skysight-inc/HackerNews huggingface dataset:
This kind of thing is going to be much easier when generative video matures. Then you will be able to extend videos using text prompts while matching the existing content.
All the people working in the datacenter have that level of physical access.

Unless they are very closely supervised they can do a lot of damage without anybody being the wiser until they get caught. I've been in (nominally very secure) DCs on behalf of customers and I've seen:

- unlocked racks

- doors open

- temporary network cables and keyboards, monitors and mice attached to running systems

- systems logged in left unattended

- floor panels raised up and left open unattended exposing cabling

- meet-me rooms with interfaces exposed (gear in racks without doors)

DC personnel tends to trust each other, and they probably shouldn't. But it's hard to be part of a closely knit crew for a long time without getting into a 'get stuff done' mode where protocol and rules are there in principle but less so in practice because it is seen as an efficiency penalty. It's another instance of the 'normalization of deviation' phenomenon.
This is why it is naive to think that a startup is successful because of the product. Here product market fit is about power specifically.
> Those services are honeypots by definition

A honeypot is a trap set to catch attackers. It does not include real data.

https://en.wikipedia.org/wiki/Honeypot_(computing)

Seeing this misuse a lot lately!

These services are attractive targets, but they are not honeypots.

Some of them might also run honeypots separately from their core service, but that is not under discussion presently.
Silicon Valley on the Couch – Revisionist History
I'm actually really excited for the Rust IDE. The open source plugin was fine, but honestly pretty weak compared to their other IDEs, and a far cry from what a proper Rust IDE could look like. I'm hoping that with a sustainable funding model specifically for Rust they'll be able to give it more love.

That said, I already pay for an all products pack, so splitting out the IDE doesn't impact me financially at all.
Cloudflare 'dog-foods' its own products, and that saved the day; what's the problem?

There might be/come a longer form technical write-up with more detail of how those products helped, if that's what you're after, CF often seems to follow that approach, sort of announcement + detail, or press + technical.
I know what words mean, what is your point?

The authors claim that modern 15th century people already knew the "pre-historic" narrative about rocks being axes. They are shoe-horning this theory into the painting by claiming the painter and 15th century people already thought these rocks were ancient handaxes, and thats why it features so importantly in the mysterious painting. That seems a rather hoaxy claim to me: The archeological narrative must be correct if people already knew it to be true!

The authors state in their abstract this is their goal, to push back the evidence of such a "social history", to a time before archeologists made up the narrative about hand-axes. The authors are literally attempting to incept the archeological claim to a prior age of modern history. Is that what you mean, because that is definitely and literally the motive of this research.

Edit, also the rock in the painting is not a "biface". That part of the painting has obvious depth and perspective (shadows, walls, angles). The rock in the painting is ROUND.
That is not the case for the latest CPU extensions for encrypted VMs, AMD SEV-SNP and Intel TDX, which are designed to allow remote attestation based on a key hidden in the CPU that the hypervisor does not get access to.

The hypervisor only ever sees the VM’s memory in encrypted form, and it’s integrity-checked by the CPU to prevent replay attacks.
I think dekhn means the discussions and attempts at removing the GIL before this current PEP. Here's Guido's thoughts on it from 2007: https://www.artima.com/weblogs/viewpost.jsp?thread=214235 and that mentions a fork removing the GIL for Python 1.5 in 1999.
You know if it also took the time to utilize the bandwidth while it has it. Like via shouldn't stop downloading if a game doesn't request the files.

They might even be able to integrated a bit of brains into it and keep a record of which files tend to be historically requested next for a game. In the background you're slowly grabbing those, and those threads pause for direct requests. I guess this is simpler but it feels like using via is costing you by inducing longer load times for the whole game.
This seems an incredible technical accomplishment.

My one question is, is it supposed to be solving for disk space constraints or connection speed constraints?

I'm guessing both, but the former is pretty cheaply solved these days with a new drive (or by finally admitting you only need to have 2-3 games installed at once and probably aren't playing a dozen games in parallel), and I'm not sure it seems to be solving the latter.

The site says "stuck with 120mbps", and the demo on YouTube artificially caps download speeds to 200mbps, presumably as if to simulate "poor" connections. I'm in Australia and get 90-100 mbps, which is half of the demo speed, and I would be an upper outlier in this country. I can only imagine the people really suffering from 100GB downloads are on circa 5, 10, 20, 40 mbps. I get 10MBPs (megabytes) down reliably from Steam, which means even a 100GB game would "only" take ~ 2 and a half hours to download. The speed used in the demo would take ~ 75 minutes to download a 100GB game! Is that really an outrageously inconvenient wait?

I sound more negative than I am. I guess what I'm saying is I'd love to know how slow your speed can get before this stops working well.

That said, truly an impressive piece of tech.
This is a naive take. Okta solves both security and non-security problems.

If they keep undermining the 'security' bits they will 100% get ditched. Assuming there is a credible alternative. But I'd argue there isn't a credible alternative at the moment (on either the security or non-security front).

If you listed all of the 'security forward' SaaS companies you can think of. I guarantee 3/4 use Okta. I also bet all would be keen to switch as soon as an alternative was reasonably 2x better on either the 'security' or 'non-security' fronts. Even given the massive pain in the bum it would be to migrate. No one loves Okta or their sales team.

The dumbest guidance your security architect could have given was "Okta got hacked by actors that don't care about us. We should move to ${SOLUTION} that is objectively worse for users and probably worse for security"
I highly doubt it is that simple for LE to enter a DC without a warrant signed by a judge, but insiders have all of that access and plants in DCs can and do happen.

I was present when Dutch LE seized a bunch of servers on behalf of an FBI liaison officer in NL and everything went 'by the book', there is no way an LE officer without a signed order from a judge would have been granted access.
A fine or a warning would be well past sufficient for a first time offense. I don't find unnecessarily imprisoning people particularly amusing, personally.
why is ticket scalping still a thing with robust ID
those prices are crazy. it never ceases to amaze me how expensive life is in the US. that aside, I'd be delighted with 120mbi/s. that's just under 2 hours to download 100gb. it may well take you longer to actually go to the shop and buy a physical copy
You can use YAML files with kubernetes_manifest resources if you like, though you'll probably run into issues that the bespoke resources (e.g. kubernetes_deployment) handle for you.
Not to be pendantic, but could you please provide some general numbers or cite any source for this
I have the same experience
This is comparing apples to oranges. Biology is not machine phase. The stochastic motions that drive biological processes forward are 5-6 orders of magnitude slower than engineered machine parts would be at that scale.

What is remarkable about biology is not its performance, but that it works at all.
I think it doesn't proof that there are no not interesting articles, rather that sorting itself introduces a side-effect affecting the score. A paradox indeed.
Ah interesting. And it looks like it then doesn't kill the colony's honeybees, since they can withstand a higher temperature than the hornet.
So US intelligence propped up a kid on the spectrum to take money from huge venture capital firms while playing video games during the pitch meetings and running this billion-dollar company on quickbooks, in such a successful way as to remove any trace that they were involved at all? All to launder money? If the goal was to launder money, why not just operate clandestine wallets like every other organized criminal and why wouldn’t they put some sort of guardrails in place to not let the firm blow up? If it’s a government front, wouldn’t someone on the inside be like “maybe let’s not put our name on an NBA arena and pay these huge celebrity endorsements and Super Bowl ads”? How would they be smart to pull this off without detection but dumb enough to let it all blow up?

There’s just no part of this theory that adds up to me.
Historians disagree on how to define “the Crusades”. The traditional definition only includes Christian attempts to reconquer “the Holy Land”, and by that definition the Reconquista was a separate thing. Other historians support broader definitions which include the Reconquista, wars against the remnant non-Christian populations of the Baltics, religious wars against Christian heresies such as the Cathars/Albigenses and proto-Protestants such as the Hussites, etc

However, given that the historical crusades in Israel/Palestine have rather dubious relevance to the contemporary conflict, other “crusades” fought thousands of kilometres away are of even more dubious relevance
The amount of pushback we'd see from doctors, nurses, pharmacists and the like if they got paid like they get paid in the rest of the world would be immense.
The contrast tells us "the right side is obviously stylized, and this illustrates that the left side is rendered with realistic perspective".

Which means the rock is round and proves the authors incorrect because they overlook this obvious perspective to claim the rock is flat and axe-like to make their comparison. Their theory rests entirely on the rock in the painting being flat, which could only be true if the perspective was flat. The painter made sure we can see that is not the case.

The painter is telling us there is a narrative and a reality. They baby appears unconvinced and suspicious, as if he knows there is an alternate truth to the story. He appears to be pointing at rock. The baby is telling us he is not the subject, the rock is.
I used to run middle distance in high school track and won several races in the 400m or 800m events. At the collegiate and professional levels, there is a lot of specialization from what I know, but at the lower levels there are a lot of people who run both the 400m and 800m and even the 1600m or mile. I did. Runners who race in both the 400m and 800m are quite rare at the higher levels but not unheard of. The last time somebody won both the 400m and 800m at the Olympics was in 1976 [1].

I agree that a runner's physique plays a big role here, especially in regards to their mixture of muscle fiber types. At higher levels, I think it is easier to train a 200m runner's endurance than to train an 800m runner's speed. The 400m is a sprint and if you do not have a good enough top speed, you will not win.

Your question about intermediate distances is interesting. I have run 500m races (on indoor tracks) in the past and I rarely saw sprinters attempt the distance. I saw plenty of 200m sprinters run the 400m from time to time, but the 500m was just too much. This is likely because it really is just too long to sprint the entire time. Your anaerobic energy will be nearly depleted by the 400m mark, yet you still have to go 100 extra meters! Pacing, endurance, and strategy become important here, and most sprinters are not trained in these areas as much, but 800m runners are, since the race is one of the most strategy-intensive races in the sport, with the positive split strategy (running the first half faster than the second half) being what tends to get world records.

That said, I think that with the right training, 400m and 800m runners could be competitive with each other at the 500m, and maybe the 600m, but I think the 500m is more likely to be the competitive distance here.

[1] https://en.wikipedia.org/wiki/Alberto_Juantorena
what bugs we're going to have to fix when these things inevitably fuck up because they're at their core stochastic machines.
You do not need an advanced degree to evaluate a paper. That’s absolute nonsense.
He sure did. And yet he isn’t the president anymore.
You're bringing up the past, they are talking about the present, which is absolutely accurate.
This is an interesting source of evidence, but I think the analysis might be wrong because it only accounts for the direction of lateral motion, and doesn't account for the fact that the main direction of travel around the moment of impact isn't northeast or west, it's _down_. The speed would also not have been constant.

I believe you would get the same effect even if it was traveling straight down: rising pitch from acceleration due to gravity, then falling pitch as the angle to the camera goes from zero to 90 degrees.
Same. I've always liked the blaze project.
Trojitá, a fast Qt IMAP email client
And if you use Windows the way Microsoft wants you to, all your data is already on OneDrive, Teams, SharePoint (which actually is the backend for the former too). Which the NSA can simply demand access to.
I imagine one factor is whether a monopolistic company has made enemies along the federal partisanship divide, or been in a situation where a politician believed they could advance their own career by stirring something up.
I LOVE F-DROID!

I recommend adding the IzzyOnDroid repository to F-Droid, and then getting NewPipe x SponsorBlock. No really... Enjoy!
Sorry....I mean they communicate with you over paper.

Like if they discover a problem with your return.
Used to do this with a tin can full of potassium permanganate (potassium manganate 7 in newspeak). Just heat it till it’s white then put it back after it’s turned purple from absorbing water (I.e. recycle it)

Not even sure if you can buy it now, it’s useful for nefarious things. Used to be in survival kits, it’s a fire starter, disinfectant and mouthwash too.
>The attacker managed to issue multiple SSL/TLS certificates via Let’s Encrypt

This implies that the attacker was able to validate domain ownership of jabber.ru and xmpp.ru by either a) being able to respond to the ACME protocol on domain(s) hosted http OR b) being able to write to a DNS TXT file for the domain(s). This implies that the victim already lost control of their process server and/or their nameserver.
Honestly, it's not what the rhetoric tells you.

The entertainment business is not very technical. TM serves as their IT department. By the nature of the business, everyone wants to differentiate themselves from everyone else. So literally every client wants some special feature that no one has seen before. TM is the only place that can afford to say, "sure, we'll do it" to all of them, and since most of the clients (sports teams being the major exception) aren't that technically sophisticated, so they're not in a position to do the differentiation on their own.

Startups usually don't succeed by having more features than entrenched competitors. They succeed, but delivering a small bundle of features that create a huge value difference. If one were to do that, it'd be great for the first few clients that used them, and then it'd be "old hat" and everyone else would want tons of new, differentiated features, which would cause the startup to lose focus. The industry doesn't want a handful of outstanding features. They all want to be snowflakes.

> I constantly see people complaining about ticketmaster with scalping

Ironically, the reseller market is the one part of the ticketing market that TM hasn't dominated. It's kind of ironic that people talk about TM when they complain about scalping.
The page implies they learn from user's download patterns to do this and predict which files the user will need before they need them.
Not necessarily. Once you are used to your editor opening in a few milliseconds, everything else feels like ages. I would argue the opposite: we have gotten used to slow software being the norm.
I tracked down the book wikipedia cites for that self-cleaning claim (it's on Library Genesis).

Wikipedia presently says:

> However, the rifle was initially delivered without adequate cleaning kits[43] or instructions because advertising from Colt asserted that the M16's materials made the weapon require little maintenance, and was capable of self-cleaning.[67]

The book, The M16 by Gordon L. Rottman, says on page 20:

> Most Marine units began receiving the XM16E1 in April 1967 and immediately experienced problems arising from several factors. Most units received little if any cleaning gear beyond some cleaning rods and bore brushes. Some units had never heard of chamber brushes. Colt is said to have hyped the weapon as futuristic, requiring little maintenance owing to new materials. This was interpreted to mean the black rifle was “self-cleaning.”

So Colt supposedly saying the rifle requiring "little maintenance" was then subsequently interpreted (by the Marines I think) to mean the rifle was "self-cleaning". The book doesn't say Colt made the "self-cleaning" claim, but whoever wrote that part on wikipedia is attributing the claim to Colt.

Hard to say if even the book's claim is right.. "Colt is said to have..." said by who? The book doesn't actually cite any Colt marketing material or anything like that.
There are positive-sum, zero-sum, and negative-sum games. Some people (such as scammers) make the society unambigously worse, but they often still get paid for doing their job.

Then there is the question of externalities. People working in fields with positive externalities tend to be underpaid, if there are no sufficient mechanisms that allow their employers to capture the value they create. Similarly, people working in fields with negative externalities tend to be overpaid.
ChatGPT hasn’t got the faintest idea about today’s news!
They say they're planning to implement prediction, so learning from previous play of a game to learn what's going to be requested next and fetch it.

Not sure how well it works.
Also most of the macOS corporate software is really really poor quality. A lot of this are really poor Windows ports that don't use the Apple native installer, reinvent their own windows registry equivalent instead of just using defaults/ plists, often have UIs straight out of Windows. Terrible crap.

I managed macs for years and it was not fun. And I had no choice because all this software was mandated by the security team.
I came here searching for a similar comment. I don't think it's just survivorship bias.

I think it's a combination of:

1) Social media lowering the barrier to entry so much as to stop new good blogs from coming up (rather than simply posting to social media)

2) Social media favouring first image then short form video content hosted on their own CDN

3) The content farms designed for SEO absolutely obliterating the idea that you could make money from advertising on your blog

It's hard to really understand the tragedy element of tragedy of the commons and enclosure. Like I feel the gross injustice of it all but I never got to experience the loss. But the destruction of the early (capital I) Internet is something that certainly causes me a lot of pain.

I feel like for Zoomers talking to older nerds about the Internet et cetera must be like talking to a Gen Xer about the second Summer of Love or the Boomers about the first, but it was really just that much better.
> Telegram offers marginally better security than XMPP over TLS.

I think you should compare apples to apples, that is, end-to-end encrypted XMPP using OTR/OMEMO/PGP. However, I agree that many XMPP clients were UX disaster when using E2E.
Neat. Looks like they’ve made a virtual file system that fetches files as the game tries to load them.

This is exactly how I think tools like Git should work. I hadn’t actually consider it for game downloads! Neat.
AES-NI is not 100% offloading. It only offloads the heaviest parts.

The penalty is not huge especially compared to fully software implementations but it's not zero. And it takes memory bandwidth too.

I don't use FDE on my gaming system for this reason. It's a big heavy PC that never leaves my house with not really any personal data anyway.
I'm glad it is easier to tell there. In the US there are no such requirements :(. I've noticed looking at web sites of various companies that there seems to be some basic disclosure requirements in some EU countries that are helpful (like a contact address, which many companies don't have on their website in most of the world).
How would you propose to resolve that? Should we cut physician pay in half to match their European peers?

https://www.medscape.com/viewarticle/997263
I’ve seen a lot of use of Dice lately, which has a nice app and a decent ticket resale process.

I was initially quite a big fan until I purchased “sold out” tickets to a music festival a year in advance with the assurance that I could resell them if I changed my mind, only to see the resale queue disabled many months before the festival due to “lack of demand”. This didn’t seem to align with the festival being sold out, and apparently the tickets were released in batches which allowed them to claim it was “sold out” despite there being plenty of tickets still available. I’m not sure if this was the fault of Dice or the festival itself but soured my impression significantly.

Dice is still leagues better than Ticketmaster both in terms of UX and fees, but to me Resident Advisor is still the gold standard; unfortunately it seems a lot of the sort of shows that would be listed on RA are now on Dice instead.
Previous similar discussion, different thread, but a lot of the same general comments: https://news.ycombinator.com/item?id=33831027
Wow, that's a really nice looking UI.
I'm confused at why these authors start their headline with "Victory!", since the Supreme Court's action was to grant the petitioners' motion for a stay and petition for certiorari.

https://www.supremecourt.gov/search.aspx?filename=/docket/do...

The Missouri plaintiffs opposed both actions that the Court just took. It's true that they stand to set a clearer nationwide precedent, but they also won both decisions below, which could now potentially be reversed.
I got the following error when I opened up a game page in my library (Hyper Light Drifter, if it matters):

Check failed: g.steam_receive_prefix_bytes[1] == 0x31305456

File: client_steam.cpp

Line: 2620

Last Error: 0x00000000. The operation completed successfully.
I wonder where they're hosting this, since most cloud providers would cost a fortune to download all the data.
Perhaps if there were enough big artists to get together and "strike" against Live Nation/Ticketmaster exclusive venues something might change for the better for their fans.

But, alas, that money too good.
Sorry, my point is making a crud +front end is not the hard part, which is what ChatGPT 5.0 will be able to do.
> then Huawei can issue a Let's Encrypt certificate for Google, right?

Google has CAA records set (https://www.entrust.com/resources/certificate-solutions/tool...) and I guess CAs will have denylists of "popular" domains, so no.

> And any large national ISP can use MitM to issue fake certificates for any site hosted within that country?

Yes. You can fix this by CAA and ACME-CAA.

I can't think of a way to validate DV certificates in a better way that will resist this kind of attack.