Accused of Trying to Give Classified Secrets to China
It looks like all the current [dead] links violate the "Please don't use HN primarily for promotion" guideline.
Asking repeatedly would be impractical. I have some vague idea in my mind called the fact engine. It's like a wiki where people could key in facts. Also facts based on "timeframes", ie 1800's 1900's etc (eg Moon Landing). The fact engine feeds a model that checks for hallucinations, and also rule based engines. Then a final score would be assigned based on consensus. Something like that.
Whoopsie daisy.
I just recently switched from Ubunto to ChromeOS Flex and my quality of life has gone way up. I had so many frustrations with Ubuntu when switching displays, unlocking, sharing screens... all gone with ChromeOS flex and I get to keep my linuxdev tools. So happy!!
Right, I thought that got buried a bit in the article. It doesn't matter if the non-compete is paid or not or if it's 18 days or 18 months long. It shouldn't be enforceable.

The exceptions I'm aware of are:

* Voleon could claim that Delaware law applies. They'd have a tough case since they have literally no presence in the state - they're just a Delaware LP (like most hedge fund management companies). But, as the article noted, this works only if the employee had an attorney review the agreement. And even if that did happen, recent cases in Delaware suggest that Delaware might still rule that California law applies: https://www.mofo.com/resources/insights/230331-delaware-case...

* If Voleon pays its employees through a K-1, basically giving them shadow equity, then you could argue that the employees are LLC members or limited partners and that the non-compete is enforceable. But Voleon doesn't do that.

* Really, Voleon seems to be putting most of its weight on the (totally bogus) argument that the non-compete is voluntary. Telling that the spokesperson wouldn't say how many employees, particularly at higher comp levels, actually chose not to sign.
Julia Evans is amazing. So likeable, such a great teacher, so much enthusiasm and love for her subject and so much wisdom. An example to us all.