skysight-inc/HackerNews huggingface dataset:
IMO, an even bigger difference is screen size. I’m not talking about 23” vs 27”, I mean a monster, like 43”. My work laptop and personal gaming desktop are both hooked up to an Acer Predator 43” 4K monitor. It is utterly massive, and is a delight to both code on and game on.

For work, it’s effectively like having four 21.5” monitors perfectly aligned to a grid. I usually have two browser windows up top, then a wide terminal on the bottom, usually sliced in half with nvim on one side. If I have a large refactoring project or the like, I can fill the entire screen with nvim and have buffers galore.

For gaming, nothing draws you into the world like it. On top-down games like Factorio, or old RTS, it’s almost cheating due to how much of the map you can see.

The fact that it also does 120 Hz (144 Hz with two DP cables connected, but I don’t really care enough to bother swapping cables all the time) is icing on the cake.
The really worrying thing about this is that Okta’s announcement fails to mention several factors which paint them in a bad light, like the fact they sat on a report about this compromise for 16 days.
To your point about iterative design - something I learned in school for industrial design is 3D modeling will never be used for iterative design. The closest I’ve seen is VR modeling. But even then, the commitment is too much while instead I can sketch on a napkin instantly. Move to 3D only when I’m satisfied with what I want to construct.
> Because there's very little effort required to flag articles for deletion, and the burden to keep is often on the contributors doing research on a 7-day timeframe if there are even just one or two editors supporting deletion, most times the contributors eventually give up running the research treadmill and the content gets deleted anyway.

Pretty much sums up the problem with every community-run moderated site. It directly leads to the downfall because contributors get discouraged and leave, and eventually all that's left is people with the same view as the heavy-handed moderators. Having hours of work wiped out from editors/moderators who've spent less than a minute on it sucks.

Stackoverflow is another notable example of this.
What kind of argument is this? Sometimes, there are serious bugs in widely used products. So therefore shit vendors should get a pass when their 10 year old Apache instance gets owned? Because "security is hard, mkay"? No! It depends on the compromise.

(If Okta was zero-dayed, IMO we'd have heard about it. Great way to shift blame.)
I can understand why you would take me for an apathetic non-participant given my cynical comment, but I do agree that there are well-meaning people trying to be more than cogs and I do try to discern the difference.
No, it's not just you, but a lot of people are downplaying the dangers of AI. The easiest to accept one is that it can cause mass unemployment and displacement of workforce. No, it doesn't matter that we have better jobs that what the luddite textile workers lost 200 years ago, because it's not guaranteed to be the same situation (indeed, I'd say it's guaranteed to be different) and those luddites ended up in way worse situation anyway.

So the thing is that nobody knows what the development curve of AI is going to be and what the exact economical and societal effects are going to be. Whether it's 5 years to AGI or 50. (Neither of these seem very likely BTW.) Now since we do expect that there can be problems and since we at least can't rule out that these will manifest in the foreseeable (near) future, it's better to assume that we will have (at least economical) problems soon. It doesn't matter what LLMs can do today.

The development curve is what matters. And even if I said we don't know it, we have pretty good reasons to think (see above) that it's going to be powerful enough soonish. Just remember: about 1.5-2 years ago basically nobody would have predicted that LLMs would be able to do what they can do today. And I mean most experts would have probably said that it's not possible for LLMs to do what they can do today at all . Definitely not that they would be doing it by mid 2023. Or even just that they would be so powerful that a lot of non-technical people would use them. (Though, sure, there is still very little practical use as of today but the capabilities did make a huge and unexpected jump. It even surprised researchers like Geoffrey Hinton.)
"Server Side Prediction: Via servers are constantly learning from repeat access patterns of players. This let's us make high quality predictions for what content you'll need, before you need it."
There are companies that offer APIs to access bank accounts as a service. Plaid.com is one of them, although you might need to search around for another one that supports your bank.

At one point, there was a decent standard called "OFX" which financial institutions were supposed to support. It let you use an app like GNU Cash or QuickBooks which could automatically connect to your bank account. That died apparently and was replaced by some API/standard called "Open Banking". It's shittier in every way since it seems to require a middleman now (like Plaid) whereas with OFX you could just query an endpoint easily.
> Simple languages push complexity to the user. Complex languages on the other hand simplify the user's tasks.

I don't think this captures the uniquely awful combination of "object oriented" + "low level (manual memory management)" that C++ chose. I think that's the most inherently complex dyad of traits you can choose for a programming language, and I think it's why C++ is the most complex programming language that's ever existed. They even tried hiding the complexity in shame with implicit behavior, like the compiler synthesizing the "rule of 5" functions for you, meaning you have to go out of your way and mark them as "deleted" to tell it not to do that when you know it'll do it wrong and leak memory and you have to memorize what the "rule of 5" is. (The only other language I can think of that went down the same route is D, but I don't know how complex it is in comparison to other languages. Maybe Walter Bright can argue it's a counterexample to my argument cause it's waaay simpler than C++. But then I'll counter-counter argue that it has garbage collection. But then again that's optional. My brain hurts.)
https://robbieandrew.github.io/EV/
I'm not sure truly verifiable "Secure" Boot is actually realistic in most scenarios, though, right?

I'm not super up-to-date on what's being offered right now, but I'm not sure if there is a way to have a proper trusted execution environment on most Intel or AMD offerings; I thought Secure Boot on AMD64 platforms generally rely on TPM or something like SGX for validation, with the former having seemingly a dozen different ways to be tampered with, and the latter being discontinued and being vulnerable to several different attacks, including DOWNFALL.

I think EPYC and Sapphire Rapids have some sort of Trusted Execution Environment stuff with SEV-SNP and TDX, maybe? But I don't think either option is really feasible for people paying Hetzner-like prices for hosting; Hetzner's newest Xeon offering is seemingly Cascade Lake, and the only EPYC offered is a single-socket Rome 7502P with 128GB DDR4 for 142 euros, which seems very hard to justify, given they also offer a 7950X3D with 128GB DDR5 for ~25 euros less.

Even then, I don't think I could put my confidence in a machine I don't own, didn't setup, can't physically inspect, don't know where it came from, whether the firmware has been tampered with, etc -- especially if it is something as complex as x86, where there is seemingly at least one new horrific hardware-level vulnerability that crops up every generation or two.

EDIT: I forgot Hetzner also started offering Ampere Altra servers for 200 euros. I think those have TEE of some sort with the TrustZone stuff?

Not sure how secure that really is, though; I haven't really looked into the ARM offerings as much as I should have, mostly since, if you don't want Apple, I'm not aware of a good middle-ground between a cheap SBC and a $3,000+ Ampere server, outside of jerry-rigging some second-hand Gigabyte Cavium ThunderX2 nodes off eBay.
Who made you the one in charge of what is considered “progress”? Roughly half the country seems to have an opposite opinion about this.
For context, this is apparently a regular part of Okta's customer support process [0][1], not something Cloudflare just decided to do on their own. It's the kind of obscure process that would be hard to catch by enumerating specific rules like "don't upload HAR files to customer support even if they ask for them", and it's a technical enough process that you wouldn't expect any random employee to realize that an HAR file contains the keys to the kingdom (much less why that even matters when you're dealing with customer support for your authentication provider who seems to already have the keys).

I think it's pretty fair for Cloudflare to place this in Okta's court. Okta customer support knew what they were asking for and should have had greater controls in place for dealing with those files safely.

> Okta explained that when it is troubleshooting issues with customers it will often ask for a recording of a Web browser session (a.k.a. an HTTP Archive or HAR file). These are sensitive files because in this case they include the customer’s cookies and session tokens, which intruders can then use to impersonate valid users. [2]

[0] Old content: http://web.archive.org/web/20230207011818/https://help.okta....

[1] New content with updated warning: https://help.okta.com/oag/en-us/content/topics/access-gatewa...

[2] https://krebsonsecurity.com/2023/10/hackers-stole-access-tok...
Yes, don’t share har files
In fairness, they posted Okta tokens to Okta support. Cloudflare already trust Okta with their auth anyway.

Sure, it’s still not a good idea for them to give Okta their tokens. But the above, combined with the fact that forgetting to redact a HAR is an incredibly easy mistake to make, makes me tend towards giving them a pass on this one.
Ah, you mean before it was called Google.

Honestly, the non-profit engine was not nearly as good as the one the subsequent for profit business created.
I already send 30% to 50% of my wage to help pay for my government's weapons programs...

Here it's called taxes.
SF has been actively tarpitting permits for a very long time. The last thing they want is speedy or effective.
Alfred, an Advanced Osint Tool
Alfred is an advanced OSINT tool that searches for social media accounts based on the input username. Alfred has lots of options and settings and is currently in heavy development by our team so more features are to come. Thanks for your time and have a wonderful day. :D https://github.com/Alfredredbird/alfred
That correlates to wealth but not wages.
He says:

> Extreme margin compression due to more supply of software. AGI simply enables vastly more creation of software, which hurts the pricing power of incumbents. Every company will do some double take on their IT spending, and try to rebundle.

I think this is actually a big misunderstanding about how software works. MORE software isn't necessarily a good thing. That's more systems to deploy and maintain and probably a shit ton of redundancy.
In our case, I think sleep apnea is a cause. Tripping was never really happening and relief brought on by ketamine was never more than temporary.

But it is true that ketamine can cure depression, at least for a time. It's effectiveness is not something you merely guess at like most meds, if it's working, it seems to simply get rid of the depression outright.

So... definite potential and definite danger, though I think the trips are likely harmful, rather than being the benefit of it.
Shaming them publicly might be the best way to get them to actually get off their arses and do something.
FWIW, all government records are by default public record thanks to the FOIA. The government can try to make exceptions and redactions, but even when they try to block it, they are forced to release related information in court in discovery. The only exception to this in recent memory is the SCOTUS refused to hear an NSA case due to sensitive material because they knew lots of stuff would be become public record.

https://en.wikipedia.org/wiki/Freedom_of_Information_Act_(Un...

It was more difficult to find that I remember without all the commentary, but here it is.

https://www.newtongov.org/CivicMedia?VID=277#player
The EU regularly de-facto tries to decide regulations for other countries. All is fair in a globally connected world.
there's a certain free-to-play multiplayer game I used to play that is absolutely full of cheaters. on one server some people built a base opposite me, and for a while I sat in my sniper's nest and took pot-shots at them. then suddenly they absolutely got my number (turned on their cheats) and I couldn't walk inside my base without getting headshot through walls. I tried my best to kill them but I realised that they were staying online just for the sake of killing me. so I logged off, came back on after an hour and blew their base to fucking kingdom come. wikipedia seems to be the same. people feed off the conflict, and if you just let the conflict die, eventually you can come and take the spoils unopposed
I mean, aggressiveness is a form of communication. "Get your shit together, or else."
Python's reference counting garbage collector would also need concurrency controls.
Inadvertent githyanki genital exposure would present at least one contrary example.
I enjoy going to concerts and other shows (Ticketmaster is not just into concerts), but haven't been, except for small local ones, in a number of years because I am not willing to support Ticketmaster.
Succinct. Precise. Accurate. Correct.
How problematic is that in real life? All CAs worth their salt are already publishing all certificates to CT logs because most TLS servers are browsers and most clients are browsers.

Maybe there's a CA somewhere that has opt-in CT logging enabled, but I don't think they're very popular. For example, even the rogue CA certificates were published onto the CT log (because Let's Encrypt does so by default).

I think a CT check shouldn't be a very problematic change in practice, as long as there are reasonable exemptions (i.e. don't require CT for certificates imported into the CA store, allow the user to disable the check, etc.). For server<->server communication things become more difficult, but the entire network would be better off if a major server like ejabberd were to require CT.
Yep, you even had to account for this on spinning media(i.e. DVDs) where you'd want "seek-free" loading since you'd hitch/stall of you ended up bouncing all over the disk.

I worked on a title where this was particularly problematic from a game design perspective(limited ram, large assets), we ended up designing in "slow" sequences to mask the disk load.
The question should really be why the FTC tolerates this, letting them after all this time enjoy the blatantly monopolistic anti-consumer stance they've enjoyed since the 80's (at least). It isn't difficult to see how nasty of a business this is by how hated they are by artists and consumers alike, and if nothing else they should be broken up the same way Ma Bell as a telecom monopoly.

At least it might come with some renewed interest in competition getting in on game with a better playing field before the monopoly starts forming again in new ways.
surely people should have a right to privacy wrt this kind of thing?
Some terminals can do tricks like this, some terminal authors care about performance, e.g. https://codeberg.org/dnkl/foot/src/branch/master/doc/benchma...

In general you're better off using a terminal that performs better, because extra buffering would be annoying the other way around in the usual throughput/latency tradeoff (you'd press ^C and then it would continue to display what's in its buffer to you, rather than reacting quickly).

What mosh brings is decoupling the rendering across the network. A lot of the poor perceived performance over high-latency links happens because ssh puts your terminal into raw mode, so even if the line is being echoed back, that is going all the way to the remote system and back again.

It's actually possible to fix line editing in ssh, without using something like mosh, see for example https://github.com/hyc/OpenSSH-LINEMODE. It's a shame OpenSSH hasn't merged something like those (now quite old) patches.
Contracts and preferential attachment. Competition theory as taught in economics class assumes zero friction to enter and exit the market, complete informational transparency for buyers and sellers, and suchlike. It really doesn't apply in the Real World outside of maybe commodity markets.
Since Telegram claims to be a secure messaging app, while leaking private details and since you used to work at Telegram, maybe stfu.

All voice can be E2E thru servers, like Signal does.
It could contain a lot more than that depending on what was recoded during the session.
That comes with a bonus ability to easily calculate a position of any particular digit sequence too. Nice.
Using GPT-3.5 to render visual interfaces within a conversation
Another world was 2d vectors. Very different from AITD
Correction: none of us can park in peace because the state does not punish those who break into cars to steal laptops severely enough.

It’s a political problem not a technical one.
One thing I haven't seen being described, at least for dummies like me, is the n-body problem's relation to the halting problem.

Also, the difficulty of finding a delta-v/time efficient trajectory between two locations in such a system.

https://space.stackexchange.com/q/64392/38733

It might be cool to see a competition with a problem like that

Is the fact that a fully expanded formula branches out exponentially with every step, since each future motion/velocity component of a body depends on all past components of all other bodies, which in turn depend on other components etc. relevant to that?
this is incredible.
Your argument is incomplete, everyone agrees differences exist, but you haven't explained how any of those differences make "Nakatomi spaces" in games somehow less legitimate than in movies like Die Hard.

If anything, you've got it backwards: The fact that each individual player must notice and choose to exploit alternate paths makes them more authentically unusual and innovative than in movies, rather than less.
It seems to work even out in the open. This video shows some thermal camera imagery of it: https://youtu.be/euMNIu9a7ps?t=312
I think you’ve actually understated the rather precipitous drop off of 007’s campiness. It wasn’t a mistake, the intention was to reboot the series in the same vein as Batman Begins, where he becomes an unbearably gloomy figure who exists as a morally ambiguous antihero brooding among the gritty backdrop of a fully corrupted world.

Don’t get me wrong, I am a fan of both franchises, and enjoy the gritty Bond on its own terms, without tying it to the frequently almost farcical source material. I can easily understand why the “gritty realism” action genre trend didn’t last long, and why some folks do not enjoy it, it quickly becomes somewhat oppressive to endure. I think that’s why Taika Waititi’s Thor movies were so well received, they offered a lot of the fun-for-its-own-sake set pieces that were more common in the late ‘80s-early ‘90s action films.

Patrick H Willems did a really good YouTube video where he talks about “vibe films” [1], where things like plot details and character development are prioritized behind an overall mood and sense of style. Examples cited include Miami Vice, Bond films, and more recently Tenet.

[1] https://youtu.be/ZStkUxC4iL4?si=GSecJKBdbzMcQDVF
Bullets of Vaguely Silvery Hue
Being chronically exposed to meaningless interaction can be much worse than having no interaction.
I wouldn't play with something like that for a first playthrough though. Just play vanilla for a first time around. Deus Ex lends itself well to replayability so I'd get it modded at that point.
it's the "any" that makes it wrong. I reserve the right to pick and choose what expressions I find cringeworthy
You would hope they learned something. This isn't always the case.

Also, they are a company that others rely on for security. In this case they failed to do their job.

It's pretty similar to the LastPass hack. Do you still trust them?
Truly. Of all of the various big companies that are being accused of monopoly, I can't think of a clearer, more supportable case (one where the monopoly position is obviously being abused) than Ticketmaster. And yet, the feds don't seem to mind.
Strange to hear you say that about Thief 3 or Thief 2014.

Most people hate those with a passion, and only recommend Thief 1 + 2.
Indeed I do. I don't think anybody should mess with other people's ability to vote, even when joking, though, when clearly joking it's going to be much harder to argue that it is interfering with the elections. But it's similar to joking about bombs to customs people. Which is also why I think gerrymandering shouldn't be legal because it effectively disenfranchises people and why I think convicts and ex-convicts should also be able to vote. Everybody of voting age should be able to vote and anybody interfering with that should be penalized swiftly.
Secure boot on a cloud machine is pretty useless, there's nothing stopping the hypervisor from injecting code into the running machine. Theoretically virtual machine memory is encrypted, but you'll just have to trust the hypervisor's word for it. You can try to verify the boot chain all the way to the hardware keys, but if the hypervisor just replaces your `JNE` with a `NOP` you'll have a hard time automating your protections.

I suppose you can transfer the keys out of the machine over the network (and hope the hypervisor doesn't replace the socket buffers just before transmission) and verify them off site, but guest machines will always be just that: guests on a host that has all the power.
You can disable peer-to-peer connections in settings, as well as disable calls from everyone or specific contacts.
This is all completely correct, but ca. 1995 I managed to pick up what I think was called Lotus “SmartSuite” for OS/2. It included Ami Pro, which I expect I’ll go to my grave believing was the best word processor I ever used.

The layout controls in particular were amazing.
Trolling isn't protected speech. Wilfully deceiving people to trick them out of voting is in fact illegal, even if they're stupid and naive about internet culture. Rehashing the specious arguments in this article that already failed to convince a jury is just culture war bait.

Anyway, why doesn't Mackey just look at the funny side? After all it's objectively hilarious that his tweets were so bad he has to stay in actual jail for 7 months. Trololololo!
"San Francisco's process for issuing building permits is notorious for being one of the most cumbersome in the country. The city takes an average of ten months to issue a permit, compared to six months in Los Angeles and New York City."
https://starboardcre.com/editorials/governor-newsom-wants-to....
Me too. My guess is because I spend most time reading / coding and not in first-person view games. Then FPS only affects smooth scrolling.

Anything at 60 Hz or more looks all the same to me (well, I can spin my mouse in a circle and see jerkiness but who cares, I am not playing shooters). On the other hand, low DPI annoys me instantly. All my monitors need to have >130 DPI (e.g. 4k resolution with 31.5" diagonal, scaling at 100% works fine). I also set all fonts really small, around 6px.
Often government ensures failure through nonsensical requirements. Soon there'd be no one left to do the job.
Yes, because it is highly unlikely that Russian police or Russian ISP will cooperate with US or European police.
And PingFederate, same story.
Chicken't.
litigiousness
Now back to Agenda 2030
...yes, I thought that was per hour. Allow me to echo the sibling comment and ask how that could even be legal. Did they not have minimum wages in Canada then?