skysight-inc/HackerNews huggingface dataset:
Social engineering never went away.

I'm personally waiting for the first public reports of criminal gangs using Chat GPT to automate spear phishing at scale.

I'm sure it is happening already, but the victims are keeping it quiet. The use case is too obvious. Identify key people in an organization from the website, Linked In, etc. Find them on social media. Find their less technical friends. Compromise the friends' accounts in various ways. Then send targeted phishing attacks to your real target. With every step of this automated by LLMs.
MKULTRA in the LSD sense is garbage. Look into Monarch if you want an understanding of what is realistically likely possible. I have dealt with several victims of the process as patients, and I can assure you that quite a bit of it is real.

You can look at the videos of the congressional testimony if you want more information.
IR JIT Framework a base for the next generation JIT for PHP
Keeping a ~/bin directory with all your personal shell shortcut scripts has been my go-to for years. I tend to make a lot of project-specific shortcut scripts for anything that I want to remember/becomes a common task.
even small chip manufacturing at the cutting edge has costs 2-3 orders of magnitude above what they're paying to rent some GPUs in azure
The problem is the risk landscape is shifting under the policies. 5 years ago, ransoms were 100 K$ on the high end. Now they are 10 M$. The number of ransomware attacks per year has been tripling(!) year over year for the last few years. So, compared to five years ago, the probability of a claim against a policy increased by 30,000%.

Every single policy written 5 years ago is underwater and every single policy with a large coverage amount is so hilariously underwater that there is a good chance that they will ruin the insurer and all of their re-insurers. For instance, the courts recently ruled in favor of Merck for a 1.4 G$ claim due to the 2017 NotPetya cyberattack [1]. That alone was more than the premiums of the entire worldwide cybersecurity insurance industry in 2015 [2]. It is to the point where, from what I have heard recently, the cybersecurity insurance vendors have largely given up writing new policies with more than a few million dollars worth of coverage.

They want to stay in the business so they are ready when the risk landscape stabilizes, but profitable policies need the premiums to be tens to hundreds of times higher than the standard backward looking actuarial models would suggest. So, if your competitors are dumber than you are, they will give policies with ridiculously lower premiums, not realizing they are going to be bankrupt in a few years. The only way to write a competitive policy in that environment is to take a loss, but limit the coverage to bound the loss to something survivable. Then you hunker down until the risk landscape stabilizes and everybody writing dumb big policies dies allowing you to write new policies with correct, vastly higher, premiums.

[1] https://www.securityweek.com/court-rules-in-favor-of-merck-i...

[2] https://content.naic.org/sites/default/files/cmte-c-cyber-su...
8 joules is the kinetic energy of a British one-penny coin travelling at 150 miles per hour. You'd feel that!
Fastflix is detected as Trojan since today
So many companies have a single large network that spans their data center, offices, and remote workers. There should be a DMZ between the data center systems and end user compute. The goal be to treat the end user compute environment the same as the Internet, completely untrusted.
We Were Trapped Inside a Tornado [video]
Thanks; what triggered my initial response was your fine use of the word honesty, and I guess that's what I'm trying to get to the bottom of, with regard to how we approach evidence or facts. I'm not really intending be argumentative; here are my thoughts about what you wrote, if you're interested. 1.) IMO Rationality and objectivity are necessary but insufficient for having fruitful, conversations across divides of belief. Honesty is also necessary, vulnerability too, humility, and respect (cordiality) which you mention. 2.) You say you wind up on the science side of things. No finger pointing intended, but Are you an experimental scientist grappling with the data? How do you judge between differing claims of science? Does being a scientist in one field qualify you to judge scientific claims in other fields (or even your own)? If as you say, "nothing should be believed simply because some authority claimed it" then how should we form our beliefs? How comfortable/cozy are we with ambiguity and uncertainty? Do we acknowledge it honestly, quantify it in terms of how it's effects propagate? It seems obvious that expertise and authority is extremely important, but should/have we "put the foxes in charge of the hen house"?
I agree the same things apply to religious authorities. That's why I'm so attracted to Jesus and how he interacted with the prevailing authorities (Religious, intellectual and military), and his personal claim of authority. These are substantive hard things I like to discuss. From what I read, "science" is in a state of crisis, i.e. that trust in "science" is declining. This is vague, imprecise and controversial admittedly, but I for one am a "modern science" skeptic. (btw, I'm an engineer by training, if that counts for anything). Here's an interesting HN link: https://aeon.co/essays/should-academic-disciplines-have-both.... I disagree with the author's premise and starting point, he points out the worries, without (IMO) acknowledging "science" itself is partially to blame. (I didn't read the whole article, I should, now that I'm commenting on it). 3.) When you talk about hard conversions you have, and conversions or converting someone, I doubt that that's what your intention is, I would guess you're wanting test your own beliefs by putting them up against others. But I don't think actual beliefs are typically discussed, just what and how strong our differing interpretations of *evidences" are (i.e. Noah's Ark; I may be wrong assuming this in your case). It's exciting and rewarding, in my experience, to drop down a little deeper, but that takes vulnerability, humility and respect (none of which are easy).
I don't know if you want to carry on a conversation or not, but I wanted to respond to some of what you wrote, and to thank you for an interesting conversation.
I'm from the south and have never once heard anything like this. Any source? It sounds like a caricature.
Burying this six paragraphs deep seems a little douchey:

Sweeney has now clarified that there will be minimum revenue thresholds for commercial projects that have to pay for a subscription and that student and educator use of Unreal Engine will remain free.
echo VMS | tr A-Za-z B-ZAb-za ==> WNT
Although the article mentions similarities between VMS and Windows NT, it downplays just how extensive a debt NT owed to VMS.

Microsoft's Azure CTO wrote about it back in the day:

>In developing NT, these designers rewrote VMS in C, cleaning up, tuning, tweaking, and adding some new functionality and capabilities as they went. This statement is in danger of trivializing their efforts; after all, the designers built a new API (i.e., Win32), a new file system (i.e., NTFS), and a new graphical interface subsystem and administrative environment while maintaining backward compatibility with DOS, OS/2, POSIX, and Win16. Nevertheless, the migration of VMS internals to NT was so thorough that within a few weeks of NT's release, Digital engineers noticed the striking similarities.

Those similarities could fill a book. In fact, you can read sections of VAX/VMS Internals and Data Structures (Digital Press) as an accurate description of NT internals simply by translating VMS terms to NT terms.

... "Why the Fastest Chip Didn't Win" (Business Week, April 28, 1997) states that when Digital engineers noticed the similarities between VMS and NT, they brought their observations to senior management. Rather than suing, Digital cut a deal with Microsoft. In the summer of 1995, Digital announced Affinity for OpenVMS, a program that required Microsoft to help train Digital NT technicians, help promote NT and Open-VMS as two pieces of a three-tiered client/server networking solution, and promise to maintain NT support for the Alpha processor. Microsoft also paid Digital between 65 million and 100 million dollars.

https://www.itprotoday.com/compute-engines/windows-nt-and-vm...
>I mean why not just use a thread per connection and not bother with anything fancier at all unless you really truly need to hit those C10M scales? Which I suspect is a very rare need for most things?

At every larger company I've worked for, that breaks down right away. It's really not hard to see how processing some larger proto/json/soap/xml msg can slow the entire system down.
I strongly encourage watching Bill Gurley's talk from the All-In Summit about whenever Congress gets involved with regulations and technology.

https://www.youtube.com/watch?v=F9cO3-MLHOM
Author here. Just go to https://shortbread.ai and click on "Start Creating". No signing in or anything required.
The libraries and compiler infrastructure are not ready. There is even some HPC optimization difficulty with ARM, which is much more mature.

Doubly so on the consumer side of things.
The degree and scope of poverty in American are vastly overstated. The most popular metric in this regard is the official US Census estimate of poverty, which explicitly excludes the vast majority of welfare transfers. It excludes all in-kind transfers (Housing, Food Stamps, Medicaid, etc) and all de-facto cash transfers (such as "refundable tax credits", which are deemed "negative taxes" and so are not counted as cash income, even if they result in a check in the mail). In other words, if your pre-tax income puts you $1 below the poverty line, the US government announces that you are in poverty--even though you are eligible for (and presumably receive) tens of thousands of dollars in welfare support in the form of free housing, free healthcare, free food, free early education for your kids, free cash through tax credits, and subsidized cell phone and internet access.

Once you account for in-kind and de-facto cash transfers, America's poor are supported at a lifestyle which is close to the median American household and significantly higher than the median European household.
Many have tried, nobody succeeded.

Bash scripts are extremely useful and productive for their niche. You'd have to change a whole lot of things to match that.
4 months is an eternity in AI right now. I would be shocked if they are not training a new GPT (at least in experimentation/research mode, if not full pretraining) - else what are their GPUs spinning on? That is not a capital investment you just let sit idle.

But I concede that I don’t have any concrete proof so I should modulate my certainty of tone.
He's asking for new features as we speak. What should I say? Do I drop the hourly rate and ask for 10% of revenue?
Yea I tried to anchor too but it didn't work :( All transcriptions are created with https://github.com/FanaHOVA/smol-podcaster, we think most people want to skim and read before listening so we try and have high quality ones for each episode
It's a solution that will have a 30-40 year delayed positive effect, meanwhile making people miserable.
This feels very dismissive of the efforts put in by genuine participants into the system. Exceptions and examples of malfeasance are not sufficient to indict all aspects.
IMHO the most fraudulent thing PayPal does is trick people into thinking they have a bank account by making it look, feel, and behave like a bank account. When in reality your PayPal balance is more akin to Nintendo Coins or Fortnite V-Bucks. Difference being that Epic is less likely to close your account and take your balance away from you without recourse, something that PayPal does to thousands of people each year.
Similarly, Quebec asserted that it's (then) $7/day daycare program paid for itself.

https://www.thestar.com/life/quebec-s-child-care-scheme-pays...
This is a funny example because Apple has disproven this logic just as often as they have proven it. Carplay and the App Store are two examples. People generally prefer the software Apple makes over the software car manufacturers make. People also like to install their own software on their devices beyond the software that Apple makes.

Just because vertical integration occasionally works doesn't mean it is actually good for the consumer.
You can use async/await with channels and restrict yourself to only passing immutable references or copy types through arguments to async functions, communicating w/ channels for mutable shared types. Like you could build Erlang style "servers" that own your mutable types and communicate with them over channels. Or you can Arc<Mutex<T>> your way through things. Rust gives you the power to do both.
almost everybody at my job has 2 screens, i'm sorry but i only have one brain
https://cheat.sh is your lifeline

Also I made https://github.com/kristopolous/mansnip
In purely practical terms the old system interfaces are sufficiently problematic that for any workload with necessarily smaller buffers than tens of kb, most implementations will get stuck being syscall bound first. Spectre really didn’t help here either.
Nobody ever claimed Iran has freedom of religion - they tolerate some as mentioned but Islamic offshoots like the Bahai, Ahmadiyya and the Alawites who claim some link to mainstream Islam and further revelations after the prophet died are definitely not tolerated.

Saudi Arabic will sentence you to death if you are deemed to be an apostate (denying Islam or converting to another religion - also no proselyting if you a Christian visiting/staying there).
UBI as a concept sounds nice on the surface, but it's second order effects lead to inflation and economy is mostly back to where it was, just with higher prices. It's been played out multiple times as govts hand out stimulus money.

UBI is easy - give people money. It solves demand problem, but not the supply problem.

I'm a much bigger fan of UBS i.e "Universal basic supply". Every legal citizen gets a minimum of supply for food, shelter, healthcare, education, water, electricity, transport. That requires innovation production and supply chain of goods and services.

Humans can't eat dollar notes to survive.
> from the south and have never once heard anything like this

I should have added that I've typically heard it in liberal suburbs, not rural America.

Good, recent example is this thread [1] right here on HN (in particular this comment [2]).

[1] https://news.ycombinator.com/item?id=37654342.

[2] https://news.ycombinator.com/item?id=37654578
Ah! That is awkard! Sorry, I couldn't resist, I have all respect for Awk.
Man stay out of topics you don't understand, or at least don't make ignorant snarky comments.

"no taxes" here was obviously used in the sense of "not enough taxes". Also, reading a 10-K cannot answer whether a company has paid "enough" taxes.

The question of how much is enough is difficult, given how complicated international tax law is, and how legal != ethical/good for society. E.g. https://www.irishtimes.com/business/technology/google-used-d....
Does this number include 2 trips for each migrant that is being sent home?
You can google "X white minority", I recall reading some papers on it when I was going down an immigrant assimilation research rabbit hole (I'm an immigrant so it's a topic that fascinates me).

https://bamproject.eu lists some cities along with data (e.g: Malmo, Amsterdam, etc).
Yeah childcare is a casualty in our culture war, where one side wants women to be employed for their empowerment and the other wants women to stay at home with kids.

What really sucks is some European countries have already solved this dilemma by both offering childcare and paying a benefit to stay at home mothers, so parents can act in whichever way suits their individual situation.

To me, this clearly benefits society, but it requires each side release their hostages.
Unity was different because the pricing was insane for F2P titles. Some successful titles only manage $0.50/install, going from 0 to 40% revenue share was insane.

Way more importantly making it retroactive was unheard of. Unity even had promised to support "pick your license" for released titles in perpetuity but then during this change said "we never said the runtime was free in perpetuity".

Charging more for your product isn't great but it always happens.

Also on that topic Unity got started as the "no revenue sharing" option and was paid for by very expensive per seat costs. So there was a bit of "you are double dipping" feeling too.

In this case Unreal is charging for a new market is the goal which makes sense.

Certainly the bait and switch of free now not is a bit sour but how sour depends on the cost.
well there are easier solutions than "blaming consumers". stop it at the supply. Enforce regulations and demands of the companies importing those "new cloths" and make them responsible for the damage caused.

America loves to gaslit consumers but companies never EVER get the blame, even worse is the CEOs of the companies who make these decisions always get scot free.
She illustrates several (not one) general techniques that can be applied in different situations.
> Where we are now is better

Not really. Lots of rust users come from high level languages so when people come in and complain about rust being unexpectedly slow allocation issues are in the top 5 at least. It’s incredible how shit the standard allocators are in almost all systems.
Absolutely true. Just illustrating it's not a vacation. You're missing out on productive years. Most people I know did a FAANG stint.
I struggling to understand the concept of a decentralized identity. You are basically exposing the concept of identity to partitioning problems, at that point. Right?

That is, I don't disagree with the idea that the system we have now ties you to a company. But indirection and decentralization only works to a point. As an example, how do you manage disputes of your identity? Assume whatever system you have can be spoofed successfully somehow. What is the procedure to clarify the factually intended identity of someone?
> The Oh-My-God particle had 10^20 (100 quintillion) times the photon energy of visible light, equivalent to a 142-gram (5 oz) baseball travelling at about 28 m/s (100 km/h; 63 mph)

For comparison a typical professional baseball pitch is around 90mph. At 63mph I guess it might not break your face, but it would certainly leave a bruise (if it was actually a baseball -- who knows what the actual particle would do to flesh and bone). I know people are pretty derisive about using swimming pools or whatever for measurement, but I think this one is pretty good for bringing incomprehensible numbers into the realm of lay-understanding.
The problem is that as soon as passphrases are common, it isn't 80 bits anymore, it's however many words you choose. It just becomes a slightly harder dictionary attack.
I recall visiting the office on an email administrator at a tech firm in California. There was an important email that got "lost" somehow, and I took the opportunity to meet the person who ran the internal email system. This person was large and in-charge! in their cubicle.. I had never seen them otherwise. Once asked the guy quickly opened his window setup, I think it was some kind of VMS derivitive in the late 1990s, and searched every email sent by anyone in the company for the past year.. quickly! This was impressive to me at that time, and I remember the whole situation very well now.
I think the bottom line is it can level up everyone's skills on most subjects.

If your an Expert and you only care about that one subject it's probably not that useful. or you expect perfection from AI it makes mistakes. but you know what they say. To err is human but you need recursive AI to really fuck thing up.
>But from what I hear, it really depends where in google you work. I hear juniors/new grads are worked to the bone

The workload is not too much, but there's a lot of ambiguity and very little hand holding. Even as a newer senior engineer, my work is hard. Not 50+ hours a week hard, but a somewhat stressful 45 hours a week.

But it's fun and interesting so I'm happy, plus the comp is extremely good (not quite Netflix or JS/TGS level, but pretty great).

I'd rather be a little stressed than a lot bored.
Setting aside the philosophical free market questions, additional government subsidy childcare seems fine. There’s a positive externality of readily available childcare: one adult to many children is more efficient than home care, and parents being able to work generates economic production, taxes, etc.

But couldn’t we come up with a subsidy with less market distortion? A specific subsidy to pay for childcare for childcare workers will just cause the market clearing wage to childcare workers to drop to the point that only people with high childcare costs will work in the field. This labor pool is much smaller and people will tend to cycle in and out as their children grow to school age. At the end of the day society will end up paying a lot more due to lower liquidity than with a plain flat subsidy.

It’s like loan forgiveness for federal workers. Sounds lovely but it just ends up breaking the market for example further subsidizing already wasteful higher education spending.
That doesn't mean getting hit by this particle would feel like a punch, since what you feel when you get punched is a transfer of momentum rather than a transfer of energy.
Interesting, we had very similar issues with malloc and RocksDB on a production instance, ended up switching to jemalloc and the problem went away. Cloudflare had some similar issues with it as well: https://blog.cloudflare.com/the-effect-of-switching-to-tcmal...
> The same Al-Qaeda US supported and trained a couple decades before that.

Al-Qaeda was formed after the Soviet withdrawal from Afghanistan, the US did not support and train al-Qaeda as such.
Efficient randomized pattern-matching algorithms [pdf]
Being an independent company is almost certainly going to give them an edge going against Xilinx under AMD - atleast when it comes to the pure FPGA play, and there's been surprisingly little innovation in that area (although I never found out if they actually got hyperflex to work)
In cases where it's being used to clean up grammar, perhaps the new standard should be providing a diff between the original paper and the cleaned up version.
i've written about 30k lines of async rust this year alone and haven't found the horror of Send + Sync + 'static to impact me much at all. You just have to think about things for a second sometimes.
I haven't written scientific papers, but for other reports or writeups I always start with the meat of what I want to say. I write the introduction later, once I know what it is that I'm introducing.
Seems like every company these days are trying to figure out how to increase the rents that they collect. No actual value add, just trying to optimize to make that top line number go up. It feels very end-of-business-cycle.
Shellcheck – finds bugs in your shell scripts
Blackstone’s Billion-Dollar Bet on Reese Witherspoon Falls Short
Do you really think there are that many rich child care employees?
Yep. My daughter is a junior in high school, and on the trap team. She takes her cased shotgun to school with her once a week.
> rich get handouts in Kentucky

On what planet are child-care workers the rich?
"Unreal Engine will no longer be free for non-gaming companies" is 100x less misleading. You are right in that technically speaking it's not misleading, but to me it feels like it's skirting the line of lying by omission. Obviously now with hindsight I can see how the "for all" changes the meaning, but it wasn't obvious (at least to me).