skysight-inc/HackerNews huggingface dataset:
Battle lines have long been drawn over Israel. I think people who already have an opinion have been activated by the situation, I don't think those opinions have changed that much, except the opinions of politicians who have the burden of representing their constituents, donors, social acceptability and such.
My current favorite is the vanishing scrollbars that appear for two seconds after you start scrolling. Chrome is awful with this. When I'm trying to review a couple-thousand-line PR, Chrome stutters and freezes, and the scrollbar won't show up for several seconds and then it immediately vanishes as the UI catches up with the input. Or sometimes I click on the ephemeral scrollbar but my click doesn't register until after it's vanished again. It's infuriating.
Apple's rounded corners: "Closer to the human, the rounder it is"
You'd be publishing child porn, which I think is not the wisest thing to be doing.
My understanding is that single-thread concurrency is essentially what Javascript does. It basically flickers between tasks very rapidly to simulate concurrency. Does that match your understanding or am I incorrect?
Maybe a minor tangent, but I really enjoyed playing with Google Assistant when it first came out. Great novelty, especially asking it for jokes.
> Because your options are Beijing or DC

What kind of mental contortions do you have to go through to think like this? It comes off like gung-ho ignorance at best, and reeks of some of the most obvious american military propaganda I've ever read.
Cisco, to it's credit, does a good job of internal quality auditing, so bad behavior of these individual teams gets caught and corrected. But there is just so much bad behavior...
Does butter work on FF? Love these sites!
As a small cog in a large corporate machine, I get this. You just keep spinning and spinning, seemingly doing the same kinds of projects and the same work over and over again, often with no understanding of where the projects are coming from or whether or not the hard work you're putting in has any real value. And then there's constant changing and revisions and sometimes the project gets dropped, which is a clear indication that your hard work was basically wasted by higher ups who seem to have no understanding of the work that has to go into the projects.

I get paid though, so I'll keep spinning and find my value as a human outside of work.
Putin's Digital Iron Curtain
Their previous statements included "diversity of thought". Someone probably complained about that being a right wing dog whistle so they got rewritten.

It is hard to write down things nobody will complain about without them becoming meh.
I am not developing any open-source apps worth sharing currently, but I do work on some cybersecurity projects that may be interesting for both hackers and AI engineers:

- Payloads for Attacking Large Language Models - https://github.com/mik0w/pallms - a list of payloads for fuzzing your LLM apps for common vulnerabilities that occur there. Pull requests welcome!

- OWASP Top10 for Machine Learning - https://github.com/OWASP/www-project-machine-learning-securi... - OWASP Top10 for LLMs got viral. Hopefully OWASP Top10 for ML is going there as well! I contribute to that project with a few ML security enthusiasts

- The Real Threats of AI newsletter - https://hackstery.com/newsletter/ - probably the only newsletter cataloging the news from AI Security and LLM security world.

Feel invited to follow any of those :)
I think this is really cool, I'm gonna try it out.
Broadening the definitions of crime to make it easier to punish the ethically guilty on scant evidence while incidentally sweeping up the ethically innocent is a hack around a legal tradition that is designed exactly on the principal that it is better that the guilty go unpunished than the innocent are punished, by making the genuinely innocent administratively guilty, and we ought to reject that kind of justification every time it rears its head.

(There are times when it is important to have commonality while the choice of the common practice isn't important, which justifies regulations of obviously ethically unimportant things like "which side of the road is it correct to drive on relative to the direction of travel"; but where the purpose of a crime is purely to lower the evidentiary bar to punish people presumed guilty of a narrower crime, that's just an attempt to hack around the presumption of innocence and the burden of proof of guilt.)
So as I understand Fischer's stance on using stats, you are supposed to start with a hypothesis. As in, you have a mechanism which could cause the effect. The stats are there to provide supporting evidence, to limit BS causal chains.

Data mining is a bit of the reverse of that.
To be clear, this is for the router admin interface. Your day-to-day TLS3 browsing is unaffected.
See 12 Winning Images from the Wildlife Photographer of the Year Contest
IFL these threads always give vibes like, "oh, thank god that anti CSAM measure wouldn't actually work".
And that it's not only been that way for a lot of years, but it's getting worse with time. It's utterly baffling to me.
Recycled American Batteries Pollute Communities Around the World
Why isn't a company with a revenue roughly the same as the country of Belgium merging with a competitor a rather extraordinary event?
This is all nice and well, but it doesn't actually address the inherent untrustworthiness of a state-associated (and known to be penetrated) organization.
It's already a strict liability offense in many places, meaning that you don't even have to know that you possessed the image at all. You could apply the same strict liability standard and say that it doesn't matter that you didn't think it was real as long as it actually was real.

"I thought she was 18" doesn't work for physical sex either.
Oh yeah, I read it as 1%. My apologies.
I thought Firefox on Android could run uBlock Origin
i'm definitely a builder/creative type but have found that selling is kind of enjoyable. as long as you approach it as, i'm going to talk to these people so i can hear about their problems. i enjoy hearing about peoples' problems and thinking about how i can help.
I think the main reason the trial isn't going well for him is his obvious, overwhelming, and well documented guilt of committing the crimes he's charged with.
Word salad is "confused or unintelligible mixture of seemingly random words and phrases." Which part of the article seemed confusing/unintelligible/random to you?
Free, or free but ad-supported?
The issue is not AES of course, it's the NIST being associated with a government that can't be trusted when it comes to developing reliable and trustworthy encryption schemes. They've clearly demonstrated this time and time again.
How you can lose your GH Access Token or OpenAI API key through misconfigured MLOps application
And I absolutely want both parties to have to prove crime/innocence and have an opportunity to argue. The current situation, where anything involving CSAM is so toxic that lives are ruined without trial is not healthy and isn't good for anybody
The dealership will give you an activation code.

It's no different than say....keys
Colly is a great library for builing scrapers if you are familiar with Go.

Flyscrape a cli tool that lets you define your scraping logic with a declarative JavaScript API, while it takes care of issuing requests, caching, rate limiting and more.
Thank you for pointing out the bug in the website description; I have now updated it.
But at least you could tweak it to make it reasonable.
> Where else are you going to go?

I don't know, but I'd start with getting buy-in from any interested country with an emphasis on not too much from any one. Where it's physically located is irrelevant, the issue is the clear commitment to the interests of the american state.
Tainting the database is probably already chargeable as something. The point is that the person doing this doesn't expect to get caught. And frankly they're probably right in that.
> If you raise VC money, the above scenarios are considered a failure. You will have to shutdown/get acquired for nothing. You have to shoot for the moon to get massive ARR, that very very few companies ever hit.

N=1 example at least to the contrary... I read this a year ago.

https://twitter.com/robgo/status/1559517843388977152

I don't know who the company was, what the terms were, who/if were other investors, etc. But as I read it... the company was venture-backed, didn't really create (or pivoted away from) something that was "venture scale" but otherwise had built a good business.

The end result however, was not shutdown/get acquired.

By building a good business, the company gave themselves optionality with their current investors and seemingly got to a good outcome for everyone.

If you know your business is not going to be venture scale... there are probably better sources of capital out there for you to leverage if you need it (or bootstrap). Stresses that create less stress, less friction, etc.

That being said - venture or not... don't forget to build a good business.

Disclosure: NextView is one of our investors hence why I stumbled upon that post of Rob's back then.
Good article but my god why is there like a 2 second delay before every user interaction on this page. Scrolling, selecting text, everything has some kind of 2 second 'bootup' time after which things work normally but if you stop interacting with it for a bit it goes back to some idle mode. Really weird.
Mentoring usually entails teaching something, not writing the apologia for $180 disposable headphones. Do you have any particular reason why the Airpods aren't a garbage, forced iteration on the Earpods?
Same here. My todo list is mostly a reminder list and “don’t forget” items. Projects may need organizing but it usually just a matter of allocating the time for planning.
Cookie banners are required by law unfortunately.
The funny thing is that Cisco doesn't use this for support; to get remote support from them there is a user-initiated challenge-response workflow that authorizes Cisco TAC to connect to a box.

Conspiracy people always gonna conspiracy though, and sometimes they're right, and whether it's an intentional backdoor or not, it is a backdoor.
That was my first question too. I found the following. Sadly, because journalisming is oh so hard, they omitted the actual innovations.

TLDR: Novel liquid desiccant functions as a "humidity battery" (my phrase). A salt solution which captures and releases moisture. It's closed loop and doesn't need to be replenished. Claimed OpEx $/hWh (for just the dehumidifier) is ~ $20/hWh, vs > $600 for Li-ion and ~ $400 for ice thermal based systems. It's safer and more durable.

Liquid Desiccants as Breakthrough Energy Storage [2021]
https://www.youtube.com/watch?v=2SwMyGzXsuE

Liquid Desiccants and Our Cooling Process - Blue Frontier, LLC [2021]
https://www.youtube.com/watch?v=r8B4LQTQ94g

https://bluefrontierac.com

"At Blue Frontier, our mission is to transform buildings into sustainable, comfortable, and interactive spaces. Our first step towards achieving this goal is the commercialization of a revolutionary air conditioning technology. Blue Frontier’s AC system combines dew-point-style sensible cooling with liquid desiccant dehumidification to reduce electricity use by up to 90% (non-fan). The desiccant is recharged and stored when electricity is the cleanest or lowest cost, and later used to deliver cooling when electricity is dirty or costly. These features enable our system to solve an array of today’s largest sustainability problems — from the Duck Curve to peak load management, from humidity control to integration of intermittent renewable resources."

Note the "Duck Curve" bit. Their "humidity battery" (my phrase) allows them to do load shifting. In the actual AC unit(s).

That's really bitchin'.
Viewable with Any Browser
You are absolutely correct, while reading through it I was becoming increasingly concerned that whomever wrote the description was the language writer themselves. I expect a level of attention to detail from someone who is writing their own language.
It may have looked goofy, but it was usable. I'll take ugly/goofy and usable over pretty and hard-to-use every single time.
Couldn’t one argue Amazon is the middleman too?

Not in every case but these sellers do provide value. They find obscure items for an underserved market and sell something people want.

Amazon literally has a team looking at data that basically leverages the work done by these sellers to turn a profit.

At minimum it’s like getting sherlocked.
(*blog post author here)

Thanks for sharing this on HN! I'll keep an eye on the comments and try to answer questions that come up.
The problem also trickles to hiring and recruitment. Everyone and their parents are doing GenAI these days with multiple publications on top tier venues. What does this even mean?

Was there a hype cycle before this period on some other niches that almost everyone is doing?

In my life only I have seen one about web apps, then another on crypto. What was the bubble before that? Did everyone who started their career went through the route of hype cycles because the recruiters would call for interview? What are your opinions?
It's the reproduction of a class society. Some people are deemed worthy of it but most are not
That would be less than $200,000.

Although, I struggle to get jobs. I just don't interview well, nor do I fit the culture of most companies.

I guess the reason why I don't see an opportunity cost is because I firmly believe I couldn't have had a job anyway.
I'm personally highly skeptical of the "offering them an outlet" argument. I'd be less suspicious of the idea if its proponents also suggested limiting it to controlled settings, e.g. during meetings with a professional psychiatrist.

But I'm sorry, I just don't believe anyone holed up in their room with a bunch of fake CSAM is "just using it as an outlet" or "protecting real kids from harm." I mean, it almost sounds like a threat: "If you don't let me look at these pictures of fake kids, I'll hurt real kids." If that's the case then they should be seeing a psychiatrist, at minimum.
If you're wondering whether a job is worthwhile, the person who works at a job isn't the best person to ask. The person who is paying for that job to be done is the best person to ask.

At a large corporation, that's the manager. Often there's a job that's important, but you can only understand why it's important if you understand how the whole organization works. Someone writes memos that get ignored 90% of the time? Works on projects that get canceled 90% of the time? Well, that can make sense, if the 10% is valuable enough that it pays off.

As a manager, it's your responsibility to help make it clear to the people on your team why their work matters. By default, they won't understand this as well as you do.
Having read I Have No Mouth, and I Must Scream, I figure that, post singularity, there's only about a 1-in-a-billion chance that I am one of those kept alive to be tortured for the amusement of the AI, so I don't worry too much about alignment.
> I loathe reading stuff like this. Money is so important until you have it, and then it becomes fashionable to talk how there are more important things.

YEP. It's funny how it's always the multi-millionaires that talk about the importance of God, giving back, being honest. And "the rest will come naturally". It's absolutely sinister gate-keeping.
You define, but the choice is in fact not quite arbitrary; rather, it is guided by something objective, i.e. by something that exists outside of your own mind.
You wouldn't want the unsafe in your own crate, of course. You'd leave that for the javascript jit, which nobody will think twice about. You definitely need JavaScript because you want to talk to polkit, because of course the user should be allowed to select a color profile. Naturally. And then, oops, maybe a little extra JavaScript gets passed to the interpreter that does some funny stuff.
The capital's endeavor is to identify relevant ideas, opportunities, phenomenons, and back them proportionally to their potential.

The grassroot movement would have been 1% of what it has become in size, yet would have achieved far better results in pumping out great enginners.

What have we seen instead? a massive injection of enginners, most of them not belonging to the tech industry altogether. Fooled into it for the compensation bait or to escape a field they probably loved that dried out in demand for labour.

For the most part. At least for a significant part. For sure with a very impactful effect.

A sad diagnosis we can make is, on one side a large number of poorly and insufficiently trained enginneers with hardly any chance to build the necessary foundations to grow, on another side a shrinking ratio of great enginners who are seriously starting to struggle carrying heavier weights, and on the opposite side high up management not even sure to notice spending marginally fewer dollar per head count but significantly more dollar for subpar outcomes.

On a more people wellbeing note, of the many fooled into becoming a fullstack enginner in 12 weeks, not only did they believe it since many indeed got the job, they also got fooled into believing they actually liked that job.

High comp doesn't turn people from zero to hero. Only love or at least genuine interest does.
For those that find this kind of history interesting, I strongly recommend the book “Sapiens” by Yuval Harari.

Its distillation of the complexities of human evolution while being careful to admit things we don’t know and not over-assume make for a truly great read (so far*, Im not yet done with it!)
10 years ago I was a huge fan of GameFAQs, which, for any major game, had at least one and often several highly detailed documents describing a game, not just a walkthrough but a set of tables where you would find items.

Back then I was playing Hyperdimension Neptunia and almost tried “applying AI” in the old sense to the problem of “What do I have to do to craft item X?”. Those games all had good FAQs and extracting a knowledge graph and feeding it into some engine that could resolve dependencies wouldn’t have been too hard.

Today I am playing Atelier Sophie which has the same mechanic but is very cozy and doesn’t pose complex dependency problems and the FAQs for this game are atrocious, consisting of a walkthrough that way too prescriptive. If you ask some question like “Where do I get a Night Crystal?” on Google this is likely to turn up a question/answer pair on a forum which isn’t quite as good as having the structured FAQ.

YouTube walkthroughs really seemed to kill text walkthroughs, sometimes these are better (like when there is a jump in a dungeon that doesn’t look like you could make it but you can) but sometime they are much worse (there are 75 hour long videos in a walkthrough, you have to find that it is in video #33 and that you have to seek to 20:55.)

Maybe the proliferation of trash sites will motivate the creation of high quality FAQs but you’d better believe that the creator of these FAQs will be horribly afraid of being ripped off.
I wonder if it's using the waste heat from the AC to dry the dessicant
There are automatically deleted after processing.
I'm confused. I can create a poll with a question and options, and then... ? If I share the link, it just lets more people edit the same poll. How does anyone vote?
Nebula is such a great tool. If you haven't tried it yet, you should really give it a shot. It's easy to self host and to set up, and has been absolutely rock solid. I have it on all my devices, plus several Raspberry Pis set up at unattended remote sites that I rarely have access to serving as gateways to internal LANs and they all just work, all the time.

Tailscale gets most of the attention on HN, and I'm sure that it's a wonderful product too, but Nebula is a nice, simple, "do one thing well" product.
I have also seen the preference for installing from Play Store explained as being that users are safer if they use default setups and do what everyone else is doing. For users who are not savvy, going the sideloading route can expose them to risk.
Removing special needs kids from your population is the quickest way to increase test scores and reduce budget. As a parent of a child with special needs, I've studied the financials of schools in my district to find out how special needs services are supported.

1) The federal government has never lived up to its promise of matching 40% of the special needs funding (in my state they cover a mere 8%).

2) Usually the shortfall ends up at the district level. Some districts get more funding from an increased special needs population while others don't (community funding model).

3) Often the district moves programs around so special needs child cohorts (and in some cases teachers) can remain intact while not focusing the lowered scores in one school.

4) Charter schools throw a wrench into this as they typically don't support special needs kids, but still get district funding. This causes other schools in the district to look "worse" because their test scores aren't as balanced as before.
Ok, but why not go for routine home searches then?

Is it because on the phone, it is "invisible" and cheap?

Does it mean that what stops the government from treating everyone as a potential criminal is cost and inconvenience?

People were raising alarms about this years ago and were branded as conspiracy theorists. I guess the EU works well in their propaganda department painting themselves as do gooders, where in fact they are just wannabe Stalinists.
NASA Unveils First Glimpse of 'Scientific Treasure' Collected from Asteroid
People claiming (via manual reports or via content ID) content that is not theirs to either obtain other people's ad revenue or cause the takedown of content they disagree with
I do need window borders. A good interface would allow enough configuration that we both could have what we want.
The "sovereign immunity" argument is practically never invoked, and claiming that it's a hindrance against suing any government is wrong, and arguable fearmongering. Sure, they could, and maybe we could talk about if they should even have the ability to do such a thing, but they don't really ever use it. Congress has, many times, clawed back some of the reaches of such an argument anyways.[0]

For some examples, in the many lawsuits against the NSA (from the leaks by Snowden), the government didn't get out through "sovereign immunity", but the more reasonable "illegally obtained evidence" argument.

[0]: https://en.wikipedia.org/wiki/Sovereign_immunity_in_the_Unit...
This one happened just a month ago so it might be what the parent comment is referring to. Basically, somebody made a fake company to make bogus copyright claims against someone to hurt their channel. Youtube refuses to deliver counterclaims unless the YTer puts their government name on it (he originally tried to deliver it via an attorney).

Additionally, the other party is actively trying to compromise the YTer's other accounts and identity to damage him, so any new data point given to this person represents risk.

I don't really care for this YTer (they made a video essay about someone who doesn't really want to be in the media circus anymore, could just MYOB) but the methods documented in this video can be used to doxx any user that uploads a video. All you gotta do is convince youtube that you own some piece of common non-royalty media that a youtuber uses to gain leverage on them. A lot of this kind of media is old with unfindable owners, so even if YT does want to spend the time to validate, there's nowhere to go with it.

https://www.youtube.com/watch?v=hixwIOd_C44
In this blog post we’ll be going through the fundamentals of API security, including best practices and key considerations for developers and businesses alike.
50% of my Github Issues posts never end up being submitted because writing it out for the understanding of others helps me find the solution myself.
The airjoule dehumidifier appears very promising.