skysight-inc/HackerNews huggingface dataset:
Indirect Meltdown: Building Novel Side-Channel Attacks from Transient Execution
My first guess for that particular case is that PROD and DEV are often either parts of hostnames for those particular machines or are referring to hostnames, which are often written in all caps.
And here I am with no degree at all :) I suspect I've read quite a few more papers than your average graduate, however.
Bruno is great. Offline. Open source.
In modern dynamically typed languages, you do not need to check for overflow or underflow and you don't need any special library to do so, it's built directly into the language.
It starts being abusive when the other party is coerced, pressured, obligated, or otherwise compelled through force or misdirection, to continue the arrangement.

Coercion often begins while the other party is enjoying themselves. That’s still abuse.
I searched there and found this interesting article https://earthsky.org/astronomy-essentials/safe-distance-from...
Watch this video to know different ways to prevent loss of your crypto.
Compare what you had for DOS against what you had for NeXT and 10x less the price.
>They are just too late even if they catch up.

Late certainly, too late I don't think so.

If you can field a competitively priced consumer card that can run llama fast then you're already halfway there because then the ecosystem takes off. Especially since nvidia is being really stingy with their vram amounts.

H100 & datacenter is a separate battle certainly, but on mindshare I think some deft moves from AMD will get them there quite fast once they pull their finger out their A and actually try sorting out the driver stack.
Game development is not exclusive to business, but you are correct I have not worked for a firm to make a game. Nothing about that arrangement attracts me, especially given the abusive nature of the industry and the frequency that they go through crunch, lack any real worker protections, no unions, etc.

The way AAA studios make games and do business puts me off as well, so pointing to them as an example doesn't really change my outlook. I already don't buy their games and disapprove of their business models.

If I was interested in being exploited for my passion I would consider entering that industry, but as it stands I will be going solo dev.

No game dev company out there seems to treat its staff well during a game's development, so even if I wanted to work on a game as part of a team, I'd be looking at a poor work/life balance and a stressful work environment. I'm too old for that kind of BS.

If I can't build and release the game myself, then it simply isn't good enough to release. I cannot trust collaborators to not take control of my projects, nor would I entrust creative ideas to a for-profit entity without my cut.

Long story short, I might work in the industry if it was a healthy one. Because it's not, and I still want to make a game, it falls to me and only me to make it happen. That's kind of comforting, knowing your failure or success ride on your own action instead of someone else's. Nothing is more disappointing in a group project than failing because of someone else's fuck up.
And then there is multi-photon fluorescence where several low energy photons are absorbed simultaneously to pump up the electron state and then it can emit a higher energy photon!

This is used in a lot of biomedical imaging with infrared illumination yielding visible wavelengths.
> Was it the case that AI was already a thing and kept under wraps until someone pulled the trigger?

There's transparent evidence that transformer-based LLMs existed before ChatGPT or Llama. There was originally GPT-2, which was not a public release but did get reverse engineered into GPT-Neo and GPT-J (among others). Besides that, there was BERT and T5 from Google, Longformers, XLNet, and dozens of other LLMs that predate the modern ones.

> So what happened?

OpenAI reduced the friction of using AI to a Google login. Other models existed, but were largely not perceived as powerful enough to compete with a hosted solution. The combination of GPT-3's power and relatively-cheap usage fees is what drove it's adoption. Local AI solutions were being developed before OpenAI stepped into the arena, and are continuing to get developed. Many FAANG companies are heavily invested in the openness of AI architectures.
But I still don't know where 20% comes from.......
Chicago independently abolishes subminimum wage for tipped workers
I have to admit, as a Spaniard that moved 7 years ago to the UK, that the government related sites are an absolute pleasure to work with. Taxes, information of any kind etc everything clear and straightforward. I take my hat off.

PS: Does anyone know the stack they use?
I find this hard to believe, given the current state of the world. If it were really as easy as hiring a hacker for <$1M to hack any given company then hundreds would be hacked every week. There are an awful lot of businesses that would pay a sizable ransom rather than let their business be destroyed, or have a large amount of funds that can be stolen, or have valuable data.

I think the reality is more that most well prepared companies can be hacked, but that it takes a lot of resources, and that there are a number of companies with atrocious security that can be hacked with a moderate amount of effort.
When I try to install rocm-ml-sdk on Arch linux it'll tell me the total installed size would be about 18GB.

What can possibly explain this much bloat for what should essentially be a library on top of a graphics driver as well as some tools (compiler, profiler etc.)?
A couple hundred MB I could understand if they come with graphical apps and demos, but not this..
No, but unless portability is a concern or you're massively familiar with curl, you might want to consider xh. It's much more intuitive.

https://github.com/ducaale/xh
And compared to Irix the NeXT was nothing, but by the price of a basic -functional- SGI machine you could get a car.
Realistically if your volume is that low the break-even point will be long after the machine becomes unobservable anyway, but I'd still always recommend people take a look at $/page metrics for consumables before they buy just so they avoid getting stuck in the same shitty situation as cheap inkjets.
I guess that would be it! Thanks for pointing out that Wikipedia entry.
I was in college at the time majoring in Physics, and yep, that was one of the headline news among a journal or two that arrived there. Good memories, indeed...
Well even curl has a high severity CVE pending announcement, updates aren't always bad!

https://twitter.com/bagder/status/1709103920914526525
"When all you have is a hammer, everything looks like a nail".

I've seen some pretty heinous opinions on this site, things such as safety regulations shouldn't exist just let the market decide. The companies insurance premiums will raise and so companies will naturally want to be safer!

As if that's more important than _preventing_ the loss of limbs.
I've had very different results.

ChatGPT today is like a backhoe compared to a team of human with shovels. You still need a person who knows how to operate it, and their skills are different from those who dig with shovels. A bad backhoe operator is worse than any number of humans with shovels.

Pretty soon it will be able to learn by running its own code and testing it by looking at its output, including with its "vision."
Why would their investors allow anything else? I’m sure they see it as a huge loss like intel and mobile.
I don't particularly enjoy a VC-fueled project having ability to intercept all my browser traffic to handle CORS.
Kaiser 2022 revenue; $68 billion.
Net income; $925 million.
CEO pay; $13.3 million base and $2.3 million "Other." [1]

Kaiser Foundation Health Plan and Kaiser Foundation Hospitals earned a combined $100 billion in revenue in 2021 [2]. It's the highest-grossing non-profit organization in the USA and probably the world, lol...net income margins are slim though.

1- https://projects.propublica.org/nonprofits/organizations/941....
2- https://projects.propublica.org/nonprofits/states/CA
Well if we can't have that then we the line definitely should be drawn at the other extreme where we just don't give a shit about parents spending time with children.
Ironically most journalists have a job BECAUSE of bias. Otherwise there would be just 1 news source kinda like Reuters, reporting completely unbiased factual events about the world and that's it.
How to reduce your PostgreSQL database size
Not "endless" - I won't live that long :(

But once every three or four years, I try replacing my Model M. I'll try the new one for a week, and then switch back to 35 year old Model M. I now have half a dozen high-quality $200 keyboards that go unused.
Wireshark is great but it does not show you every byte the network carried. For example it never shows Ethernet preambles, only sometimes shows Ethernet frame checksums, and never shows interpacket gaps (which are a required part of the Ethernet protocol).

So yes it comes close but it just goes to show you, there is always more detail hiding somewhere!
No, I never tried and she hasn't come around for a few months that I've noticed. I don't know if she's a ghost or whatever, but if it is something that's self-aware I didn't want to give it the impression that I was inviting it into my home.

The first time I saw her I did go search around the house in case I had a "homeless person living in a cupboard" scenario.

I've never experienced sleep paralysis, thankfully, even when working on being able to dream lucidly.

On the topic of aphantasia, I would expect sleep paralysis and any visual hallucinations to be on the dreaming/near to dreaming side of the fence since that circuitry seems to work for people with aphantasia as far as I can determine. If I try to think of specific memories involving people I am very close to I can get a flash of something that goes away before I'm even really aware of it that seems to be in the side channel people talk of. It doesn't seem to work for anything not emotionally connected, and only rarely.

The lady that has visited me was felt completely different. Thinking back, I have also been able to see auras, and just proved to myself that I still have that ability. It might be a visual abnormality or something, though. If I was actually visualizing, it was an overlay and not on a side channel.
Intel already showed up three or four times but their software is as bad as AMD's used to be.
Exactly my thoughts but with the HHKB. I can't imagine another keyboard surpassing it in terms of usability or thoughtful design, so shopping around for new keyboards isn't interesting anymore.

However, I still like enjoy looking at keyboard designs and am always interested in novel layouts, so the book appeals to me. $150 on a book is certainly a lot cheaper than $1000 a year on keyboards.
I'm not understanding the context here. What does coop in the values mean (4th coop, 6th coop)? Who are these salaries for, is it employees at those companies, or employees of the university?
I was mainly responding to OP’s claim that this is “a security leak”. Likewise, from OP, I mainly understood that this was only an issue when giving a third party the headers of emails you have received.

However, you (and other commenters) appear to be indicating it’s also in the headers of all sent emails?

I’ve been using Fastmail for nigh on a decade, however if this turns out to be true, I may accelerate my migration towards Migadu.
Because humans with less language data outperform LLMs with more language data.

This either says we need better models, not more data.

Or, the human ability to be multi-modal augments our ability to perform language tasks in which case, we need to pump LLMs with much more image and video input than we currently do.
Bastions seem to be something that a lot of organisations really don't understand. They feel that they need to have them for "security" or to tick some kind of compliance box, but haven't really thought about how to configure them, how to design the network or even what they're trying to achieve by having them.
I been using 'Advanced Rest Client' (ARC) https://install.advancedrestclient.com/

No accounts required, offline, open source, A little bloated using electron but its multiplatform and a desktop client.
In my case I haven't fallen for anything, but this community seems to have a problem with pointing out it's mostly businesses doing this behavior. If you stay away from commercial software, this crap disappears.

It shouldn't be normal to expect to be exploited imo.
Neobrutalism components – A collection of react-tailwind components
Hi, can you give me your opinion about this project? What else I should add?
And we come once again back to the start: _because_ there's an explicit algorithm right there in the standard which allows to start from something "not special" like the digits of Pi or even the ASCII strings of the beginning of the Declaration of Independence, why the completely opaque constants instead? Even if it's, as Filippo suggests, because "the counter has to be there because only one in every 192 to 521 hashes is actually good to make a curve out of", if the counter is a known part of the process of such a selection, all these details could still have been "open".

At least, that's my understanding why there's still talk about it all, and this bounty: those who don't like the opaque constants argue: why aren't they "open", if really "irrelevant"? Now, if the bounty shows that the constants come from something like

SHA-1("Jerry and Alice deserve a raise. 1398")

then all this looks a little better, especially if it can be shown that that "1398" was the first integer that "worked" for the selected phrase, according to the publicly known criteria.
Yep, me to. Since it's just textfiles I can have them checked into git and share them. Credentials stays in a separate environments file (not checked in). I'm pretty happy with this setup.
> There are also a ton of people who think they aren't among those who don't pay any federal income tax because they see the Social Security tax line on their W-2 forms.

(rephrased) There are a ton of people who think that they pay some federal income tax because they see the Social Security tax line on their W-2 forms.

Sorry, I'm not normally one to call out double negatives. My brain just does not want to make sense of the provided sentence. Did you mean despite or because in the context of the Social Security line item? I would have thought despite but that actually changes the meaning of the sentence.
don't some medicines have a time delay release mechanism that this would defeat? getting that much of a dose of some medicines all at once wouldn't be ideal I'd think. caveat emptor and all that.
They're not all for the same purpose.

There are some things that don't need to be actively looked at most of the time, but need to be visible so that you know when something happens that you do need to pay attention. You could do it by polling—put it on a virtual desktop and switch to it every so often—but that adds latency and can be even more distracting than having it visible in the corner of your eye. Think of things like Element or Slack or a dashboard that tracks bugs/issues/alerts.

Then there are reference displays that you look at on demand. Most of the time switching virtual desktops is good enough for this, but not if you're following along with a sequence while actively working.

Then there are things that are just big. Perhaps you're displaying an autogenerated graph, or you're using an information-dense tool (maybe with multiple relevant layers).

Not to mention wanting to consult things while on a video call, which constrains the screen to use based on camera positioning.

I very actively use virtual desktops, yet I have two external monitors in addition to my laptop screen. Most of the time, I really only make use of one of the external monitors, but situations arise that require both. They arise frequently enough that I notice the lack (eg when I'm fighting with my configuration and only one is working, or I've loaned one monitor to someone else). And when I'm mobile and down to just the laptop screen, I definitely notice and even adjust what I'm working on to avoid losing productivity.
Couldn't the US also be bigger because of the 10 states most to the east or whatever? Why specifically Alaska?
Your comment here is factually incorrect - the "X-Resolved-To" will not be present anywhere in the email if you Reply, or with a regular Forward.

It will only be present if you "Forward as Attachment" an email which was sent to your alias or masked address, which adds the raw MIME message as an attachment - including all headers.

(the OP did get this correct)
I recently wrote "is" so that I would have a tool to make shell scripting just a little bit easier: https://github.com/oalders/is
YC's Newest Group Partner and Visiting Group Partners
I had to fill out a companies legal questionnaires and forms. The company had pinched the gov.uk format. It was such a relief to find a company using something familiar and well thought out instead of some fancy survey form or email.
I'm very hesitant to define competition as "can't sell to them because they make theirs in house". Losing a sale isn't competition. Competition is someone threatening to take your clientele from you with their own offering. Apple can afford to design and use its own chips, but they're in a pretty unique position to do so. It's not like every other consumer of their chips is going to say "hey, if it's that easy, I'll do it too".
CUDA is the only reason I have an Nvidia card, but if more projects start migrating to a more agnostic environment, I'll be really grateful.

Running Nvidia in Linux isn't as much fun. Fedora and Debian can be incredibly reliable systems, but when you add an Nvidia card, I feel like I am back in Windows Vista with kernel crashes from time to time.
Numbers for July and August were both revised up: https://www.nytimes.com/live/2023/10/06/business/jobs-report...
Bye Bye BIOS: a tool for when you need to warn users the VM image is EFI only
I use this one for tests on microservices endpoints. Very good at least for my use case. I recommend it.
It was great before it got acquired, (and was called Paw back then) now the product development has virtually stopped.
Postman doesn't either, but it doesn't tell you where the backup is. Same deceptive shite.
Didn't he do what he always does. Rake in a ton of money, fart around and then cash out exclaiming it's everyone else's fault?

The way he stole Fail0verflow's work with the PS3 security leak after failing to find a hypervisor exploit for months absolutely soured any respect I had for him at the time
Worked in IT in the mid-90s, was a great time and I became a sought after "expert" to free conventional memory for lab PCs connected to equipment. Did it all by hand at first with mem.exe and edit.com?, but I think in 6.0 I started also using a TUI to visualize the upper area—the helpful msd.exe:

https://i.postimg.cc/2jX8LpF0/memorymap.png

More recently in the XP era, I used the DOS multi-config menu in a classroom environment. Combined with ghost the partition imager. There was a menu that defaulted quickly to booting the current OS partition. But hit the right key at boot and you could restore the computer from a pristine pre-configured XP image.
Since the images were on a primary partition it would be hidden from the end-user and not mounted for them to prevent issues.
You could also update the current image and save it back to the menu partition for next time. This happened once in a while to apply windows/app updates.

Worked incredibly well, until the whole classroom was dismantled around 2015ish.
They better hurry up with that - i think 16.04 only getting secuirty patches until the end of this year without enterprise license
Tried doing this for years, only got more and more frustrated with whatever wacky software I had to install to make this work.
I wish tech product managers could get it through their skulls: creating and maintaining yet-another-account for yet-another-app is high friction and undesirable. If you're going to give me an ultimatum where I need to either create an account or stop using the app. 99% of the time I'm just going to stop using your app.
Great news – social media is falling apart
ScummVM will run Sierra/Lucas Arts/Myst and zillions of more adventure engines better than DOSBox.
It already behaves this way if you aren't blocking ads. If you seek too far ahead in a video with mid-video ads, it'll show an ad before playing at the timestamp you selected. If they want to prevent ad-blocking, they can do the same thing except not serve the video ahead of time.
That's the complete opposite of what is actually the case: some of that really old code in these programs is battle-tested and verified. Any rewrite of such parts would just destroy that work for no good reason.
Density also comes with it's own problems - crime, pollution, disease, and a loss in personal freedom necessary to keep those other problems at bay. None of that is ideal for family formation.

And increasing density only works up to a point. Once you can no longer increase density, the prices start climbing back up.

I think rezoning for more mixed use neighborhoods is a good idea, and some high-density living is good (not everyone has kids, or wants to have them) but I am skeptical of increasing density in general.
Only speaking for myself but I will never buy anything that is drive-by-wire which is a prerequisite for self driving cars. i.e. no physical linkage to/from throttle, brakes, steering. Too many hacking and take-over incidents on live highways already and I've spent the last few decades playing whack-a-mole on servers. Vehicles, ships and aircraft are the wrong place to fight this battle.
> Crossing the CUDA moat for AMD GPUs may be as easy as using PyTorch.

Nvidia has spent huge amount of work to make code run smoothly and fast. AMD has to work hard to catch up. ROCm code is slower , has more bugs, don't have enough features and they have compatibility issues between cards.
C (at least c11, probably 99 as well) has a concept called "effective type". Quoting 6.5, paragraph 6:

If a value is store into an object having no declared type through an lvalue having a type that is not a character type, then the type of the lvalue becomes the effective type of the object for that access and for subsequent accesses that do not modify the stored value. (the same applies to memcpy and memmove) For all other accesses to an object having no declared type, the effective type of the object is simply the type of the lvalue used for the access.

Paragraph 7 then lists all valid ways that an object can be accessed. TL;DR the lvalue must be [qualified/signed/unsigned] effective type of the object OR char OR union including the correct type.

Something does feel missing though as while this explains memory obtained from routines like malloc which initially has no effective type, I cannot find any rule saying it is permissible to treat char arrays as structures (their effective type is an array of char, so they cannot be said to "have no declared type").
Putting a notice either like this or as an indicator on the submission would go a long way towards reducing (my) frustration with moderation’s title edits.
I’ve used that for years, from back when it was the paid Paw app, and I’ve been happy with it.
I've been running the same Ubuntu install on my desktop for over 5 years now and I haven't run into any issues (if I did they were small enough that I don't remember them). It my experience, it's much more stable, usable, and aesthetic than Windows.

I use macOS as my main driver, though.
Perhaps Dyson Sphere maintenance window?
An Arizona Home with a $100k Flight Simulator Is Asking $4.495M
no paywall: https://archive.ph/WZBKr
Even the NHS website is so clean and accessible. I think every EU country should just adopt their format.
If you use vs code you can use thunder[0]

[0] https://marketplace.visualstudio.com/items?itemName=rangav.v...
We should discourage anthropomorphism of AI: HuggingFace CEO